last executing test programs: 1m23.405186766s ago: executing program 2 (id=831): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x6, 0x9, 0xffff, 0x4, 0x60, 0x2, 0x6, 0x10, 0x2, 0xff, 0x1, 0x10000, 0x0, 0x8, 0x1, 0xfffffff7, 0x921, 0x5, 0x7f, 0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfb, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc048880) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfc, {0xc, 0x1, 0x0, r7, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4005) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) 1m15.005726553s ago: executing program 0 (id=1155): r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x9c, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m14.732087574s ago: executing program 0 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001000090700000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000020000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x4e23, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c3}}, 0x0, 0x0, 0x38, 0x0, "6828253b4c37d259f743f99aeb935ff7abca62d0befe88c00ffc2228266976a4f5144ffe0de5edf7d9ca04b9f826740946ee598e0f6cb83d3bdb69c1ddbaeab08f7fa750e442b772d73d478cb9df2737"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 1m13.714781248s ago: executing program 2 (id=831): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x6, 0x9, 0xffff, 0x4, 0x60, 0x2, 0x6, 0x10, 0x2, 0xff, 0x1, 0x10000, 0x0, 0x8, 0x1, 0xfffffff7, 0x921, 0x5, 0x7f, 0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfb, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc048880) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfc, {0xc, 0x1, 0x0, r7, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4005) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) 1m4.099709646s ago: executing program 0 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001000090700000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000020000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x4e23, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c3}}, 0x0, 0x0, 0x38, 0x0, "6828253b4c37d259f743f99aeb935ff7abca62d0befe88c00ffc2228266976a4f5144ffe0de5edf7d9ca04b9f826740946ee598e0f6cb83d3bdb69c1ddbaeab08f7fa750e442b772d73d478cb9df2737"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 1m3.319926964s ago: executing program 2 (id=831): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x6, 0x9, 0xffff, 0x4, 0x60, 0x2, 0x6, 0x10, 0x2, 0xff, 0x1, 0x10000, 0x0, 0x8, 0x1, 0xfffffff7, 0x921, 0x5, 0x7f, 0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfb, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc048880) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfc, {0xc, 0x1, 0x0, r7, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4005) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) 1m2.163783s ago: executing program 4 (id=1225): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x700, 0x40, 0xdf20, 0x8, {{0x2c, 0x4, 0x1, 0x15, 0xb0, 0x65, 0x0, 0xa6, 0x2f, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4}, @generic={0x7, 0x2}, @end, @generic={0x89, 0x11, "eec3fe35439b8c4259d29ff94d6175"}, @end, @rr={0x7, 0xf, 0xe1, [@multicast2, @remote, @remote]}, @cipso={0x86, 0x5c, 0xffffffffffffffff, [{0x0, 0xf, "280118952ab83ac0e756cb4743"}, {0x5, 0xf, "af279d20d133d9b855618affce"}, {0x6, 0xc, "a3fbdc00a5d18879dff3"}, {0x2, 0x4, "1e66"}, {0x7, 0x7, "bb4e971d2e"}, {0x5, 0x9, "958a01dcc83e13"}, {0x2, 0x8, "33e15d0f18de"}, {0x6, 0xd, "d8e5decd8fbb731d4d5986"}, {0x0, 0x3, "8d"}]}, @timestamp={0x44, 0x18, 0x12, 0x0, 0xe, [0xfff, 0xfacc0, 0xf928, 0x1, 0x3]}]}}}}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x9, 0x0, 0x5ec6, 0x16250, 0xffffffffffffffff, 0xdde, '\x00', r0, r3, 0x0, 0x2, 0x1, 0x6, @void, @value, @value}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200"], 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, 0x0, &(0x7f0000000100)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000540)={'veth0_to_bond\x00', @link_local}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r10, 0x2, 0x2, 0x0, @void, @value}, 0x10) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000610000000000009500"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 1m1.771447573s ago: executing program 4 (id=1226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000590, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto$llc(r2, &(0x7f0000001280)="8745cb2e965ac1ecdc92b7d92e66afa06bca39f974bc3117de794d75daf1aa4723355ffed1b15c6ace34083ff121833f5d61fbff06eccefb9571220e964cdb0f5e8837991c142fe4ce12369778e3e365153faefc524a3f65396d85a6d19400eca2a807b4dec6f7f935432583caacd94a148eb5c2d831d363ac8bd7d111c8ded0465c4ac9db5ab7d1e8eaf1c261fd3735c8", 0x91, 0x4008010, &(0x7f0000001200)={0x1a, 0x103, 0x0, 0x5, 0x4, 0x5, @remote}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000002cc0)=""/4086, 0xff6}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/171, 0xab}], 0x3}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001340)=@assoc_value, &(0x7f0000001380)=0x8) 1m1.325507484s ago: executing program 4 (id=1229): socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e22, @multicast1}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x2, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @dev, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@mark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x5, 0xe, 0x0, &(0x7f00000004c0)="8936d1510b2d6de1000000000000", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48891}, 0x880) r5 = socket(0x15, 0xa, 0xbff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8947, &(0x7f0000000000)={'ip6tnl0\x00', 0x10001}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'ipvlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2020c0, 0x0) 47.434844267s ago: executing program 0 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001000090700000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000020000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x4e23, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c3}}, 0x0, 0x0, 0x38, 0x0, "6828253b4c37d259f743f99aeb935ff7abca62d0befe88c00ffc2228266976a4f5144ffe0de5edf7d9ca04b9f826740946ee598e0f6cb83d3bdb69c1ddbaeab08f7fa750e442b772d73d478cb9df2737"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 46.921895279s ago: executing program 2 (id=831): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x6, 0x9, 0xffff, 0x4, 0x60, 0x2, 0x6, 0x10, 0x2, 0xff, 0x1, 0x10000, 0x0, 0x8, 0x1, 0xfffffff7, 0x921, 0x5, 0x7f, 0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfb, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc048880) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfc, {0xc, 0x1, 0x0, r7, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4005) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) 45.996227417s ago: executing program 4 (id=1229): socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e22, @multicast1}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x2, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @dev, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@mark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x5, 0xe, 0x0, &(0x7f00000004c0)="8936d1510b2d6de1000000000000", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48891}, 0x880) r5 = socket(0x15, 0xa, 0xbff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8947, &(0x7f0000000000)={'ip6tnl0\x00', 0x10001}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'ipvlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2020c0, 0x0) 30.386000687s ago: executing program 2 (id=831): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x6, 0x9, 0xffff, 0x4, 0x60, 0x2, 0x6, 0x10, 0x2, 0xff, 0x1, 0x10000, 0x0, 0x8, 0x1, 0xfffffff7, 0x921, 0x5, 0x7f, 0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfb, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc048880) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfc, {0xc, 0x1, 0x0, r7, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4005) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) 29.729983574s ago: executing program 0 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001000090700000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000020000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x4e23, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c3}}, 0x0, 0x0, 0x38, 0x0, "6828253b4c37d259f743f99aeb935ff7abca62d0befe88c00ffc2228266976a4f5144ffe0de5edf7d9ca04b9f826740946ee598e0f6cb83d3bdb69c1ddbaeab08f7fa750e442b772d73d478cb9df2737"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 28.820897017s ago: executing program 4 (id=1229): socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e22, @multicast1}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x2, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @dev, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@mark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x5, 0xe, 0x0, &(0x7f00000004c0)="8936d1510b2d6de1000000000000", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48891}, 0x880) r5 = socket(0x15, 0xa, 0xbff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8947, &(0x7f0000000000)={'ip6tnl0\x00', 0x10001}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'ipvlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2020c0, 0x0) 13.721053071s ago: executing program 2 (id=831): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x6, 0x9, 0xffff, 0x4, 0x60, 0x2, 0x6, 0x10, 0x2, 0xff, 0x1, 0x10000, 0x0, 0x8, 0x1, 0xfffffff7, 0x921, 0x5, 0x7f, 0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfb, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc048880) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfc, {0xc, 0x1, 0x0, r7, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4005) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) 12.872650992s ago: executing program 0 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001000090700000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000020000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x4e23, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c3}}, 0x0, 0x0, 0x38, 0x0, "6828253b4c37d259f743f99aeb935ff7abca62d0befe88c00ffc2228266976a4f5144ffe0de5edf7d9ca04b9f826740946ee598e0f6cb83d3bdb69c1ddbaeab08f7fa750e442b772d73d478cb9df2737"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 12.147970433s ago: executing program 4 (id=1229): socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e22, @multicast1}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x2, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @dev, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@mark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x5, 0xe, 0x0, &(0x7f00000004c0)="8936d1510b2d6de1000000000000", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48891}, 0x880) r5 = socket(0x15, 0xa, 0xbff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x10, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8947, &(0x7f0000000000)={'ip6tnl0\x00', 0x10001}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'ipvlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2020c0, 0x0) 3.092940977s ago: executing program 3 (id=1505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000a40)=""/249, 0xf9, 0x0, &(0x7f00000006c0)=""/59, 0x3b}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x800) (async) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r7}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r7, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="6400000010003904fcffd4b05e53acecc6dd0000", @ANYRES32=r5, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f00000108000d007f0000000800230002000000140014007665746830000000000000000000000008000400"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000003c0)=""/234, 0xea, 0x0, &(0x7f0000000580)=""/162, 0xa2}}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r10, r9, 0x2f, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r9, r10, 0x2f, 0x8, 0x4, @void, @value=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000680000000000000004000000950000000000000018500000100000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000004cf5cc8c63d61383d13abe0bf740dde0fa830e9390892cc3b01c0516be1a825805bbce2bc03e5de860aa4f433c7a1a3eab06d93aa92c33231cbe82856f935f1efd670ce48faab1b08d1b2f879b6fe768397093dab905f25"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x10, &(0x7f0000000240)=""/16, 0x41000, 0x21, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x4495, 0x3f4d}, 0x10, r8, r10, 0x0, &(0x7f0000000680)=[r2, r2, r2, r2], &(0x7f00000006c0), 0x10, 0x1, @void, @value}, 0x94) 2.999413648s ago: executing program 3 (id=1507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$inet(0xa, 0x801, 0x84) (async) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r8, 0x0, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$packet(0x11, 0x1, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r10}, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000002c0)={0x1400, 0xb88, 0x2, 0x8, 0x401, 0x6, 0x9, 0x7}, 0x20) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) 2.642487149s ago: executing program 1 (id=1510): socketpair(0xa, 0xa, 0x2e, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r2, 0xcc071acbf25dbf8f, 0x0, 0x1000, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0028000}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x1a4, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc79}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1012}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x582d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x65}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 949.603056ms ago: executing program 1 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x50}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048084}, 0x4800) 863.945664ms ago: executing program 3 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x301}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4a011e00", @ANYRES16=r4, @ANYBLOB="07062bbd7000fcdbdf252d0000000a0001007770616e3000000008002f00fdffffff08000200", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x12c, r7, 0x4, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x396}]}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "1f505851ff9c006920aab4e7ad77fb3176d5a1ac66fe0e608887e41e411907dccea1aeaff9d53af8e1fca6f67680809c269b89654842f3636f3081dabe3f153f37545b80ee6d7761de7d10fdc22c3b8257774882473cc4b358efdbce2abb92027815a80817c9029aea61c733ec6a90d00db8e525526d17b0724757f2439b671bd5520ca42638da35e2fbd42b50298e5e"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb0000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf2b7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x12c}}, 0x20008040) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dae227d173a2d6656eee7e775185376e0912cee619c55db606b6ee87a6cd", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf250c0000009800068008000600ff7f00004600040067636d28616573290000000000000000000000000000000000000000000000001e0000006e8bd630c8c752dd2b43c54c0d06316bc721aa3467684044ae03292a4b6c0000040005003f00040067636d286165732900000000000000000000000000000000000000000000000017000000dd07db4cf0e5a7eaaaf5163d2891383a4ef172dd4d14ff00"], 0xac}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x6, 0x6, 0xa, 0x0, 0x85, 0x5, 0xc}, &(0x7f0000000000)=0x9c) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000080)=0xf3e, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) readv(r9, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/228, 0xe4}], 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c000280050009008900000091d5b917373f6c1d25fdae4b64e4e07dbee6201f057e1d0748b18734c13f0793c0f04088da54562fb0a2c271e30b95"], 0x3c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 754.515895ms ago: executing program 1 (id=1513): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000000000000000"], 0x0, 0x45, 0x0, 0x0, 0xa, 0x0, @void, @value}, 0x28) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x4e24, @private=0xa010102}}) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad608419f523000000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r5, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf2518000000040030800c0006000100000001000000"], 0x24}}, 0x400c0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x180000000) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8) setsockopt$sock_attach_bpf(r8, 0x1, 0x25, &(0x7f0000000100)=r7, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000280)="0f9eda86a6a7b484df9de2b792836527caba4b6644c881", 0x17}, {&(0x7f00000002c0)="c04a014dfe3043e0330c3e9c14de61066e4c", 0x12}, {&(0x7f00000003c0)="6e85d12205941df75913e8148229c7df4f991e3d8b6f9db7cb5121442f0bc1596aaff4210eb3cb7ce5a15758b5b370ae90c8e19e286f47470dab25d3c36dc67c803f83925e", 0x45}], 0x3, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 522.114944ms ago: executing program 3 (id=1514): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c0003", @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1c}], 0x1, 0x0, 0x0, 0x44004}, 0x4008004) 402.052634ms ago: executing program 1 (id=1515): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000002600)=0x0) syz_open_procfs$namespace(r7, 0x0) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a", 0x36}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4", 0x3c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c2", 