last executing test programs: 1m3.02461866s ago: executing program 1 (id=6873): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB="0000001a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x48, 0x8, &(0x7f00000002c0)="ba0000000000000047d52188fb0c5fc33b4b6770c5782540eed05fcd744ec43e63a088ec8e5d8645380359b5c8b7eda907be9b78c0c37144ae3c33689781ceab15d2225fcda6f0e9", &(0x7f0000000340)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) accept4$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000540)=0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x300, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r9}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0xd4}}, 0x4080) 1m2.456364845s ago: executing program 1 (id=6874): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r1, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x22023, 0x0) (fail_nth: 2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) 1m2.028579974s ago: executing program 1 (id=6877): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000003}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m0.679591077s ago: executing program 1 (id=6889): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec", 0x77}], 0x1}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r7, 0x104, 0x3, &(0x7f0000001b00)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff4100", @ANYRES32=0x0, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, 0x0, 0x4400) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r9, 0x0, 0x4400) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x82726b1cde3d17e3, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x8) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) accept4(r12, 0x0, 0x0, 0x800) (async) r13 = accept4(r12, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) recvmmsg$unix(r13, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x627, 0x10102, 0x0) 1m0.344739055s ago: executing program 1 (id=6894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8805}, 0x20000000) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="3b492bbd7000fddbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="080003001000000008000e0010000000"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc010) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000005a4300000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.151438514s ago: executing program 1 (id=6897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000040), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) close(r3) (async) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 52.861397624s ago: executing program 0 (id=6964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x80}}, 0x4000000) 52.643453663s ago: executing program 0 (id=6966): syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) mmap(&(0x7f00003da000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x5a477000) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'macvlan0\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2c8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x2b, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 51.338865872s ago: executing program 2 (id=6973): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) sendmsg$key(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x2, 0x13, 0x5, 0x8, 0x3a, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x67, 0x6f, 0x75, 0x0, 0x20000000}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x1, 0x9, 0x5b, 0x3, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_key={0x1c, 0x9, 0x698, 0x0, "0b7751430fcceccb7292b52af22ff99b0c0da771f4f6bbe8c79f5390e94d24e13504488f38b04751229fb401c89a60aa2183937e48f172fa4b636d60cf15718a9a37b1a2dea78652501ce21e8efcf2429d3d0d0c37bda6631bb96976623de4308a5557ea850b73bd8ad93cb1cc7567bdad7385e988d56d85a9a9ba72fc9e106aaf4c53d2b6e134e3486bd186efabfee9a3723b67e5a1813b21e2f7e3523657a1a139ebab7b9516e484b20c4a15ee136af62d29497d97596589e9f93afa07e287bd0cca4f590646efd1eb64a7fa0d891fd38337"}, @sadb_x_sec_ctx={0x6, 0x18, 0x4, 0xf8, 0x27, "395e49cbedeae97b3161ab3d5a0e410c584c11fc04021cfaa16f55934571ee33d4f1a64ec2bb00"}, @sadb_x_sec_ctx={0xb, 0x18, 0x5, 0x5, 0x4c, "9b95769b5c186fa00fbe933853e512f33b65ebba5c727a5b1632b903686482fa4c8155237e690bea321440bd4fa36adc5f9e11943c7f127024c0815fd3c7b63f90d0e40e9b2b98969631c4ed"}]}, 0x1d0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x85, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0xa701, 0x4) shutdown(r3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000007000080026bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800500060022000000100001800c0004800800010001000000100001800c00048008000200110000000c0001800500030000000000100001800c00048008000100060000000c121603ec000300020000000c0001800600020008000000100001800c00048008000200110000000c000180050006009b000000"], 0x94}, 0x1, 0x0, 0x0, 0x200000c2}, 0x0) 51.126332767s ago: executing program 2 (id=6976): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000700000600000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200007800000000000000626f0000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa10800000016007f49582b6182cdf2b702000008000000b70300003f000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001000)={0x1d, r3, 0x0, {0x2, 0xff}, 0xff}, 0x18, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x8081) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9001}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x18}}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x126, &(0x7f0000000d80)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tcp={{0x2a, 0x4, 0x0, 0x8, 0x118, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @private=0xa010101, {[@noop, @cipso={0x86, 0x56, 0x3, [{0x2, 0x3, "ac"}, {0x2, 0x11, "45fbfb7e672d25b659376f123cffdf"}, {0x7, 0xe, "7f1b7bc8e063f161055e9afe"}, {0x5, 0x11, "cb2850d862c5b5e0e0fee36a0159aa"}, {0x1, 0x2}, {0x3, 0xe, "596ff39f8e0f43fa6b41886d"}, {0x0, 0xd, "45f81af5da2508ffc1d8ba"}]}, @cipso={0x86, 0x15, 0x1, [{0x5, 0xf, "a7c36a32a1552f5c408b690678"}]}, @rr={0x7, 0x27, 0x3f, [@remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @remote, @loopback, @multicast2]}]}}, {{0x4e23, 0x4e23, 0x41424344, r11, 0x0, 0x0, 0xf, 0x4, 0x6, 0x0, 0xfffe, {[@exp_fastopen={0xfe, 0xb, 0xf989, "7f769eadfe0765"}, @fastopen={0x22, 0x2}, @generic={0x8, 0x6, "d7b6339f"}, @sack_perm={0x4, 0x2}, @generic={0x13, 0x9, "2dec6ebea9ecbf"}, @generic={0x8, 0x3, "a7"}, @exp_fastopen={0xfe, 0x5, 0xf989, 'R'}]}}, {"d4934eb0ad7daf2d9e32d0bc50ace9553acd6da8d74c1fff7536f33aa7b6eee35a24dc2f9bbdd112446c89c7ee983995e2b4c482"}}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x594, 0xecf, 0xb98, 0x99b]}) syz_emit_ethernet(0x2d6, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800453002c8006400000e2f9078ac1414bbe00000010c20880b00d700020001000911075017e65bbd8fa16798efa87268dee4a7195429f61b546c00807a550af2318f9e6f3a5695d8572a55052b77a40b739ce13ad8dcc1e8365cd3bbf1e8546b01ca1e18347006741802ce8be1d2522845bed7f9ea9896d9522affb15ccbaae141f8554416c08a89103f877340e6bbe96b29f389ec7bd16ab2d9eb7708616f613f0b2de9f8ced87675746e9fdddd28f033ffc51a286c11d71070dcd3279475067879c9184a00d2a283c6d113485cb2f15ba399abce87029bbf32103672f799d7b1040258c04704e91bcd895e677f5500000800be6ed16cfb1bd8653bdb441dfbe0c056af74674ec2b43a6b2e55298ce5e76a6ce07723813037e60ca40750dc8e7d4ab131f578e39da9f70dc30ac1d8566f254a97acf02ae3f554a935dfb4f111887148c1331f09a8270bc42f5756c4e725818414ce9c119f04f4321620492596296b6efc396a29bc2d132e7150fa2bf8d9c4ada9b56d83311671f8d48a43d969480da07424f9d5000000000000000000000000000000000000000000000000000000000000090086dd0bda97b9d994ab6111a3f5911637b6d2feab3b79726f74ecff7f68a32b76bd689ecbb0c727615098b86052a90e8ac071b2b93c166ed650daf9f04b99ec691dfdb13a32d6e5e760c550dd9681feef803336b79d07284ef1a52fcd782e6a988cd40f1f61d450ac105d4c3e95308d07c070a0b60a8af0f1c5080088be0000000210f734030100000000000006080022eb0000000021fb410402000000000000030001b50b08006558000000034e09ec01a39b0869acf3aeb8ee4d81c4a2d16384d886176431f315dfc331ab00939adc86c30ff04577530a326f164579df7262233a3b2723bc56e672630d5dd5c23d5e5376b9235cd05e60b6d4633e352fa62e65af6cab1fdf6602a40d87daa668963e70fa8fecf872cfe9ff000000000000000000"], 0x0) 50.870440372s ago: executing program 3 (id=6977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r4, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4179b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 50.73171474s ago: executing program 2 (id=6978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c0002800500010005000000050006000500000008001c"], 0x4c}}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) 50.731052289s ago: executing program 4 (id=6979): socket$netlink(0x10, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) socketpair(0x2a, 0x2, 0x4, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000018000000000000", @ANYRES64=r4, @ANYRESOCT=r5, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x11, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES32=r9, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r10, r1, r2], 0x0, 0x10, 0x10000}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r11], 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000440), &(0x7f0000000180)=r13}, 0x20) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) 50.46860078s ago: executing program 3 (id=6980): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d972c56", 0xc7}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d02020", 0x59}, {0x0}, {&(0x7f0000000300)}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xcb, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) unshare(0x20000400) r3 = socket(0x15, 0x5, 0x0) bind$l2tp6(r3, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50.376194298s ago: executing program 4 (id=6981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000005}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x268, 0x1, 0x5, 0x701, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x4}, 0x9, 0x0, 0xb, 0x3, 0x1b, 'syz0\x00', "3b6ced2c8482660ab3cf43729fc61777680bd6a6de948122b9363ce70b815050", "84568cb24716bcf88e8581745531680e3556a9b5aa04f80940bbf198b165a184", [{0x1, 0x101, {0x1, 0x8}}, {0x8, 0x0, {0x1}}, {0x9, 0x7ff, {0x3, 0x551}}, {0x80, 0x8, {0x2, 0xfffffff9}}, {0xa, 0x2}, {0x2, 0xd821, {0x1, 0x4}}, {0xefd, 0x1ff, {0x0, 0x3}}, {0x5fc, 0xe3, {0x3}}, {0x9b0d, 0x3, {0x0, 0xa}}, {0x4, 0x0, {0x1, 0x2d}}, {0x1, 0x9, {0x2, 0x7fffffff}}, {0x792b, 0x9, {0x1, 0x4}}, {0x0, 0x9, {0x3, 0x1}}, {0x3, 0x2, {0x2, 0x6}}, {0x9276, 0xfb0, {0x3, 0x101}}, {0x1, 0x4, {0x3, 0xd0}}, {0x8, 0x5, {0x1, 0x7}}, {0xd, 0x2, {0x2, 0x6}}, {0x7, 0x9, {0x3, 0x7fffffff}}, {0xfff, 0x6, {0x3, 0x8}}, {0xe, 0x800, {0x0, 0x20004000}}, {0x42b1, 0x7, {0x3, 0x6}}, {0x36, 0x3, {0x2, 0x84f}}, {0x2, 0x1, {0x3, 0x85}}, {0x3, 0x19, {0x0, 0x3}}, {0x7fff, 0x7, {0x3, 0x2}}, {0x3, 0xb7b9, {0x1, 0x5}}, {0x4, 0x0, {0x0, 0xffffffff}}, {0x4ef6, 0x81, {0x2, 0x8}}, {0x100, 0x3, {0x3, 0x8000}}, {0x2, 0xb, {0x3, 0x10000}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x3, 0xfffb, {0x3, 0xfe01}}, {0x9, 0x8000, {0x3, 0x1}}, {0x400, 0x8000, {0x1, 0x9}}, {0x0, 0x4, {0x1, 0xd10}}, {0x1, 0x350, {0x0, 0x3}}, {0x896, 0x7, {0xce85e972524d29df, 0x1}}, {0xc, 0x7ff, {0x1, 0x8001}}, {0x22, 0x8, {0x1, 0x101}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 50.299639843s ago: executing program 3 (id=6982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000031400032abd7000fbdbdf250900020073797a30000000000800410072786500140033006d6163766c617e310000000000000000ea8ad32c0dcca5d299d2e54854b3c58efe5ac2bd648edd8fa7ded6e035ffd9b9a1fa6c8ac241f3883e312f205081fac8fa7b7b3a16fc8bd22ebfa2eca983deaef08b18c6a88d72bf51536fb59ce283216b54694de2c80a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x28044040) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x1, 0x8}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x1, 0x8}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 50.297802629s ago: executing program 2 (id=6983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005005fecd83ab0cae59c454eeb827e7200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x6e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x22, 0xe, 0x0, 0x4}, 0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, &(0x7f00000000c0)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r11, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x2, 0x0, 0x3}, @mpls={[{0x8}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfbc, 0x0, 0x11, 0x3, 0x21, 0x0, @broadcast, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879d805784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "ac10ef31176d1af88e863d588661a0756365388ef6f2d7b69fb82dc9e7de475e5aad52fa5b61fb1730a4f8ba342b81d86460c5cc35df8bdc3e55e1e92140c9ed10cfd396d4fb331e1901da8dfd47cd7431fd6cb967f7d84f0ba6de4a73b26c286edc3684534e70f60b30b7aefec9309c13a29b35e134d47c3579870d43bcc2babd71412ade39c68b036b5e7a6e90c25efe7a5b3ff3fae0fe7459e71cb431cb8f6a45a9a21d938cbd1de67fde856f05154095c3d86b9f4bac02987d8a06aae5f8d3da56748f1f6b1e9de4d1afaea08c70a943b080bf77494e5dcc17fe38bb0a0b36a008f7805cfdbe5a89e2e12e013b6ff42e3f9e825f3d604768f87273edad56c12c8a5eacd9b63ea6fa1ecf16139cb19c579c4f0a125a755439e6dc9c1637c0d23c1c281af2982cca306b2d3dbaede299bfe4f2ebd822abfabafef3f159049cc24f01a412fafe3d43841a6a4dbed78566e34544a074d4c01cedbb22527e955e8f93ef5a927fdec293a3c78693cae45de7481fdf0f65a43b50d26904594676b7af375752c99e2ba3e00286ab9d438af7b8834c0e71d245c0428ecc5a59f29ab0bca9b1913b9bb5373a94e1daae374d0ed7e7ffd0a1188c83e61e8ee28625483a96a246b9e1cdc8da085de61834a15afd5e7726d711c5ecc008914b9b9f35603330113e548e4509516bac6bc1150b2ace667a540ec84d22c0d0200056918fa3ac596cddd501f7b34f3b97c12c3c10e4b0c67ef01059c2feed93f9169498278daabd27d8537882a87b2edd4b2e6789b90d065ba7a064b2b4ecc1622c8662b3145844c12491ee85dd2acbe057479db9d24e500d9f1af37745f39e7fc7d4e513fa839556155db1ba6d62465a464184f2f4f9c4c822e64c6a357d7bc06caf64db283f0a3a427b400b7dd4df488c9e30db1fdb1774038d32557b69f9c1eba7ec66309bc68c19200aa5f05ec21c1cc9a12667cbae2863198913eac1de18df558c1b5fbceb0e6b521e120e98b39ecc8cabb6c25cdc31d827eeb549fe548f6b29d4f65b176ea0a20411d750f02c660cba2c62935fad8c51324f6f437daa53c81ff2e19b94140f1d72a2540b3fa74ffe85c696a4e4411d4449744ca4b5e8b921c7d62208b88a1df38030c4e09cd264a9c534259737ed6ea798cbc2d0054845dc84e97295efad0f5228fc61710e75a4445a889e230887845fa7f02be62593c352cb344a0f947bdb6c4cf3aab5ecedbd4fdde781c496db32a51f700b2fc19b2c36e257bbb2c735e0f03cd9e49700aee6edaa6952bdc2feef2d2e5463b6778fde3c7ef73477e22a181816883192beee132b3866c4ec977e0cd0b995de650c4c7d3e6e483685f75f9d82f69868d67e64a59e7320707847040bed7bb8c24d5e6a1da326d3226e71933484a2c619592a00db3b086d5fee139abaae14d65698937ef8c066acc7134f085e1e8ccd04a67e128c2d775740f0727c14dfbf8a2ed7f25d353285ab0fd03a8788d725163d27ac13ced25669301f672fb1f404451d85e92e1d0049fa9558c8492cc336ddd5133cb1b307f2901341fb6a021e1b751f22412e76fad6ea2b4a7d756559619fa47b22bc55ef8fdc19fbd6136becc60ff19748e60452e704752c82beb4861ea118875e9fe75a9e6c10c8b922dd8054ef8dd15963db6d505e7eab028322801bb4328d8257e726d937ca83c8efca320c8ecd24313eb5e8114c604781ed936a82740340ac6692bfc3613d2f49bf8284cf60cee6513fd154034e49af838146872e8735962da7f7bbd301f2fd85e597c1b6f8418352ebec83286f9dfab4a0b4dbb8b9c7b55aaf9ac1628d1493c1786c78a8a0b8c58596f1e1ba92b7fcdb80e867fdd299c78b902ac2de3c6d6bad6c5fb0c5db603b7c3c7ff8a64dc4488e07d2b506db960db1503ad72dab8ef405549a5f12a62052be8f7ad3fad32ba8560a8874c06f815ec9912dfcc16d8e0f8c9ab9afceae435a63dcdd1dc6b1e4d186f306ec1c8af08e69ad8fc9860c9bad1af0654c51e0711ecfa47c6b4411010076c975057db6609b47fda736f6ef81863387e3c971479a572145aab35a24475ffea35c1626b644ba12ef8d92cf9310f722b493b2da8ea4c5dcd99d75167e1404642aafbf5db3f8ce95382d7bbd550c0bae73af75dc913ead260ce475b30879d4279efeae49e88b0071661725e9ec5b3579c1716d70971fd301d8ee090a98120bf35ffa62101077362a2a3564022b0bff01e76e641fc01ff731a834509600aadeffe2f00276de348a3c57778865063bd8e348b6e68b5c74298ba911a184f5bfdefd6473272c174c9e644abdf22b3ac39e246ae947ffef4773bcfec3b2a8d03dc8971471dfc50cd5ef6d32ae3486f7d14b0137e80a313910d9bc87aed8c41c6563f646b39c2a26f4add083ab6efb5753fc6b78e7907b9cd8a2cabdf87e202239fffc99e0446915c3bc147635398f73201d7369902225184d8da01641759645bf92b5d73ab153f2150264c3333ce12747ce2642aa04aeeb85513170a67dd93b010