last executing test programs: 1m24.885383979s ago: executing program 1 (id=97): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, [@mark={0xc}, @XFRMA_IF_ID={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m23.871801405s ago: executing program 1 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="88e4f2a20a7a5458dba71431b8ed327782615148880a678f0f28ba3b56125c74f09a36a676313616e8f3f2e11c2eac890286ed50f6cc6a3dc0562755069a59515185d6fe7b1be193c9521c2fd8d6ef7982600ea3c486fdd358e352c65262b4fd42ac3e053784d2fcd9d35c3883ff2e2c766bf1873dab8fb2468282247bdf311020b0018e938809e623fb84c006924de333e944bf1de0f90e84ce1aed6ae1b844b01f8ba7e2c338f556bddf0f4441425992511d3b25720ba920dea28f9080c1dbe645afb40005bb57b930866852a4eadfa59c67a31744fff7da3a3e0b8de3c17e24319c82c0a008e4ab110efe26e58077648650994d5aada4ced61d8d8b52aff8b8b88cd625a4", 0x106}, {&(0x7f0000000340)}], 0x2}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd04, 0x0, 0x0, 0x1a2ffc199cf08df4, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) shutdown(r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@getsa={0x1d0, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@local, 0x4d5, 0xa, 0x3c}, [@user_kmaddress={0x2c, 0x13, {@in6=@private1, @in=@local, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x80000001}, @proto={0x5, 0x19, 0x3c}, @sec_ctx={0x2a, 0x8, {0x26, 0x8, 0x1, 0x1, 0x1e, "f7faa7cde466e94c609e280947ff675eb0d4427eb1dbd0b79e59fea99332"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth={0x122, 0x1, {{'sha1-ce\x00'}, 0x6d0, "f25adbbb89e0135b25c5f6c55127ccb360cb3cd7e3b52c9da8095a56764ce11217d9c2742a21b03f3927ef6cba99a0c254c07aefb09b5ff42b79fc005ac745b2dfdcecf857dc6992f4a4fc8da0642bf486e08d57b3c15dfa8f58ea6b865d761b1d2957cea160cb0e9e5ee6a38217e253bb92eeffd851941bb14eef56f84cdbdb812124b6fb4e2afbf1b85d73754cc28740ceafd26aced17e0fdd8607f7768bc7746cd760000a023d0fcb69088b41584ad4eb426e8dfaaf3eb11ff1ed427c6c3917277477de21ac9a108b454d6ba6619c54b329a9dab3b3a8fdef"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20040080) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100000042bbd7000fdffffff00000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a5010008001300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB="70fb69b0a001000000b1824d024881c2f6ea93914cd04cef15d9680447261e5197d1e0952049a44b91096eba73ec5915a4004d5de113390768"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x4004743c, 0x0) 1m22.523135166s ago: executing program 1 (id=115): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x24020400) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x5f]}}, &(0x7f00000002c0)=""/12, 0x3f, 0xc, 0x0, 0x1, 0x10000}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000000c0)={@default, @bcast, 0x2, 0x56}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000400791000000000000095", @ANYRES32=r5, @ANYRESHEX=r3, @ANYRESHEX=r4], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x24}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001180)={0x6, 0x65f7, @status={[0xdbd, 0x4, 0x3, 0x2a3, 0xc026, 0x9]}, [0x8000000000, 0x4, 0x7fffffffffffffff, 0x20, 0x38000000000, 0x0, 0xd, 0x9, 0x7, 0x1ff, 0x2, 0x61e, 0x9, 0x100, 0xff, 0x3, 0x1a, 0x2, 0x1, 0x5, 0x10000, 0x0, 0x2, 0x67b, 0x6, 0x7, 0x1, 0x4, 0x9, 0xf558, 0x6, 0x9, 0x200, 0x1, 0xfffffffffffffff9, 0x5, 0x3e4, 0xf2, 0x2, 0x8, 0xfffffffffffffff9, 0x0, 0x6, 0x8, 0xff, 0x7, 0x2, 0x8000000000000000, 0x0, 0x7fff, 0x5, 0x7, 0x7, 0x508, 0x100000000, 0x2, 0x3, 0x401, 0x1000, 0x5, 0x8001, 0xfffffffffffffffb, 0x7, 0xb35f]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="61b9e36ef3fcc5443ec6968a1cebf278a6df423532cd8d9a4efaa8323365ae2c2e72798aab54e3e8b675a029e0178c197d12d788b8c6643747609fb98201a0a267dfce50421ca586219014c16db978264fe08a9699dc6d5f4b6b9f06b600dd77", @ANYRESDEC], 0xb) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x938, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, r8, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x9db, 0x0, 0xffffffffffffffff, 0x8a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xea78a49540ad15b4, 0xd, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x0, 0x4, 0x2, 0xffffffffffffffe0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x6b, &(0x7f0000000200)=""/107, 0x41100, 0x0, '\x00', r1, @fallback=0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xb, 0x8000, 0x800}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[r10, r11, r12], &(0x7f0000000540)=[{0x4, 0x5, 0x3, 0xb}]}, 0x94) connect$ax25(r0, &(0x7f0000004ac0)={{0x3, @null}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfd7a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r14, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r15, 0xff05, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 1m20.959028908s ago: executing program 1 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000000000000118"], 0x28}, 0x20008000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f0000000100)=r6, 0x120) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m20.727772092s ago: executing program 1 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000008c0)=0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1m20.514710233s ago: executing program 1 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @multicast2}}, [0x1, 0xf, 0x7, 0xdac4, 0x3ff, 0xa000000000000, 0x10, 0x1, 0x6, 0x3, 0xc405, 0x8, 0x100, 0x9, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @remote, 0x2}}, [0x5, 0x2, 0x2, 0xfffffffffffffff9, 0x10, 0x5, 0x9, 0x8, 0x8000000000000001, 0xf920, 0x78, 0x3, 0xfffffffffffffbff, 0x8, 0xc2bf]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r7, 0x2}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @multicast2}}, [0x1, 0xf, 0x7, 0xdac4, 0x3ff, 0xa000000000000, 0x10, 0x1, 0x6, 0x3, 0xc405, 0x8, 0x100, 0x9, 0x3]}, &(0x7f00000000c0)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @remote, 0x2}}, [0x5, 0x2, 0x2, 0xfffffffffffffff9, 0x10, 0x5, 0x9, 0x8, 0x8000000000000001, 0xf920, 0x78, 0x3, 0xfffffffffffffbff, 0x8, 0xc2bf]}, &(0x7f0000000000)=0x100) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r7, 0x2}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m5.366582748s ago: executing program 32 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @multicast2}}, [0x1, 0xf, 0x7, 0xdac4, 0x3ff, 0xa000000000000, 0x10, 0x1, 0x6, 0x3, 0xc405, 0x8, 0x100, 0x9, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @remote, 0x2}}, [0x5, 0x2, 0x2, 0xfffffffffffffff9, 0x10, 0x5, 0x9, 0x8, 0x8000000000000001, 0xf920, 0x78, 0x3, 0xfffffffffffffbff, 0x8, 0xc2bf]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r7, 0x2}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @multicast2}}, [0x1, 0xf, 0x7, 0xdac4, 0x3ff, 0xa000000000000, 0x10, 0x1, 0x6, 0x3, 0xc405, 0x8, 0x100, 0x9, 0x3]}, &(0x7f00000000c0)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @remote, 0x2}}, [0x5, 0x2, 0x2, 0xfffffffffffffff9, 0x10, 0x5, 0x9, 0x8, 0x8000000000000001, 0xf920, 0x78, 0x3, 0xfffffffffffffbff, 0x8, 0xc2bf]}, &(0x7f0000000000)=0x100) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r7, 0x2}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 44.660046095s ago: executing program 3 (id=469): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c000000021011907800000000000000004e22"], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000400)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x2, 0x2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, r6, 0x2, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) 44.471954517s ago: executing program 3 (id=470): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) recvfrom$packet(r0, &(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000040)={0x11, 0xf7, r1, 0x1, 0x40, 0x6, @broadcast}, 0x14) 44.23224445s ago: executing program 3 (id=473): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) (async) 31.795469075s ago: executing program 3 (id=473): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) (async) 19.654436894s ago: executing program 3 (id=473): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) (async) 10.281361283s ago: executing program 0 (id=756): syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000700000000010000000000000000000200000000000000000000000a0200000000002e0061"], 0x0, 0x5a, 0x0, 0x0, 0x10}, 0x28) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* '], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$kcm(0x25, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000f0000000f000100000e00"}}}]}, 0x48}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x8, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r12, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000240)=0x11) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000280)="0bc3a3", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f00000000c0)='\x00'/10, 0xa}], 0x3) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x10, '\x00', {0x5, 0x6, "fba1b3", 0x8, 0x88, 0x1, @mcast1, @remote, [@hopopts={0x87, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}}}}}}}, 0x0) 9.922804396s ago: executing program 0 (id=760): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000b00000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 9.782823346s ago: executing program 0 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33220}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x36}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r2, 0x200, 0x70bd2b, 0x8, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x50) 9.283599225s ago: executing program 0 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604fd318001c0600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001efc1f26849aed9696e0a1b8d3550437eb84501a141654374591036bffcc44d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06f989fc2e0802"], 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x8080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1, 0xff, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001b80)={0x2, 0x0, @start={0x0, 0x1, "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", "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"}, [0x4, 0x9, 0x40000007, 0xfffffffffffffffd, 0x3, 0x0, 0x2, 0x7, 0x5, 0x200, 0x9, 0x2a5a, 0x1, 0x2, 0x0, 0x9, 0x9, 0x9, 0x7, 0x100000000, 0x10001, 0x1, 0x0, 0x7, 0x10000, 0x9, 0x20a, 0x9, 0x4, 0x8, 0xf5, 0x9, 0x8, 0xfffffffffffffff8, 0x5, 0xb, 0xc, 0x2, 0x0, 0x25, 0x80000001, 0xd, 0x81, 0xca, 0x8258, 0x9, 0x1, 0x51, 0x4, 0x1, 0x70d2, 0x2, 0x1, 0x4b7, 0x6, 0x2, 0x8, 0x8, 0x2, 0x7, 0x9, 0x5, 0x0, 0xffff]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x36, 0xaf, 0xf, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x10, 0x40, 0x80, 0xfffff000}}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x6, 0xd, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x86, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x1e8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000340)="ea0b35c07baded54bbc90abb9a053db7d05cbf88bd17f62add28cc7bf6ec661f1acd", 0x22}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000380)="50713e2a2f576236c88c3ed43c9eef424e07e7ce7b5ab1c0ca46979187a919ce71fe9f69ea2b910d42b4c7498dda54f89a17bd5c75e55f04675f74fedc0cd90bdbccddda1c9f2a5a63642a3ec7d48657cc6a20bbffbf131bfb881d342b4e9b9c12f3a13fd5cb9613fd12bb774595afddad3507f23cb584370675bb96215d5fa38777ebf0f4f0a84f41d70e322ec939c5388193f269be64af28943913fdd7735f930ab517fd5d48d432c0747d966ab70e1b5fbda1e4a12e11fd019f185b60b9ba30dfbedbfd89c7d0999b9a", 0xcb}, {&(0x7f0000000480)="952e5c5244a25a7b7a9c37f3d5ae36bea91a29551a5a4e1b823105fb", 0x1c}, {0x0}, {&(0x7f00000004c0)="302f867d2eca537b774d9e9f400c25371a26fb71c8381e90", 0x18}], 0x7, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc4}}], 0x68}, 0x4004050) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) 9.276601412s ago: executing program 3 (id=473): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e000300000008"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000100)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0xffffffff}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d0, 0xd0, 0x1b0, 0x1b0, 0x700, 0x280, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'wg1\x00', {}, {}, 0x21, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x73b03e8d, [0x3, 0x5], 0x5, 0x4, 0x6, [@loopback, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @mcast2, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) (async) 8.248058015s ago: executing program 0 (id=773): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000001200000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 8.194315867s ago: executing program 0 (id=774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d8000000", 0x4}], 0x1}, 0x48002) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) (async) listen(r0, 0xfff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d8000000", 0x4}], 0x1}, 0x48002) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) (async) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) (async) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) (async) 4.102458584s ago: executing program 5 (id=804): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x5, 0xa}}}, 0x24}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x1b) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) 3.659528675s ago: executing program 5 (id=810): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) epoll_create1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095b221f9258c12b15e8ee86ed92eea725675ccc120f33d5004000000fa586a208a017a75c316f7713e338369e977e0a607f3a99f4f81382f9139936dd09e59524110f6cba2f6f3bf4c129e721681cd89b0dbd06e14e3b35953bb623835a756424e952d74ce19d341bba8701d4a5d7ab2e6699f7ef9a6313fe8f534df8924e4299ac2c4d5f2ee8a472c9c94"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB, @ANYRESDEC=r0], 0x54}}, 0x0) 3.335894936s ago: executing program 5 (id=811): r0 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x62040200) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.544014964s ago: executing program 5 (id=817): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debb386f9dba4a2dba4dbe076c292c28c9"], 0xe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="781afa4917456cfbd71a14214c5f7c22c1086aeb06fbdb6eedf0687bfa57f431d4e49b8447c87a88270a5d710d4e2ccbb4e4cd51c8eabdaa2a1ec19ff9a8754d29b9b669cfe9a1d72513da466f0cb1e2ee844e189b889af8547e8c8d51bcb82e524f825b56b4b86ec51f2591b01d33869effc50138ff5d6715b4a19f91e525e415323c4c9e58454cfc6495594b0afc62b39c6b81f44002dec555c54346523854cada7201736c9583eae72d425fa04a2da27caefd72c94314915f1eea524bcd17086124ae9621eeac2f5a18a1", 