0xc9}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc258060000", 0x5b}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 398.487401ms ago: executing program 3 (id=1516): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008000200ffffffff08000100ac1414aa"], 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8201, 0x0, 0x0, 0x2, 0x2fd, 0x100000}}) 248.815971ms ago: executing program 1 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800600"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x48, r10, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x10}, @broadcast, @device_b, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x2, 0x64, 0x9}, @val={0x76, 0x6, {0x3, 0x7, 0x2b, 0x1}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x3c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x84) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x900, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) 169.671139ms ago: executing program 3 (id=1518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x22, 0x2, 0x1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) (async) 0s ago: executing program 1 (id=1519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000380)) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0xc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa40, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) (async) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @link_local={0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @broadcast, @loopback}}}}, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000180)=0x800, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4001) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) kernel console output (not intermixed with test programs): 65] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.527299][ T8965] Cannot create hsr debugfs directory [ 170.787562][ T9091] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1007'. [ 170.809679][ T9093] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 170.809703][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 170.879843][ T9093] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 170.892964][ T9093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.900062][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.901647][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1009'. [ 170.951053][ T51] Bluetooth: hci3: command tx timeout [ 171.187185][ T9093] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 171.200301][ T9093] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 171.225124][ T9093] bond1 (unregistering): Released all slaves [ 171.264280][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 171.704843][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'. [ 171.766557][ T9135] netlink: 'syz.4.1021': attribute type 83 has an invalid length. [ 171.766817][ T8965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.789870][ T8965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.817934][ T8965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.916644][ T8965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.009263][ T9148] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 172.077121][ T9140] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.088851][ T9148] bond3: entered promiscuous mode [ 172.096372][ T9148] bond3: entered allmulticast mode [ 172.149670][ T9155] geneve2: entered allmulticast mode [ 172.182146][ T9155] bond3: (slave geneve2): making interface the new active one [ 172.189760][ T9155] geneve2: entered promiscuous mode [ 172.200005][ T9155] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 172.278723][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.305690][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.348633][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.355869][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.420153][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.427432][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.674842][ T8965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.977941][ T9198] netlink: 'syz.0.1040': attribute type 5 has an invalid length. [ 173.031833][ T51] Bluetooth: hci3: command tx timeout [ 173.171726][ T9209] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.359665][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.496903][ T8965] veth0_vlan: entered promiscuous mode [ 173.519083][ T8965] veth1_vlan: entered promiscuous mode [ 173.612192][ T8965] veth0_macvtap: entered promiscuous mode [ 173.634974][ T9225] __nla_validate_parse: 3 callbacks suppressed [ 173.634993][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 173.659417][ T8965] veth1_macvtap: entered promiscuous mode [ 173.694131][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.718685][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.828293][ T8965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.858513][ T8965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.881863][ T8965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.890764][ T8965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.207974][ T9244] syz.0.1056: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.276430][ T9244] CPU: 0 UID: 0 PID: 9244 Comm: syz.0.1056 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 174.276461][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.276481][ T9244] Call Trace: [ 174.276489][ T9244] [ 174.276499][ T9244] dump_stack_lvl+0x189/0x250 [ 174.276540][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.276573][ T9244] ? __pfx__printk+0x10/0x10 [ 174.276596][ T9244] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.276620][ T9244] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.276645][ T9244] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.276672][ T9244] warn_alloc+0x214/0x310 [ 174.276696][ T9244] ? stack_depot_save_flags+0x40/0x900 [ 174.276729][ T9244] ? __pfx_warn_alloc+0x10/0x10 [ 174.276764][ T9244] ? kasan_save_track+0x4f/0x80 [ 174.276784][ T9244] ? xskq_create+0x56/0x170 [ 174.276808][ T9244] ? xsk_init_queue+0xb0/0x110 [ 174.276829][ T9244] ? xsk_setsockopt+0x43f/0x710 [ 174.276850][ T9244] ? do_sock_setsockopt+0x25a/0x3e0 [ 174.276869][ T9244] ? __x64_sys_setsockopt+0x18b/0x220 [ 174.276888][ T9244] ? do_syscall_64+0xfa/0x3b0 [ 174.276914][ T9244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.276944][ T9244] __vmalloc_node_range_noprof+0x125/0x12f0 [ 174.277002][ T9244] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.277029][ T9244] ? xskq_create+0x56/0x170 [ 174.277057][ T9244] ? __kasan_kmalloc+0x93/0xb0 [ 174.277082][ T9244] vmalloc_user_noprof+0xad/0xf0 [ 174.277105][ T9244] ? xskq_create+0xbf/0x170 [ 174.277143][ T9244] xskq_create+0xbf/0x170 [ 174.277171][ T9244] xsk_init_queue+0xb0/0x110 [ 174.277197][ T9244] xsk_setsockopt+0x43f/0x710 [ 174.277223][ T9244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.277244][ T9244] ? __lock_acquire+0xab9/0xd20 [ 174.277284][ T9244] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 174.277309][ T9244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.277333][ T9244] do_sock_setsockopt+0x25a/0x3e0 [ 174.277357][ T9244] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 174.277383][ T9244] ? __fget_files+0x2a/0x420 [ 174.277416][ T9244] __x64_sys_setsockopt+0x18b/0x220 [ 174.277444][ T9244] do_syscall_64+0xfa/0x3b0 [ 174.277469][ T9244] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.277493][ T9244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.277512][ T9244] ? clear_bhb_loop+0x60/0xb0 [ 174.277537][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.277556][ T9244] RIP: 0033:0x7ff872f8e929 [ 174.277584][ T9244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.277600][ T9244] RSP: 002b:00007ff870df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.277621][ T9244] RAX: ffffffffffffffda RBX: 00007ff8731b5fa0 RCX: 00007ff872f8e929 [ 174.277635][ T9244] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 174.277645][ T9244] RBP: 00007ff873010b39 R08: 0000000000000004 R09: 0000000000000000 [ 174.277656][ T9244] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.277668][ T9244] R13: 0000000000000000 R14: 00007ff8731b5fa0 R15: 00007fffc41f4b38 [ 174.277699][ T9244] [ 174.611036][ T9244] Mem-Info: [ 174.614234][ T9244] active_anon:4407 inactive_anon:0 isolated_anon:0 [ 174.614234][ T9244] active_file:1543 inactive_file:39886 isolated_file:0 [ 174.614234][ T9244] unevictable:768 dirty:231 writeback:0 [ 174.614234][ T9244] slab_reclaimable:10749 slab_unreclaimable:125609 [ 174.614234][ T9244] mapped:29141 shmem:1361 pagetables:1104 [ 174.614234][ T9244] sec_pagetables:0 bounce:0 [ 174.614234][ T9244] kernel_misc_reclaimable:0 [ 174.614234][ T9244] free:1307403 free_pcp:15827 free_cma:0 [ 174.705125][ T9244] Node 0 active_anon:17628kB inactive_anon:0kB active_file:6172kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116564kB dirty:924kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11860kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.740547][ T9244] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.773825][ T9244] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.804555][ T9244] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 174.810410][ T9244] Node 0 DMA32 free:1306648kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17580kB inactive_anon:0kB active_file:6172kB inactive_file:157512kB unevictable:1536kB writepending:920kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:47808kB local_pcp:27328kB free_cma:0kB [ 174.854734][ T9244] lowmem_reserve[]: 0 0 1 1 1 [ 174.867544][ T9244] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 174.917321][ T9244] lowmem_reserve[]: 0 0 0 0 0 [ 174.922951][ T9244] Node 1 Normal free:3907588kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16000kB local_pcp:8000kB free_cma:0kB [ 174.955221][ T9244] lowmem_reserve[]: 0 0 0 0 0 [ 174.960683][ T9244] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.975771][ T9244] Node 0 DMA32: 402*4kB (UME) 339*8kB (UME) 35*16kB (UM) 259*32kB (UM) 51*64kB (UME) 37*128kB (UM) 45*256kB (UME) 48*512kB (UME) 28*1024kB (UME) 14*2048kB (UME) 291*4096kB (M) = 1306544kB [ 174.996056][ T9244] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 175.008516][ T9244] Node 1 Normal: 163*4kB (UE) 45*8kB (UME) 37*16kB (UME) 70*32kB (UME) 24*64kB (UME) 6*128kB (UM) 4*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 951*4096kB (ME) = 3907588kB [ 175.027133][ T9244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.037502][ T9244] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.047093][ T9244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.071432][ T9244] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.089266][ T9232] team0 (unregistering): Port device team_slave_0 removed [ 175.096741][ T9244] 43151 total pagecache pages [ 175.104282][ T9244] 0 pages in swap cache [ 175.108547][ T9244] Free swap = 124996kB [ 175.110269][ T9232] team0 (unregistering): Port device team_slave_1 removed [ 175.113154][ T51] Bluetooth: hci3: command tx timeout [ 175.126507][ T9244] Total swap = 124996kB [ 175.131212][ T9244] 2097051 pages RAM [ 175.135138][ T9244] 0 pages HighMem/MovableOnly [ 175.147421][ T9244] 424675 pages reserved [ 175.162017][ T9244] 0 pages cma reserved [ 175.168415][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.215255][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.395938][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.434255][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.505432][ T9279] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.751897][ T9291] FAULT_INJECTION: forcing a failure. [ 175.751897][ T9291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 175.781198][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.1.1068 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 175.781226][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.781238][ T9291] Call Trace: [ 175.781246][ T9291] [ 175.781255][ T9291] dump_stack_lvl+0x189/0x250 [ 175.781291][ T9291] ? __pfx____ratelimit+0x10/0x10 [ 175.781318][ T9291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.781349][ T9291] ? __pfx__printk+0x10/0x10 [ 175.781371][ T9291] ? __might_fault+0xb0/0x130 [ 175.781405][ T9291] should_fail_ex+0x414/0x560 [ 175.781438][ T9291] _copy_from_user+0x2d/0xb0 [ 175.781460][ T9291] __sys_bpf+0x1ed/0x860 [ 175.781491][ T9291] ? __pfx___sys_bpf+0x10/0x10 [ 175.781541][ T9291] ? rcu_is_watching+0x15/0xb0 [ 175.781594][ T9291] __x64_sys_bpf+0x7c/0x90 [ 175.781621][ T9291] do_syscall_64+0xfa/0x3b0 [ 175.781647][ T9291] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.781672][ T9291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.781692][ T9291] ? clear_bhb_loop+0x60/0xb0 [ 175.781716][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.781735][ T9291] RIP: 0033:0x7f1c8998e929 [ 175.781753][ T9291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.781769][ T9291] RSP: 002b:00007f1c8a753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.781790][ T9291] RAX: ffffffffffffffda RBX: 00007f1c89bb5fa0 RCX: 00007f1c8998e929 [ 175.781804][ T9291] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000009 [ 175.781816][ T9291] RBP: 00007f1c8a753090 R08: 0000000000000000 R09: 0000000000000000 [ 175.781828][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.781840][ T9291] R13: 0000000000000000 R14: 00007f1c89bb5fa0 R15: 00007ffd6768a3b8 [ 175.781872][ T9291] [ 176.342579][ T9305] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1073'. [ 176.541364][ T5929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.712889][ T5929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.850159][ T5929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.036939][ T5929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.090361][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 177.136241][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 177.210408][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 177.294893][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.303352][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.313000][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.349229][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.357218][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.422813][ T5929] bridge_slave_1: left allmulticast mode [ 177.428525][ T5929] bridge_slave_1: left promiscuous mode [ 177.464489][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.476251][ T5929] bridge_slave_0: left allmulticast mode [ 177.483431][ T5929] bridge_slave_0: left promiscuous mode [ 177.489660][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.881683][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.895818][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.908462][ T5929] bond0 (unregistering): Released all slaves [ 177.943951][ T9342] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.080673][ T9348] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.648393][ T5929] hsr_slave_0: left promiscuous mode [ 178.675714][ T5929] hsr_slave_1: left promiscuous mode [ 178.686902][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.709670][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.719571][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.727136][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.753441][ T5929] veth1_macvtap: left promiscuous mode [ 178.758997][ T5929] veth0_macvtap: left promiscuous mode [ 178.765238][ T5929] veth1_vlan: left promiscuous mode [ 178.770619][ T5929] veth0_vlan: left promiscuous mode [ 179.170590][ T5929] team0 (unregistering): Port device team_slave_1 removed [ 179.225941][ T5929] team0 (unregistering): Port device team_slave_0 removed [ 179.431145][ T5833] Bluetooth: hci3: command tx timeout [ 179.829783][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 180.252079][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.269666][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.283984][ T9342] bridge_slave_0: entered allmulticast mode [ 180.296382][ T9342] bridge_slave_0: entered promiscuous mode [ 180.334832][ T9419] virt_wifi0 speed is unknown, defaulting to 1000 [ 180.343104][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.350320][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.360597][ T9342] bridge_slave_1: entered allmulticast mode [ 180.377253][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1107'. [ 180.385257][ T9342] bridge_slave_1: entered promiscuous mode [ 180.411517][ T9425] netlink: 'syz.3.1108': attribute type 11 has an invalid length. [ 180.420168][ T9425] netlink: 'syz.3.1108': attribute type 11 has an invalid length. [ 180.431603][ T9425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1108'. [ 180.498641][ T9422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.580476][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1107'. [ 180.609998][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 180.669068][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.714804][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.807629][ T9441] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1112'. [ 180.867082][ T9342] team0: Port device team_slave_0 added [ 180.905142][ T9342] team0: Port device team_slave_1 added [ 180.911300][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 