e8fd0f3cb290e1fc0040d32bdad7d8b41c4f2d10a3c170dbc3e264e29714a34dd220c2bf3e273d7cb3a9397b16a47c85cca75e4cac2def7c976fb7f38b24bdb8f80486e9cec55574d9f2864085289fd2fc497a3a7fab762877629db9ff70201f07897246f9f5211ced9266b732e9988805669dc1bc8e4ddd235562c7785e2379f1f0dd1e71a98b6d204e6c1a1ee163ceb35f6c436bb2547522bed2a55814a3f5f53d3eceee6c847c12af75fdc8452116ab891a5c6424a79b33c4b56a5412700a907f3eca800fcfba133f8bab9ebae32c699b548aff3ac702699f293fceb7445a7107956adad16a6b73a2fe0c88232f2d9831b238b92c511e4a6e02f784ee328bd979c4728ba0f86cc4ed9a69c6d5bc23496729a6512c4664006afc08de2f4dd89e52108f7c081d11facccb91ebc82415691b6bf05818638b3a4d809ae307f4b2d867a34417dbaad8c01a3773d8ebe56890230bd4a2e2a027d59839e1710cb5d25cec245ed8f86b7d4ed8e4ec48c53387ab1ea059406bf2612a6c730750b41a47bdf51cbec2c3f1b07fd6aba2ea390e138868d71f0a73990e87b383757a199f53bcd25f93b15efaf84a9a3758f5cbc2223a809ba784a5af2d36a3b99e3d143310ecf2bb9d2dd8fe9defdfa3d82e005c52514f13beb97476fb7a0f7ab62892977c9da0b950dbbc89bdd58472619f3bdbf46def88488e7bdf0633ee908a4e4e795e92037b74db18672e168514e2ad0a2df94357f2dc2c593b251894657c6bea65abfcd76b7037bd5817ab73be94f00031150f375442e0f0d0e7236ed4150637c14f62ecb6713f897889d77d814ead5774d726f307fe32c020cdefda72151798fcde65af6fbe6594eeb078a8c414b949c0c2217a0cc82049c43f6fb3cb7c00fc0305b86dddde708dd8a61a63e799abdd49d6ff1c41b8ecb230891037ca36d7a7e1f6280f52a5d45ff872f11df408ae09fc9b9d371ccf4f2777626ad84426d925dac9bbacc785acb5c29cbf9d6aec77d5ac48778ab4682b7bb611f342a72c26417a5e432e5d956844e19739e61999a78c615acc09f415032031ac6cb839da764331d131acbe66b502e7f1a5b9dc68df7f5524e7bc6fdfa982b39af2cbff69052d04be78821282dbfc034e64943004375f16cf4741526aaafebfc1a6d4a38d4c345aa22c94922f145b6c449a216b6c382565598125156fad8097c2e7ea65063cdfe34e50fb75939f3b3cf5ab8a3448ead3cc36358f45b0eaabf8ff2b64a1923407226f24420978d03d6bcefc2b45a74425017c11146e25f6d41912f39afecaa19090123ea2605994978b00a347aba322cd10822933e3f5988477ce1b2aff651553ec4977b185e5c7aaa4c64b4fb49cfc0cad75e85c0617e19f26fd0932a4bba0821d5a4d9449773c2d3c25e8aee59155346502b72a4d6818f143695acd5b83a336d02e2d1b9da5740e287c4694012f9648656c51cd44431c54301ea55f48197d1280421793598db89820937aa6a41d69618f55fd9c40dc0742e77d4ddf4a68a6cecba47ff0a22e2734bc9556193642b92838c891b4ed109af35190332aabb9aab184076cfc99f08814bebe47fccd12005ad926a643c791ecda50458a1106a033408fb90da10f8d6e42b3a462e9f9a1a2752c21967884ea79a1148f3dd0304bef05747458c7859dbf7f6df08074e9ac221677b70546909329c5557adb255cc33c1f9b762188e2498a7744f066df3fb8bee6261db37489b63f9bda047a06cbc588ff1255e3b63a86a5ca353160e0dc4088ea691c768f5d36397cb64c6db2d5bd39473a9d1209d021b8017434874ed5f99d9fc27d5549eaecdcfb7093549acaea45610221192942e108def0efbc004bbfef195af7dcdc0b75097eba13d621c2ca5ee3bfd2845b21a910e8ea21536768e1e5081997ae7415a55e58e1294d8ff3bc95faf96a65501b922382f4f75a0f938b290fd66bb3ccdc33734bafa18a3765d23f151951b8c8c6939de018c4e9ca253dff4a1fc70a601bba8c2e146a79166745e5fd1748c638a7a945e5f5aea0a93c7861446ef5996e37231e573245dae58b168c0564c8b27ada3fde66bb00f51f7e47970855d1057739ccf583666055187173bfd1454a5fbcfd59f39b6ad63fbfbe0fea9a6b336a41ec316acedd38cc6fab7de1190c97bed6e8f1cdb47d59941955f87a59d953c0f60f68a63fcf8f6f76b3eb5d79d94a2eeb3fb28781b1bbd31937c6f6e2d6fa7d2f4134702fdc0a2250bbec420c73a89c1643379235a492c2cbb3280ec3e676fcc1b33aaa645234eebefb1c28c52646a33c1989a386d537cd5ebf89f50b575b37b9a337f653919a569229009"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0x4, "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"}}}}}, 0xfce) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) 50.239835401s ago: executing program 4 (id=6984): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000100009308000000ffffffff070000000605db947c000000"], &(0x7f0000000080)=""/227, 0x85, 0xe3}, 0x28) 50.15961635s ago: executing program 3 (id=6985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100000427bd7000fddbdf1100000000", @ANYRES32=0x0, @ANYBLOB="92100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x5}, 0x50) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x8, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4cb3, 0x0, 0x0, 0x0, 0x22}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff319, 0x0, 0x0, 0x0, 0xdd0}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000002ac1414bb00000000000000000000000000000000000000000000000000000000e3ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8caedfc904f6c3b287206c584947dadb2df6aebe96f794b6aa94df17b11f4205959b70d31bf8e818dd86fbbeadf7fe7bafe530534068d1f60ed3f725f2ce00224bba8d087f123aabf200d8572a6f0171b18881aa432cd8ef3ca1c934f84b85e49c1058d372cddf258b49cd76be0d29b56a7816e58088f9e775b0e62f279b9f11da90c81f12e3a768c46e8898a57d03b7610e35bc512d20bc47459a45d8d8e3211a3833923a5066f624e743ae385fa2eaf0d676d"], 0x190) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x7, 0x3, {{0x1e, 0x4, 0x1, 0x5, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x300}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x72, 0x0, 0x7, [0x883, 0x5, 0xe]}, @rr={0x7, 0x7, 0x56, [@rand_addr=0x64010100]}, @cipso={0x86, 0x44, 0x0, [{0x2, 0xa, "bf13c8b56290de0a"}, {0x6, 0x12, "a30e3af8bf62b607ffba5fdf8a0cadcb"}, {0x1, 0x11, "969ab121dd201c1692c4fd94093dfe"}, {0x2, 0x11, "5fd0948652721c54a6e38405ed6653"}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xe4, 0x12, 0x400, 0x70bd26, 0x25dfdbfb, {0x2b, 0xe1, 0x5, 0xf, {0x4e22, 0x4e23, [0x5, 0x6, 0x2, 0x5], [0x2, 0xfffffff7, 0x8, 0x5], r12, [0x4a000000, 0x2f0d]}, 0x2, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "d177b87a87aee6e40be3ddc166ae739e3bf043c4f1c9224e55e9765256e6c942e952290fa6e2ccc5d43fc8f14268786be3f54e5f879b0cfd807c3a87719873a6a4ec1393811e07cab2d3e17c886255eb14093955d41d75f7d28862233c199e1adbca6c7719c9fb5e8c4dcf38855b363800b41bf771a7dab4357ab923c2b2060de7226f960054ff289b85ba17873f1b9aaaa7"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008084}, 0x40000) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd70027100c1582100000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 50.099467411s ago: executing program 2 (id=6986): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x244, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x64d8cc14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2d}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x404}]}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @empty, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x8f, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa74c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4001}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x2400c885}, 0x440c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r2, 0xfffffffc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082dbd7000fddbdf250100000014000c00fc02000000000000000000000000000108000700", @ANYRES32=r1, @ANYBLOB="08ff0700ca5d1c79589406412506569877b5d8602ff011724e505bc5c36e16314034a3ca01800000000000002ccd6c9a10dfb1373ab86274d7921c5c", @ANYRES32, @ANYBLOB], 0x38}}, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, r2, 0x2a1cf000) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) (async) unshare(0x20000400) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r7}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r8}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="00000000000400040800b70000000400"], 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 50.055178512s ago: executing program 4 (id=6987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r3, @ANYBLOB="526bf80c7cddb9fabc04004cae155dfdfd20877bbd7f24030ea93b0f8c0e28cbeb1710f87ea47de1e0d0e1d71779bdda6ca3b779e317eee74cb9a39e18ffc69c3072ecac37b6fba2fa487f847a1be3e73e46fea21bcd061ecf155d850ded749735afd5f7ccc9330092ee6163fc38c5ef259b4d785306dd698b2a290c0d5927f05515c39b38073681627466a2cc0eff46fc308ad3dbde6e0447fd019b1017490c49", @ANYRES64=0x0, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000940)={0x28, 0x0, 0x0, @hyper}, 0x10) close(0x3) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) r7 = socket(0x27, 0x5, 0xff) setsockopt$inet6_int(r7, 0x29, 0x1, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) mmap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000009, 0x13, r0, 0x0) accept(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_kthread_work_execute_start\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 50.042130252s ago: executing program 0 (id=6988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) (async) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r11, 0x8919, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x32a) 49.81158052s ago: executing program 2 (id=6989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r3, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async) shutdown(0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 49.781616333s ago: executing program 3 (id=6990): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESOCT=r2, @ANYRESOCT=r4], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000280)={0x7, 0x8}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESOCT=r2, @ANYRESOCT=r4], 0x3c}}, 0x40000) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000280)={0x7, 0x8}, 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 49.751916475s ago: executing program 0 (id=6991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002940)={0x15b0, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x158c, 0x48, 0x0, 0x1, [@nested={0x1587, 0xf0, 0x0, 0x1, [@generic="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", @nested={0x4, 0x118}, @generic="187e82419a4619dc6372bd77f6d48205edfec3fa9467c283cddfee1d1b0dc366d0579fdf5298d0338e14d0a4783334a266786eac4e858e0e0edae7fc500b2f215214112416240cafd119d45fa51ebea9f8eeb7887edde1ca9a1f0e0334b2fb097f27cadc22a0b748710ee0398781634fe404ed5650013130a499a0407f9322ad406bd966d482b0cb9c8b086d2e633614bdde756e17cc5f940821ddfd109c42b7524599b2dc63bb0fd0afb9cac85781b12eb361664e2c3c0bff4cd2", @nested={0x4c4, 0x141, 0x0, 0x1, [@generic="c4d50e18e273ab522eb8bb496ac5698666aa434677e3e878117d56f3f34df1fe9550043c9f12881839827e74e17b7504ec2e603f915b09e1b091f0ca2cb9acb58bef29c7b35ec238cbecaf6dc3e2eaae6cef058b7b22eb2de0701d4db84e296070f0ee9db809d6ed96dd4069621aa82bf565208c7762d6cd6ca3e7bb2a9130445668f843a3525c11c423cf85de1ab70e68366a44e1df643960a287b80ecf9be31874b3a0ced6ca6af26fe66d7bdf8c5a4ef0fe1c20a131e9ff7a5225966758e66e946337ea981479a303a8d462070b8c76c26fde90e3efa6301f79bbe47a2e4a4a921b8b7bbeb3663b93177c", @generic="5506211bd3bdd1a9ed31710828d0e463eb8820cbef6b660352e88ae2c217fa8006b12a9735c6437381f78969eb19d16ba861b215add41aa8ee3da3f20c6bc0d349cb3b223dff4a3c2499e6da63064b80e0942790744d3f67f369e3e9cb9cc6af88c2c21daf4b5a4df8e7981f415bcb1a496e01733c7fe571ad2638932dc20cee96a451ef304a16853097bf91d8e057d8f8475e51620b7164125b4c984a8a14573408edd00dbc599e929388723695bcda39bed7f318883c877bd01a023a230d162f291ff884d70e5c8b66", @typed={0x4, 0x48}, @nested={0x1c0, 0xe7, 0x0, 0x1, [@nested={0xd4, 0x6c, 0x0, 0x1, [@nested={0xcf, 0x14f, 0x0, 0x1, [@generic="99f84558a7187fbfcb9d1a0daae1197da2115e39577f5dfe", @typed={0x4, 0x7d}, @nested={0x4, 0x68}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r0}, @generic="4658301ceb1605f91546891ff26cf4950862c43b60c15d1139ea7c4257f5ffd355a51b9b21b56c4c657676720b003829d5895d885f7897cad30105ad736f4620a10bb985ee1817e72c9cb1b5096febb365c2eb22880ae2313c657097b6d4eb3fc2b3656353ce52cb4a72fa020d95c2df0560bccb498a28ba4f08a90ed44a18b7d07f66b56f84bd40f3165bd5d6257fa36cadd40cfe4b77739ab451d22793252ae5675b"]}]}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xd4, 0x11e, 0x0, 0x0, @binary="d58dd7530cc746f6f5f6c982406ea8b4240f6fedf1b2cfbd3303fd152ff045ef88789fd0a8f92774160bb7a51545e8bf43e7ba35ad01c3e397362b0420c4e8fab5eadf69fb8c8fa2a5363ea71b36538a5bdf307fe562d01f9438f3229f39cace1d47b503f7486576bb8d673934481bf931a932fd5a42ec4b00b796c26c6cb1c657d1026322b406f4ca417f6262f5298b67741c51dcbd8e316c9446ea398b40a5118f32cf1f25379c998eee8771443e322fa9b96966074b2a1f504bc355e976c7b4fca19c1b2c64f7467f5da361b522cf"}]}, @generic="2a8a4d5d7f898c23e86e148da3ce29dbf6fe5d2ebfeb07f0ac7c52a658e5b44799f5c96163ea9a19e6dbb4ae7ad2fc920adec26b6c9917", @nested={0x4, 0xfc}, @nested={0x4, 0x89}, @typed={0x8, 0x79, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x113}, @generic="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"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x15b0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 40.155116493s ago: executing program 32 (id=6897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000040), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) close(r3) (async) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 38.467798362s ago: executing program 3 (id=6993): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x40}}, 0x24000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 38.46711926s ago: executing program 4 (id=6994): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000180), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000180), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000001280)="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", 0xd7c}, {&(0x7f0000000380)="2e1df648fefe2e618a784c02fc448542a101026a98e2cef4e0e58088d6ef0f766af586448db96c0a03314a0f6ab82e9c2083decdfb34d3f6cf44dce3c1ed8fc0b58f8a8ae6b774122acf186ab8c0803cdb9e186fd4adf78e25dff74bdd6cf08325635c465507af11de71a68ae2765d6bc33e28cf808da5ed7fdf73f3dc4ccf7270b2b97ed59e840f0895d7e7e9770daf06205659fe637cbf90a7e50000d2441f993ab2fdbd301d40760000", 0xab}, {&(0x7f0000000540)="b8fcec3f9292458885c6254903", 0xd}, {&(0x7f0000000700)="51be76c4d3dc6e5027b506df8b3fa1", 0xf}], 0x5}, 0x800) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r6) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a2eb525}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x134, r7, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf85b}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xba}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x3}}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) (async) setsockopt$inet6_int(r10, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x50c0) 36.324989827s ago: executing program 0 (id=6995): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=0x0, @ANYRES16=r0], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) 29.982769904s ago: executing program 33 (id=6989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r3, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async) shutdown(0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23.702667782s ago: executing program 4 (id=6997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400030a00000027bd70000000000003000600000000000200000000000000000000000000000002000100000000000000030d01000040030005000000000002000000ac1414f60000000000000000"], 0x50}, 0x1, 0x7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newtaction={0x19c, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x188, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0xfffffffffffffffc}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x158, 0xd, 0x0, 0x0, {{0xa}, {0xa8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xc}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD]}]}]}, {0x85, 0x6, "ffa449d9761ef16726776dec6241caa3f22d0d9342f80236f936bd3ef1e79546997569dfbd790cbe522afd4bdf460831192b2853ef4df2135f9b6b5af1ffb28ee7336385111fbf0e1c765859b2bdf9e1537a4456fc0734a7191bc790125b398f04f1fbe7d3747c05cd4ff46816004908d8a0a74e1faf0b4b6d152f699610ce759a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 22.596009227s ago: executing program 0 (id=6998): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socket(0x29, 0xa, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0) (async) syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x11, &(0x7f0000000200)={@remote, @random="0000dcf6177a", @void, {@mpls_uc={0x8864, {[], @llc={@llc={0xaa, 0xdc, 'T'}}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/170, 0xaa}], 0x1}, 0x8}], 0x1, 0x40000082, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18.942260496s ago: executing program 34 (id=6993): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x40}}, 0x24000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.042198655s ago: executing program 35 (id=6998): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socket(0x29, 0xa, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0) (async) syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x11, &(0x7f0000000200)={@remote, @random="0000dcf6177a", @void, {@mpls_uc={0x8864, {[], @llc={@llc={0xaa, 0xdc, 'T'}}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/170, 0xaa}], 0x1}, 0x8}], 0x1, 0x40000082, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 36 (id=6997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400030a00000027bd70000000000003000600000000000200000000000000000000000000000002000100000000000000030d01000040030005000000000002000000ac1414f60000000000000000"], 0x50}, 0x1, 0x7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newtaction={0x19c, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x188, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0xfffffffffffffffc}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x158, 0xd, 0x0, 0x0, {{0xa}, {0xa8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xc}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD]}]}]}, {0x85, 0x6, "ffa449d9761ef16726776dec6241caa3f22d0d9342f80236f936bd3ef1e79546997569dfbd790cbe522afd4bdf460831192b2853ef4df2135f9b6b5af1ffb28ee7336385111fbf0e1c765859b2bdf9e1537a4456fc0734a7191bc790125b398f04f1fbe7d3747c05cd4ff46816004908d8a0a74e1faf0b4b6d152f699610ce759a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) kernel console output (not intermixed with test programs): 0: j1939_xtp_rx_dat: no tx connection found [ 1271.429896][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.436664][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.443462][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.450260][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.456987][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.463907][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.470587][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.477313][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.484015][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.490785][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.497504][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.504212][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.510903][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.517651][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.524348][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.531025][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.537792][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.544508][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.551200][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.554680][T29514] netlink: 'syz.3.6176': attribute type 2 has an invalid length. [ 1271.558202][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.572357][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.579208][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.585934][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.592643][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.599326][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.606051][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.612755][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.619455][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.626460][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.633543][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.640398][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.647235][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1271.691294][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.707228][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.776876][T29514] : entered promiscuous mode [ 1272.038604][T29534] netlink: 30 bytes leftover after parsing attributes in process `syz.4.6186'. [ 1272.110066][T29538] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6187'. [ 1272.216268][T29544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6189'. [ 1272.241259][T29545] tipc: Started in network mode [ 1272.246541][T29545] tipc: Node identity 2e987cc52e5, cluster identity 4711 [ 1272.254992][T29545] tipc: Enabled bearer , priority 0 [ 1272.277323][T29545] syzkaller0: entered promiscuous mode [ 1272.283523][T29545] syzkaller0: entered allmulticast mode [ 1272.345666][T29550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6190'. [ 1272.403876][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880587d1000: rx timeout, send abort [ 1272.726713][T29561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.738996][T29561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.748872][T29561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.831901][T18142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.909488][T29567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.920319][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880587d1000: abort rx timeout. Force session deactivation [ 1272.971804][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.007463][T29572] sctp: [Deprecated]: syz.4.6197 (pid 29572) Use of int in maxseg socket option. [ 1273.007463][T29572] Use struct sctp_assoc_value instead [ 1273.032508][T29567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.055243][T29560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.135763][T29531] tipc: Resetting bearer [ 1273.504368][T29531] tipc: Disabling bearer [ 1273.571304][ T9] tipc: Node number set to 13139141 [ 1273.719196][T29581] lo speed is unknown, defaulting to 1000 [ 1273.785703][T29601] __nla_validate_parse: 3 callbacks suppressed [ 1273.785724][T29601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6205'. [ 1273.915690][T29598] syzkaller0: entered promiscuous mode [ 1273.921236][T29598] syzkaller0: entered allmulticast mode [ 1273.949394][T29603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6205'. [ 1274.015900][T29602] netlink: 'syz.0.6204': attribute type 21 has an invalid length. [ 1274.062217][T29602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6204'. [ 1274.096120][T29602] netlink: 'syz.0.6204': attribute type 1 has an invalid length. [ 1274.206693][T29581] wg1 speed is unknown, defaulting to 1000 [ 1274.215815][T29607] tipc: Started in network mode [ 1274.220744][T29607] tipc: Node identity , cluster identity 4711 [ 1274.229202][T29607] tipc: Failed to obtain node identity [ 1274.258058][T29607] tipc: Enabling of bearer rejected, failed to enable media [ 1274.704363][T29627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1274.717620][T29627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1275.100175][T29637] lo speed is unknown, defaulting to 1000 [ 1275.125855][T29645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1275.344614][T29645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1275.673057][T29653] netlink: 'syz.4.6217': attribute type 13 has an invalid length. [ 1275.681925][T29653] netlink: 'syz.4.6217': attribute type 17 has an invalid length. [ 1275.825519][T29660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1275.872682][T29660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1275.945589][T29637] wg1 speed is unknown, defaulting to 1000 [ 1276.002864][T29666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1276.038444][T29666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.283018][T29666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.614978][T29678] syzkaller0: entered promiscuous mode [ 1276.632211][T29678] syzkaller0: entered allmulticast mode [ 1276.693978][T29677] netlink: 'syz.4.6222': attribute type 16 has an invalid length. [ 1277.073253][T17713] net_ratelimit: 6 callbacks suppressed [ 1277.073276][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.235135][T29691] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1277.787711][T29710] nbd: illegal input index -1113835520 [ 1277.793838][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.902961][T29719] netlink: 'syz.4.6236': attribute type 4 has an invalid length. [ 1278.058185][T29728] netlink: 'syz.2.6239': attribute type 11 has an invalid length. [ 1278.122972][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.158705][T29734] netlink: 'syz.0.6240': attribute type 4 has an invalid length. [ 1278.189167][T29735] tipc: Started in network mode [ 1278.200072][T29735] tipc: Node identity dec7b833d61e, cluster identity 4711 [ 1278.207825][T29735] tipc: Enabled bearer , priority 0 [ 1278.216892][T29735] syzkaller0: entered promiscuous mode [ 1278.223357][T29735] syzkaller0: entered allmulticast mode [ 1278.267402][T29738] team0: entered promiscuous mode [ 1278.274517][T29738] team_slave_0: entered promiscuous mode [ 1278.280683][T29738] team_slave_1: entered promiscuous mode [ 1278.289382][T29738] bond0: entered promiscuous mode [ 1278.298502][T29738] bond_slave_0: entered promiscuous mode [ 1278.305673][T29738] bond_slave_1: entered promiscuous mode [ 1278.346517][T29735] tipc: Resetting bearer [ 1278.378080][T29731] tipc: Resetting bearer [ 1278.414682][T29731] tipc: Disabling bearer [ 1278.814209][T29774] syzkaller0: entered promiscuous mode [ 1278.819790][T29774] syzkaller0: entered allmulticast mode [ 1279.005496][T29792] __nla_validate_parse: 23 callbacks suppressed [ 1279.005522][T29792] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.6255'. [ 1279.153683][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.338645][T29802] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1280.194903][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.837693][T23876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.234326][T18142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.277509][T29800] netlink: 'syz.2.6257': attribute type 29 has an invalid length. [ 1281.291440][T29806] syzkaller0: entered promiscuous mode [ 1281.297434][T29806] syzkaller0: entered allmulticast mode [ 1281.305155][T29814] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6259'. [ 1281.458406][T29825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6263'. [ 1281.514266][T29825] bridge_slave_1: left allmulticast mode [ 1281.533657][T29825] bridge_slave_1: left promiscuous mode [ 1281.539547][T29825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.580704][T29825] bridge_slave_0: left allmulticast mode [ 1281.608173][T29825] bridge_slave_0: left promiscuous mode [ 1281.616458][T29838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6263'. [ 1281.627593][T29825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.734511][T29845] xt_nat: multiple ranges no longer supported [ 1282.060300][T29856] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 1282.187181][T29856] openvswitch: netlink: Message has 8 unknown bytes. [ 1282.304906][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.519695][T29862] x_tables: duplicate entry at hook 3 [ 1282.526713][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.580437][T29862] x_tables: duplicate entry at hook 3 [ 1282.609331][T29862] x_tables: duplicate entry at hook 3 [ 1282.620855][T29867] veth1_macvtap: left promiscuous mode [ 1282.651927][T29862] x_tables: duplicate entry at hook 3 [ 1282.669943][T29867] macsec0: entered allmulticast mode [ 1282.681873][T29862] x_tables: duplicate entry at hook 3 [ 1282.712758][T29862] x_tables: duplicate entry at hook 3 [ 1282.745530][T29862] x_tables: duplicate entry at hook 3 [ 1282.781751][T29862] x_tables: duplicate entry at hook 3 [ 1282.814197][T29862] x_tables: duplicate entry at hook 3 [ 1282.831866][T29862] x_tables: duplicate entry at hook 3 [ 1283.323054][T18139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.466504][T29917] netlink: 'syz.4.6286': attribute type 6 has an invalid length. [ 1283.480173][T29917] netlink: 'syz.4.6286': attribute type 6 has an invalid length. [ 1283.511145][T29919] netlink: 'syz.4.6286': attribute type 6 has an invalid length. [ 1283.559141][T29928] tipc: Started in network mode [ 1283.572050][T29928] tipc: Node identity 6a13da3e003d, cluster identity 4711 [ 1283.581974][T29928] tipc: Enabled bearer , priority 0 [ 1283.625526][T29918] tipc: Resetting bearer [ 1283.684451][T29918] tipc: Disabling bearer [ 1283.871631][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.030902][T29945] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6294'. [ 1284.188988][T29948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.199244][T29948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.208251][T29948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.217091][T29948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.226054][T29948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.235498][T29948] FAULT_INJECTION: forcing a failure. [ 1284.235498][T29948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.254610][T29948] CPU: 1 UID: 0 PID: 29948 Comm: syz.3.6293 Not tainted syzkaller #0 PREEMPT(full) [ 1284.254643][T29948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.254658][T29948] Call Trace: [ 1284.254667][T29948] [ 1284.254677][T29948] dump_stack_lvl+0xe8/0x150 [ 1284.254712][T29948] should_fail_ex+0x414/0x560 [ 1284.254753][T29948] _copy_from_user+0x2d/0xb0 [ 1284.254782][T29948] ___sys_recvmsg+0x12e/0x510 [ 1284.254817][T29948] ? __pfx____sys_recvmsg+0x10/0x10 [ 1284.254850][T29948] ? __fget_files+0x2a/0x420 [ 1284.254899][T29948] ? __fget_files+0x3a0/0x420 [ 1284.254940][T29948] do_recvmmsg+0x307/0x770 [ 1284.254979][T29948] ? __pfx_do_recvmmsg+0x10/0x10 [ 1284.255021][T29948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1284.255067][T29948] __x64_sys_recvmmsg+0x190/0x240 [ 1284.255100][T29948] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1284.255144][T29948] do_syscall_64+0xec/0xf80 [ 1284.255168][T29948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.255190][T29948] ? trace_irq_disable+0x37/0x100 [ 1284.255220][T29948] ? clear_bhb_loop+0x60/0xb0 [ 1284.255247][T29948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.255270][T29948] RIP: 0033:0x7f357138f749 [ 1284.255289][T29948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.255310][T29948] RSP: 002b:00007f35721f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1284.255333][T29948] RAX: ffffffffffffffda RBX: 00007f35715e5fa0 RCX: 00007f357138f749 [ 1284.255350][T29948] RDX: 0000000000000001 RSI: 0000200000003380 RDI: 0000000000000004 [ 1284.255364][T29948] RBP: 00007f35721f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.255379][T29948] R10: 0000000000022023 R11: 0000000000000246 R12: 0000000000000001 [ 1284.255393][T29948] R13: 00007f35715e6038 R14: 00007f35715e5fa0 R15: 00007ffdecb21008 [ 1284.255439][T29948] [ 1284.541311][T29956] lo speed is unknown, defaulting to 1000 [ 1284.778082][T29941] delete_channel: no stack [ 1284.871882][T29968] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1284.892907][T29968] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1285.184373][T29956] wg1 speed is unknown, defaulting to 1000 [ 1285.631086][T29993] lo speed is unknown, defaulting to 1000 [ 1285.903470][T30015] gre0: entered promiscuous mode [ 1286.016556][T29993] wg1 speed is unknown, defaulting to 1000 [ 1286.157914][T30000] lo speed is unknown, defaulting to 1000 [ 1286.213193][T30011] lo speed is unknown, defaulting to 1000 [ 1286.539060][T30040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6317'. [ 1286.933715][T30056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1286.962254][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1287.020743][T30039] lo speed is unknown, defaulting to 1000 [ 1287.028678][T30011] wg1 speed is unknown, defaulting to 1000 [ 1287.050215][T30056] team_slave_0: entered promiscuous mode [ 1287.086557][T30000] wg1 speed is unknown, defaulting to 1000 [ 1287.499144][T30067] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6324'. [ 1287.514778][T30060] tipc: Enabled bearer , priority 0 [ 1287.528944][T30061] tipc: Enabling of bearer rejected, already enabled [ 1287.558421][T30063] syzkaller0: entered promiscuous mode [ 1287.571689][T30063] syzkaller0: entered allmulticast mode [ 1287.715426][ T795] net_ratelimit: 5 callbacks suppressed [ 