0xcc}], 0x1}, 0x20000085) r2 = socket(0x1d, 0x3, 0x1) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.099659412s ago: executing program 5 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6000a000200aaaaaaaaaabb0000040005"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000040)) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8, 0xfffffffd, '\x00', 0x0, r9}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r10, 0x0, 0xfffffffffffffffc}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) 1.779290801s ago: executing program 5 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000680001b44a6a9d00fdffff7f00000000000000000c00020001000000150000000400040006000300"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@remote, @bcast, @remote, @null, @remote, @default]}, &(0x7f0000000100)=0x48) accept$netrom(r5, &(0x7f0000000640)={{0x3, @null}, [@null, @bcast, @null, @default, @rose, @bcast, @remote, @netrom]}, &(0x7f00000001c0)=0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="2f0000000000b50cb403a51a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], &(0x7f0000000340)='syzkaller\x00', 0x9, 0xe5, &(0x7f0000000380)=""/229, 0x0, 0x21, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x282bb, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x5, 0x0, 0x1}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000e0000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000008a009500000000000000d3ba0200fcffffff3d05300004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x2e, &(0x7f00000007c0)=""/46, 0x40f00, 0x52, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x4, 0x8, 0xfff}, 0x10, 0x0, r0, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x2}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0xf3a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000580000082abd7000fddbdf250008000300", @ANYRES32=r12, @ANYBLOB="96b308ed", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0800010001000000080001000100000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x54}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x104}}, 0x0) 1.189232479s ago: executing program 4 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6adef}, @IFLA_BROADCAST={0xa, 0x2, @random="c79c9cd7b2f9"}]}, 0x48}}, 0x0) 1.095826997s ago: executing program 4 (id=825): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000004c0)={{0x0}, 0x0}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d", 0x17}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/38, 0x26}], 0x1) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4, 0xfff, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000600)="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", 0x113}, {&(0x7f00000000c0)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000280)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.068315917s ago: executing program 2 (id=826): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x19, 0x0, 0x1}, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004"], 0x17) (async) bind$bt_l2cap(r0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r4 = accept4(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000040)=0x80, 0x80000) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'erspan0\x00', r5, 0x8, 0x7800, 0x8, 0x6, {{0xb, 0x4, 0x1, 0x22, 0x2c, 0x68, 0x0, 0x2, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0x17, 0xc3, [@dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010101, @empty, @multicast1, @loopback]}]}}}}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x7c}}, 0x0) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x1, 0x0, 0xfffffffffffffe34}, 0x0) (async, rerun: 32) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x75}, 0x40000020) (rerun: 32) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x2, 0x7, 0x301, 0x0, 0x0, {0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xde5b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x70000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 974.534503ms ago: executing program 4 (id=827): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xffffff9b, 0x1, 0x32}, 0x9c) 900.059234ms ago: executing program 2 (id=828): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) 837.422612ms ago: executing program 4 (id=829): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000e80)=[{&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x0, @loopback, 0xe89f}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="e8e2df27", 0x4}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="3000000000000000840000000100"], 0x30, 0x81}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 808.492927ms ago: executing program 2 (id=830): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000030000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 687.325689ms ago: executing program 2 (id=831): unshare(0x68040200) unshare(0x40040100) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcd000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000006600ebff0000000000200000"], 0x50) bind$bt_rfcomm(r1, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x38, r11, 0x1, 0x20, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 587.652151ms ago: executing program 4 (id=832): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x9e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaabaaaaaaaaaa88a800008100000086dd60fc1fcb00603a00fc000000000000000000000000020000ff0200000800000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000012b00000000000000000204000000000000000000000000000000ffffac1414bb8800040000000000000000000000000098"], 0x0) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = epoll_create(0x7fffc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0xe}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2de4d047e94d2df8000002000000000001"], 0x14}}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRESDEC=r0, @ANYRES64=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8}, 0x10) socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="890c040000300000280012800ae7352365aaa95f6e6b000018000a8014000200fc0100000000000000ce0bba93c3fbf5dec1c70ace"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x30}}], 0x18}}], 0x1, 0x4040884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8, 0x0, 0x180000}, 0x18) close(r5) 311.400108ms ago: executing program 2 (id=833): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'nicvf0\x00', {0x2ef}, 0x59}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00051100000800"], 0x66) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) unshare(0x2c060000) unshare(0x24020400) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="455a6c5bdf1a3e4b970dd49843963e49658d4a0d7155f9d720ebc3e462037e2d61508bbe827d15", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) 52.288559ms ago: executing program 2 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x6, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="2c00000010000304000000000000000000080000", @ANYRES32=r5, @ANYBLOB="15020000000000000a000100aaaaaaaaaa1c"], 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 0s ago: executing program 4 (id=835): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000001c0)=ANY=[], &(0x7f0000001840)=""/2, 0x79, 0x2, 0x401, 0x6}, 0x28) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 67.338404][ T5815] cgroup: Unknown subsys name 'net' [ 67.412051][ T5815] cgroup: Unknown subsys name 'cpuset' [ 67.420301][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.799577][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.399472][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.405971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.464040][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.472320][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.472878][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.480420][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.495012][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.502460][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.523121][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.525199][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.530882][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.547536][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.554983][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.586658][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.591215][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.594273][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.601482][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.617229][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.626705][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.630539][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.642322][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.646041][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.649757][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.657231][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.673199][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.680513][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.691011][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.250869][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 73.295503][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 73.399397][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.612795][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 73.623397][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.631879][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.639698][ T5825] bridge_slave_0: entered allmulticast mode [ 73.647006][ T5825] bridge_slave_0: entered promiscuous mode [ 73.659866][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.667320][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.674473][ T5825] bridge_slave_1: entered allmulticast mode [ 73.682191][ T5825] bridge_slave_1: entered promiscuous mode [ 73.710750][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.717970][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.725245][ T5826] bridge_slave_0: entered allmulticast mode [ 73.732481][ T5826] bridge_slave_0: entered promiscuous mode [ 73.740350][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 73.794764][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.802373][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.809705][ T5831] bridge_slave_0: entered allmulticast mode [ 73.817204][ T5831] bridge_slave_0: entered promiscuous mode [ 73.824248][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.832918][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.840296][ T5826] bridge_slave_1: entered allmulticast mode [ 73.848861][ T5826] bridge_slave_1: entered promiscuous mode [ 73.883542][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.890822][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.898085][ T5831] bridge_slave_1: entered allmulticast mode [ 73.905012][ T5831] bridge_slave_1: entered promiscuous mode [ 73.945662][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.974695][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.987484][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.015482][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.089791][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.118746][ T5825] team0: Port device team_slave_0 added [ 74.140674][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.164832][ T5826] team0: Port device team_slave_0 added [ 74.198907][ T5825] team0: Port device team_slave_1 added [ 74.231547][ T5826] team0: Port device team_slave_1 added [ 74.251794][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.259228][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.266885][ T5838] bridge_slave_0: entered allmulticast mode [ 74.274254][ T5838] bridge_slave_0: entered promiscuous mode [ 74.294224][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.301616][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.309081][ T5828] bridge_slave_0: entered allmulticast mode [ 74.317019][ T5828] bridge_slave_0: entered promiscuous mode [ 74.325475][ T5831] team0: Port device team_slave_0 added [ 74.343915][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.351840][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.360012][ T5838] bridge_slave_1: entered allmulticast mode [ 74.367290][ T5838] bridge_slave_1: entered promiscuous mode [ 74.385371][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.392527][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.400191][ T5828] bridge_slave_1: entered allmulticast mode [ 74.407254][ T5828] bridge_slave_1: entered promiscuous mode [ 74.415240][ T5831] team0: Port device team_slave_1 added [ 74.440020][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.447024][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.473686][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.497921][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.504878][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.531444][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.564509][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.571687][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.598017][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.622661][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.629651][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.656377][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.676676][ T5148] Bluetooth: hci1: command tx timeout [ 74.681847][ T5835] Bluetooth: hci0: command tx timeout [ 74.689546][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.697067][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.723012][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.744688][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.756384][ T5835] Bluetooth: hci4: command tx timeout [ 74.757099][ T5845] Bluetooth: hci2: command tx timeout [ 74.767448][ T5148] Bluetooth: hci3: command tx timeout [ 74.785235][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.795444][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.802597][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.828790][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.842384][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.877422][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.923838][ T5825] hsr_slave_0: entered promiscuous mode [ 74.930984][ T5825] hsr_slave_1: entered promiscuous mode [ 74.953230][ T5828] team0: Port device team_slave_0 added [ 74.998092][ T5838] team0: Port device team_slave_0 added [ 75.015913][ T5828] team0: Port device team_slave_1 added [ 75.025589][ T5826] hsr_slave_0: entered promiscuous mode [ 75.032227][ T5826] hsr_slave_1: entered promiscuous mode [ 75.039128][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.047310][ T5826] Cannot create hsr debugfs directory [ 75.066176][ T5838] team0: Port device team_slave_1 added [ 75.077949][ T5831] hsr_slave_0: entered promiscuous mode [ 75.084186][ T5831] hsr_slave_1: entered promiscuous mode [ 75.090452][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.098054][ T5831] Cannot create hsr debugfs directory [ 75.195323][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.203127][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.230726][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.252029][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.259217][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.285312][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.309386][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.316372][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.343049][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.372025][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.380140][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.406723][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.566360][ T5828] hsr_slave_0: entered promiscuous mode [ 75.572622][ T5828] hsr_slave_1: entered promiscuous mode [ 75.579558][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.587180][ T5828] Cannot create hsr debugfs directory [ 75.634014][ T5838] hsr_slave_0: entered promiscuous mode [ 75.641164][ T5838] hsr_slave_1: entered promiscuous mode [ 75.647747][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.655742][ T5838] Cannot create hsr debugfs directory [ 75.991025][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.002618][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.014572][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.053637][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.116102][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.132038][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.142007][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.166416][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.269024][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.279984][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.292706][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.319924][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.410285][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.428231][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.440876][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.451532][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.513052][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.563376][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.592903][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.600161][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.625201][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.639994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.647258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.680244][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.689287][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.702801][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.714708][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.756480][ T5845] Bluetooth: hci0: command tx timeout [ 76.766078][ T5148] Bluetooth: hci1: command tx timeout [ 76.804361][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.833833][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.838401][ T5148] Bluetooth: hci4: command tx timeout [ 76.842300][ T5845] Bluetooth: hci2: command tx timeout [ 76.846019][ T5148] Bluetooth: hci3: command tx timeout [ 76.863132][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.870293][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.893880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.901046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.949069][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.995181][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.002382][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.034623][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.041825][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.071832][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.135349][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.192273][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.199461][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.235382][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.242557][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.304442][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.327230][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.388354][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.441190][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.448421][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.578605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.585793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.641340][ T5825] veth0_vlan: entered promiscuous mode [ 77.672299][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.710584][ T5825] veth1_vlan: entered promiscuous mode [ 77.845408][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.903207][ T5825] veth0_macvtap: entered promiscuous mode [ 77.915365][ T5826] veth0_vlan: entered promiscuous mode [ 77.925621][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.950090][ T5825] veth1_macvtap: entered promiscuous mode [ 77.966676][ T5826] veth1_vlan: entered promiscuous mode [ 78.079870][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.101264][ T5828] veth0_vlan: entered promiscuous mode [ 78.122411][ T5831] veth0_vlan: entered promiscuous mode [ 78.131974][ T5826] veth0_macvtap: entered promiscuous mode [ 78.144392][ T5826] veth1_macvtap: entered promiscuous mode [ 78.161338][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.171825][ T5828] veth1_vlan: entered promiscuous mode [ 78.188096][ T5831] veth1_vlan: entered promiscuous mode [ 78.221889][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.233221][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.251753][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.259860][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.269831][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.292173][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.332797][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.382733][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.404355][ T5831] veth0_macvtap: entered promiscuous mode [ 78.426925][ T5828] veth0_macvtap: entered promiscuous mode [ 78.446147][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.470311][ T5831] veth1_macvtap: entered promiscuous mode [ 78.490395][ T5828] veth1_macvtap: entered promiscuous mode [ 78.506054][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557283][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.619835][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.627770][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.631820][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.643284][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.699610][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.727949][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.742562][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.770610][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.777364][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.791404][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.799564][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.814116][ T3467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.823681][ T3467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.836353][ T5845] Bluetooth: hci0: command tx timeout [ 78.837679][ T5835] Bluetooth: hci1: command tx timeout [ 78.863198][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.875086][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.908400][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.916272][ T5835] Bluetooth: hci3: command tx timeout [ 78.918355][ T5845] Bluetooth: hci4: command tx timeout [ 78.922518][ T5148] Bluetooth: hci2: command tx timeout [ 78.954698][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.963811][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.014483][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.018225][ T5838] veth0_vlan: entered promiscuous mode [ 79.030056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.078393][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.120071][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.142266][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.143401][ T5838] veth1_vlan: entered promiscuous mode [ 79.234030][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.247312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.363594][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.383681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.445150][ T5838] veth0_macvtap: entered promiscuous mode [ 79.479793][ T5838] veth1_macvtap: entered promiscuous mode [ 79.482932][ T5949] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 79.514722][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.531372][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 79.550316][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.579038][ T5949] Zero length message leads to an empty skb [ 79.633467][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.685708][ T5953] tap0: tun_chr_ioctl cmd 1074025677 [ 79.692878][ T5956] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 79.705550][ T5953] tap0: linktype set to 0 [ 79.743592][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.807661][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.813503][ T5958] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8'. [ 79.837431][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.872411][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.889680][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.899720][ T5958] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 79.927395][ T5963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 79.931154][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.948874][ T5958] bridge_slave_1: left allmulticast mode [ 79.954848][ T5958] bridge_slave_1: left promiscuous mode [ 79.969608][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.002058][ T5958] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 80.268694][ T5974] !: renamed from dummy0 (while UP) [ 80.319866][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.328987][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.348522][ T5978] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 80.540028][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.578556][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.843066][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.922056][ T5148] Bluetooth: hci1: command tx timeout [ 80.929496][ T5835] Bluetooth: hci0: command tx timeout [ 80.996088][ T5148] Bluetooth: hci2: command tx timeout [ 81.001748][ T5835] Bluetooth: hci3: command tx timeout [ 81.002999][ T5845] Bluetooth: hci4: command tx timeout [ 81.366650][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.660206][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 81.753663][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 81.786170][ T6025] bridge_slave_1: left allmulticast mode [ 81.896327][ T6025] bridge_slave_1: left promiscuous mode [ 81.963943][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.242263][ T6025] bridge_slave_0: left allmulticast mode [ 82.280161][ T6025] bridge_slave_0: left promiscuous mode [ 82.301000][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.626022][ T6084] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 82.772373][ T6084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23'. [ 83.011801][ T6098] netlink: 'syz.4.28': attribute type 2 has an invalid length. [ 83.084871][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 83.551898][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30'. [ 83.869368][ T6111] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 84.075614][ T6121] xt_TCPMSS: Only works on TCP SYN packets [ 84.191646][ T5905] IPVS: starting estimator thread 0... [ 84.287921][ T6130] IPVS: using max 26 ests per chain, 62400 per kthread [ 84.404951][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.412750][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.552066][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.575762][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.789451][ T6142] macsec0: entered promiscuous mode [ 84.806547][ T6142] macsec0: entered allmulticast mode [ 84.827030][ T6142] veth1_macvtap: entered allmulticast mode [ 84.849063][ T1162] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.909008][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.944502][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.005635][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.181742][ T6173] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 85.206204][ T6173] netlink: 208 bytes leftover after parsing attributes in process `syz.4.44'. [ 85.215104][ T6173] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 85.295893][ T6173] netlink: 'syz.4.44': attribute type 2 has an invalid length. [ 85.591859][ T6191] Bluetooth: MGMT ver 1.23 [ 86.004161][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 86.049840][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 86.171336][ T6215] gretap0: entered promiscuous mode [ 86.216151][ T6215] macvlan2: entered promiscuous mode [ 86.233820][ T6215] macvlan2: entered allmulticast mode [ 86.245171][ T6215] gretap0: entered allmulticast mode [ 86.285208][ T6228] IPv6: syztnl1: Disabled Multicast RS [ 86.527217][ T6246] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 86.623633][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 