180.928946][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 180.975532][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.984201][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.011163][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.057558][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.064846][ T9450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.073407][ T9450] bridge0: port 1() entered blocking state [ 181.079504][ T9450] bridge0: port 1() entered forwarding state [ 181.091678][ T9450] bridge0: left allmulticast mode [ 181.108493][ T9450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.277475][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.293194][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1117'. [ 181.299261][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.349514][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.381419][ T9444] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.439593][ T9456] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.521885][ T5833] Bluetooth: hci3: command tx timeout [ 181.552084][ T9342] hsr_slave_0: entered promiscuous mode [ 181.558976][ T9342] hsr_slave_1: entered promiscuous mode [ 181.565696][ T9342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.573526][ T9342] Cannot create hsr debugfs directory [ 181.727979][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1121'. [ 182.668027][ T9342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.679786][ T9342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.692971][ T9342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.717448][ T9342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.936432][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.996219][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.026223][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.033468][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.060025][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.067357][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.117913][ T9519] pim6reg: entered allmulticast mode [ 183.216073][ T9342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.357693][ T9527] virt_wifi0 speed is unknown, defaulting to 1000 [ 183.592147][ T5833] Bluetooth: hci3: command tx timeout [ 183.900717][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.961775][ T9342] veth0_vlan: entered promiscuous mode [ 183.976891][ T9342] veth1_vlan: entered promiscuous mode [ 184.046592][ T9342] veth0_macvtap: entered promiscuous mode [ 184.066036][ T9342] veth1_macvtap: entered promiscuous mode [ 184.228691][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.241869][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1149'. [ 184.313269][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.329756][ T9570] syzkaller0: entered promiscuous mode [ 184.339652][ T9570] syzkaller0: entered allmulticast mode [ 184.356693][ T9342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.366976][ T9570] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 184.377067][ T9342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.386925][ T9342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.395833][ T9342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.637001][ T9258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.652871][ T9258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.724164][ T9581] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 184.839463][ T9260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.857684][ T9260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.163259][ T9591] virt_wifi0 speed is unknown, defaulting to 1000 [ 185.679320][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.689881][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.700996][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.710711][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.719983][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.785910][ T9609] xt_nfacct: accounting object `syz1' does not exists [ 185.795867][ T9604] virt_wifi0 speed is unknown, defaulting to 1000 [ 186.094287][ T9618] __nla_validate_parse: 3 callbacks suppressed [ 186.094307][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 186.380114][ T800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.457183][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 186.548507][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.556077][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.564197][ T9604] bridge_slave_0: entered allmulticast mode [ 186.572775][ T9604] bridge_slave_0: entered promiscuous mode [ 186.584814][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.592406][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.599643][ T9604] bridge_slave_1: entered allmulticast mode [ 186.607526][ T9604] bridge_slave_1: entered promiscuous mode [ 186.647546][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.659737][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.702045][ T9604] team0: Port device team_slave_0 added [ 186.710451][ T9604] team0: Port device team_slave_1 added [ 186.746344][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.754050][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.792255][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.813274][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.820272][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.891471][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.975936][ T800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.163853][ T9604] hsr_slave_0: entered promiscuous mode [ 187.170718][ T9604] hsr_slave_1: entered promiscuous mode [ 187.206604][ T9604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.225490][ T9604] Cannot create hsr debugfs directory [ 187.273465][ T800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.339689][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.349416][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.368697][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.378467][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.400558][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.547337][ T800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.751002][ T5833] Bluetooth: hci0: command tx timeout [ 187.789088][ T9663] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.813473][ T9648] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.297670][ T800] bridge_slave_1: left allmulticast mode [ 188.303654][ T800] bridge_slave_1: left promiscuous mode [ 188.309568][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.319627][ T800] bridge_slave_0: left allmulticast mode [ 188.327014][ T800] bridge_slave_0: left promiscuous mode [ 188.333337][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.655421][ T800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.667921][ T800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.680052][ T800] bond0 (unregistering): Released all slaves [ 188.807422][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1182'. [ 189.332595][ T9717] veth0: entered promiscuous mode [ 189.344549][ T9717] veth0: left promiscuous mode [ 189.389488][ T800] hsr_slave_0: left promiscuous mode [ 189.409398][ T800] hsr_slave_1: left promiscuous mode [ 189.419370][ T800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.431315][ T5833] Bluetooth: hci3: command tx timeout [ 189.437791][ T800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.456199][ T800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.464865][ T800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.499565][ T800] veth1_macvtap: left promiscuous mode [ 189.508250][ T800] veth0_macvtap: left promiscuous mode [ 189.514661][ T800] veth1_vlan: left promiscuous mode [ 189.520114][ T800] veth0_vlan: left promiscuous mode [ 189.847189][ T5833] Bluetooth: hci0: command tx timeout [ 190.037509][ T800] team0 (unregistering): Port device team_slave_1 removed [ 190.071499][ T800] team0 (unregistering): Port device team_slave_0 removed [ 190.422539][ T9648] chnl_net:caif_netlink_parms(): no params data found [ 190.827854][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.835798][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.840249][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'. [ 190.843878][ T9648] bridge_slave_0: entered allmulticast mode [ 190.863496][ T9648] bridge_slave_0: entered promiscuous mode [ 190.883268][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.890662][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.898174][ T9648] bridge_slave_1: entered allmulticast mode [ 190.906547][ T9648] bridge_slave_1: entered promiscuous mode [ 190.988415][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.007712][ T9604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.021752][ T9604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.037632][ T9748] openvswitch: netlink: EtherType 0 is less than min 600 [ 191.048187][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.060471][ T9604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.098195][ T9604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.146735][ T9648] team0: Port device team_slave_0 added [ 191.158694][ T9648] team0: Port device team_slave_1 added [ 191.232469][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.240156][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.277052][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.303114][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.310107][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.337013][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.454820][ T9648] hsr_slave_0: entered promiscuous mode [ 191.462301][ T9648] hsr_slave_1: entered promiscuous mode [ 191.468793][ T9648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.477739][ T9648] Cannot create hsr debugfs directory [ 191.521562][ T5833] Bluetooth: hci3: command tx timeout [ 191.726230][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.782966][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.827771][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.835066][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.899151][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.906405][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.914265][ T5833] Bluetooth: hci0: command tx timeout [ 192.198724][ T9648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.219906][ T9648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.232439][ T9648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.248410][ T9648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.333257][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.413567][ T9788] netlink: 'syz.4.1200': attribute type 2 has an invalid length. [ 192.469069][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.579454][ T9648] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.590295][ T9604] veth0_vlan: entered promiscuous mode [ 192.630869][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.638084][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.667255][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.674624][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.728239][ T9604] veth1_vlan: entered promiscuous mode [ 193.591154][ T5833] Bluetooth: hci3: command tx timeout [ 193.993251][ T5833] Bluetooth: hci0: command tx timeout [ 194.308968][ T9796] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.363728][ T9604] veth0_macvtap: entered promiscuous mode [ 194.411510][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466240][ T9604] veth1_macvtap: entered promiscuous mode [ 194.557622][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.657057][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.698652][ T9604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.740321][ T9604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.762973][ T9604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.777592][ T9604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.974331][ T9648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.990316][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.026446][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.085596][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.099986][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.139038][ T9648] veth0_vlan: entered promiscuous mode [ 195.168128][ T9648] veth1_vlan: entered promiscuous mode [ 195.236750][ T9648] veth0_macvtap: entered promiscuous mode [ 195.283124][ T9648] veth1_macvtap: entered promiscuous mode [ 195.297969][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 195.306962][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.314234][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.323636][ T9827] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1214'. [ 195.347033][ T9648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.368494][ T9648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.390924][ T9648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.399837][ T9648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.417477][ T9829] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1215'. [ 195.430055][ T9829] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1215'. [ 195.644057][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.659435][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.672584][ T5833] Bluetooth: hci3: command tx timeout [ 195.683678][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1217'. [ 195.749544][ T3477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.853939][ T3477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.929453][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.937612][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.959073][ T3477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.114765][ T3477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.124422][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 196.514376][ T3477] bridge_slave_1: left allmulticast mode [ 196.520101][ T3477] bridge_slave_1: left promiscuous mode [ 196.536877][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.578312][ T3477] bridge_slave_0: left allmulticast mode [ 196.592587][ T3477] bridge_slave_0: left promiscuous mode [ 196.608595][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.854721][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.866128][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.876201][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.885254][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.893987][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.413828][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.424900][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.436218][ T3477] bond0 (unregistering): Released all slaves [ 197.472365][ T9854] virt_wifi0 speed is unknown, defaulting to 1000 [ 197.636923][ T9859] virt_wifi0 speed is unknown, defaulting to 1000 [ 197.638523][ T9877] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1224'. [ 197.832835][ T9873] bridge1: entered promiscuous mode [ 197.838214][ T9873] bridge1: entered allmulticast mode [ 198.205651][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.219257][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.231543][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.239774][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.249483][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.306551][ T3477] hsr_slave_0: left promiscuous mode [ 198.319169][ T3477] hsr_slave_1: left promiscuous mode [ 198.330687][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.339488][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.356025][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.380949][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.432478][ T3477] veth1_macvtap: left promiscuous mode [ 198.438174][ T3477] veth0_macvtap: left promiscuous mode [ 198.461046][ T3477] veth1_vlan: left promiscuous mode [ 198.471636][ T3477] veth0_vlan: left promiscuous mode [ 198.955970][ T5833] Bluetooth: hci0: command tx timeout [ 199.096407][ T9905] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 199.104617][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 199.403993][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.421548][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.448337][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.482924][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.493850][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.546087][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 199.595758][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 200.027886][ T9890] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.095207][ T9911] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.313276][ T5833] Bluetooth: hci2: command tx timeout [ 200.422571][ T9926] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1234'. [ 200.542890][ T9859] chnl_net:caif_netlink_parms(): no params data found [ 200.937837][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.945310][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.955144][ T9859] bridge_slave_0: entered allmulticast mode [ 200.963612][ T9859] bridge_slave_0: entered promiscuous mode [ 200.997419][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 201.008650][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.017783][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.025707][ T9859] bridge_slave_1: entered allmulticast mode [ 201.038121][ T5833] Bluetooth: hci0: command tx timeout [ 201.046104][ T9859] bridge_slave_1: entered promiscuous mode [ 201.131642][ T3477] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.175713][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.279705][ T3477] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.307256][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.430744][ T3477] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.453870][ T9960] virt_wifi0 speed is unknown, defaulting to 1000 [ 201.509581][ T9890] chnl_net:caif_netlink_parms(): no params data found [ 201.512986][ T5833] Bluetooth: hci3: command tx timeout [ 201.538458][ T3477] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.574279][ T9859] team0: Port device team_slave_0 added [ 201.587554][ T9859] team0: Port device team_slave_1 added [ 201.698128][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.708281][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.715700][ T9911] bridge_slave_0: entered allmulticast mode [ 201.723701][ T9911] bridge_slave_0: entered promiscuous mode [ 201.778528][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.786389][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.795827][ T9969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.814414][ T9859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.835111][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.842800][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.869593][ T9859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.881507][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.888806][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.896669][ T9911] bridge_slave_1: entered allmulticast mode [ 201.904458][ T9911] bridge_slave_1: entered promiscuous mode [ 201.929005][ T9968] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1244'. [ 202.057901][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.143460][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.284831][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.297312][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.306856][ T9890] bridge_slave_0: entered allmulticast mode [ 202.315743][ T9890] bridge_slave_0: entered promiscuous mode [ 202.333346][ T9859] hsr_slave_0: entered promiscuous mode [ 202.340403][ T9859] hsr_slave_1: entered promiscuous mode [ 202.347495][ T9859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.356118][ T9859] Cannot create hsr debugfs directory [ 202.391238][ T5833] Bluetooth: hci2: command tx timeout [ 202.407676][ T9911] team0: Port device team_slave_0 added [ 202.417320][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.427976][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.437738][ T9890] bridge_slave_1: entered allmulticast mode [ 202.451221][ T9890] bridge_slave_1: entered promiscuous mode [ 202.471676][ T9911] team0: Port device team_slave_1 added [ 202.557574][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.690409][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.743577][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.778398][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.796466][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.847911][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.898314][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.928436][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.954878][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.971044][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.998100][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.121878][ T5833] Bluetooth: hci0: command tx timeout [ 203.134457][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.201687][ T9890] team0: Port device team_slave_0 added [ 203.212375][ T9890] team0: Port device team_slave_1 added [ 203.337635][ T9911] hsr_slave_0: entered promiscuous mode [ 203.347664][ T9911] hsr_slave_1: entered promiscuous mode [ 203.358087][ T9911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.366105][ T9911] Cannot create hsr debugfs directory [ 203.458274][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.465542][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.492062][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.535544][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.543442][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.570262][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.596755][ T5833] Bluetooth: hci3: command tx timeout [ 203.706657][ T3477] bridge_slave_1: left allmulticast mode [ 203.714215][ T3477] bridge_slave_1: left promiscuous mode [ 203.720222][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.730324][ T3477] bridge_slave_0: left allmulticast mode [ 203.737364][ T3477] bridge_slave_0: left promiscuous mode [ 203.744155][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.766030][ T3477] bridge_slave_1: left allmulticast mode [ 203.771895][ T3477] bridge_slave_1: left promiscuous mode [ 203.777688][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.787630][ T3477] bridge_slave_0: left allmulticast mode [ 203.795744][ T3477] bridge_slave_0: left promiscuous mode [ 203.802437][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.037594][ T3477] bond2 (unregistering): (slave gretap1): Releasing active interface [ 204.093374][ T3477] bond3 (unregistering): (slave geneve2): Releasing active interface [ 204.106685][ T3477] geneve2 (unregistering): left promiscuous mode [ 204.350473][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.362016][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.372668][ T3477] bond0 (unregistering): (slave team0): Releasing backup interface [ 204.383128][ T3477] bond0 (unregistering): Released all slaves [ 204.472245][ T5833] Bluetooth: hci2: command tx timeout [ 204.472398][ T3477] bond1 (unregistering): Released all slaves [ 204.492693][ T3477] bond2 (unregistering): Released all slaves [ 204.507135][ T3477] bond3 (unregistering): Released all slaves [ 204.598699][ T3477] bond4 (unregistering): Released all slaves [ 204.853652][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.864849][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.875596][ T3477] bond0 (unregistering): Released all slaves [ 205.055015][ T3477] tipc: Left network mode [ 205.076350][ T9890] hsr_slave_0: entered promiscuous mode [ 205.088013][ T9890] hsr_slave_1: entered promiscuous mode [ 205.094840][ T9890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.102806][ T9890] Cannot create hsr debugfs directory [ 205.191348][ T5833] Bluetooth: hci0: command tx timeout [ 205.415710][T10027] virt_wifi0 speed is unknown, defaulting to 1000 [ 205.681518][ T5833] Bluetooth: hci3: command tx timeout [ 205.798078][T10037] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 205.829717][ T3477] hsr_slave_0: left promiscuous mode [ 205.836490][ T3477] hsr_slave_1: left promiscuous mode [ 205.843379][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.852532][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.864818][ T3477] hsr_slave_0: left promiscuous mode [ 205.870758][ T3477] hsr_slave_1: left promiscuous mode [ 205.877148][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.886506][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.895116][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.902871][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.935587][ T3477] veth1_macvtap: left promiscuous mode [ 205.941617][ T3477] veth0_macvtap: left promiscuous mode [ 205.947214][ T3477] veth1_vlan: left promiscuous mode [ 205.952658][ T3477] : left promiscuous mode [ 205.958474][ T3477] veth1_macvtap: left promiscuous mode [ 205.964417][ T3477] veth0_macvtap: left promiscuous mode [ 205.970030][ T3477] veth1_vlan: left promiscuous mode [ 205.975747][ T3477] veth0_vlan: left promiscuous mode [ 206.452249][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 206.487722][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 206.561214][ T5833] Bluetooth: hci2: command tx timeout [ 207.125304][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 207.167225][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 207.676188][T10041] sctp: [Deprecated]: syz.3.1264 (pid 10041) Use of int in max_burst socket option deprecated. [ 207.676188][T10041] Use struct sctp_assoc_value instead [ 207.761396][ T5833] Bluetooth: hci3: command tx timeout [ 207.826841][ T9911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.865155][ T9911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.898135][ T9911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.949760][ T9911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.090695][ T9859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.142289][ T9859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.187926][ T9859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.199734][ T9859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.292116][T10057] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 208.299929][T10057] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1267'. [ 208.310505][ T3477] IPVS: stop unused estimator thread 0... [ 208.444753][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.469404][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.525959][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.533266][ T800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.618895][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.626111][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.715193][ T9890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.744169][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.757439][ T9890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.784805][ T9890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.806789][ T9890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.837062][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.882098][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.889258][ T9260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.924594][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.931837][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.182173][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.228849][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.245697][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.252904][T10091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.295667][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.303026][T10091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.466168][T10101] Bluetooth: MGMT ver 1.23 [ 209.479513][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.514716][T10101] xt_l2tp: invalid flags combination: c [ 209.744105][ T9859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.938778][T10109] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.148156][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.203621][ T9859] veth0_vlan: entered promiscuous mode [ 210.238075][ T9859] veth1_vlan: entered promiscuous mode [ 210.502440][ T9890] veth0_vlan: entered promiscuous mode [ 210.515876][ T9890] veth1_vlan: entered promiscuous mode [ 210.616364][ T9859] veth0_macvtap: entered promiscuous mode [ 210.666068][ T9911] veth0_vlan: entered promiscuous mode [ 210.690258][ T9859] veth1_macvtap: entered promiscuous mode [ 210.806121][ T9911] veth1_vlan: entered promiscuous mode [ 210.857034][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.902297][ T9890] veth0_macvtap: entered promiscuous mode [ 210.975340][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.988305][ T9890] veth1_macvtap: entered promiscuous mode [ 211.024088][ T9859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.034785][ T9859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.064836][ T9859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.077371][ T9859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.120186][ T9911] veth0_macvtap: entered promiscuous mode [ 211.163520][ T9911] veth1_macvtap: entered promiscuous mode [ 211.187140][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.199871][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.212886][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.251479][ T9911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.260575][ T9911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.278583][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 211.288177][ T9911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.303237][ T9911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.329603][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.364107][ T9890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.385973][ T9890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.411210][ T9890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.420132][ T9890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.602676][T10090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.629626][T10090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.726334][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.748319][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.792058][ T9258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.799969][ T9258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.814961][T10090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.829814][T10090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.838004][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.890782][T10091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.919418][T10091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.959927][ T9258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.993976][ T9258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.309945][T10091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.592861][T10091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.675891][T10170] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.913730][T10091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.092596][T10091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.280043][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.294566][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.307996][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.322638][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.342118][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.400015][T10091] bridge_slave_1: left allmulticast mode [ 213.409921][T10091] bridge_slave_1: left promiscuous mode [ 213.420847][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.436440][T10091] bridge_slave_0: left allmulticast mode [ 213.442580][T10091] bridge_slave_0: left promiscuous mode [ 213.448399][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.954248][T10091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.990414][T10091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.004200][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 214.022746][T10091] bond0 (unregistering): Released all slaves [ 214.032352][T10190] netlink: 'syz.1.1293': attribute type 5 has an invalid length. [ 214.046867][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1293'. [ 214.123058][T10189] pim6reg: entered allmulticast mode [ 214.137367][T10190] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 214.146403][T10190] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 214.162423][T10190] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 214.175818][T10190] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 214.215518][T10190] geneve3: entered promiscuous mode [ 214.238799][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.244128][T10190] geneve3: entered allmulticast mode [ 214.261566][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.269548][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.278541][T10179] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.289558][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.298613][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.382911][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.394566][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.405270][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.448971][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.457366][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.495829][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 214.523925][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 214.543951][T10191] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.625514][T10091] hsr_slave_0: left promiscuous mode [ 214.658765][T10091] hsr_slave_1: left promiscuous mode [ 214.669623][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.679489][T10091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.689328][T10206] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1298'. [ 214.700547][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.709073][T10091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.732181][T10091] veth1_macvtap: left promiscuous