1287.715448][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.784772][T30039] wg1 speed is unknown, defaulting to 1000 [ 1288.642686][T10579] tipc: Node number set to 148486195 [ 1288.678263][T30099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.692095][T30099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.700733][T30099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.709066][T30102] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6331'. [ 1288.748428][T30100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.764119][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.772351][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.780642][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.791206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.965521][T30110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6335'. [ 1289.025424][T30104] SET target dimension over the limit! [ 1289.044704][T30115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.109144][T30117] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6337'. [ 1289.144083][T30115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.229717][T30115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.254920][T30124] syzkaller1: entered promiscuous mode [ 1289.260689][T30124] syzkaller1: entered allmulticast mode [ 1289.287672][T30115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.419812][T30133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6340'. [ 1289.444925][T30133] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6340'. [ 1289.470629][T30019] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.507814][T30136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6342'. [ 1289.521810][T30019] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.536453][T30136] netlink: 'syz.4.6342': attribute type 10 has an invalid length. [ 1289.575169][T30019] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.598732][T21179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.690415][T30139] netlink: 'syz.2.6343': attribute type 19 has an invalid length. [ 1289.699952][T30139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1289.743351][T30019] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.743692][T30139] netlink: 'syz.2.6343': attribute type 19 has an invalid length. [ 1289.752462][T30019] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.769554][T30139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1289.779555][T30019] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.788591][T30019] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.794698][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.026481][T30147] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1290.217792][T30161] syzkaller0: entered promiscuous mode [ 1290.226362][T30161] syzkaller0: entered allmulticast mode [ 1290.391845][T30164] netlink: 'syz.3.6351': attribute type 10 has an invalid length. [ 1290.420928][T30164] `: Device ipvlan1 failed to register rx_handler [ 1290.727992][T30178] sctp: [Deprecated]: syz.2.6356 (pid 30178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1290.727992][T30178] Use struct sctp_sack_info instead [ 1290.867318][T30189] lo speed is unknown, defaulting to 1000 [ 1291.043141][T30206] netlink: 'syz.1.6363': attribute type 11 has an invalid length. [ 1291.202388][T30213] 8021q: VLANs not supported on sit0 [ 1291.228862][T30213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6367'. [ 1291.283197][T30217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1291.342148][T30217] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1291.435311][T30189] wg1 speed is unknown, defaulting to 1000 [ 1291.823931][T30248] tipc: Enabling of bearer rejected, failed to enable media [ 1292.103639][T30257] pimreg: entered allmulticast mode [ 1292.610197][T30290] siw: device registration error -23 [ 1292.728511][T30290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.791390][T30290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.935822][ T795] net_ratelimit: 16 callbacks suppressed [ 1292.935843][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.242156][T30313] netlink: 'syz.1.6388': attribute type 10 has an invalid length. [ 1293.883360][T10579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.983751][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.004029][T30333] lo speed is unknown, defaulting to 1000 [ 1294.146897][T30339] __nla_validate_parse: 3 callbacks suppressed [ 1294.146919][T30339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6398'. [ 1294.223656][T30342] lo speed is unknown, defaulting to 1000 [ 1294.242070][T30345] netlink: 'syz.2.6397': attribute type 10 has an invalid length. [ 1294.274750][T30345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.315831][T30345] bond0: (slave team0): Enslaving as an active interface with an up link [ 1294.404517][T30337] lo speed is unknown, defaulting to 1000 [ 1294.420494][T30343] lo speed is unknown, defaulting to 1000 [ 1294.515637][T30352] lo speed is unknown, defaulting to 1000 [ 1294.595074][T30362] lo speed is unknown, defaulting to 1000 [ 1294.630445][T30333] wg1 speed is unknown, defaulting to 1000 [ 1294.963530][T30342] wg1 speed is unknown, defaulting to 1000 [ 1294.992129][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.312055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.335086][T30366] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1295.443262][T30368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6404'. [ 1295.454879][T30368] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1295.917012][T30343] wg1 speed is unknown, defaulting to 1000 [ 1296.014373][T30352] wg1 speed is unknown, defaulting to 1000 [ 1296.014384][T30370] lo speed is unknown, defaulting to 1000 [ 1296.037571][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.235417][T30362] wg1 speed is unknown, defaulting to 1000 [ 1296.384300][T30337] wg1 speed is unknown, defaulting to 1000 [ 1296.796868][T30370] wg1 speed is unknown, defaulting to 1000 [ 1296.917747][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.077704][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.236509][T10579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.936498][T30381] ieee802154 phy0 wpan0: encryption failed: -126 [ 1298.123758][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.269925][T30391] Bluetooth: MGMT ver 1.23 [ 1298.302408][T30388] lo speed is unknown, defaulting to 1000 [ 1298.440145][T30020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.450465][T30020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.487767][T30398] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6407'. [ 1298.507695][T30020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.541860][T30020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.773334][T30410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1298.779286][T30388] wg1 speed is unknown, defaulting to 1000 [ 1298.872376][T30411] ieee802154 phy0 wpan0: encryption failed: -126 [ 1298.926793][T30415] ieee802154 phy0 wpan0: encryption failed: -126 [ 1298.951147][T30417] netlink: 'syz.3.6416': attribute type 6 has an invalid length. [ 1298.975910][T30417] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6416'. [ 1298.988110][T30418] openvswitch: netlink: IP tunnel dst address not specified [ 1299.172432][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.420910][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6421'. [ 1299.544604][T30435] blkio.reset_stats is deprecated [ 1299.806020][T30448] netlink: 'syz.2.6427': attribute type 10 has an invalid length. [ 1299.863008][T30448] batadv0: entered allmulticast mode [ 1299.869100][T30450] netlink: 'syz.2.6427': attribute type 10 has an invalid length. [ 1299.890069][T30448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.897993][T30450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1299.907526][T30448] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1299.950552][T30450] batadv0: entered promiscuous mode [ 1299.957600][T23875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.975696][T30450] bond0: (slave batadv0): Releasing backup interface [ 1299.992433][T30450] bridge0: port 3(batadv0) entered blocking state [ 1300.000081][T30450] bridge0: port 3(batadv0) entered disabled state [ 1300.065860][T30454] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.6428'. [ 1300.133692][T30456] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1300.161946][T30453] netlink: set zone limit has 4 unknown bytes [ 1300.169933][T30456] netlink: 'syz.3.6429': attribute type 1 has an invalid length. [ 1300.198429][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.356139][T30021] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1300.365949][T30021] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1300.400355][T30464] syzkaller0: entered promiscuous mode [ 1300.407397][T30464] syzkaller0: entered allmulticast mode [ 1300.660651][T30473] lo speed is unknown, defaulting to 1000 [ 1300.828125][T30485] ip6t_srh: unknown srh match flags 4000 [ 1300.882119][T30485] nbd: couldn't find device at index 536870912 [ 1300.929191][T30487] lo speed is unknown, defaulting to 1000 [ 1301.072088][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.152650][T30473] wg1 speed is unknown, defaulting to 1000 [ 1301.251723][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.417287][T30509] veth0_virt_wifi: renamed from ipvlan0 [ 1301.470936][T30510] bond2: option min_links: invalid value (18446744073709551612) [ 1301.480982][T30510] bond2: option min_links: allowed values 0 - 2147483647 [ 1301.509791][T30510] bond2 (unregistering): Released all slaves [ 1301.656333][T30487] wg1 speed is unknown, defaulting to 1000 [ 1301.687476][T30518] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1301.704838][T30518] bond4 (unregistering): Released all slaves [ 1302.285767][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.388486][T30545] xt_bpf: check failed: parse error [ 1302.923107][T30561] lo speed is unknown, defaulting to 1000 [ 1303.017022][T30565] lo speed is unknown, defaulting to 1000 [ 1303.287891][T30580] netlink: 'syz.4.6466': attribute type 1 has an invalid length. [ 1303.313975][T30580] netlink: 'syz.4.6466': attribute type 2 has an invalid length. [ 1303.323245][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.363442][T30582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6468'. [ 1303.376571][T30580] netlink: 'syz.4.6466': attribute type 1 has an invalid length. [ 1303.416342][T30580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1303.492056][T30586] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1303.544921][T30582] netlink: 'syz.0.6468': attribute type 4 has an invalid length. [ 1303.623195][T30561] wg1 speed is unknown, defaulting to 1000 [ 1303.717015][T30593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.728981][T30593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.739862][T30593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.795184][T30593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.840432][T30593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.940287][T30601] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6473'. [ 1303.952480][T30584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.996976][T30605] netlink: 'syz.4.6474': attribute type 6 has an invalid length. [ 1304.113340][T10579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.176293][T30609] netlink: 'syz.3.6475': attribute type 2 has an invalid length. [ 1304.310193][T30565] wg1 speed is unknown, defaulting to 1000 [ 1304.320990][T30612] lo speed is unknown, defaulting to 1000 [ 1304.354100][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.394154][ T7106] IPVS: starting estimator thread 0... [ 1304.400294][T30614] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.490771][T30619] IPVS: using max 26 ests per chain, 62400 per kthread [ 1304.897680][T30641] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6482'. [ 1305.098337][T30612] wg1 speed is unknown, defaulting to 1000 [ 1305.288733][T30644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6483'. [ 1305.441095][T30649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6485'. [ 1305.555011][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.866049][T30658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1305.916177][T30658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1305.946017][T30667] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6489'. [ 1306.114310][T30672] netlink: 'syz.3.6491': attribute type 39 has an invalid length. [ 1306.286873][T30683] tipc: Enabled bearer , priority 0 [ 1306.360859][T30682] syzkaller0: entered promiscuous mode [ 1306.366944][T30682] syzkaller0: entered allmulticast mode [ 1306.374714][T30690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6494'. [ 1306.403076][T30682] tipc: Resetting bearer [ 1306.530545][T30682] tipc: Resetting bearer [ 1308.407420][T30682] tipc: Disabling bearer [ 1308.421930][ T795] tipc: Node number set to 3336827281 [ 1308.512267][ T7106] net_ratelimit: 6 callbacks suppressed [ 1308.512287][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.722270][T30734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6507'. [ 1308.736617][T30731] netlink: 'syz.4.6505': attribute type 32 has an invalid length. [ 1308.860807][T30741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6509'. [ 1308.873926][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1309.033246][T30748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.042360][T30748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.050914][T30748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.065424][T30746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.079797][T30746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.270188][T30760] netlink: 'syz.2.6514': attribute type 1 has an invalid length. [ 1309.427812][T30770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.437607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.462095][T30770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.490443][T30730] delete_channel: no stack [ 1309.735487][T30793] netlink: 'syz.1.6520': attribute type 6 has an invalid length. [ 1309.774708][T30770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.782553][T30770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.934510][T30800] netlink: 'syz.0.6522': attribute type 3 has an invalid length. [ 1309.961371][T30800] __nla_validate_parse: 4 callbacks suppressed [ 1309.961393][T30800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6522'. [ 1310.962393][T30770] tipc: Resetting bearer [ 1311.112503][T30777] : renamed from veth0_to_bond (while UP) [ 1311.174259][T21184] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.190004][T21184] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.211680][T21184] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.252472][T21184] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.267343][T30791] lo speed is unknown, defaulting to 1000 [ 1311.287538][T30804] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6524'. [ 1311.367786][T10574] IPVS: starting estimator thread 0... [ 1311.471933][T30811] IPVS: using max 28 ests per chain, 67200 per kthread [ 1311.513361][T30815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1311.640985][T30817] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1311.679267][T30820] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1311.693696][T30820] bond2 (unregistering): Released all slaves [ 1311.754491][T30791] wg1 speed is unknown, defaulting to 1000 [ 1312.271798][T30851] netlink: 'syz.0.6533': attribute type 10 has an invalid length. [ 1312.305329][T30858] netlink: 'syz.0.6533': attribute type 10 has an invalid length. [ 1312.330210][T30859] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6537'. [ 1312.375374][T30851] batman_adv: batadv0: Interface deactivated: dummy0 [ 1312.425621][T30851] batman_adv: batadv0: Removing interface: dummy0 [ 1312.489378][T30851] dummy0: entered promiscuous mode [ 