86.776840][ T9] cfg80211: failed to load regulatory.db [ 87.527747][ T6296] !: renamed from dummy0 [ 87.769113][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 87.791853][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 87.855321][ T6310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.985182][ T6310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.127239][ T6327] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'. [ 88.165116][ T6310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.354968][ T6310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.629613][ T6341] dvmrp1: entered allmulticast mode [ 88.668970][ T6343] dvmrp1: left allmulticast mode [ 89.008062][ T6055] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.058263][ T6055] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.144402][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 89.159795][ T6354] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 89.200318][ T6055] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.216367][ T6055] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.375500][ T6354] gretap2: entered promiscuous mode [ 89.406313][ T6359] 8021q: VLANs not supported on ipvlan1 [ 89.622601][ T6368] netlink: 'syz.0.104': attribute type 39 has an invalid length. [ 89.720617][ T6376] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 89.994208][ T6393] syz.1.105 (6393) used obsolete PPPIOCDETACH ioctl [ 90.407520][ T6404] netlink: 244 bytes leftover after parsing attributes in process `syz.0.110'. [ 90.474718][ T6064] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.536021][ T6055] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.896792][ T6055] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.922335][ T6055] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.008369][ T6412] tipc: Started in network mode [ 91.013408][ T6412] tipc: Node identity ac14142a, cluster identity 4711 [ 91.029825][ T6412] tipc: Enabled bearer , priority 10 [ 91.075535][ T6414] tipc: Enabling of bearer rejected, already enabled [ 91.109354][ T6430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.116'. [ 91.514133][ T6442] bond0: entered promiscuous mode [ 91.535894][ T6442] bond_slave_0: entered promiscuous mode [ 91.560135][ T6442] bond_slave_1: entered promiscuous mode [ 91.608219][ T6442] bond0: entered allmulticast mode [ 91.613372][ T6442] bond_slave_0: entered allmulticast mode [ 91.634765][ T6442] bond_slave_1: entered allmulticast mode [ 91.647626][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.156773][ T9] tipc: Node number set to 2886997034 [ 92.263649][ T6464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.703707][ T5198] udevd[5198]: worker [5977] terminated by signal 33 (Unknown signal 33) [ 92.728943][ T5198] udevd[5198]: worker [5977] failed while handling '/devices/virtual/block/loop3' [ 92.773390][ T6484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.801266][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 92.996716][ T6488] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 93.055288][ T6499] netlink: 27 bytes leftover after parsing attributes in process `syz.2.133'. [ 93.146568][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 93.155713][ T6488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.185355][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 93.194368][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 93.510011][ T6525] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 93.511791][ T6519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.138'. [ 93.530571][ T6519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.138'. [ 93.891983][ T6544] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 93.998694][ T6533] netlink: 44 bytes leftover after parsing attributes in process `syz.4.140'. [ 94.377633][ T9] IPVS: starting estimator thread 0... [ 94.487205][ T6565] IPVS: using max 28 ests per chain, 67200 per kthread [ 96.032218][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 96.131909][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 97.178183][ T6625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.330053][ T6631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 97.344372][ T6632] xfrm1: entered promiscuous mode [ 97.363796][ T6632] xfrm1: entered allmulticast mode [ 97.475693][ T6638] xt_hashlimit: size too large, truncated to 1048576 [ 97.593003][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 97.623582][ T6636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'. [ 97.644017][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 97.762342][ T6650] netlink: 9 bytes leftover after parsing attributes in process `syz.2.161'. [ 97.836126][ T6650] gretap0: entered promiscuous mode [ 98.165510][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 98.194999][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 98.210419][ T6661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'. [ 98.415373][ T6673] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.109609][ T6704] Illegal XDP return value 4294967274 on prog (id 117) dev N/A, expect packet loss! [ 100.137178][ T6753] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 100.583098][ T6770] bridge_slave_0: left allmulticast mode [ 100.627966][ T6770] bridge_slave_0: left promiscuous mode [ 100.676201][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.734159][ T6770] bridge_slave_1: left allmulticast mode [ 100.744373][ T6770] bridge_slave_1: left promiscuous mode [ 100.769212][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.840963][ T6770] bond0: (slave bond_slave_0): Releasing backup interface [ 100.864968][ T6770] bond0: (slave bond_slave_1): Releasing backup interface [ 100.908908][ T6770] team0: Port device team_slave_0 removed [ 100.931172][ T6770] team0: Port device team_slave_1 removed [ 100.938971][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.950525][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.980154][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.993742][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.189832][ T6773] team0 (unregistering): Port device team_slave_0 removed [ 101.204425][ T6773] team0 (unregistering): Port device team_slave_1 removed [ 101.251638][ T6780] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.264350][ T6780] team0: Port device batadv1 added [ 101.308936][ T6777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.572156][ T6807] __nla_validate_parse: 5 callbacks suppressed [ 101.572173][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 101.628639][ T6806] openvswitch: netlink: Message has 4232 unknown bytes. [ 101.853814][ T6819] tipc: Started in network mode [ 101.878204][ T6819] tipc: Node identity 7, cluster identity 4711 [ 101.905326][ T6819] tipc: Node number set to 7 [ 101.974538][ T6827] netlink: 92 bytes leftover after parsing attributes in process `syz.2.200'. [ 102.083195][ T30] audit: type=1800 audit(1751619831.450:2): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.194" name="cgroup.controllers" dev="tmpfs" ino=213 res=0 errno=0 [ 102.582584][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'. [ 102.961242][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 103.518462][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 103.538353][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 103.579377][ T6888] netlink: 'syz.0.212': attribute type 12 has an invalid length. [ 103.604264][ T6894] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 103.615768][ T6888] netlink: 'syz.0.212': attribute type 11 has an invalid length. [ 103.653900][ T6889] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 103.782895][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 103.884253][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 103.979817][ T6904] !: entered promiscuous mode [ 104.015783][ T6904] macsec1: entered allmulticast mode [ 104.046232][ T6904] !: entered allmulticast mode [ 104.089433][ T6904] !: left allmulticast mode [ 104.094188][ T6904] !: left promiscuous mode [ 104.121438][ T6912] netlink: 44 bytes leftover after parsing attributes in process `syz.4.217'. [ 104.357518][ T6915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.218'. [ 105.209890][ T5830] IPVS: starting estimator thread 0... [ 105.283882][ T6975] warning: `syz.4.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.306023][ T6970] IPVS: using max 28 ests per chain, 67200 per kthread [ 105.439860][ T6979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.105490][ T6995] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 106.118728][ T6995] batadv0: entered promiscuous mode [ 106.124006][ T6995] batadv0: entered allmulticast mode [ 106.131791][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.139178][ T6995] bridge0: port 3(batadv0) entered blocking state [ 106.147644][ T6995] bridge0: port 3(batadv0) entered disabled state [ 106.159051][ T6059] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 106.168681][ T6059] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 106.708053][ T7026] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 106.731365][ T7026] __nla_validate_parse: 13 callbacks suppressed [ 106.731382][ T7026] netlink: 72 bytes leftover after parsing attributes in process `syz.3.252'. [ 106.753913][ T7029] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 106.797909][ T7029] netlink: 72 bytes leftover after parsing attributes in process `syz.3.252'. [ 106.963721][ T7029] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 107.248819][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.255'. [ 107.820872][ T7052] ieee802154 phy1 wpan1: encryption failed: -22 [ 107.837415][ T7053] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 107.873370][ T7053] team0: Port device 0! added [ 107.899600][ T7053] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 107.940131][ T7053] team0: Port device 0! removed [ 107.962678][ T7053] !: entered promiscuous mode [ 107.968568][ T7053] !: entered allmulticast mode [ 107.974131][ T7053] bond0: (slave 0!): Enslaving as an active interface with an up link [ 108.664844][ T7081] xt_CT: No such helper "snmp" [ 108.733363][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.742572][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.751322][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.760321][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.769452][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.843828][ T7052] netlink: 248 bytes leftover after parsing attributes in process `syz.3.259'. [ 108.928422][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 108.959796][ T7055] Bluetooth: MGMT ver 1.23 [ 109.013365][ T7091] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 109.149271][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 109.186303][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 109.206271][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 109.422827][ T7103] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 109.593313][ T7110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.274'. [ 109.730141][ T5845] block nbd0: Receive control failed (result -32) [ 109.835697][ T7121] sctp: [Deprecated]: syz.2.276 (pid 7121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.835697][ T7121] Use struct sctp_sack_info instead [ 110.007585][ T7131] netlink: 236 bytes leftover after parsing attributes in process `syz.2.279'. [ 110.085467][ T7087] chnl_net:caif_netlink_parms(): no params data found [ 110.266218][ T7144] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 110.687631][ T7158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.712897][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.727636][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.736286][ T7087] bridge_slave_0: entered allmulticast mode [ 110.751513][ T7087] bridge_slave_0: entered promiscuous mode [ 110.791077][ T7162] geneve0: entered promiscuous mode [ 110.797353][ T7162] geneve0: entered allmulticast mode [ 110.836037][ T5845] Bluetooth: hci5: command tx timeout [ 111.090453][ T7175] IPVS: Scheduler module ip_vs_ not found [ 111.098090][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.120791][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.150922][ T7087] bridge_slave_1: entered allmulticast mode [ 111.205050][ T7087] bridge_slave_1: entered promiscuous mode [ 111.305017][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.346130][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.362241][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.581611][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.636696][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639261][ T7203] FAULT_INJECTION: forcing a failure. [ 111.639261][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.665663][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.3.299 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 111.665690][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.665714][ T7203] Call Trace: [ 111.665721][ T7203] [ 111.665729][ T7203] dump_stack_lvl+0x189/0x250 [ 111.665765][ T7203] ? __pfx____ratelimit+0x10/0x10 [ 111.665784][ T7203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.665810][ T7203] ? __pfx__printk+0x10/0x10 [ 111.665828][ T7203] ? __might_fault+0xb0/0x130 [ 111.665854][ T7203] should_fail_ex+0x414/0x560 [ 111.665877][ T7203] _copy_from_iter+0x1db/0x16f0 [ 111.665902][ T7203] ? rcu_is_watching+0x15/0xb0 [ 111.665926][ T7203] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 111.665945][ T7203] ? __pfx__copy_from_iter+0x10/0x10 [ 111.665968][ T7203] ? __build_skb_around+0x257/0x3e0 [ 111.665992][ T7203] ? netlink_sendmsg+0x642/0xb30 [ 111.666009][ T7203] ? skb_put+0x11b/0x210 [ 111.666033][ T7203] netlink_sendmsg+0x6b2/0xb30 [ 111.666062][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.666085][ T7203] ? aa_sock_msg_perm+0x94/0x160 [ 111.666107][ T7203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.666127][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.666147][ T7203] __sock_sendmsg+0x21c/0x270 [ 111.666168][ T7203] ____sys_sendmsg+0x505/0x830 [ 111.666195][ T7203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.666224][ T7203] ? import_iovec+0x74/0xa0 [ 111.666243][ T7203] ___sys_sendmsg+0x21f/0x2a0 [ 111.666266][ T7203] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.666324][ T7203] ? __fget_files+0x2a/0x420 [ 111.666341][ T7203] ? __fget_files+0x3a0/0x420 [ 111.666369][ T7203] __x64_sys_sendmsg+0x19b/0x260 [ 111.666394][ T7203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.666426][ T7203] ? __pfx_ksys_write+0x10/0x10 [ 111.666447][ T7203] ? rcu_is_watching+0x15/0xb0 [ 111.666474][ T7203] ? do_syscall_64+0xbe/0x3b0 [ 111.666497][ T7203] do_syscall_64+0xfa/0x3b0 [ 111.666514][ T7203] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.666533][ T7203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.666549][ T7203] ? clear_bhb_loop+0x60/0xb0 [ 111.666569][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.666585][ T7203] RIP: 0033:0x7fa57798e929 [ 111.666606][ T7203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.666618][ T7203] RSP: 002b:00007fa57881e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.666637][ T7203] RAX: ffffffffffffffda RBX: 00007fa577bb5fa0 RCX: 00007fa57798e929 [ 111.666649][ T7203] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000003 [ 111.666660][ T7203] RBP: 00007fa57881e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.666670][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.666679][ T7203] R13: 0000000000000000 R14: 00007fa577bb5fa0 R15: 00007ffc96fe05b8 [ 111.666713][ T7203] [ 111.688882][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.776321][ T5845] Bluetooth: hci0: command tx timeout [ 111.886362][ T5830] IPVS: starting estimator thread 0... [ 111.966531][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.300'. [ 112.080236][ T7216] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 112.126909][ T7087] team0: Port device team_slave_0 added [ 112.142516][ T7087] team0: Port device team_slave_1 added [ 112.156523][ T7209] IPVS: using max 31 ests per chain, 74400 per kthread [ 112.278583][ T7221] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.306'. [ 112.300453][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.312351][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.341806][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.355385][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.365584][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.392176][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.502379][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'. [ 112.633208][ T7087] hsr_slave_0: entered promiscuous mode [ 112.644251][ T7087] hsr_slave_1: entered promiscuous mode [ 112.657025][ T7087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.670144][ T7087] Cannot create hsr debugfs directory [ 112.677504][ T7232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.309'. [ 112.687343][ T7232] netlink: 245 bytes leftover after parsing attributes in process `syz.2.309'. [ 112.750392][ T7235] netlink: 'syz.3.310': attribute type 13 has an invalid length. [ 112.916204][ T5148] Bluetooth: hci5: command tx timeout [ 113.024716][ T7246] syzkaller1: entered promiscuous mode [ 113.030405][ T7246] syzkaller1: entered allmulticast mode [ 113.032416][ T7252] netlink: 'syz.2.314': attribute type 39 has an invalid length. [ 113.359658][ T7087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.373986][ T7087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.389620][ T7087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.411374][ T7087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.482710][ T7271] netlink: 76 bytes leftover after parsing attributes in process `syz.3.318'. [ 113.612479][ T7087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.661922][ T7087] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.696987][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.704121][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.722752][ T7275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.320'. [ 113.738078][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.745325][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.783056][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 113.818186][ T7277] gretap0: entered promiscuous mode [ 113.824075][ T7277] macsec1: entered promiscuous mode [ 113.831106][ T7277] macsec1: entered allmulticast mode [ 113.839512][ T7277] gretap0: entered allmulticast mode [ 114.314569][ T7296] netlink: 60 bytes leftover after parsing attributes in process `syz.3.327'. [ 114.475230][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'. [ 114.604256][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.996172][ T5148] Bluetooth: hci5: command 0x040f tx timeout [ 115.322008][ T7087] veth0_vlan: entered promiscuous mode [ 115.348739][ T7087] veth1_vlan: entered promiscuous mode [ 115.423318][ T7087] veth0_macvtap: entered promiscuous mode [ 115.454901][ T7087] veth1_macvtap: entered promiscuous mode [ 115.527877][ T7087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.558724][ T7087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.581160][ T7348] FAULT_INJECTION: forcing a failure. [ 115.581160][ T7348] name failslab, interval 1, probability 0, space 0, times 1 [ 115.602467][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.4.340 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 115.602492][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.602501][ T7348] Call Trace: [ 115.602508][ T7348] [ 115.602515][ T7348] dump_stack_lvl+0x189/0x250 [ 115.602541][ T7348] ? __pfx____ratelimit+0x10/0x10 [ 115.602560][ T7348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.602582][ T7348] ? __pfx__printk+0x10/0x10 [ 115.602601][ T7348] ? __pfx___might_resched+0x10/0x10 [ 115.602623][ T7348] ? fs_reclaim_acquire+0x7d/0x100 [ 115.602645][ T7348] should_fail_ex+0x414/0x560 [ 115.602669][ T7348] should_failslab+0xa8/0x100 [ 115.602686][ T7348] __kmalloc_noprof+0xcb/0x4f0 [ 115.602701][ T7348] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 115.602729][ T7348] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 115.602758][ T7348] genl_family_rcv_msg_doit+0xb8/0x300 [ 115.602787][ T7348] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.602811][ T7348] ? rcu_is_watching+0x15/0xb0 [ 115.602835][ T7348] ? apparmor_capable+0x137/0x1b0 [ 115.602859][ T7348] ? bpf_lsm_capable+0x9/0x20 [ 115.602872][ T7348] ? security_capable+0x7e/0x2e0 [ 115.602898][ T7348] genl_rcv_msg+0x60e/0x790 [ 115.602925][ T7348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.602944][ T7348] ? ref_tracker_free+0x63a/0x7d0 [ 115.602962][ T7348] ? __pfx_wg_set_device+0x10/0x10 [ 115.602981][ T7348] ? __pfx_ref_tracker_free+0x10/0x10 [ 115.603010][ T7348] netlink_rcv_skb+0x208/0x470 [ 115.603029][ T7348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.603052][ T7348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.603087][ T7348] ? down_read+0x1ad/0x2e0 [ 115.603109][ T7348] genl_rcv+0x28/0x40 [ 115.603128][ T7348] netlink_unicast+0x75b/0x8d0 [ 115.603156][ T7348] netlink_sendmsg+0x805/0xb30 [ 115.603184][ T7348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.603205][ T7348] ? aa_sock_msg_perm+0x94/0x160 [ 115.603225][ T7348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.603247][ T7348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.603266][ T7348] __sock_sendmsg+0x21c/0x270 [ 115.603287][ T7348] ____sys_sendmsg+0x505/0x830 [ 115.603313][ T7348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.603349][ T7348] ? import_iovec+0x74/0xa0 [ 115.603367][ T7348] ___sys_sendmsg+0x21f/0x2a0 [ 115.603391][ T7348] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.603447][ T7348] ? __fget_files+0x2a/0x420 [ 115.603463][ T7348] ? __fget_files+0x3a0/0x420 [ 115.603490][ T7348] __x64_sys_sendmsg+0x19b/0x260 [ 115.603513][ T7348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.603544][ T7348] ? __pfx_ksys_write+0x10/0x10 [ 115.603564][ T7348] ? rcu_is_watching+0x15/0xb0 [ 115.603590][ T7348] ? do_syscall_64+0xbe/0x3b0 [ 115.603612][ T7348] do_syscall_64+0xfa/0x3b0 [ 115.603629][ T7348] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.603645][ T7348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.603660][ T7348] ? clear_bhb_loop+0x60/0xb0 [ 115.603680][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.603694][ T7348] RIP: 0033:0x7fc96d78e929 [ 115.603709][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.603720][ T7348] RSP: 002b:00007fc96e5da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.603738][ T7348] RAX: ffffffffffffffda RBX: 00007fc96d9b5fa0 RCX: 00007fc96d78e929 [ 115.603749][ T7348] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000003 [ 115.603759][ T7348] RBP: 00007fc96e5da090 R08: 0000000000000000 R09: 0000000000000000 [ 115.603769][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.603778][ T7348] R13: 0000000000000000 R14: 00007fc96d9b5fa0 R15: 00007ffdb2350708 [ 115.603804][ T7348] [ 117.079039][ T5148] Bluetooth: hci5: command 0x040f tx timeout [ 117.265452][ T7358] wireguard0: entered promiscuous mode [ 117.281999][ T7358] wireguard0: entered allmulticast mode [ 117.380818][ T6059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.396901][ T7362] __nla_validate_parse: 6 callbacks suppressed [ 117.396919][ T7362] netlink: 248 bytes leftover after parsing attributes in process `syz.2.344'. [ 117.422743][ T6059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.451921][ T6059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.519033][ T6059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.641488][ T7366] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 117.666005][ T7366] netlink: 92 bytes leftover after parsing attributes in process `syz.3.346'. [ 117.736204][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.742300][ T7377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.744053][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.814703][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 117.834600][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.848702][ T7377] netlink: 'syz.2.348': attribute type 30 has an invalid length. [ 117.862687][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.884861][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 117.904727][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.925935][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.934700][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.015885][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.049548][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 118.083440][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.351'. [ 118.963335][ T7439] netlink: 'syz.4.365': attribute type 11 has an invalid length. [ 118.999874][ T7439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.365'. [ 119.054051][ T7439] netlink: 'syz.4.365': attribute type 11 has an invalid length. [ 119.071610][ T7439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.365'. [ 119.084052][ T7441] nbd: nbd0 already in use [ 119.161917][ T5148] Bluetooth: hci5: command 0x040f tx timeout [ 119.256706][ T7450] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 119.271794][ T7450] netlink: 232 bytes leftover after parsing attributes in process `syz.3.370'. [ 119.417266][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.373'. [ 119.671259][ T7469] netlink: 'syz.2.377': attribute type 9 has an invalid length. [ 119.765673][ T7469] netlink: 'syz.2.377': attribute type 6 has an invalid length. [ 120.230828][ T7497] veth2: entered allmulticast mode [ 120.315332][ T7501] batadv_slave_1: entered promiscuous mode [ 120.365454][ T7498] batadv_slave_1: left promiscuous mode [ 121.189062][ T7558] openvswitch: netlink: Flow key attr not present in new flow. [ 123.394037][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.537623][ T7654] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 123.590989][ T7658] __nla_validate_parse: 5 callbacks suppressed [ 123.591007][ T7658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.420'. [ 123.702669][ T7662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.959675][ T7676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 124.115746][ T7682] tipc: Enabled bearer , priority 0 [ 124.159781][ T7682] syzkaller0: entered promiscuous mode [ 124.171118][ T7682] syzkaller0: entered allmulticast mode [ 124.242589][ T7686] tipc: Resetting bearer [ 124.256072][ T7685] block nbd1: server does not support multiple connections per device. [ 124.269112][ T7685] block nbd1: shutting down sockets [ 124.311983][ T7689] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 124.330709][ T7679] tipc: Resetting bearer [ 124.345725][ T7689] netlink: 224 bytes leftover after parsing attributes in process `syz.2.431'. [ 124.394426][ T7679] tipc: Disabling bearer [ 124.410014][ T7693] netlink: 32 bytes leftover after parsing attributes in process `syz.5.432'. [ 124.501174][ T7698] netlink: 'syz.2.431': attribute type 303 has an invalid length. [ 124.654130][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 125.172015][ T7689] syz.2.431 (7689) used greatest stack depth: 16968 bytes left [ 125.701372][ T7740] vxcan1: tx address claim with different name [ 125.791275][ T7743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.033732][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 126.055717][ T7760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.077666][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 126.136510][ T7759] netlink: 'syz.2.448': attribute type 6 has an invalid length. [ 126.511323][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.536463][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 126.753800][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.802137][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.225063][ T7784] veth1_to_bond: entered allmulticast mode [ 127.394460][ T7786] team0 (unregistering): Port device team_slave_0 removed [ 127.418030][ T7786] team0 (unregistering): Port device team_slave_1 removed [ 127.427335][ T7786] team0 (unregistering): Port device batadv1 removed [ 127.450199][ T6055] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.464863][ T6055] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.491695][ T7794] veth1_to_bond: left allmulticast mode [ 127.508553][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 127.537052][ T6055] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.591669][ T6055] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.683204][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.455'. [ 127.718101][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 128.681953][ T7844] __nla_validate_parse: 1 callbacks