mode [ 214.737716][T10091] veth0_macvtap: left promiscuous mode [ 214.743489][T10091] veth1_vlan: left promiscuous mode [ 214.748805][T10091] veth0_vlan: left promiscuous mode [ 215.167504][T10091] team0 (unregistering): Port device team_slave_1 removed [ 215.207642][T10091] team0 (unregistering): Port device team_slave_0 removed [ 215.433882][ T5833] Bluetooth: hci0: command tx timeout [ 215.699141][T10198] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.983992][T10191] chnl_net:caif_netlink_parms(): no params data found [ 216.020114][T10223] ip6t_srh: unknown srh match flags 536B [ 216.203333][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 216.391259][ T5833] Bluetooth: hci2: command tx timeout [ 216.463789][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.482923][T10191] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.490322][T10191] bridge_slave_0: entered allmulticast mode [ 216.502861][T10191] bridge_slave_0: entered promiscuous mode [ 216.520673][T10179] chnl_net:caif_netlink_parms(): no params data found [ 216.551223][ T5833] Bluetooth: hci3: command tx timeout [ 216.578979][T10230] virt_wifi0 speed is unknown, defaulting to 1000 [ 216.592909][T10198] chnl_net:caif_netlink_parms(): no params data found [ 216.606089][T10191] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.613980][T10191] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.623640][T10191] bridge_slave_1: entered allmulticast mode [ 216.631166][T10191] bridge_slave_1: entered promiscuous mode [ 216.826140][T10191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.887356][T10191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.072669][T10191] team0: Port device team_slave_0 added [ 217.195903][T10091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.215158][T10191] team0: Port device team_slave_1 added [ 217.350324][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.371159][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.378453][T10179] bridge_slave_0: entered allmulticast mode [ 217.393096][T10179] bridge_slave_0: entered promiscuous mode [ 217.409808][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.417271][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.436673][T10179] bridge_slave_1: entered allmulticast mode [ 217.444921][T10179] bridge_slave_1: entered promiscuous mode [ 217.465727][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.473163][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.480361][T10198] bridge_slave_0: entered allmulticast mode [ 217.488167][T10198] bridge_slave_0: entered promiscuous mode [ 217.496741][T10191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.508309][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.535219][ T5833] Bluetooth: hci0: command tx timeout [ 217.545589][T10191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.592603][T10091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.629547][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.637199][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.650217][T10198] bridge_slave_1: entered allmulticast mode [ 217.657922][T10198] bridge_slave_1: entered promiscuous mode [ 217.687200][T10191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.695399][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.722545][T10191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.747729][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.779458][T10091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.836779][T10198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.859785][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.889730][T10198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.928926][T10091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.265906][T10179] team0: Port device team_slave_0 added [ 218.306422][T10274] tipc: Enabling of bearer rejected, failed to enable media [ 218.355912][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 218.373780][T10179] team0: Port device team_slave_1 added [ 218.399201][T10198] team0: Port device team_slave_0 added [ 218.423970][T10198] team0: Port device team_slave_1 added [ 218.471206][ T5833] Bluetooth: hci2: command tx timeout [ 218.508813][T10198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.517439][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.544032][T10198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.580539][T10191] hsr_slave_0: entered promiscuous mode [ 218.616169][T10191] hsr_slave_1: entered promiscuous mode [ 218.631864][ T5833] Bluetooth: hci3: command tx timeout [ 218.649734][T10191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.677159][T10191] Cannot create hsr debugfs directory [ 218.760683][T10198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.780091][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.817997][T10198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.837899][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.849016][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.892410][T10282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1313'. [ 218.907929][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.987791][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.996297][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.025622][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.227148][T10179] hsr_slave_0: entered promiscuous mode [ 219.238687][T10179] hsr_slave_1: entered promiscuous mode [ 219.247275][T10179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.259580][T10179] Cannot create hsr debugfs directory [ 219.461966][T10198] hsr_slave_0: entered promiscuous mode [ 219.469019][T10198] hsr_slave_1: entered promiscuous mode [ 219.476163][T10198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.485801][T10198] Cannot create hsr debugfs directory [ 219.574949][T10091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.590978][ T5833] Bluetooth: hci0: command tx timeout [ 219.730321][T10091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.796482][T10297] virt_wifi0 speed is unknown, defaulting to 1000 [ 219.820694][T10091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.981511][T10091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.297838][T10091] bridge_slave_1: left allmulticast mode [ 220.304979][T10091] bridge_slave_1: left promiscuous mode [ 220.310854][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.330663][T10091] bridge_slave_0: left allmulticast mode [ 220.347200][T10091] bridge_slave_0: left promiscuous mode [ 220.353456][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.390616][T10091] bridge_slave_1: left allmulticast mode [ 220.407961][T10091] bridge_slave_1: left promiscuous mode [ 220.420366][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.436807][T10091] bridge_slave_0: left allmulticast mode [ 220.444366][T10091] bridge_slave_0: left promiscuous mode [ 220.450249][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.458493][ T9] IPVS: starting estimator thread 0... [ 220.496000][T10310] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 220.550957][ T5833] Bluetooth: hci2: command tx timeout [ 220.570970][T10309] IPVS: using max 26 ests per chain, 62400 per kthread [ 220.579948][T10314] xt_hashlimit: max too large, truncated to 1048576 [ 220.713060][ T5833] Bluetooth: hci3: command tx timeout [ 220.943172][T10091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.954845][T10091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.965061][T10091] bond0 (unregistering): Released all slaves [ 221.237904][T10091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.249290][T10091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.260205][T10091] bond0 (unregistering): Released all slaves [ 221.288257][T10308] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 221.671563][ T5833] Bluetooth: hci0: command tx timeout [ 222.101112][T10091] hsr_slave_0: left promiscuous mode [ 222.119567][T10091] hsr_slave_1: left promiscuous mode [ 222.130490][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.149973][T10091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.169281][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.187948][T10091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.221566][T10091] hsr_slave_0: left promiscuous mode [ 222.237161][T10091] hsr_slave_1: left promiscuous mode [ 222.252321][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.259884][T10091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.279834][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.297976][T10091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.359860][T10091] veth1_macvtap: left promiscuous mode [ 222.369555][T10091] veth0_macvtap: left promiscuous mode [ 222.380498][T10091] veth1_vlan: left promiscuous mode [ 222.388141][T10091] veth0_vlan: left promiscuous mode [ 222.399938][T10091] veth1_macvtap: left promiscuous mode [ 222.408052][T10091] veth0_macvtap: left promiscuous mode [ 222.414447][T10091] veth1_vlan: left promiscuous mode [ 222.419895][T10091] veth0_vlan: left promiscuous mode [ 222.630950][ T5833] Bluetooth: hci2: command tx timeout [ 222.791428][ T5833] Bluetooth: hci3: command tx timeout [ 223.089052][T10091] team0 (unregistering): Port device team_slave_1 removed [ 223.126813][T10091] team0 (unregistering): Port device team_slave_0 removed [ 223.764419][T10091] team0 (unregistering): Port device team_slave_1 removed [ 223.804164][T10091] team0 (unregistering): Port device team_slave_0 removed [ 224.436984][T10360] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.495774][T10363] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 224.558346][T10365] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1337'. [ 224.869997][T10191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.888542][T10191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.915659][T10191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.928581][T10191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.060629][T10179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.139321][T10179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.177898][T10179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.265381][T10179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.427961][T10198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.474653][T10198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.535425][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 225.575479][T10198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.710449][T10198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.743117][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 225.878828][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 225.892687][T10191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.953934][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 225.968777][T10191] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.047564][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.054806][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.100296][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.107553][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.138270][T10179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.244133][T10179] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.299851][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.316902][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.324136][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.373171][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.380368][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.407757][T10198] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.449776][T10191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.462621][T10191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.476509][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.483726][ T9258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.507537][T10454] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 226.567862][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.575134][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.667989][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1358'. [ 227.014606][T10191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.228000][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.323426][T10484] netlink: 'syz.3.1363': attribute type 21 has an invalid length. [ 227.342876][T10484] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.371074][T10484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.378427][T10484] IPv6: NLM_F_CREATE should be set when creating new route [ 227.385767][T10484] IPv6: NLM_F_CREATE should be set when creating new route [ 227.393117][T10484] IPv6: NLM_F_CREATE should be set when creating new route [ 227.419228][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.474379][T10198] veth0_vlan: entered promiscuous mode [ 227.544726][T10198] veth1_vlan: entered promiscuous mode [ 227.603556][T10179] veth0_vlan: entered promiscuous mode [ 227.659519][T10496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1366'. [ 227.673724][T10179] veth1_vlan: entered promiscuous mode [ 227.713373][T10498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1366'. [ 227.757220][T10198] veth0_macvtap: entered promiscuous mode [ 227.825975][T10198] veth1_macvtap: entered promiscuous mode [ 227.863307][T10179] veth0_macvtap: entered promiscuous mode [ 227.889791][T10179] veth1_macvtap: entered promiscuous mode [ 227.953989][T10506] tipc: Started in network mode [ 227.958937][T10506] tipc: Node identity , cluster identity 4711 [ 227.975125][T10506] tipc: Failed to set node id, please configure manually [ 227.984229][T10506] tipc: Enabling of bearer rejected, failed to enable media [ 228.002245][T10198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.012821][T10191] veth0_vlan: entered promiscuous mode [ 228.020118][T10198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.048811][T10179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.059304][T10198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.085101][T10198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.096642][T10198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.108336][T10198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.134172][T10179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.157411][T10179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.168021][T10179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.178009][T10179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.187548][T10179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.219742][T10191] veth1_vlan: entered promiscuous mode [ 228.247603][T10513] virt_wifi0 speed is unknown, defaulting to 1000 [ 228.250199][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 228.298902][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 228.481995][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.489887][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.564704][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.574846][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.609437][T10191] veth0_macvtap: entered promiscuous mode [ 228.719837][T10191] veth1_macvtap: entered promiscuous mode [ 228.747152][T10091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.761108][T10091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.869748][T10091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.890175][T10091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.929804][T10191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.996776][T10191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.123746][T10191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.141110][T10191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.160163][T10191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.174730][T10191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.530065][T10090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.576256][T10552] virt_wifi0 speed is unknown, defaulting to 1000 [ 229.828928][T10090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.879112][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.903485][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.980103][T10090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.049175][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.077065][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.179328][T10090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.264263][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.281164][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.291539][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.299896][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.312286][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.445078][T10557] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.955694][T10090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.972281][T10577] __nla_validate_parse: 3 callbacks suppressed [ 230.972301][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 230.993199][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.000117][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 