1312.518297][T30851] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1312.903043][T30890] netlink: 'syz.4.6544': attribute type 2 has an invalid length. [ 1312.951073][T30890] !: entered promiscuous mode [ 1313.048567][T30894] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1313.394256][T30917] netlink: 'syz.2.6550': attribute type 8 has an invalid length. [ 1313.404972][T30917] sch_fq: defrate 0 ignored. [ 1313.558400][T30923] FAULT_INJECTION: forcing a failure. [ 1313.558400][T30923] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.612691][T30923] CPU: 0 UID: 0 PID: 30923 Comm: syz.1.6552 Not tainted syzkaller #0 PREEMPT(full) [ 1313.612723][T30923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1313.612737][T30923] Call Trace: [ 1313.612747][T30923] [ 1313.612756][T30923] dump_stack_lvl+0xe8/0x150 [ 1313.612790][T30923] should_fail_ex+0x414/0x560 [ 1313.612832][T30923] should_failslab+0xa8/0x100 [ 1313.612863][T30923] __kmalloc_cache_noprof+0x84/0x700 [ 1313.612888][T30923] ? tcf_proto_create+0x65/0x330 [ 1313.612926][T30923] tcf_proto_create+0x65/0x330 [ 1313.612964][T30923] tc_new_tfilter+0x11aa/0x15b0 [ 1313.613031][T30923] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1313.613076][T30923] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1313.613114][T30923] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1313.613143][T30923] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1313.613173][T30923] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1313.613196][T30923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1313.613219][T30923] ? __lock_acquire+0x6b6/0x2cf0 [ 1313.613258][T30923] netlink_rcv_skb+0x208/0x470 [ 1313.613289][T30923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1313.613317][T30923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1313.613358][T30923] ? netlink_deliver_tap+0x2e/0x1b0 [ 1313.613396][T30923] netlink_unicast+0x82f/0x9e0 [ 1313.613431][T30923] ? __pfx_netlink_unicast+0x10/0x10 [ 1313.613456][T30923] ? __alloc_skb+0x198/0x3a0 [ 1313.613480][T30923] ? netlink_sendmsg+0x642/0xb30 [ 1313.613506][T30923] ? skb_put+0x11b/0x210 [ 1313.613533][T30923] netlink_sendmsg+0x805/0xb30 [ 1313.613574][T30923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1313.613607][T30923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1313.613638][T30923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1313.613660][T30923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1313.613695][T30923] __sock_sendmsg+0x21c/0x270 [ 1313.613732][T30923] ____sys_sendmsg+0x505/0x820 [ 1313.613765][T30923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1313.613804][T30923] ? import_iovec+0x74/0xa0 [ 1313.613836][T30923] ___sys_sendmsg+0x21f/0x2a0 [ 1313.613866][T30923] ? __pfx____sys_sendmsg+0x10/0x10 [ 1313.613933][T30923] ? __fget_files+0x2a/0x420 [ 1313.613961][T30923] ? __fget_files+0x3a0/0x420 [ 1313.614001][T30923] __x64_sys_sendmsg+0x19b/0x260 [ 1313.614037][T30923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1313.614075][T30923] ? __pfx_ksys_write+0x10/0x10 [ 1313.614111][T30923] do_syscall_64+0xec/0xf80 [ 1313.614135][T30923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.614157][T30923] ? trace_irq_disable+0x37/0x100 [ 1313.614186][T30923] ? clear_bhb_loop+0x60/0xb0 [ 1313.614214][T30923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.614236][T30923] RIP: 0033:0x7fac7bb8f749 [ 1313.614255][T30923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.614276][T30923] RSP: 002b:00007fac7cb03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1313.614301][T30923] RAX: ffffffffffffffda RBX: 00007fac7bde5fa0 RCX: 00007fac7bb8f749 [ 1313.614318][T30923] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000004 [ 1313.614334][T30923] RBP: 00007fac7cb03090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.614348][T30923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.614361][T30923] R13: 00007fac7bde6038 R14: 00007fac7bde5fa0 R15: 00007ffe196629a8 [ 1313.614398][T30923] [ 1314.121070][T30932] lo speed is unknown, defaulting to 1000 [ 1314.324724][T30932] wg1 speed is unknown, defaulting to 1000 [ 1314.417273][T30945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1314.613248][T30954] netlink: 'syz.3.6561': attribute type 1 has an invalid length. [ 1314.729184][T30958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1314.736568][T30958] IPv6: NLM_F_CREATE should be set when creating new route [ 1314.743875][T30958] IPv6: NLM_F_CREATE should be set when creating new route [ 1314.755514][T30954] bond2: entered promiscuous mode [ 1314.761180][T30954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1314.771004][T30958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1314.803024][T30952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1314.813561][T30952] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1314.825818][T30952] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1314.846620][T30952] bond2: (slave wireguard0): making interface the new active one [ 1314.855025][T30952] wireguard0: entered promiscuous mode [ 1314.865742][T30952] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1314.888978][T30933] lo speed is unknown, defaulting to 1000 [ 1315.132002][T30969] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1315.161627][T30969] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1315.222817][T30968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6565'. [ 1315.346418][T30977] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6568'. [ 1315.461750][T30982] netlink: 'syz.4.6570': attribute type 1 has an invalid length. [ 1315.526193][T30982] bond4: entered promiscuous mode [ 1315.532348][T30982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1315.539790][T30933] wg1 speed is unknown, defaulting to 1000 [ 1316.573390][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1316.733293][T31027] batman_adv: batadv0: Adding interface: dummy0 [ 1316.741104][T31027] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.772565][T31027] batman_adv: batadv0: Interface activated: dummy0 [ 1316.874443][T31027] batadv0: mtu less than device minimum [ 1316.881636][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1316.893918][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1316.905809][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1316.917761][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1316.929618][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1316.941688][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1316.953544][T31027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.133372][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6582'. [ 1317.441017][T31061] tipc: Enabling of bearer rejected, failed to enable media [ 1317.498370][T31058] pim6reg1: entered promiscuous mode [ 1317.504231][T31058] pim6reg1: entered allmulticast mode [ 1317.536004][T31066] netlink: 'syz.3.6591': attribute type 7 has an invalid length. [ 1317.574399][T31066] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1317.670662][T31073] netlink: 'syz.3.6594': attribute type 39 has an invalid length. [ 1317.725214][T31073] hsr_slave_1 (unregistering): left promiscuous mode [ 1317.794250][T31075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1318.218683][T31093] lo speed is unknown, defaulting to 1000 [ 1318.412765][T31106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1318.461943][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1318.477788][T31109] nbd: must specify an index to disconnect [ 1318.689637][T31093] wg1 speed is unknown, defaulting to 1000 [ 1318.840872][T31121] tc_dump_action: action bad kind [ 1318.856631][T31114] Cannot find add_set index 3 as target [ 1319.007671][T31131] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6612'. [ 1319.201592][T31119] lo speed is unknown, defaulting to 1000 [ 1319.524846][T31119] wg1 speed is unknown, defaulting to 1000 [ 1319.847781][T31147] netlink: 'syz.3.6615': attribute type 2 has an invalid length. [ 1319.862243][T31147] netlink: 'syz.3.6615': attribute type 5 has an invalid length. [ 1320.228562][T31157] ieee802154 phy0 wpan0: encryption failed: -22 [ 1320.274428][T31157] __nla_validate_parse: 56 callbacks suppressed [ 1320.274450][T31157] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1320.469958][T31169] net_ratelimit: 13 callbacks suppressed [ 1320.469979][T31169] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1320.702218][T31180] netlink: 'syz.1.6620': attribute type 39 has an invalid length. [ 1320.950517][T31185] lo speed is unknown, defaulting to 1000 [ 1321.636857][T31214] tipc: Enabled bearer , priority 0 [ 1321.663592][T31214] syzkaller0: entered promiscuous mode [ 1321.679458][T31214] syzkaller0: entered allmulticast mode [ 1321.713526][T31214] tipc: Resetting bearer [ 1321.732985][T31214] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1321.774540][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1321.784677][T31213] tipc: Resetting bearer [ 1321.846062][T31213] tipc: Disabling bearer [ 1321.876004][T31185] wg1 speed is unknown, defaulting to 1000 [ 1321.941806][T31220] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1321.963375][T31220] ieee802154 phy0 wpan0: encryption failed: -126 [ 1322.101311][T31226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6635'. [ 1322.127764][T31226] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1322.673857][T31235] lo speed is unknown, defaulting to 1000 [ 1322.975463][T31243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6639'. [ 1323.307480][T31235] wg1 speed is unknown, defaulting to 1000 [ 1323.375992][T31254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6643'. [ 1323.663571][T31261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1323.690400][T31266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.790138][T31269] syzkaller0: entered promiscuous mode [ 1323.830034][T31269] syzkaller0: entered allmulticast mode [ 1323.952697][T31269] netlink: 'syz.4.6647': attribute type 10 has an invalid length. [ 1324.089929][T31269] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1324.299569][T31250] netlink: 'syz.0.6642': attribute type 16 has an invalid length. [ 1324.326182][T31250] netlink: 52314 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1325.368548][T31327] lo speed is unknown, defaulting to 1000 [ 1325.775997][T31327] wg1 speed is unknown, defaulting to 1000 [ 1326.185916][T31345] lo speed is unknown, defaulting to 1000 [ 1326.267323][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1326.597417][T31365] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6671'. [ 1326.856056][T31373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1326.989887][T17714] IPVS: starting estimator thread 0... [ 1327.033238][T31345] wg1 speed is unknown, defaulting to 1000 [ 1327.092028][T31377] IPVS: using max 26 ests per chain, 62400 per kthread [ 1327.106830][T31346] lo speed is unknown, defaulting to 1000 [ 1327.391001][T31385] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6675'. [ 1327.525277][T31386] dvmrp6: entered allmulticast mode [ 1327.832580][T31388] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1327.913072][T31388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.920992][T31388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.984140][T31391] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1328.237765][T31346] wg1 speed is unknown, defaulting to 1000 [ 1328.269451][T31406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6681'. [ 1328.374679][T31409] netlink: 'syz.4.6682': attribute type 3 has an invalid length. [ 1328.393430][T31409] netlink: 'syz.4.6682': attribute type 16 has an invalid length. [ 1328.412692][T31409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6682'. [ 1328.452805][T31409] netlink: 'syz.4.6682': attribute type 11 has an invalid length. [ 1328.665958][T31413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6684'. [ 1328.964273][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6686'. [ 1329.972315][T31445] netlink: 'syz.4.6692': attribute type 11 has an invalid length. [ 1329.980406][T31445] netlink: 'syz.4.6692': attribute type 11 has an invalid length. [ 1329.999408][T31445] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6692'. [ 1330.022482][T31445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1330.219340][T31462] bond3: option primary_reselect: invalid value (6) [ 1330.276650][T31462] bond3 (unregistering): Released all slaves [ 1330.431165][T31464] bond3: option primary_reselect: invalid value (6) [ 1330.441179][T31464] bond3 (unregistering): Released all slaves [ 1330.477082][T31479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1330.627707][T31458] lo speed is unknown, defaulting to 1000 [ 1331.065750][T31458] wg1 speed is unknown, defaulting to 1000 [ 1331.291627][T31503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6707'. [ 1331.341750][T31505] Bluetooth: MGMT ver 1.23 [ 1332.208171][T31527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1332.249287][T31527] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1332.249885][T31522] lo speed is unknown, defaulting to 1000 [ 1332.603656][T31537] netlink: 'syz.2.6716': attribute type 10 has an invalid length. [ 1332.646731][T31537] batadv0: left allmulticast mode [ 1332.653832][T31537] batadv0: left promiscuous mode [ 1332.669676][T31537] bridge0: port 3(batadv0) entered disabled state [ 1332.706016][T31537] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1332.754703][T31537] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1332.772788][T31544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6717'. [ 1332.799536][T31537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.820246][T31537] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1332.830755][T30789] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1332.893708][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1332.908404][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1332.923082][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1332.938154][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1332.977818][T31522] wg1 speed is unknown, defaulting to 1000 [ 1333.149737][T31555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6722'. [ 1333.214529][ T7107] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1333.238760][T31556] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.253884][T31562] xt_check_table_hooks: 23 callbacks suppressed [ 1333.253908][T31562] x_tables: unsorted underflow at hook 1 [ 1333.393596][ T5149] Bluetooth: hci2: command 0x0401 tx timeout [ 1333.399767][T23778] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1333.430192][T31566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6726'. [ 1333.473353][ T4540] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1333.492396][T31556] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.636867][T31562] lo speed is unknown, defaulting to 1000 [ 1333.660692][T31556] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.806089][T31556] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.989733][T30020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.067325][T26183] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.101300][T30020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.106770][T31578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1334.113554][T31576] lo speed is unknown, defaulting to 1000 [ 1334.156741][T21175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.205754][T31581] lo speed is unknown, defaulting to 1000 [ 1334.237952][T31562] wg1 speed is unknown, defaulting to 1000 [ 1334.319270][T31583] lo speed is unknown, defaulting to 1000 [ 1334.335201][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6731'. [ 1334.960906][T31583] wg1 speed is unknown, defaulting to 1000 [ 1334.989037][T31576] wg1 speed is unknown, defaulting to 1000 [ 1335.008588][T31598] lo speed is unknown, defaulting to 1000 [ 1335.053075][T31581] wg1 speed is unknown, defaulting to 1000 [ 1335.343422][T31598] wg1 speed is unknown, defaulting to 1000 [ 