suppressed [ 128.681972][ T7844] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.461'. [ 129.939383][ T49] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.000234][ T49] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.072713][ T7889] netlink: 'syz.5.475': attribute type 9 has an invalid length. [ 130.118320][ T7889] netlink: 'syz.5.475': attribute type 9 has an invalid length. [ 130.267354][ T49] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.322154][ T49] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.516107][ T49] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.555897][ T49] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.670131][ T49] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.718683][ T49] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.795285][ T7909] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 130.914917][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.930052][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.938990][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.959022][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.968447][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.744493][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.764269][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.779173][ T49] bond0 (unregistering): Released all slaves [ 131.926273][ T49] bond1 (unregistering): Released all slaves [ 132.020289][ T49] bond2 (unregistering): Released all slaves [ 132.046237][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 132.170887][ T49] tipc: Left network mode [ 132.398488][ T7952] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.416555][ T7952] Cannot find add_set index 4 as target [ 132.821936][ T49] hsr_slave_0: left promiscuous mode [ 132.847224][ T49] hsr_slave_1: left promiscuous mode [ 132.859367][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.868471][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.877043][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.884575][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.905380][ T49] veth1_macvtap: left promiscuous mode [ 132.911167][ T49] veth0_macvtap: left promiscuous mode [ 132.917147][ T49] veth1_vlan: left promiscuous mode [ 132.922577][ T49] veth0_vlan: left promiscuous mode [ 132.996511][ T5845] Bluetooth: hci3: command tx timeout [ 133.321586][ T49] team0 (unregistering): Port device team_slave_1 removed [ 133.357452][ T49] team0 (unregistering): Port device team_slave_0 removed [ 133.700760][ T7975] netlink: 'syz.0.497': attribute type 29 has an invalid length. [ 134.031903][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 134.210510][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.500'. [ 134.461610][ T8003] syz_tun: entered promiscuous mode [ 134.673811][ T49] IPVS: stop unused estimator thread 0... [ 134.694089][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.702000][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.726119][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.733373][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.745760][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 134.765199][ T7912] bridge_slave_0: entered allmulticast mode [ 134.791113][ T7912] bridge_slave_0: entered promiscuous mode [ 134.836458][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.850837][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.863370][ T7912] bridge_slave_1: entered allmulticast mode [ 134.905586][ T7912] bridge_slave_1: entered promiscuous mode [ 135.076428][ T5845] Bluetooth: hci3: command tx timeout [ 135.132287][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.185517][ T8039] netlink: 15 bytes leftover after parsing attributes in process `syz.5.510'. [ 135.205276][ T8046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.239481][ T8041] tipc: Enabled bearer , priority 10 [ 135.268802][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.288445][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.454827][ T7912] team0: Port device team_slave_0 added [ 135.477854][ T7912] team0: Port device team_slave_1 added [ 135.831244][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.862509][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.910197][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.926645][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.948401][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.983250][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.268756][ T7912] hsr_slave_0: entered promiscuous mode [ 136.307121][ T7912] hsr_slave_1: entered promiscuous mode [ 136.334651][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.359053][ T7912] Cannot create hsr debugfs directory [ 136.701794][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'. [ 136.725916][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.531'. [ 136.956617][ T8115] netlink: 'syz.2.534': attribute type 21 has an invalid length. [ 137.010813][ T8115] netlink: 'syz.2.534': attribute type 4 has an invalid length. [ 137.024703][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 137.169741][ T5845] Bluetooth: hci3: command tx timeout [ 137.391818][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 137.569102][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.539'. [ 137.578465][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.539'. [ 137.843805][ T7912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.869947][ T7912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.887862][ T7912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.938452][ T7912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.142655][ T8151] veth0_virt_wifi: renamed from veth0_macvtap [ 138.160458][ T8153] netlink: 830 bytes leftover after parsing attributes in process `syz.5.541'. [ 138.375505][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.436472][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.478344][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.485495][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.539466][ T8165] tipc: Enabling of bearer rejected, media not registered [ 138.552465][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.559657][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.668854][ T7912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.237261][ T5845] Bluetooth: hci3: command tx timeout [ 139.515548][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.714920][ T7912] veth0_vlan: entered promiscuous mode [ 139.770492][ T7912] veth1_vlan: entered promiscuous mode [ 139.912549][ T7912] veth0_macvtap: entered promiscuous mode [ 139.945480][ T7912] veth1_macvtap: entered promiscuous mode [ 140.031399][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.088987][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.126566][ T6055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.146973][ T8229] __nla_validate_parse: 1 callbacks suppressed [ 140.146991][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 140.162286][ T6055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.207922][ T6055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.235372][ T6055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.248699][ T8231] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 140.344756][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 140.428738][ T8235] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 140.448893][ T8235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.503815][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.546017][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.685555][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.716368][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.770455][ T8248] netlink: 'syz.2.570': attribute type 9 has an invalid length. [ 140.865472][ T8253] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 140.874904][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 140.958136][ T8253] vlan2: entered allmulticast mode [ 140.968330][ T8253] bridge_slave_0: entered allmulticast mode [ 140.991939][ T8255] lo: entered promiscuous mode [ 141.010294][ T8255] tunl0: entered promiscuous mode [ 141.042066][ T8255] gre0: entered promiscuous mode [ 141.072584][ T8255] gretap0: entered promiscuous mode [ 141.093586][ T8255] erspan0: entered promiscuous mode [ 141.104593][ T8255] ip_vti0: entered promiscuous mode [ 141.120918][ T8255] ip6_vti0: entered promiscuous mode [ 141.138026][ T8255] sit0: entered promiscuous mode [ 141.154718][ T8255] ip6tnl0: entered promiscuous mode [ 141.187289][ T8255] ip6gre0: entered promiscuous mode [ 141.210673][ T8255] ip6gretap0: entered promiscuous mode [ 141.223394][ T8255] bridge0: entered promiscuous mode [ 141.256614][ T8255] vcan0: entered promiscuous mode [ 141.262104][ T8255] bond0: entered promiscuous mode [ 141.337893][ T8255] bond_slave_0: entered promiscuous mode [ 141.360941][ T8255] bond_slave_1: entered promiscuous mode [ 141.392679][ T8255] team0: entered promiscuous mode [ 141.411837][ T8255] team_slave_0: entered promiscuous mode [ 141.427861][ T8255] team_slave_1: entered promiscuous mode [ 141.435336][ T8255] dummy0: entered promiscuous mode [ 141.445547][ T8255] nlmon0: entered promiscuous mode [ 141.453857][ T8255] caif0: entered promiscuous mode [ 141.463812][ T8255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.530713][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 141.546097][ T8278] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 141.835218][ T6040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.281298][ T6040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.295210][ T8307] block nbd1: Unsupported socket: shutdown callout must be supported. [ 142.376987][ T8303] netlink: 'syz.5.587': attribute type 2 has an invalid length. [ 142.435291][ T8309] lo: left promiscuous mode [ 142.451766][ T8309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.489093][ T8299] syz_tun: entered allmulticast mode [ 142.591161][ T6040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.747814][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.758613][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.766491][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.787012][ T6040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.800545][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.810885][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.153978][ T8298] syz_tun: left allmulticast mode [ 143.252934][ T6040] bridge_slave_1: left allmulticast mode [ 143.281767][ T6040] bridge_slave_1: left promiscuous mode [ 143.299469][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.354379][ T6040] bridge_slave_0: left allmulticast mode [ 143.362064][ T6040] bridge_slave_0: left promiscuous mode [ 143.368335][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.878042][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.888816][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.899987][ T6040] bond0 (unregistering): Released all slaves [ 143.928361][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 144.308509][ T8348] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 144.397599][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.425081][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.435402][ T8321] bridge_slave_0: entered allmulticast mode [ 144.448487][ T8321] bridge_slave_0: entered promiscuous mode [ 144.463590][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.474196][ T8360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.478039][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.492308][ T8321] bridge_slave_1: entered allmulticast mode [ 144.503092][ T8321] bridge_slave_1: entered promiscuous mode [ 144.678856][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.717103][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.781654][ T6040] hsr_slave_0: left promiscuous mode [ 144.801875][ T6040] hsr_slave_1: left promiscuous mode [ 144.813188][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.823609][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.826209][ T8371] netlink: 'syz.5.604': attribute type 13 has an invalid length. [ 144.838724][ T5148] Bluetooth: hci3: command tx timeout [ 144.845056][ T8371] netlink: 'syz.5.604': attribute type 17 has an invalid length. [ 144.853582][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.864865][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.903702][ T6040] veth1_macvtap: left promiscuous mode [ 144.916265][ T6040] veth0_macvtap: left promiscuous mode [ 144.921940][ T6040] veth1_vlan: left promiscuous mode [ 144.936324][ T6040] veth0_vlan: left promiscuous mode [ 145.531570][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 145.575659][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 146.063316][ T5148] Bluetooth: hci4: link tx timeout [ 146.069468][ T5148] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.079146][ T5148] Bluetooth: hci4: link tx timeout [ 146.086085][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.106437][ T5148] Bluetooth: hci4: link tx timeout [ 146.109840][ T8321] team0: Port device team_slave_0 added [ 146.111570][ T5148] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.125056][ T5148] Bluetooth: hci4: link tx timeout [ 146.130292][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.172172][ T8321] team0: Port device team_slave_1 added [ 146.390177][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.412061][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.448054][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.479199][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.495877][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.550914][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.753873][ T8321] hsr_slave_0: entered promiscuous mode [ 146.761032][ T8321] hsr_slave_1: entered promiscuous mode [ 146.770213][ T8321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.778033][ T8321] Cannot create hsr debugfs directory [ 146.917228][ T5148] Bluetooth: hci3: command tx timeout [ 146.932984][ T5148] Bluetooth: hci4: link tx timeout [ 146.938761][ T5148] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.946551][ T5148] Bluetooth: hci4: link tx timeout [ 146.951668][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.975406][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 147.164818][ T30] audit: type=1800 audit(1751619876.520:3): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.617" name="blkio.bfq.time_recursive" dev="tmpfs" ino=786 res=0 errno=0 [ 147.290935][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.618'. [ 147.343324][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'. [ 147.384323][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.618'. [ 147.716930][ T8436] pim6reg: entered allmulticast mode [ 147.758662][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.625'. [ 147.761529][ T8436] macvlan0: entered allmulticast mode [ 147.822952][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.625'. [ 147.851008][ T8321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.874650][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.625'. [ 147.893925][ T8442] netlink: 'syz.4.626': attribute type 9 has an invalid length. [ 147.922418][ T8321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.930267][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 147.935938][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.625'. [ 147.959801][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.625'. [ 147.978719][ T8321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.030322][ T8321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.117039][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 148.363260][ T8463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.373236][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.424548][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.451385][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.458590][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.500558][ T8471] IPVS: length: 209 != 24 [ 148.511878][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.519090][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.579703][ T8463] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.597808][ T8463] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.888063][ T8475] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 148.909696][ T8475] nbd: error processing sock list [ 148.923983][ T8475] block nbd1: shutting down sockets [ 148.996687][ T5148] Bluetooth: hci3: command tx timeout [ 149.075186][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.210879][ T8497] bridge3: entered promiscuous mode [ 149.216435][ T8497] bridge3: entered allmulticast mode [ 149.948522][ T8504] veth1_macvtap: left allmulticast mode [ 149.966239][ T8504] macsec0: left promiscuous mode [ 149.974684][ T8504] macsec0: left allmulticast mode [ 150.143838][ T8504] xfrm1: left promiscuous mode [ 150.157395][ T8504] xfrm1: left allmulticast mode [ 150.175555][ T8504] gretap0: left allmulticast mode [ 150.189946][ T8504] macsec1: left promiscuous mode [ 150.196372][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 150.212466][ T8504] macsec1: left allmulticast mode [ 150.231250][ T8504] vlan2: left allmulticast mode [ 150.273203][ T8504] bridge_slave_0: left allmulticast mode [ 150.303114][ T8321] veth0_vlan: entered promiscuous mode [ 150.337949][ T1162] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.366301][ T1162] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.430340][ T1162] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.476835][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.509148][ T8321] veth1_vlan: entered promiscuous mode [ 150.675194][ T8321] veth0_macvtap: entered promiscuous mode [ 150.696509][ T8526] !: renamed from dummy0 [ 150.777827][ T8321] veth1_macvtap: entered promiscuous mode [ 151.080351][ T5845] Bluetooth: hci3: command tx timeout [ 151.227916][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.262247][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.427245][ T6049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.441597][ T6049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.558463][ T6049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.586740][ T6049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.879523][ T8555] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 152.150914][ T8524] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 152.562361][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.642267][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.728259][ T8576] xt_hashlimit: size too large, truncated to 1048576 [ 152.745893][ T8576] xt_hashlimit: max too large, truncated to 1048576 [ 152.765235][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.806677][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.009255][ T8588] __nla_validate_parse: 147 callbacks suppressed [ 153.009274][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 153.315963][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.316221][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.348727][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.663'. [ 153.372918][ T8603] netlink: 76 bytes leftover after parsing attributes in process `syz.5.663'. [ 153.403031][ T8603] netlink: 76 bytes leftover after parsing attributes in process `syz.5.663'. [ 153.453727][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 153.465193][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.663'. [ 154.063265][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.103953][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.142112][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.318042][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.383651][ T8633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 154.472764][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.569099][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.971794][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.985329][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.992060][ T8654] openvswitch: netlink: Key type 4099 is out of range max 32 [ 155.018102][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.033079][ T1162] bridge_slave_1: left allmulticast mode [ 155.039336][ T1162] bridge_slave_1: left promiscuous mode [ 155.039421][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.053269][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.066810][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.095057][ T8650] rdma_op ffff888054aa39f0 conn xmit_rdma 0000000000000000 [ 155.140023][ T1162] bridge_slave_0: left allmulticast mode [ 155.171690][ T8650] netlink: 'syz.5.676': attribute type 11 has an invalid length. [ 155.181856][ T1162] bridge_slave_0: left promiscuous mode [ 155.190623][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.502182][ T8677] netlink: 124 bytes leftover after parsing attributes in process `syz.4.683'. [ 155.679575][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.690522][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.700654][ T1162] bond0 (unregistering): Released all slaves [ 155.718571][ T8657] syzkaller1: entered promiscuous mode [ 155.724721][ T8657] syzkaller1: entered allmulticast mode [ 155.732295][ T8664] netlink: 830 bytes leftover after parsing attributes in process `syz.0.679'. [ 156.181323][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 156.273594][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 156.358649][ T1162] hsr_slave_0: left promiscuous mode [ 156.375320][ T1162] hsr_slave_1: left promiscuous mode [ 156.392890][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.423768][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.441431][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.450748][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.491440][ T1162] veth1_macvtap: left promiscuous mode [ 156.502439][ T1162] veth0_macvtap: left promiscuous mode [ 156.508889][ T1162] veth1_vlan: left promiscuous mode [ 156.514291][ T1162] veth0_vlan: left promiscuous mode [ 157.079489][ T8722] netlink: 'syz.4.695': attribute type 7 has an invalid length. [ 157.090994][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 157.129410][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 157.156397][ T5845] Bluetooth: hci3: command tx timeout [ 157.580888][ T8719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.061447][ T8745] __nla_validate_parse: 3 callbacks suppressed [ 158.061464][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 158.161924][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 158.246565][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 158.384708][ T8757] xt_hashlimit: size too large, truncated to 1048576 [ 158.730052][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.775171][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.817519][ T8648] bridge_slave_0: entered allmulticast mode [ 158.838514][ T8648] bridge_slave_0: entered promiscuous mode [ 158.942136][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.988424][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.995581][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.004059][ T8780] netlink: 'syz.2.710': attribute type 6 has an invalid length. [ 159.102733][ T8648] bridge_slave_1: entered allmulticast mode [ 159.113784][ T8781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.710'. [ 159.178664][ T8648] bridge_slave_1: entered promiscuous mode [ 159.246313][ T5845] Bluetooth: hci3: command tx timeout [ 159.439216][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.492668][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.612000][ T8792] block nbd1: server does not support multiple connections per device. [ 159.633181][ T8792] block nbd1: shutting down sockets [ 159.688399][ T8799] netlink: 'syz.5.716': attribute type 4 has an invalid length. [ 159.767546][ T8648] team0: Port device team_slave_0 added [ 159.783356][ T8648] team0: Port device team_slave_1 added [ 159.791021][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.718'. [ 159.801536][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 159.814944][ T8808] netlink: 830 bytes leftover after parsing attributes in process `syz.2.720'. [ 159.816285][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 159.930374][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.939761][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.975899][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.041730][ T8812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.051699][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.083820][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.112848][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.327743][ T8648] hsr_slave_0: entered promiscuous mode [ 160.334627][ T8648] hsr_slave_1: entered promiscuous mode [ 160.341941][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.354111][ T8648] Cannot create hsr debugfs directory [ 160.395555][ T8826] xt_CT: No such helper "snmp" [ 160.521458][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 160.853859][ T8857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.292146][ T8648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.301979][ T8648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.313534][ T8648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.320823][ T5845] Bluetooth: hci3: command tx timeout [ 161.331846][ T8648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.423798][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.468526][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.485142][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.492301][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.521954][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.529824][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.758319][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.771554][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 161.779450][ T8889] macsec2: entered promiscuous mode [ 161.794073][ T8889] macsec2: entered allmulticast mode [ 161.802116][ T8889] dummy0: entered allmulticast mode [ 161.813374][ T8889] dummy0: left allmulticast mode [ 161.835421][ T8890] netlink: 7 bytes leftover after parsing attributes in process `syz.4.743'. [ 161.860718][ T8893] netlink: 'syz.4.743': attribute type 12 has an invalid length. [ 161.962776][ T8898] bond0: (slave 0!): Releasing backup interface [ 161.976060][ T8898] !: left promiscuous mode [ 161.986695][ T8898] !: left allmulticast mode [ 161.993284][ T8898] bridge0: port 3(batadv0) entered disabled state [ 162.003450][ T8898] bridge_slave_0: left allmulticast mode [ 162.009571][ T8898] bridge_slave_0: left promiscuous mode [ 162.019991][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.031341][ T8898] bridge_slave_1: left allmulticast mode [ 162.037562][ T8898] bridge_slave_1: left promiscuous mode [ 162.043383][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.059207][ T8898] bond0: (slave bond_slave_0): Releasing backup interface [ 162.067087][ T8898] bond_slave_0: left promiscuous mode [ 162.072638][ T8898] bond_slave_0: left allmulticast mode [ 162.081197][ T8898] bond0: (slave bond_slave_1): Releasing backup interface [ 162.089778][ T8898] bond_slave_1: left promiscuous mode [ 162.095358][ T8898] bond_slave_1: left allmulticast mode [ 162.102926][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.111009][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.163581][ T8901] gretap0: left promiscuous mode [ 162.206484][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.214986][ T8901] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.227267][ T8901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.295126][ T8648] veth0_vlan: entered promiscuous mode [ 162.327553][ T8648] veth1_vlan: entered promiscuous mode [ 162.390180][ T8648] veth0_macvtap: entered promiscuous mode [ 162.423829][ T8648] veth1_macvtap: entered promiscuous mode [ 162.461250][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.484965][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.510794][ T6055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.520175][ T6055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.535242][ T6055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.550367][ T6055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.883030][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.918025][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.979831][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.993950][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.179225][ T8930] __nla_validate_parse: 3 callbacks suppressed [ 