231.009718][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.022147][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.030637][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.039596][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.223261][T10090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.339086][T10579] virt_wifi0 speed is unknown, defaulting to 1000 [ 231.491714][T10090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.568564][T10557] chnl_net:caif_netlink_parms(): no params data found [ 231.704641][T10090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.041216][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 232.072800][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.080040][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.100563][T10557] bridge_slave_0: entered allmulticast mode [ 232.110303][T10557] bridge_slave_0: entered promiscuous mode [ 232.149360][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.149362][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.167318][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.175056][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.184320][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.195640][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.200708][T10557] bridge_slave_1: entered allmulticast mode [ 232.212803][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.215869][T10557] bridge_slave_1: entered promiscuous mode [ 232.393501][ T5833] Bluetooth: hci0: command tx timeout [ 232.412257][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.428191][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.467760][T10579] chnl_net:caif_netlink_parms(): no params data found [ 232.539486][T10090] bridge_slave_1: left allmulticast mode [ 232.545875][T10090] bridge_slave_1: left promiscuous mode [ 232.552497][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.564565][T10090] bridge_slave_0: left allmulticast mode [ 232.570572][T10090] bridge_slave_0: left promiscuous mode [ 232.578568][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.594798][T10090] bridge_slave_1: left allmulticast mode [ 232.601213][T10090] bridge_slave_1: left promiscuous mode [ 232.607098][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.621846][T10090] bridge_slave_0: left allmulticast mode [ 232.627782][T10090] bridge_slave_0: left promiscuous mode [ 232.634653][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.100325][T10090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.115079][T10090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.121199][ T5833] Bluetooth: hci2: command tx timeout [ 233.138127][T10090] bond0 (unregistering): Released all slaves [ 233.423488][T10090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.436176][T10090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.447002][T10090] bond0 (unregistering): Released all slaves [ 233.464982][T10610] virt_wifi0 speed is unknown, defaulting to 1000 [ 233.486901][T10557] team0: Port device team_slave_0 added [ 233.497333][T10557] team0: Port device team_slave_1 added [ 233.735071][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.743438][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.772136][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.789834][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.797033][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.823722][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.901597][T10628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1393'. [ 233.936111][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.945524][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.953590][T10579] bridge_slave_0: entered allmulticast mode [ 233.961081][T10579] bridge_slave_0: entered promiscuous mode [ 233.969197][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.977330][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.984717][T10579] bridge_slave_1: entered allmulticast mode [ 233.994509][T10579] bridge_slave_1: entered promiscuous mode [ 234.041368][T10557] hsr_slave_0: entered promiscuous mode [ 234.049115][T10557] hsr_slave_1: entered promiscuous mode [ 234.055678][T10557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.066215][T10557] Cannot create hsr debugfs directory [ 234.114067][T10579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.169448][T10579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.319315][ T5833] Bluetooth: hci3: command tx timeout [ 234.375539][T10579] team0: Port device team_slave_0 added [ 234.467539][T10579] team0: Port device team_slave_1 added [ 234.486942][ T5833] Bluetooth: hci0: command tx timeout [ 234.629126][T10646] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 234.649409][T10646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1397'. [ 234.696911][T10579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.705369][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.733500][T10579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.770647][T10579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.789576][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.794341][T10649] No such timeout policy "syz0" [ 234.818442][T10579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.868791][T10090] hsr_slave_0: left promiscuous mode [ 234.877294][T10090] hsr_slave_1: left promiscuous mode [ 234.883444][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.891142][T10090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.911809][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.927787][T10090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.974136][T10090] hsr_slave_0: left promiscuous mode [ 234.984834][T10090] hsr_slave_1: left promiscuous mode [ 234.992458][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.999924][T10090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.008129][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.015780][T10090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.053916][T10090] veth1_macvtap: left promiscuous mode [ 235.059527][T10090] veth0_macvtap: left promiscuous mode [ 235.065736][T10090] veth1_vlan: left promiscuous mode [ 235.071463][T10090] veth0_vlan: left promiscuous mode [ 235.078075][T10090] veth1_macvtap: left promiscuous mode [ 235.084164][T10090] veth0_macvtap: left promiscuous mode [ 235.089828][T10090] veth1_vlan: left promiscuous mode [ 235.095211][T10090] veth0_vlan: left promiscuous mode [ 235.191645][ T5833] Bluetooth: hci2: command tx timeout [ 235.643806][T10090] team0 (unregistering): Port device team_slave_1 removed [ 235.687480][T10090] team0 (unregistering): Port device team_slave_0 removed [ 236.372898][T10090] team0 (unregistering): Port device team_slave_1 removed [ 236.395201][ T51] Bluetooth: hci3: command tx timeout [ 236.423610][T10090] team0 (unregistering): Port device team_slave_0 removed [ 236.551143][ T51] Bluetooth: hci0: command tx timeout [ 237.034445][T10610] chnl_net:caif_netlink_parms(): no params data found [ 237.070275][T10579] hsr_slave_0: entered promiscuous mode [ 237.082961][T10579] hsr_slave_1: entered promiscuous mode [ 237.089392][T10579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.114171][T10579] Cannot create hsr debugfs directory [ 237.271375][ T51] Bluetooth: hci2: command tx timeout [ 237.428133][T10674] virt_wifi0 speed is unknown, defaulting to 1000 [ 237.442449][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 237.609745][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.651136][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.658453][T10610] bridge_slave_0: entered allmulticast mode [ 237.694310][T10610] bridge_slave_0: entered promiscuous mode [ 237.724749][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.746671][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.757713][T10610] bridge_slave_1: entered allmulticast mode [ 237.770113][T10610] bridge_slave_1: entered promiscuous mode [ 237.979758][T10610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.005105][T10610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.194462][T10610] team0: Port device team_slave_0 added [ 238.246703][T10610] team0: Port device team_slave_1 added [ 238.329907][T10090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.453711][T10090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.481922][ T5833] Bluetooth: hci3: command tx timeout [ 238.496560][T10610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.521465][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.535862][T10728] sctp: [Deprecated]: syz.1.1419 (pid 10728) Use of int in max_burst socket option. [ 238.535862][T10728] Use struct sctp_assoc_value instead [ 238.601279][T10610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.620710][T10730] x_tables: duplicate underflow at hook 2 [ 238.630949][ T5833] Bluetooth: hci0: command tx timeout [ 238.635760][T10610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.662632][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.701027][T10610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.742614][T10090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.774358][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 238.788451][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 238.905766][T10090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.926930][T10610] hsr_slave_0: entered promiscuous mode [ 238.933609][T10610] hsr_slave_1: entered promiscuous mode [ 238.939988][T10610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.950672][T10610] Cannot create hsr debugfs directory [ 238.996628][T10736] virt_wifi0 speed is unknown, defaulting to 1000 [ 239.091270][T10738] 8021q: VLANs not supported on vcan0 [ 239.352214][ T5833] Bluetooth: hci2: command tx timeout [ 239.403030][T10557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.485634][T10090] bridge_slave_1: left allmulticast mode [ 239.496086][T10090] bridge_slave_1: left promiscuous mode [ 239.502542][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.523983][T10090] bridge_slave_0: left allmulticast mode [ 239.529657][T10090] bridge_slave_0: left promiscuous mode [ 239.536167][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.946375][T10090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.957529][T10090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.968377][T10090] bond0 (unregistering): Released all slaves [ 240.014631][T10557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.062482][T10557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.090376][T10557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.535993][T10579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.561230][ T5833] Bluetooth: hci3: command tx timeout [ 240.618233][T10579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.703683][T10579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.725832][T10579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.815006][T10090] hsr_slave_0: left promiscuous mode [ 240.829611][T10090] hsr_slave_1: left promiscuous mode [ 240.853585][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.868732][T10090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.878308][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.885868][T10090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.922556][T10090] veth1_macvtap: left promiscuous mode [ 240.929885][T10090] veth0_macvtap: left promiscuous mode [ 240.939093][T10090] veth1_vlan: left promiscuous mode [ 240.948351][T10090] veth0_vlan: left promiscuous mode [ 241.400605][T10090] team0 (unregistering): Port device team_slave_1 removed [ 241.446926][T10090] team0 (unregistering): Port device team_slave_0 removed [ 241.855063][T10800] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.235490][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.346011][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.373743][T10610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.407751][T10610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.458874][T10610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.477100][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.484319][T10091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.499556][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.506806][T10091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.527417][T10822] FAULT_INJECTION: forcing a failure. [ 242.527417][T10822] name failslab, interval 1, probability 0, space 0, times 1 [ 242.542926][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.1.1441 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 242.542954][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.542968][T10822] Call Trace: [ 242.542976][T10822] [ 242.542986][T10822] dump_stack_lvl+0x189/0x250 [ 242.543035][T10822] ? __pfx____ratelimit+0x10/0x10 [ 242.543063][T10822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.543095][T10822] ? __pfx__printk+0x10/0x10 [ 242.543135][T10822] should_fail_ex+0x414/0x560 [ 242.543169][T10822] should_failslab+0xa8/0x100 [ 242.543194][T10822] __kmalloc_noprof+0xcb/0x4f0 [ 242.543214][T10822] ? fib_nl2rule+0x2f5/0x19f0 [ 242.543241][T10822] fib_nl2rule+0x2f5/0x19f0 [ 242.543272][T10822] ? __pfx_fib_nl2rule+0x10/0x10 [ 242.543295][T10822] ? __nla_parse+0x40/0x60 [ 242.543331][T10822] fib_newrule+0x2c8/0xf20 [ 242.543363][T10822] ? __pfx_fib_newrule+0x10/0x10 [ 242.543428][T10822] ? __pfx_fib_nl_newrule+0x10/0x10 [ 242.543449][T10822] rtnetlink_rcv_msg+0x7cf/0xb70 [ 242.543484][T10822] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 242.543513][T10822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.543546][T10822] ? ref_tracker_free+0x63a/0x7d0 [ 242.543573][T10822] ? __copy_skb_header+0xa7/0x550 [ 242.543599][T10822] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.543646][T10822] netlink_rcv_skb+0x208/0x470 [ 242.543668][T10822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.543701][T10822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.543737][T10822] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.543757][T10822] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.543783][T10822] netlink_unicast+0x75b/0x8d0 [ 242.543826][T10822] netlink_sendmsg+0x805/0xb30 [ 242.543858][T10822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.543883][T10822] ? aa_sock_msg_perm+0x94/0x160 [ 242.543913][T10822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.543940][T10822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.543962][T10822] __sock_sendmsg+0x21c/0x270 [ 242.543995][T10822] ____sys_sendmsg+0x505/0x830 [ 242.544024][T10822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.544058][T10822] ? import_iovec+0x74/0xa0 [ 242.544084][T10822] ___sys_sendmsg+0x21f/0x2a0 [ 242.544109][T10822] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.544176][T10822] ? __fget_files+0x2a/0x420 [ 242.544199][T10822] ? __fget_files+0x3a0/0x420 [ 242.544235][T10822] __x64_sys_sendmsg+0x19b/0x260 [ 242.544261][T10822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.544295][T10822] ? __pfx_ksys_write+0x10/0x10 [ 242.544312][T10822] ? rcu_is_watching+0x15/0xb0 [ 242.544339][T10822] ? do_syscall_64+0xbe/0x3b0 [ 242.544372][T10822] do_syscall_64+0xfa/0x3b0 [ 242.544397][T10822] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.544423][T10822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.544444][T10822] ? clear_bhb_loop+0x60/0xb0 [ 242.544469][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.544489][T10822] RIP: 0033:0x7f1c8998e929 [ 242.544513][T10822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.544530][T10822] RSP: 002b:00007f1c8a753038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.544559][T10822] RAX: ffffffffffffffda RBX: 00007f1c89bb5fa0 RCX: 00007f1c8998e929 [ 242.544574][T10822] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.544586][T10822] RBP: 00007f1c8a753090 R08: 0000000000000000 R09: 0000000000000000 [ 242.544599][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.544610][T10822] R13: 0000000000000000 R14: 00007f1c89bb5fa0 R15: 00007ffd6768a3b8 [ 242.544648][T10822] [ 242.915520][T10610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.009629][T10579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.182068][T10579] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.272417][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.279548][ T9258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.336576][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 243.410746][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.417980][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.625613][T10610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.697770][T10610] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.731623][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.771612][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.778849][ T5929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.845844][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.853071][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.064747][T10557] veth0_vlan: entered promiscuous mode [ 244.105981][T10579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.124999][T10557] veth1_vlan: entered promiscuous mode [ 244.249176][T10557] veth0_macvtap: entered promiscuous mode [ 244.281821][T10557] veth1_macvtap: entered promiscuous mode [ 244.296402][T10579] veth0_vlan: entered