1335.480717][T31604] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1335.572877][T26183] net_ratelimit: 15 callbacks suppressed [ 1335.572901][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1335.594153][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1335.609265][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1335.624720][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1336.161736][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1336.176563][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1336.191193][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1336.206370][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1336.733289][ T4540] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1336.748082][ T4540] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1336.780285][T31619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1337.486763][T31647] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1337.521667][T31647] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1337.532874][T31646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1337.543630][T31646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1337.606760][T31642] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1337.812033][T31657] netlink: 'syz.0.6751': attribute type 5 has an invalid length. [ 1337.856826][T31660] tipc: Enabling of bearer rejected, failed to enable media [ 1337.870883][T31657] netlink: 'syz.0.6751': attribute type 5 has an invalid length. [ 1338.353652][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 1338.674082][T31698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1338.728249][T31701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6760'. [ 1338.747956][T31701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6760'. [ 1338.992816][T31715] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1339.040329][T31715] nbd: couldn't find a device at index 0 [ 1339.070261][T31720] netlink: 'syz.1.6767': attribute type 1 has an invalid length. [ 1339.134220][T31721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6767'. [ 1339.216647][T31718] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1339.302300][T31721] bond1: (slave bridge2): making interface the new active one [ 1339.327630][T31721] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1339.482072][T31730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.603555][T31730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.668938][T31738] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 1339.680188][T31742] lo speed is unknown, defaulting to 1000 [ 1339.732127][T31730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.863060][T31730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.118572][T21175] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.170320][T21162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.179654][T21162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.206728][T21162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.327002][T31754] netlink: 'syz.2.6775': attribute type 1 has an invalid length. [ 1340.336846][T31754] netlink: 'syz.2.6775': attribute type 3 has an invalid length. [ 1340.346538][T31754] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6775'. [ 1340.391461][T31742] wg1 speed is unknown, defaulting to 1000 [ 1340.507891][T31758] netlink: 'syz.2.6777': attribute type 12 has an invalid length. [ 1340.803150][T31763] netlink: 'syz.0.6778': attribute type 1 has an invalid length. [ 1340.810957][T31763] netlink: 'syz.0.6778': attribute type 3 has an invalid length. [ 1340.871477][ T8561] net_ratelimit: 30 callbacks suppressed [ 1340.871501][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1340.892195][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1340.906869][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1340.922274][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1341.237839][T31770] netlink: 'syz.2.6779': attribute type 10 has an invalid length. [ 1341.285400][T31770] team0: Device ipvlan1 failed to register rx_handler [ 1341.547194][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1341.561975][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1341.576321][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1341.590829][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1341.612676][T31784] netlink: 'syz.0.6786': attribute type 1 has an invalid length. [ 1341.671207][T31784] bond2: entered promiscuous mode [ 1341.676793][T31784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1341.983459][T31801] lo speed is unknown, defaulting to 1000 [ 1342.095504][T31810] __nla_validate_parse: 2 callbacks suppressed [ 1342.095526][T31810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1342.144622][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1342.159251][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1342.265974][T31801] wg1 speed is unknown, defaulting to 1000 [ 1342.469643][T31815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1342.628794][T31815] macvlan2: entered promiscuous mode [ 1342.635453][T31815] macvlan2: entered allmulticast mode [ 1342.648782][T31815] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1342.795518][T31831] sit0: entered promiscuous mode [ 1342.800714][T31831] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1343.474578][T23778] Bluetooth: hci4: command 0x0406 tx timeout [ 1343.629969][T31868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6813'. [ 1343.820714][T31886] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1344.780784][T31935] validate_nla: 2 callbacks suppressed [ 1344.780805][T31935] netlink: 'syz.3.6834': attribute type 2 has an invalid length. [ 1345.004157][T31947] delete_channel: no stack [ 1345.021964][T31947] delete_channel: no stack [ 1345.242051][T31962] sock: sock_timestamping_bind_phc: sock not bind to device [ 1345.284971][T31965] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1345.329323][T31961] bond0: (slave dummy0): Releasing backup interface [ 1345.343744][T31961] dummy0: left promiscuous mode [ 1345.344007][T31962] can: request_module (can-proto-3) failed. [ 1345.363642][T31961] batman_adv: batadv0: Adding interface: dummy0 [ 1345.379442][T31961] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.406276][T31961] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1345.624642][T31971] netlink: 'syz.4.6843': attribute type 14 has an invalid length. [ 1345.719428][T31976] syzkaller0: entered promiscuous mode [ 1345.737917][T31976] syzkaller0: entered allmulticast mode [ 1345.882196][T31985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6849'. [ 1346.137633][T31991] lo speed is unknown, defaulting to 1000 [ 1346.281965][T30018] net_ratelimit: 32 callbacks suppressed [ 1346.281988][T30018] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1346.302633][T30018] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1346.317114][T30018] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1346.331845][T30018] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1346.682316][T32025] netlink: 'syz.3.6862': attribute type 23 has an invalid length. [ 1346.778718][T32033] veth0: entered promiscuous mode [ 1346.820097][T32025] lo speed is unknown, defaulting to 1000 [ 1346.932732][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1346.947877][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1346.962657][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1346.977026][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1347.154767][T31991] wg1 speed is unknown, defaulting to 1000 [ 1347.524963][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1347.539981][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1347.643905][T32046] nbd1: detected capacity change from 0 to 63 [ 1347.667250][T32050] block nbd1: NBD_DISCONNECT [ 1347.705145][T32050] block nbd1: Disconnected due to user request. [ 1347.807080][T32050] block nbd1: shutting down sockets [ 1347.864573][T32033] veth0: left promiscuous mode [ 1347.916424][T32025] wg1 speed is unknown, defaulting to 1000 [ 1347.925837][T32066] netlink: 'syz.2.6867': attribute type 2 has an invalid length. [ 1348.120079][T32071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6867'. [ 1348.148044][T32066] : entered promiscuous mode [ 1348.633502][T32077] batadv1: entered promiscuous mode [ 1348.675455][T32085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1349.485455][T32099] FAULT_INJECTION: forcing a failure. [ 1349.485455][T32099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.498923][T32099] CPU: 1 UID: 0 PID: 32099 Comm: syz.1.6874 Not tainted syzkaller #0 PREEMPT(full) [ 1349.498956][T32099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1349.498970][T32099] Call Trace: [ 1349.498981][T32099] [ 1349.498991][T32099] dump_stack_lvl+0xe8/0x150 [ 1349.499026][T32099] should_fail_ex+0x414/0x560 [ 1349.499067][T32099] _copy_to_user+0x31/0xb0 [ 1349.499097][T32099] simple_read_from_buffer+0xe1/0x170 [ 1349.499132][T32099] proc_fail_nth_read+0x1b3/0x220 [ 1349.499160][T32099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1349.499188][T32099] ? rw_verify_area+0x2a6/0x4d0 [ 1349.499209][T32099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1349.499235][T32099] vfs_read+0x200/0xa30 [ 1349.499254][T32099] ? fdget_pos+0x247/0x320 [ 1349.499286][T32099] ? __pfx___mutex_lock+0x10/0x10 [ 1349.499313][T32099] ? __pfx_vfs_read+0x10/0x10 [ 1349.499336][T32099] ? __fget_files+0x2a/0x420 [ 1349.499369][T32099] ? __fget_files+0x3a0/0x420 [ 1349.499396][T32099] ? __fget_files+0x2a/0x420 [ 1349.499435][T32099] ksys_read+0x145/0x250 [ 1349.499460][T32099] ? __pfx_ksys_read+0x10/0x10 [ 1349.499495][T32099] do_syscall_64+0xec/0xf80 [ 1349.499519][T32099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.499541][T32099] ? trace_irq_disable+0x37/0x100 [ 1349.499570][T32099] ? clear_bhb_loop+0x60/0xb0 [ 1349.499597][T32099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.499619][T32099] RIP: 0033:0x7fac7bb8e15c [ 1349.499640][T32099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1349.499660][T32099] RSP: 002b:00007fac7cb03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1349.499684][T32099] RAX: ffffffffffffffda RBX: 00007fac7bde5fa0 RCX: 00007fac7bb8e15c [ 1349.499701][T32099] RDX: 000000000000000f RSI: 00007fac7cb030a0 RDI: 0000000000000005 [ 1349.499716][T32099] RBP: 00007fac7cb03090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.499730][T32099] R10: 0000000000022023 R11: 0000000000000246 R12: 0000000000000001 [ 1349.499744][T32099] R13: 00007fac7bde6038 R14: 00007fac7bde5fa0 R15: 00007ffe196629a8 [ 1349.499788][T32099] [ 1349.862846][T32104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1349.880407][T32104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1350.504692][T32125] sctp: [Deprecated]: syz.4.6882 (pid 32125) Use of int in max_burst socket option. [ 1350.504692][T32125] Use struct sctp_assoc_value instead [ 1350.654580][T32129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6884'. [ 1351.210949][T32154] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 1351.242658][T32151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6889'. [ 1351.516046][T32164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1351.751674][ T8561] net_ratelimit: 31 callbacks suppressed [ 1351.751706][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1351.763757][T32171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6895'. [ 1351.774033][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1351.795957][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1351.811021][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1351.833528][T32177] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6896'. [ 1351.846424][T32171] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 1351.857760][T32171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6895'. [ 1352.332687][T30019] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1352.347239][T30019] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1352.361987][T30019] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1352.377319][T30019] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1352.597716][T21161] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 1352.636761][T32209] lo speed is unknown, defaulting to 1000 [ 1352.995061][T26577] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1353.009692][T26577] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1353.118067][T32209] wg1 speed is unknown, defaulting to 1000 [ 1353.712656][ T5149] Bluetooth: hci2: command 0x0401 tx timeout [ 1354.500542][T32264] __nla_validate_parse: 1 callbacks suppressed [ 1354.500565][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6918'. [ 1354.520325][T32263] syzkaller0: entered promiscuous mode [ 1354.541420][T32263] syzkaller0: entered allmulticast mode [ 1354.834055][T32275] xt_addrtype: ipv6 does not support BROADCAST matching [ 1354.864818][T32277] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1354.953299][T32283] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1355.131753][T32292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6929'. [ 1355.168655][T32296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6930'. [ 1355.752511][T32318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6937'. [ 1355.859833][T32322] lo speed is unknown, defaulting to 1000 [ 1356.591833][T32322] wg1 speed is unknown, defaulting to 1000 [ 1356.633096][T32341] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1356.683314][T32345] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1357.203299][T26183] net_ratelimit: 31 callbacks suppressed [ 1357.203321][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1357.223423][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1357.238354][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1357.252708][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1357.444988][T32368] nbd: couldn't find a device at index 0 [ 1357.586520][T32375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 1357.660449][T32381] xt_hashlimit: size too large, truncated to 1048576 [ 1357.757194][T32373] –: renamed from veth1_to_team [ 1357.911894][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1357.926652][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1357.941045][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1357.956671][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1358.114088][T32391] netlink: 'syz.4.6952': attribute type 11 has an invalid length. [ 1358.136943][T32391] netlink: 'syz.4.6952': attribute type 23 has an invalid length. [ 1358.147380][T32391] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1358.595652][T32412] nftables ruleset with unbound chain [ 1358.613108][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1358.628568][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1358.696164][T32416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6960'. [ 1358.713603][T32417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6960'. [ 1358.797527][T32416] macvlan2: entered promiscuous mode [ 1358.810035][T32416] macvlan2: entered allmulticast mode [ 1358.843855][T32416] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1358.877442][T32418] netlink: 'syz.2.6961': attribute type 5 has an invalid length. [ 1359.089099][T32432] lo speed is unknown, defaulting to 1000 [ 1359.295485][T32438] lo speed is unknown, defaulting to 1000 [ 1359.564424][T32432] wg1 speed is unknown, defaulting to 1000 [ 1359.981946][T32445] __nla_validate_parse: 4 callbacks suppressed [ 1359.981969][T32445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6968'. [ 1360.034742][T32457] Cannot find del_set index 4 as target [ 1360.219938][T32438] wg1 speed is unknown, defaulting to 1000 [ 1360.332762][T32467] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1360.911836][T32484] xt_TCPMSS: Only works on TCP SYN packets [ 1361.169543][T32488] macsec1: entered promiscuous mode [ 1361.186659][T32488] macsec1: entered allmulticast mode [ 1361.199975][T32488] syzkaller0: port 1(macsec1) entered blocking state [ 1361.208794][T32488] syzkaller0: port 1(macsec1) entered