163.179243][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.755'. [ 163.362139][ T8939] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 163.384478][ T8939] netlink: 'syz.0.756': attribute type 3 has an invalid length. [ 163.410761][ T8939] netlink: 224 bytes leftover after parsing attributes in process `syz.0.756'. [ 163.792944][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.763'. [ 164.022315][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.764'. [ 164.401309][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.047745][ T8985] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 165.059301][ T8985] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 165.129202][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.224169][ T8986] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 165.300046][ T8986] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 165.368421][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.395528][ T8986] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 165.428571][ T8986] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 165.444344][ T8986] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 165.468956][ T8986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.506225][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.526210][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.550146][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.576237][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.602135][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.680091][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.691699][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 166.054076][ T9025] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 166.101536][ T9025] netlink: 'syz.2.782': attribute type 2 has an invalid length. [ 166.209719][ T9022] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 166.435516][ T49] bridge_slave_1: left allmulticast mode [ 166.456015][ T49] bridge_slave_1: left promiscuous mode [ 166.478650][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.532023][ T49] bridge_slave_0: left allmulticast mode [ 166.546779][ T49] bridge_slave_0: left promiscuous mode [ 166.552563][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.608454][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.788'. [ 166.646096][ T9043] block nbd1: server does not support multiple connections per device. [ 166.665038][ T9049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.788'. [ 166.682407][ T9043] block nbd1: shutting down sockets [ 166.713639][ T9056] netlink: 'syz.5.787': attribute type 8 has an invalid length. [ 166.724523][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 167.116094][ T9069] xt_bpf: check failed: parse error [ 167.281567][ T9071] netlink: 'syz.2.790': attribute type 8 has an invalid length. [ 167.329425][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.343146][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.353706][ T49] bond0 (unregistering): Released all slaves [ 167.370864][ T9040] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 167.636970][ T5148] Bluetooth: hci3: command tx timeout [ 167.765240][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 167.961822][ T9095] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.796'. [ 168.006889][ T49] hsr_slave_0: left promiscuous mode [ 168.018987][ T49] hsr_slave_1: left promiscuous mode [ 168.056078][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.063999][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.091492][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.102955][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.134182][ T49] veth1_macvtap: left promiscuous mode [ 168.140481][ T49] veth0_macvtap: left promiscuous mode [ 168.146361][ T49] veth1_vlan: left promiscuous mode [ 168.151757][ T49] veth0_vlan: left promiscuous mode [ 168.231032][ T9103] netlink: 16 bytes leftover after parsing attributes in process `syz.5.798'. [ 168.534388][ T9110] netlink: 188 bytes leftover after parsing attributes in process `syz.4.799'. [ 168.549839][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 168.630124][ T49] team0 (unregistering): Port device team_slave_1 removed [ 168.669776][ T49] team0 (unregistering): Port device team_slave_0 removed [ 169.259401][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.276433][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.283665][ T9004] bridge_slave_0: entered allmulticast mode [ 169.314643][ T9004] bridge_slave_0: entered promiscuous mode [ 169.357798][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 169.377472][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.403412][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.426090][ T9004] bridge_slave_1: entered allmulticast mode [ 169.443954][ T9004] bridge_slave_1: entered promiscuous mode [ 169.490959][ T9131] netlink: 'syz.5.804': attribute type 10 has an invalid length. [ 169.583715][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.594507][ T9131] tap0: tun_chr_ioctl cmd 1074025677 [ 169.612139][ T9131] tap0: linktype set to 768 [ 169.625145][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.718206][ T5148] Bluetooth: hci3: command tx timeout [ 169.741963][ T9136] 8021q: VLANs not supported on sit0 [ 169.790684][ T9004] team0: Port device team_slave_0 added [ 169.815414][ T9004] team0: Port device team_slave_1 added [ 169.902679][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.910006][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.943919][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.964445][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.971625][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.998840][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.143836][ T9004] hsr_slave_0: entered promiscuous mode [ 170.187370][ T9004] hsr_slave_1: entered promiscuous mode [ 170.193742][ T9004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.214793][ T9004] Cannot create hsr debugfs directory [ 170.299567][ T9151] tipc: Resetting bearer [ 170.310806][ T9148] "syz.5.811" (9148) uses obsolete ecb(arc4) skcipher [ 170.330830][ T61] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.344018][ T61] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.360394][ T61] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.369482][ T61] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.412996][ T9155] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 170.421492][ T9155] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.466365][ T61] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.483897][ T61] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.506178][ T61] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.523293][ T61] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.538665][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.819'. [ 171.759998][ T9004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.775112][ T9004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.790756][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'. [ 171.799868][ T5148] Bluetooth: hci3: command tx timeout [ 171.815020][ T9004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.841265][ T9004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.004416][ T9208] netlink: 'syz.4.822': attribute type 3 has an invalid length. [ 172.016908][ T9210] netlink: 'syz.4.822': attribute type 3 has an invalid length. [ 172.025368][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.052352][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.069588][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.076807][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.101363][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.108567][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.491336][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.589058][ T9004] veth0_vlan: entered promiscuous mode [ 172.631687][ T9004] veth1_vlan: entered promiscuous mode [ 172.702229][ T9236] netlink: 'syz.4.829': attribute type 9 has an invalid length. [ 172.708209][ T9004] veth0_macvtap: entered promiscuous mode [ 172.752983][ T9004] veth1_macvtap: entered promiscuous mode [ 172.821219][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.845634][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.904616][ T9242] netlink: 'syz.2.831': attribute type 21 has an invalid length. [ 172.920913][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.958373][ T9242] netlink: 'syz.2.831': attribute type 6 has an invalid length. [ 172.966448][ T9242] netlink: 64 bytes leftover after parsing attributes in process `syz.2.831'. [ 172.978404][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.983507][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 172.989803][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.017427][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 173.048921][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 173.049365][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.304268][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.312860][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.410854][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.446392][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.517440][ T9251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.547825][ T9256] bridge0: entered allmulticast mode [ 173.568508][ T9189] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 173.580423][ T9189] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 173.588923][ T9189] CPU: 1 UID: 0 PID: 9189 Comm: kbnepd bnep0 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 173.601063][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.611109][ T9189] RIP: 0010:klist_del+0x49/0x110 [ 173.616046][ T9189] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 ba c5 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b ba c5 f6 4d 8b 7e 58 4c 89 f7 e8 0f 5b [ 173.635642][ T9189] RSP: 0018:ffffc900034a7708 EFLAGS: 00010202 [ 173.641701][ T9189] RAX: 000000000000000b RBX: ffff8880554b0c60 RCX: ffff888050d7bc00 [ 173.649656][ T9189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 173.657608][ T9189] RBP: ffffc900034a7830 R08: ffff888075855e13 R09: 1ffff1100eb0abc2 [ 173.665560][ T9189] R10: dffffc0000000000 R11: ffffed100eb0abc3 R12: dffffc0000000000 [ 173.673513][ T9189] R13: 1ffff1100aa9618c R14: 0000000000000000 R15: ffff888034e12750 [ 173.681475][ T9189] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 173.690386][ T9189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.696954][ T9189] CR2: 00007f3232f23048 CR3: 000000002dcb0000 CR4: 00000000003526f0 [ 173.704909][ T9189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.712859][ T9189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.720813][ T9189] Call Trace: [ 173.724084][ T9189] [ 173.727009][ T9189] device_del+0x280/0x8e0 [ 173.731331][ T9189] ? _raw_spin_unlock_irq+0x2e/0x50 [ 173.736603][ T9189] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 173.742664][ T9189] ? __pfx_device_del+0x10/0x10 [ 173.747502][ T9189] ? netdev_unregister_kobject+0x344/0x450 [ 173.753299][ T9189] unregister_netdevice_many_notify+0x1d52/0x2320 [ 173.759710][ T9189] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 173.766449][ T9189] ? rcu_is_watching+0x15/0xb0 [ 173.771207][ T9189] ? trace_contention_end+0x39/0x120 [ 173.776472][ T9189] ? __mutex_lock+0x330/0xe80 [ 173.781131][ T9189] ? __lock_acquire+0xab9/0xd20 [ 173.785965][ T9189] ? __lock_acquire+0xab9/0xd20 [ 173.790802][ T9189] unregister_netdevice_queue+0x33c/0x380 [ 173.796512][ T9189] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 173.802743][ T9189] ? rtnl_net_dev_lock+0x36/0x2f0 [ 173.807764][ T9189] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 173.812860][ T9189] unregister_netdev+0x1f/0x60 [ 173.817605][ T9189] bnep_session+0x294d/0x2b40 [ 173.822269][ T9189] ? trace_sched_exit_tp+0x38/0x120 [ 173.827455][ T9189] ? __lock_acquire+0xab9/0xd20 [ 173.832301][ T9189] ? __pfx_bnep_session+0x10/0x10 [ 173.837311][ T9189] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 173.843187][ T9189] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.849497][ T9189] ? __pfx_woken_wake_function+0x10/0x10 [ 173.855113][ T9189] ? __kthread_parkme+0x7b/0x200 [ 173.860031][ T9189] ? __kthread_parkme+0x1a1/0x200 [ 173.865038][ T9189] kthread+0x70e/0x8a0 [ 173.869092][ T9189] ? __pfx_bnep_session+0x10/0x10 [ 173.874102][ T9189] ? __pfx_kthread+0x10/0x10 [ 173.878675][ T9189] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.883859][ T9189] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.889036][ T9189] ? __pfx_kthread+0x10/0x10 [ 173.893610][ T9189] ret_from_fork+0x3fc/0x770 [ 173.898185][ T9189] ? __pfx_ret_from_fork+0x10/0x10 [ 173.903283][ T9189] ? __switch_to_asm+0x39/0x70 [ 173.908035][ T9189] ? __switch_to_asm+0x33/0x70 [ 173.912816][ T9189] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.917395][ T9189] ret_from_fork_asm+0x1a/0x30 [ 173.922158][ T9189] [ 173.925158][ T9189] Modules linked in: [ 173.929984][ T9189] ---[ end trace 0000000000000000 ]--- [ 173.951711][ T5148] Bluetooth: hci3: command tx timeout [ 173.961638][ T9189] RIP: 0010:klist_del+0x49/0x110 [ 173.967360][ T9189] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 ba c5 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b ba c5 f6 4d 8b 7e 58 4c 89 f7 e8 0f 5b [ 173.995977][ T9189] RSP: 0018:ffffc900034a7708 EFLAGS: 00010202 [ 174.002173][ T9189] RAX: 000000000000000b RBX: ffff8880554b0c60 RCX: ffff888050d7bc00 [ 174.015834][ T9189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 174.023836][ T9189] RBP: ffffc900034a7830 R08: ffff888075855e13 R09: 1ffff1100eb0abc2 [ 174.032158][ T9189] R10: dffffc0000000000 R11: ffffed100eb0abc3 R12: dffffc0000000000 [ 174.040707][ T9189] R13: 1ffff1100aa9618c R14: 0000000000000000 R15: ffff888034e12750 [ 174.048892][ T9189] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 174.058139][ T9189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.064738][ T9189] CR2: 00007fc96e4e7d60 CR3: 000000002dcb0000 CR4: 00000000003526f0 [ 174.072770][ T9189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.080823][ T9189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.088860][ T9189] Kernel panic - not syncing: Fatal exception [ 174.095063][ T9189] Kernel Offset: disabled [ 174.099371][ T9189] Rebooting in 86400 seconds..