promiscuous mode [ 244.348668][T10579] veth1_vlan: entered promiscuous mode [ 244.385753][T10557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.441881][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.486081][T10579] veth0_macvtap: entered promiscuous mode [ 244.507142][T10557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.532211][T10557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.547946][T10557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.558432][T10557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.574560][T10579] veth1_macvtap: entered promiscuous mode [ 244.678214][T10610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.707555][T10579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.769188][T10579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.892295][T10579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.907246][T10579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.920881][T10579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.929623][T10579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.990353][T10085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.018747][T10085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.197533][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.240936][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.427909][ T9258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.448845][ T9258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.570215][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.587521][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.817581][T10610] veth0_vlan: entered promiscuous mode [ 245.830169][T10610] veth1_vlan: entered promiscuous mode [ 245.887427][T10610] veth0_macvtap: entered promiscuous mode [ 245.899681][T10610] veth1_macvtap: entered promiscuous mode [ 245.927514][T10610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.014790][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.069566][T10610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.123336][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.145189][T10610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.171124][T10610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.180048][T10610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.195877][T10610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.299029][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.520136][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.555393][T10085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.572194][T10085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.615492][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.637633][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.762094][ T59] bridge_slave_1: left allmulticast mode [ 246.769728][ T59] bridge_slave_1: left promiscuous mode [ 246.775855][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.795182][ T59] bridge_slave_0: left allmulticast mode [ 246.802371][ T59] bridge_slave_0: left promiscuous mode [ 246.808174][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.170703][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.184567][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.194203][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.211792][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.229119][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.236990][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.249141][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.261634][ T59] bond0 (unregistering): Released all slaves [ 247.473453][T10903] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.670395][T10909] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.787585][ T59] hsr_slave_0: left promiscuous mode [ 247.804694][ T59] hsr_slave_1: left promiscuous mode [ 247.821722][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.829205][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.864551][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.881191][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.893067][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.901157][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.909427][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.926609][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.935501][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.939040][ T59] veth1_macvtap: left promiscuous mode [ 247.948843][ T59] veth0_macvtap: left promiscuous mode [ 247.954963][ T59] veth1_vlan: left promiscuous mode [ 247.961168][ T59] veth0_vlan: left promiscuous mode [ 248.480205][ T59] team0 (unregistering): Port device team_slave_1 removed [ 248.601764][ T59] team0 (unregistering): Port device team_slave_0 removed [ 248.745852][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.767756][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.780119][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.788381][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.803345][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.166281][T10912] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.271224][ T5833] Bluetooth: hci0: command tx timeout [ 249.307983][T10921] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.586139][T10903] chnl_net:caif_netlink_parms(): no params data found [ 249.877255][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.885696][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.898528][T10903] bridge_slave_0: entered allmulticast mode [ 249.907831][T10903] bridge_slave_0: entered promiscuous mode [ 249.931452][T10950] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 249.991249][ T5833] Bluetooth: hci2: command tx timeout [ 250.063806][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.078396][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.085839][T10903] bridge_slave_1: entered allmulticast mode [ 250.098320][T10903] bridge_slave_1: entered promiscuous mode [ 250.205883][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.335144][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.375012][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.413032][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.438813][T10921] chnl_net:caif_netlink_parms(): no params data found [ 250.509069][T10912] chnl_net:caif_netlink_parms(): no params data found [ 250.576894][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.667075][T10903] team0: Port device team_slave_0 added [ 250.726173][T10903] team0: Port device team_slave_1 added [ 250.756949][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.871312][ T5833] Bluetooth: hci3: command tx timeout [ 250.896732][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.909294][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.943385][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.995051][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 251.016918][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.024392][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.057103][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.079609][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.087133][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.096987][T10921] bridge_slave_0: entered allmulticast mode [ 251.104593][T10921] bridge_slave_0: entered promiscuous mode [ 251.144612][T10912] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.153026][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.160284][T10912] bridge_slave_0: entered allmulticast mode [ 251.168724][T10912] bridge_slave_0: entered promiscuous mode [ 251.199258][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.211508][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.225495][T10921] bridge_slave_1: entered allmulticast mode [ 251.236014][T10921] bridge_slave_1: entered promiscuous mode [ 251.269460][T10912] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.284243][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.295103][T10912] bridge_slave_1: entered allmulticast mode [ 251.303398][T10912] bridge_slave_1: entered promiscuous mode [ 251.352810][ T5833] Bluetooth: hci0: command tx timeout [ 251.355836][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.464016][T10903] hsr_slave_0: entered promiscuous mode [ 251.470714][T10903] hsr_slave_1: entered promiscuous mode [ 251.477562][T10977] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 251.478952][T10903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.498103][T10903] Cannot create hsr debugfs directory [ 251.514538][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.616283][T10912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.704658][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.739517][T10912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.784272][T10921] team0: Port device team_slave_0 added [ 251.884528][T11011] netlink: 'syz.1.1482': attribute type 21 has an invalid length. [ 251.893836][T11011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1482'. [ 251.916420][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.947235][T10921] team0: Port device team_slave_1 added [ 251.993753][T10912] team0: Port device team_slave_0 added [ 252.072349][ T5833] Bluetooth: hci2: command tx timeout [ 252.120623][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.159316][T10912] team0: Port device team_slave_1 added [ 252.198331][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.210902][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.237986][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.266213][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.274397][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.319547][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.357851][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1487'. [ 252.394376][T10912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.401412][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.429670][T10912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.459100][T11028] x_tables: unsorted underflow at hook 4 [ 252.495952][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.541874][T10912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.548870][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.620903][T10912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.652612][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.678547][T11036] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.686581][T11033] tipc: Started in network mode [ 252.700083][T11033] tipc: Node identity a6c517bd70d5, cluster identity 4711 [ 252.707591][T11033] tipc: Enabled bearer , priority 0 [ 252.828291][T11031] syzkaller0: entered promiscuous mode [ 252.836621][T11031] syzkaller0: entered allmulticast mode [ 252.844693][T11031] tipc: Resetting bearer [ 252.879845][T10921] hsr_slave_0: entered promiscuous mode [ 252.888141][T10921] hsr_slave_1: entered promiscuous mode [ 252.898316][T10921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.906197][T10921] Cannot create hsr debugfs directory [ 252.931681][T11027] tipc: Resetting bearer [ 252.950976][ T5833] Bluetooth: hci3: command tx timeout [ 253.431128][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 253.784517][ T5167] tipc: Node number set to 3591378877 [ 254.155928][ T5833] Bluetooth: hci2: command tx timeout [ 254.205946][T11027] tipc: Disabling bearer [ 254.363831][T10912] hsr_slave_0: entered promiscuous mode [ 254.370570][T10912] hsr_slave_1: entered promiscuous mode [ 254.377449][T10912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.389654][T10912] Cannot create hsr debugfs directory [ 254.425995][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'. [ 254.450479][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'. [ 254.587902][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'. [ 254.699905][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 254.724280][T11058] netlink: 'syz.3.1494': attribute type 2 has an invalid length. [ 254.732978][T11058] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 254.750728][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 254.818688][ T59] bridge_slave_1: left allmulticast mode [ 254.832932][ T59] bridge_slave_1: left promiscuous mode [ 254.838828][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.862914][ T59] bridge_slave_0: left allmulticast mode [ 254.868627][ T59] bridge_slave_0: left promiscuous mode [ 254.876621][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.876647][T11064] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1496'. [ 254.907617][ T59] bridge_slave_1: left allmulticast mode [ 254.920880][ T59] bridge_slave_1: left promiscuous mode [ 254.926640][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.955287][ T59] bridge_slave_0: left allmulticast mode [ 254.965229][ T59] bridge_slave_0: left promiscuous mode [ 254.976433][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.034311][ T5833] Bluetooth: hci3: command tx timeout [ 255.366151][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.377413][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.387586][ T59] bond0 (unregistering): Released all slaves [ 255.521477][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 255.705872][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.717710][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.727687][ T59] bond0 (unregistering): Released all slaves [ 255.854660][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.951352][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 256.036804][T11075] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1497'. [ 256.047481][T11072] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1497'. [ 256.059600][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'. [ 256.088918][T11076] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 256.238567][T10903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.241258][ T5833] Bluetooth: hci2: command tx timeout [ 256.278450][T10903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.349218][T10903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.445696][T10903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.468350][T11092] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1503'. [ 256.721165][ T59] hsr_slave_0: left promiscuous mode [ 256.727266][ T59] hsr_slave_1: left promiscuous mode [ 256.736935][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.744691][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.770277][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.801915][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.823998][ T59] hsr_slave_0: left promiscuous mode [ 256.841237][ T59] hsr_slave_1: left promiscuous mode [ 256.847188][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.861343][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.872024][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.879469][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.927350][ T59] veth1_macvtap: left promiscuous mode [ 256.933755][ T59] veth0_macvtap: left promiscuous mode [ 256.939454][ T59] veth1_vlan: left promiscuous mode [ 256.944994][ T59] veth0_vlan: left promiscuous mode [ 256.958819][ T59] veth1_macvtap: left promiscuous mode [ 256.966345][ T59] veth0_macvtap: left promiscuous mode [ 256.976737][ T59] veth1_vlan: left promiscuous mode [ 256.983163][ T59] veth0_vlan: left promiscuous mode [ 257.113649][ T5833] Bluetooth: hci3: command tx timeout [ 257.543617][ T59] team0 (unregistering): Port device team_slave_1 removed [ 257.588286][ T59] team0 (unregistering): Port device team_slave_0 removed [ 257.595618][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 258.269117][ T59] team0 (unregistering): Port device team_slave_1 removed [ 258.307098][ T59] team0 (unregistering): Port device team_slave_0 removed [ 258.675580][T11110] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 258.694335][T11110] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 258.796369][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 258.844207][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.903246][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.965477][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.972852][T10085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.986156][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 258.991590][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.002218][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.007015][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1513'. [ 259.022915][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1513'. [ 259.034290][T11130] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1513'. [ 259.063476][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 259.306103][T11138] bridge0: port 3(gretap0) entered blocking state [ 259.318043][T11138] bridge0: port 3(gretap0) entered disabled state [ 259.341263][T11138] gretap0: entered allmulticast mode [ 259.360334][T11138] gretap0: entered promiscuous mode [ 259.497018][T11142] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 259.608209][T11145] macsec0: entered promiscuous mode [ 259.613719][T11145] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 259.623085][T11145] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11145, name: syz.3.1518 [ 259.632275][T11145] preempt_count: 201, expected: 0 [ 259.637333][T11145] RCU nest depth: 0, expected: 0 [ 259.642356][T11145] 3 locks held by syz.3.1518/11145: [ 259.647585][T11145] #0: ffffffff8fa13eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 259.657232][T11145] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 259.666411][T11145] #2: ffff88802fd58368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 259.676993][T11145] Preemption disabled at: [ 259.677007][T11145] [] dev_uc_add+0x56/0x120 [ 259.687412][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.3.1518 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 259.687435][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.687446][T11145] Call Trace: [ 259.687453][T11145] [ 259.687461][T11145] dump_stack_lvl+0x189/0x250 [ 259.687496][T11145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.687525][T11145] ? __pfx__printk+0x10/0x10 [ 259.687548][T11145] ? print_lock_name+0xde/0x100 [ 259.687566][T11145] ? dev_uc_add+0x56/0x120 [ 259.687589][T11145] __might_resched+0x495/0x610 [ 259.687605][T11145] ? stack_depot_save_flags+0x40/0x900 [ 259.687633][T11145] ? dev_uc_add+0x56/0x120 [ 259.687651][T11145] ? __pfx___might_resched+0x10/0x10 [ 259.687669][T11145] ? kasan_save_track+0x4f/0x80 [ 259.687699][T11145] __mutex_lock+0x106/0xe80 [ 259.687735][T11145] ? dev_set_promiscuity+0x10e/0x260 [ 259.687756][T11145] ? __pfx___mutex_lock+0x10/0x10 [ 259.687778][T11145] ? netdev_info+0x10a/0x160 [ 259.687806][T11145] ? __pfx_netdev_info+0x10/0x10 [ 259.687838][T11145] dev_set_promiscuity+0x10e/0x260 [ 259.687860][T11145] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 259.687878][T11145] __dev_set_promiscuity+0x531/0x740 [ 259.687900][T11145] ? __hw_addr_add_ex+0x3c5/0x770 [ 259.687922][T11145] __dev_set_rx_mode+0x17c/0x260 [ 259.687943][T11145] dev_uc_add+0xc8/0x120 [ 259.687965][T11145] macsec_dev_open+0xd9/0x530 [ 259.687982][T11145] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 259.688006][T11145] ? __pfx_macsec_dev_open+0x10/0x10 [ 259.688023][T11145] ? ib_device_get_by_netdev+0x84/0x4d0 [ 259.688044][T11145] ? hsr_netdev_notify+0x29e/0xcf0 [ 259.688066][T11145] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 259.688091][T11145] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 259.688127][T11145] ? ip6_route_dev_notify+0x9a/0x5b0 [ 259.688158][T11145] ? notifier_call_chain+0x3bf/0x3e0 [ 259.688183][T11145] __dev_open+0x46d/0x880 [ 259.688215][T11145] ? __pfx___dev_open+0x10/0x10 [ 259.688251][T11145] __dev_change_flags+0x1ea/0x6d0 [ 259.688271][T11145] ? validate_linkmsg+0x765/0x950 [ 259.688296][T11145] ? __pfx___dev_change_flags+0x10/0x10 [ 259.688326][T11145] rtnl_newlink_create+0x555/0xb00 [ 259.688359][T11145] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 259.688375][T11145] ? rtnl_newlink+0x8db/0x1c70 [ 259.688405][T11145] ? __pfx___mutex_lock+0x10/0x10 [ 259.688439][T11145] ? ns_capable+0x8a/0xf0 [ 259.688470][T11145] rtnl_newlink+0x16d6/0x1c70 [ 259.688499][T11145] ? netlink_sendmsg+0x805/0xb30 [ 259.688529][T11145] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.688580][T11145] ? kasan_quarantine_put+0xdd/0x220 [ 259.688607][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.688636][T11145] ? nlmon_xmit+0xb0/0x100 [ 259.688651][T11145] ? kmem_cache_free+0x18f/0x400 [ 259.688677][T11145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.688704][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.688728][T11145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.688754][T11145] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.688785][T11145] ? __dev_queue_xmit+0x27e/0x3a70 [ 259.688820][T11145] ? __lock_acquire+0xab9/0xd20 [ 259.688871][T11145] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.688897][T11145] rtnetlink_rcv_msg+0x7cf/0xb70 [ 259.688928][T11145] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 259.688953][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.688978][T11145] ? ref_tracker_free+0x63a/0x7d0 [ 259.689001][T11145] ? __copy_skb_header+0xa7/0x550 [ 259.689023][T11145] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.689065][T11145] netlink_rcv_skb+0x208/0x470 [ 259.689083][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.689112][T11145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.689143][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.689160][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.689183][T11145] netlink_unicast+0x75b/0x8d0 [ 259.689221][T11145] netlink_sendmsg+0x805/0xb30 [ 259.689249][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.689271][T11145] ? aa_sock_msg_perm+0x94/0x160 [ 259.689297][T11145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.689322][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.689341][T11145] __sock_sendmsg+0x21c/0x270 [ 259.689369][T11145] ____sys_sendmsg+0x505/0x830 [ 259.689394][T11145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.689424][T11145] ? import_iovec+0x74/0xa0 [ 259.689447][T11145] ___sys_sendmsg+0x21f/0x2a0 [ 259.689470][T11145] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.689527][T11145] ? __fget_files+0x2a/0x420 [ 259.689546][T11145] ? __fget_files+0x3a0/0x420 [ 259.689578][T11145] __x64_sys_sendmsg+0x19b/0x260 [ 259.689601][T11145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.689645][T11145] ? do_syscall_64+0xbe/0x3b0 [ 259.689673][T11145] do_syscall_64+0xfa/0x3b0 [ 259.689700][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.689722][T11145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.689740][T11145] ? clear_bhb_loop+0x60/0xb0 [ 259.689762][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.689779][T11145] RIP: 0033:0x7f2c55b8e929 [ 259.689795][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.689810][T11145] RSP: 002b:00007f2c569f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.689827][T11145] RAX: ffffffffffffffda RBX: 00007f2c55db5fa0 RCX: 00007f2c55b8e929 [ 259.689840][T11145] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 259.689852][T11145] RBP: 00007f2c55c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.689863][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.689873][T11145] R13: 0000000000000000 R14: 00007f2c55db5fa0 R15: 00007ffcb0ab69c8 [ 259.689903][T11145] [ 259.689921][T11145] [ 260.236086][T11145] ============================= [ 260.240939][T11145] [ BUG: Invalid wait context ] [ 260.245796][T11145] 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 Tainted: G W [ 260.254126][T11145] ----------------------------- [ 260.258976][T11145] syz.3.1518/11145 is trying to lock: [ 260.264350][T11145] ffff88807f0a8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 260.274814][T11145] other info that might help us debug this: [ 260.280703][T11145] context-{5:5} [ 260.284170][T11145] 3 locks held by syz.3.1518/11145: [ 260.289499][T11145] #0: ffffffff8fa13eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 260.299019][T11145] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 260.308106][T11145] #2: ffff88802fd58368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 260.318570][T11145] stack backtrace: [ 260.322304][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.3.1518 Tainted: G W 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 260.322328][T11145] Tainted: [W]=WARN [ 260.322333][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.322343][T11145] Call Trace: [ 260.322351][T11145] [ 260.322359][T11145] dump_stack_lvl+0x189/0x250 [ 260.322388][T11145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.322413][T11145] ? __pfx__printk+0x10/0x10 [ 260.322432][T11145] ? print_lock_name+0xde/0x100 [ 260.322450][T11145] __lock_acquire+0xbcb/0xd20 [ 260.322477][T11145] ? dev_set_promiscuity+0x10e/0x260 [ 260.322492][T11145] lock_acquire+0x120/0x360 [ 260.322513][T11145] ? dev_set_promiscuity+0x10e/0x260 [ 260.322535][T11145] __mutex_lock+0x182/0xe80 [ 260.322557][T11145] ? dev_set_promiscuity+0x10e/0x260 [ 260.322577][T11145] ? dev_set_promiscuity+0x10e/0x260 [ 260.322593][T11145] ? __pfx___mutex_lock+0x10/0x10 [ 260.322614][T11145] ? netdev_info+0x10a/0x160 [ 260.322636][T11145] ? __pfx_netdev_info+0x10/0x10 [ 260.322660][T11145] dev_set_promiscuity+0x10e/0x260 [ 260.322677][T11145] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 260.322694][T11145] __dev_set_promiscuity+0x531/0x740 [ 260.322712][T11145] ? __hw_addr_add_ex+0x3c5/0x770 [ 260.322730][T11145] __dev_set_rx_mode+0x17c/0x260 [ 260.322746][T11145] dev_uc_add+0xc8/0x120 [ 260.322765][T11145] macsec_dev_open+0xd9/0x530 [ 260.322779][T11145] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 260.322801][T11145] ? __pfx_macsec_dev_open+0x10/0x10 [ 260.322815][T11145] ? ib_device_get_by_netdev+0x84/0x4d0 [ 260.322834][T11145] ? hsr_netdev_notify+0x29e/0xcf0 [ 260.322849][T11145] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 260.322871][T11145] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 260.322900][T11145] ? ip6_route_dev_notify+0x9a/0x5b0 [ 260.322927][T11145] ? notifier_call_chain+0x3bf/0x3e0 [ 260.322945][T11145] __dev_open+0x46d/0x880 [ 260.322971][T11145] ? __pfx___dev_open+0x10/0x10 [ 260.322999][T11145] __dev_change_flags+0x1ea/0x6d0 [ 260.323016][T11145] ? validate_linkmsg+0x765/0x950 [ 260.323037][T11145] ? __pfx___dev_change_flags+0x10/0x10 [ 260.323063][T11145] rtnl_newlink_create+0x555/0xb00 [ 260.323086][T11145] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 260.323100][T11145] ? rtnl_newlink+0x8db/0x1c70 [ 260.323126][T11145] ? __pfx___mutex_lock+0x10/0x10 [ 260.323152][T11145] ? ns_capable+0x8a/0xf0 [ 260.323178][T11145] rtnl_newlink+0x16d6/0x1c70 [ 260.323203][T11145] ? netlink_sendmsg+0x805/0xb30 [ 260.323224][T11145] ? __pfx_rtnl_newlink+0x10/0x10 [ 260.323259][T11145] ? kasan_quarantine_put+0xdd/0x220 [ 260.323285][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.323310][T11145] ? nlmon_xmit+0xb0/0x100 [ 260.323323][T11145] ? kmem_cache_free+0x18f/0x400 [ 260.323343][T11145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 260.323368][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.323388][T11145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 260.323412][T11145] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 260.323438][T11145] ? __dev_queue_xmit+0x27e/0x3a70 [ 260.323463][T11145] ? __lock_acquire+0xab9/0xd20 [ 260.323497][T11145] ? __pfx_rtnl_newlink+0x10/0x10 [ 260.323521][T11145] rtnetlink_rcv_msg+0x7cf/0xb70 [ 260.323546][T11145] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 260.323569][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.323592][T11145] ? ref_tracker_free+0x63a/0x7d0 [ 260.323615][T11145] ? __copy_skb_header+0xa7/0x550 [ 260.323633][T11145] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.323661][T11145] netlink_rcv_skb+0x208/0x470 [ 260.323676][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.323701][T11145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.323721][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.323736][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.323753][T11145] netlink_unicast+0x75b/0x8d0 [ 260.323782][T11145] netlink_sendmsg+0x805/0xb30 [ 260.323803][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.323820][T11145] ? aa_sock_msg_perm+0x94/0x160 [ 260.323843][T11145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.323865][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.323881][T11145] __sock_sendmsg+0x21c/0x270 [ 260.323904][T11145] ____sys_sendmsg+0x505/0x830 [ 260.323923][T11145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.323944][T11145] ? import_iovec+0x74/0xa0 [ 260.323962][T11145] ___sys_sendmsg+0x21f/0x2a0 [ 260.323981][T11145] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.324014][T11145] ? __fget_files+0x2a/0x420 [ 260.324032][T11145] ? __fget_files+0x3a0/0x420 [ 260.324061][T11145] __x64_sys_sendmsg+0x19b/0x260 [ 260.324080][T11145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.324106][T11145] ? do_syscall_64+0xbe/0x3b0 [ 260.324130][T11145] do_syscall_64+0xfa/0x3b0 [ 260.324151][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.324171][T11145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.324187][T11145] ? clear_bhb_loop+0x60/0xb0 [ 260.324205][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.324221][T11145] RIP: 0033:0x7f2c55b8e929 [ 260.324236][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.324251][T11145] RSP: 002b:00007f2c569f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.324267][T11145] RAX: ffffffffffffffda RBX: 00007f2c55db5fa0 RCX: 00007f2c55b8e929 [ 260.324279][T11145] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 260.324289][T11145] RBP: 00007f2c55c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.324302][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.324311][T11145] R13: 0000000000000000 R14: 00007f2c55db5fa0 R15: 00007ffcb0ab69c8 [ 260.324330][T11145] [ 261.758824][T10085] bridge_slave_1: left allmulticast mode [ 261.764746][T10085] bridge_slave_1: left promiscuous mode [ 261.770471][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.778997][T10085] bridge_slave_0: left allmulticast mode [ 261.786717][T10085] bridge_slave_0: left promiscuous mode [ 261.792643][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.857144][T10085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.867125][T10085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.877060][T10085] bond0 (unregistering): Released all slaves [ 261.955589][T10085] hsr_slave_0: left promiscuous mode [ 261.963354][T10085] hsr_slave_1: left promiscuous mode [ 261.969057][T10085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.977267][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.056124][T10085] team0 (unregistering): Port device team_slave_1 removed [ 262.076879][T10085] team0 (unregistering): Port device team_slave_0 removed [ 262.367568][T10085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.426346][T10085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.485783][T10085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.533405][T10085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.972666][T10085] gretap0: left allmulticast mode [ 262.977736][T10085] gretap0: left promiscuous mode [ 262.984280][T10085] bridge0: port 3(gretap0) entered disabled state [ 262.992386][T10085] bridge_slave_1: left allmulticast mode [ 262.998057][T10085] bridge_slave_1: left promiscuous mode [ 263.003802][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.012433][T10085] bridge_slave_0: left allmulticast mode [ 263.018098][T10085] bridge_slave_0: left promiscuous mode [ 263.023919][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.036026][T10085] bridge_slave_1: left allmulticast mode [ 263.042162][T10085] bridge_slave_1: left promiscuous mode [ 263.047812][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.056200][T10085] bridge_slave_0: left allmulticast mode [ 263.062139][T10085] bridge_slave_0: left promiscuous mode [ 263.067800][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.078477][T10085] bridge_slave_1: left allmulticast mode [ 263.084401][T10085] bridge_slave_1: left promiscuous mode [ 263.090080][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.098381][T10085] bridge_slave_0: left allmulticast mode [ 263.104596][T10085] bridge_slave_0: left promiscuous mode [ 263.110263][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.199209][T10085] batman_adv: batadv0: Removing interface: gretap1 [ 263.453350][T10085] bond0 (unregistering): Released all slaves [ 263.463524][T10085] bond1 (unregistering): Released all slaves [ 263.535438][T10085] bond2 (unregistering): Released all slaves [ 263.619388][T10085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.630024][T10085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.640158][T10085] bond0 (unregistering): Released all slaves [ 263.726808][T10085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.737082][T10085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.746875][T10085] bond0 (unregistering): Released all slaves [ 263.834159][T10085] IPVS: stopping backup sync thread 7028 ... [ 264.009664][T10085] hsr_slave_0: left promiscuous mode [ 264.015461][T10085] hsr_slave_1: left promiscuous mode [ 264.021171][T10085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.028767][T10085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.036316][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.047261][T10085] hsr_slave_0: left promiscuous mode [ 264.053218][T10085] hsr_slave_1: left promiscuous mode [ 264.058868][T10085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.066639][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.076624][T10085] hsr_slave_0: left promiscuous mode [ 264.082887][T10085] hsr_slave_1: left promiscuous mode [ 264.088500][T10085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.096363][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.106631][T10085] : left promiscuous mode [ 264.468438][T10085] team0 (unregistering): Port device team_slave_1 removed [ 264.492671][T10085] team0 (unregistering): Port device team_slave_0 removed [ 264.629934][T10085] team0 (unregistering): Port device team_slave_1 removed [ 264.652324][T10085] team0 (unregistering): Port device team_slave_0 removed [ 265.321934][T10085] IPVS: stop unused estimator thread 0...