disabled state [ 1361.294478][T32490] bond2 (unregistering): Released all slaves [ 1362.949809][T26183] net_ratelimit: 27 callbacks suppressed [ 1362.949831][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1362.977625][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1362.997071][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1363.015820][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1367.011262][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.880943][T32537] openvswitch: netlink: IP tunnel dst address not specified [ 1370.800396][T32531] lo speed is unknown, defaulting to 1000 [ 1370.840325][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1370.858068][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1370.876208][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1370.897656][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1373.279889][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1373.298291][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1373.317019][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1373.334328][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1378.060850][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1378.079644][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1378.098826][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1378.116336][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1379.339415][ T5149] Bluetooth: hci5: command 0x0406 tx timeout [ 1382.380023][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1382.398974][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1382.417057][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1382.434938][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1387.369969][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1387.388228][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1387.405923][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1387.427879][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1390.380286][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1390.399914][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1390.416925][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1390.435634][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1395.911251][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1395.937148][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1395.956249][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1395.977293][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1400.030987][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1400.148762][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1400.230461][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1400.248168][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1400.266584][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1400.288781][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1400.788799][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1402.349789][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1402.778411][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1404.790867][T13538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1405.330888][T13538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1405.389876][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1405.408153][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1405.427519][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1405.445139][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1406.070249][T13538] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1406.290174][T13538] Bluetooth: hci0: command tx timeout [ 1407.289035][T13538] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1407.749028][T13538] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1408.369501][T13538] Bluetooth: hci0: command tx timeout [ 1410.048870][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 1410.180259][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1410.199322][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1410.216340][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1410.238864][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1410.460062][ T5149] Bluetooth: hci0: command tx timeout [ 1412.321203][T32558] lo speed is unknown, defaulting to 1000 [ 1412.529762][T13538] Bluetooth: hci0: command tx timeout [ 1413.129199][ T5149] Bluetooth: hci6: command tx timeout [ 1414.430501][T32560] lo speed is unknown, defaulting to 1000 [ 1415.169839][T23778] Bluetooth: hci6: command tx timeout [ 1417.140969][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1417.160332][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1417.177562][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1417.196159][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1417.281184][T13538] Bluetooth: hci6: command tx timeout [ 1417.390186][T13538] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1417.948907][T13538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1418.209219][T13538] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1419.329913][T13538] Bluetooth: hci6: command tx timeout [ 1419.450037][T13538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1419.749567][T13538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1421.574866][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1421.597329][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1421.614897][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1421.637035][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1424.424840][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1424.447008][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1424.465409][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1424.487193][T21172] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1424.535846][T23778] Bluetooth: hci5: command tx timeout [ 1426.638980][T23778] Bluetooth: hci5: command tx timeout [ 1427.338551][T32531] wg1 speed is unknown, defaulting to 1000 [ 1428.508050][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.690174][T23778] Bluetooth: hci5: command tx timeout [ 1430.740594][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1430.759626][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1430.776784][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1430.799636][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1430.869427][T23778] Bluetooth: hci5: command tx timeout [ 1431.900812][T13538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1432.118968][T13538] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1432.290988][T13538] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1433.620373][T13538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1434.050520][T13538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1435.290017][T13538] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1435.648111][ T5149] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1436.001246][ T5149] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1437.009289][ T5149] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1437.559729][ T5149] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1437.589600][ T5149] Bluetooth: hci7: command tx timeout [ 1437.800101][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1437.820147][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1437.837067][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1437.855514][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1439.639742][T23778] Bluetooth: hci7: command tx timeout [ 1441.718781][ T5149] Bluetooth: hci7: command tx timeout [ 1442.359501][ T5149] Bluetooth: hci8: command tx timeout [ 1442.419704][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1442.438332][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1442.456039][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1442.478024][T21184] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1443.800642][ T5149] Bluetooth: hci7: command tx timeout [ 1444.299153][T21172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.448939][ T5149] Bluetooth: hci8: command tx timeout [ 1446.528869][ T5149] Bluetooth: hci8: command tx timeout [ 1447.138387][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1447.158177][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1447.175662][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1447.198094][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1448.600647][ T5149] Bluetooth: hci8: command tx timeout [ 1452.040666][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1452.057981][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1452.076138][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1452.097672][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1456.831119][T21172] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.158808][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1457.177827][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1457.194848][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1457.217560][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1457.850615][T23778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1458.139214][T23778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1458.400010][T23778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1459.159856][T23778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1459.480846][T23778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1461.591176][T32564] lo speed is unknown, defaulting to 1000 [ 1462.240146][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1462.257910][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1462.271301][ C1] hrtimer: interrupt took 20456451 ns [ 1462.279434][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1462.298027][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1464.939906][T23778] Bluetooth: hci2: command tx timeout [ 1466.190813][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1466.209119][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1466.227986][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1466.245212][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1467.010645][T23778] Bluetooth: hci2: command tx timeout [ 1469.100701][T23778] Bluetooth: hci2: command tx timeout [ 1469.988879][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1470.007321][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1470.025952][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1470.047394][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1470.288722][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1470.410387][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1470.959286][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1471.161012][ T5149] Bluetooth: hci2: command tx timeout [ 1471.820208][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1472.079534][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1475.330416][T21172] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.501062][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1475.520027][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1475.537448][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1475.555595][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1475.689873][ T5149] Bluetooth: hci3: command tx timeout [ 1477.819644][ T5149] Bluetooth: hci3: command tx timeout [ 1478.070798][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1478.089430][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1478.107590][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1478.126556][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1479.889247][ T5149] Bluetooth: hci3: command tx timeout [ 1480.911063][T23778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1480.980495][T23778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1481.120068][T23778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1481.769836][T23778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1482.039086][T23778] Bluetooth: hci3: command tx timeout [ 1482.488937][T13538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1482.789071][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1482.807908][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1482.825813][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1482.847982][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1485.178786][T13538] Bluetooth: hci4: command tx timeout [ 1487.240675][T13538] Bluetooth: hci4: command tx timeout [ 1488.289084][T32558] wg1 speed is unknown, defaulting to 1000 [ 1488.450943][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1488.469314][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1488.488157][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1488.505939][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1489.330213][T13538] Bluetooth: hci4: command tx timeout [ 1489.919016][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.409412][T13538] Bluetooth: hci4: command tx timeout [ 1492.578462][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1492.596010][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1492.618394][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1492.635715][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1493.569005][T21172] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.540723][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1496.559671][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1496.576764][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1496.595935][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1498.360494][ T5149] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1498.938753][ T5149] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1499.766005][ T5149] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1500.800235][ T5149] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1501.240950][ T5149] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1501.510109][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1501.527963][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1501.546155][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1501.567770][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1505.820493][T13538] Bluetooth: hci9: command tx timeout [ 1506.680223][T13538] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1506.939052][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1506.957688][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1506.975929][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1506.997621][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1507.139662][T13538] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1507.579328][T13538] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1507.880784][T13538] Bluetooth: hci9: command tx timeout [ 1508.168244][T13538] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1509.059068][T13538] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1509.971116][ T5149] Bluetooth: hci9: command tx timeout [ 1510.170371][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1510.189687][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1510.206855][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1510.225303][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1512.070524][T13538] Bluetooth: hci9: command tx timeout [ 1512.700344][T13538] Bluetooth: hci10: command tx timeout [ 1514.411189][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1514.438116][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1514.455633][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1514.478417][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1514.780874][T13538] Bluetooth: hci10: command tx timeout [ 1516.839874][T13538] Bluetooth: hci10: command tx timeout [ 1518.651190][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1518.676719][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1518.697999][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1518.716651][ T8561] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1518.939697][T13538] Bluetooth: hci10: command tx timeout [ 1525.840474][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1525.861099][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1525.879524][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1525.897943][T29508] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1527.820703][T23778] Bluetooth: hci0: command 0x0406 tx timeout [ 1528.798408][ T5149] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1529.240603][ T5149] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1529.389133][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1529.408257][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1529.426003][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1529.448415][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1529.620364][ T5149] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1530.620642][T13538] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1530.891196][T13538] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1534.288707][T13538] Bluetooth: hci11: command tx timeout [ 1534.550935][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1534.570033][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1534.587336][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1534.606574][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1536.410253][T13538] Bluetooth: hci11: command tx timeout [ 1538.059759][T28211] Bluetooth: hci6: command 0x0406 tx timeout [ 1538.469406][T28211] Bluetooth: hci11: command tx timeout [ 1539.419264][T28211] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1539.609260][T28211] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1539.710883][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1539.732936][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1539.755685][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1539.777038][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1540.018560][T28211] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1540.527220][T28211] Bluetooth: hci11: command tx timeout [ 1540.959554][T23778] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1541.074845][ C0] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1541.630684][T23778] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1544.849629][T23778] Bluetooth: hci12: command tx timeout [ 1545.240690][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1545.258435][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1545.276841][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1545.298583][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1546.919051][T13538] Bluetooth: hci12: command tx timeout [ 1548.289723][T13538] Bluetooth: hci5: command 0x0406 tx timeout [ 1549.009951][T13538] Bluetooth: hci12: command tx timeout [ 1550.400796][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1550.419698][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1550.437075][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1550.455834][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1551.099181][T23778] Bluetooth: hci12: command tx timeout [ 1551.419659][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.938721][T13538] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1552.190279][T13538] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1552.529969][T13538] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1553.571068][T13538] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1554.120249][T13538] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1555.040698][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1555.059703][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1555.076995][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1555.095607][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1556.760979][T13538] Bluetooth: hci13: command tx timeout [ 1558.559372][T13538] Bluetooth: hci7: command 0x0406 tx timeout [ 1558.858299][T13538] Bluetooth: hci13: command tx timeout [ 1559.129637][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1559.149157][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1559.167492][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1559.185488][T21180] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1560.940258][T13538] Bluetooth: hci13: command tx timeout [ 1563.078970][T23778] Bluetooth: hci13: command tx timeout [ 1563.658351][T23778] Bluetooth: hci8: command 0x0406 tx timeout [ 1564.901183][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1564.926557][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1564.948957][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1564.966760][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1565.840909][T13538] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1566.120740][T13538] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1566.280506][T13538] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1566.748094][T32600] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1566.879759][T32600] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1567.278851][T32600] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1567.469879][ T5149] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1567.919767][ T5149] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1568.889261][T32600] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1569.629978][T32600] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1571.038696][T28211] Bluetooth: hci14: command tx timeout [ 1571.491131][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1571.510209][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1571.529486][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1571.547260][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1573.079414][T28211] Bluetooth: hci14: command tx timeout [ 1573.160601][T28211] Bluetooth: hci15: command tx timeout [ 1575.179723][T28211] Bluetooth: hci14: command tx timeout [ 1575.255955][T28211] Bluetooth: hci15: command tx timeout [ 1575.740676][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1575.760062][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1575.776976][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1575.795511][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1577.259533][T28211] Bluetooth: hci14: command tx timeout [ 1577.320575][T28211] Bluetooth: hci15: command tx timeout [ 1579.410874][T28211] Bluetooth: hci15: command tx timeout [ 1579.571168][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1579.596184][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1579.618871][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1579.635713][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1583.590194][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1583.610466][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1583.627879][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1583.645996][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1587.790500][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1587.809581][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1587.827343][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1587.846251][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1589.258913][T32600] Bluetooth: hci2: command 0x0406 tx timeout [ 1592.610690][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1592.628605][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1592.647166][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1592.665009][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1594.668102][T32600] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1594.729151][T32600] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1594.909374][T32600] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1596.065845][T32600] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1596.801150][T32600] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1598.580408][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1598.598246][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1598.616924][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1598.634525][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1599.529126][T23778] Bluetooth: hci3: command 0x0406 tx timeout [ 1599.967647][T23778] Bluetooth: hci16: command tx timeout [ 1602.060501][T32600] Bluetooth: hci16: command tx timeout [ 1603.890432][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1603.909673][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1603.927368][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1603.945947][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1604.196631][T23778] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1604.217063][T23778] Bluetooth: hci16: command tx timeout [ 1604.589993][T28211] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1604.859695][T28211] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1605.329500][T28211] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1605.899955][T28211] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1606.280921][T28211] Bluetooth: hci16: command tx timeout [ 1608.438270][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1608.457156][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1608.474445][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1608.497096][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1609.259793][T28211] Bluetooth: hci17: command tx timeout [ 1609.729006][T23778] Bluetooth: hci4: command 0x0406 tx timeout [ 1609.849492][T23778] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1610.130137][T23778] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1610.420070][T23778] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1611.339628][T23778] Bluetooth: hci17: command tx timeout [ 1611.640320][T23778] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1611.900481][T23778] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1612.779431][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.018442][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1613.037290][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1613.055193][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1613.077221][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1613.419763][T28211] Bluetooth: hci17: command tx timeout [ 1615.515889][T28211] Bluetooth: hci17: command tx timeout [ 1616.628901][T28211] Bluetooth: hci18: command tx timeout [ 1616.981072][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1616.999397][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1617.018064][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1617.035509][T30743] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1618.699965][T28211] Bluetooth: hci18: command tx timeout [ 1620.780736][T28211] Bluetooth: hci18: command tx timeout [ 1621.546299][T21172] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1622.649037][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1622.668121][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1622.685502][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1622.708016][T21175] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1622.911146][T28211] Bluetooth: hci18: command tx timeout [ 1625.824914][T32600] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1626.009202][T32600] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1626.269111][T32600] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1626.586573][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1626.606313][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1626.628738][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1626.646091][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1627.279992][T32600] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1627.549807][T32600] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1629.831123][T28211] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1630.020998][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1630.039539][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1630.058444][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1630.075657][T21162] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1630.329823][T28211] Bluetooth: hci9: command 0x0406 tx timeout [ 1630.580108][T28211] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1630.850625][T28211] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1630.870930][ T5149] Bluetooth: hci19: command tx timeout [ 1631.469597][ T5149] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1631.819798][ T5149] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1632.919229][T23778] Bluetooth: hci19: command tx timeout [ 1634.490380][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1634.509518][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1634.526909][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1634.545012][ T9862] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1635.070806][T23778] Bluetooth: hci19: command tx timeout [ 1635.321076][T23778] Bluetooth: hci10: command 0x0406 tx timeout [ 1635.360560][T23778] Bluetooth: hci20: command tx timeout [ 1637.159488][ T5149] Bluetooth: hci19: command tx timeout [ 1637.480365][ T5149] Bluetooth: hci20: command tx timeout [ 1638.569390][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1638.587940][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1638.606054][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1638.627763][T26183] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1639.580609][ T5149] Bluetooth: hci20: command tx timeout [ 1641.578502][ T31] INFO: task syz-executor:32568 blocked for more than 142 seconds. [ 1641.649639][ T5149] Bluetooth: hci20: command tx timeout [ 1641.760755][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1641.919021][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1642.130762][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1642.149347][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1642.167674][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1642.185436][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1642.530385][ T31] task:syz-executor state:D stack:23640 pid:32568 tgid:32568 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1642.830374][ T31] Call Trace: [ 1642.950263][ T31] [ 1643.078356][ T31] __schedule+0x149b/0x4fd0 [ 1643.280879][ T31] ? __pfx___schedule+0x10/0x10 [ 1643.779209][ T31] ? schedule+0x91/0x360 [ 1643.960677][ T31] schedule+0x165/0x360 [ 1644.178491][ T31] schedule_preempt_disabled+0x13/0x30 [ 1644.340481][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 1644.818787][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 1645.048353][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1645.369464][ T31] ? rdma_dev_init_net+0x22d/0x2f0 [ 1645.850100][ T31] down_read+0x99/0x2e0 [ 1646.041021][ T31] ? rdma_dev_init_net+0x27e/0x2f0 [ 1646.719377][ T31] rdma_dev_init_net+0x22d/0x2f0 [ 1646.859021][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1647.058291][ T31] ? trace_kmalloc+0x1f/0xb0 [ 1647.310842][ T31] ? __kmalloc_noprof+0x43e/0x800 [ 1647.529727][ T31] ops_init+0x35c/0x5c0 [ 1647.660798][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1647.679985][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1647.697151][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1647.716410][ T8560] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1647.819883][ T31] setup_net+0x110/0x330 [ 1648.410131][ T31] ? __pfx_setup_net+0x10/0x10 [ 1648.639297][ T31] ? preinit_net+0x47d/0x780 [ 1648.940418][ T31] copy_net_ns+0x3e3/0x570 [ 1649.180759][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1649.348700][ T31] ? security_capable+0x7e/0x2e0 [ 1649.579754][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1649.889526][ T31] ksys_unshare+0x4c8/0x8c0 [ 1650.209203][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1650.450761][ T31] __x64_sys_unshare+0x38/0x50 [ 1650.699798][ T31] do_syscall_64+0xec/0xf80 [ 1650.830754][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.029568][ T31] ? trace_irq_disable+0x37/0x100 [ 1651.208614][ T31] ? clear_bhb_loop+0x60/0xb0