last executing test programs: 2m48.764989498s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) r1 = accept(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="df482abd7000000000000c000000a800038004000380080002000600000088000380340001800400030004000300080001000100000008000100100000000800020072656400040003000c0002007b3a2c27253a5d00080001800400030028000180060002005d000000080001009300000009000200736974300000000008000100010001002000018008000100d7a70000110002007874732873657270656e742900000000080002000400000008000200040000000c0003800800020001800000"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r0], 0x9c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x3ffe, 0x1, 0x2, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000003320a9c25413dcee17137e3f4cf6c1c3fba62d6158f32d42b64a4e49df868ab62a1ae500b7277fd593990bd87718f81dc826a096604315c1d4dadfa71ee03e7d2500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0}, 0x94) (async) getsockname$packet(r12, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x400a805) splice(r0, &(0x7f00000000c0)=0x8, r3, &(0x7f0000000100)=0x9, 0x7, 0x8) recvmmsg$unix(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 1m50.462210425s ago: executing program 4 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) (async) 1m35.996844616s ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) (async) 1m33.197165249s ago: executing program 4 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) (async) 1m32.387709857s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) r1 = accept(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="df482abd7000000000000c000000a800038004000380080002000600000088000380340001800400030004000300080001000100000008000100100000000800020072656400040003000c0002007b3a2c27253a5d00080001800400030028000180060002005d000000080001009300000009000200736974300000000008000100010001002000018008000100d7a70000110002007874732873657270656e742900000000080002000400000008000200040000000c0003800800020001800000"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r0], 0x9c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x3ffe, 0x1, 0x2, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000003320a9c25413dcee17137e3f4cf6c1c3fba62d6158f32d42b64a4e49df868ab62a1ae500b7277fd593990bd87718f81dc826a096604315c1d4dadfa71ee03e7d2500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0}, 0x94) (async) getsockname$packet(r12, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x400a805) splice(r0, &(0x7f00000000c0)=0x8, r3, &(0x7f0000000100)=0x9, 0x7, 0x8) recvmmsg$unix(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 1m16.693820613s ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="7915a8000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160304000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04a19e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) (async) 1m15.742468047s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) r1 = accept(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="df482abd7000000000000c000000a800038004000380080002000600000088000380340001800400030004000300080001000100000008000100100000000800020072656400040003000c0002007b3a2c27253a5d00080001800400030028000180060002005d000000080001009300000009000200736974300000000008000100010001002000018008000100d7a70000110002007874732873657270656e742900000000080002000400000008000200040000000c0003800800020001800000"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r0], 0x9c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x3ffe, 0x1, 0x2, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000003320a9c25413dcee17137e3f4cf6c1c3fba62d6158f32d42b64a4e49df868ab62a1ae500b7277fd593990bd87718f81dc826a096604315c1d4dadfa71ee03e7d2500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0}, 0x94) (async) getsockname$packet(r12, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x400a805) splice(r0, &(0x7f00000000c0)=0x8, r3, &(0x7f0000000100)=0x9, 0x7, 0x8) recvmmsg$unix(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 1m13.739757841s ago: executing program 4 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) (async) 56.441865928s ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) (async) 51.274536252s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) r1 = accept(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="df482abd7000000000000c000000a800038004000380080002000600000088000380340001800400030004000300080001000100000008000100100000000800020072656400040003000c0002007b3a2c27253a5d00080001800400030028000180060002005d000000080001009300000009000200736974300000000008000100010001002000018008000100d7a70000110002007874732873657270656e742900000000080002000400000008000200040000000c0003800800020001800000"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r0], 0x9c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x3ffe, 0x1, 0x2, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000003320a9c25413dcee17137e3f4cf6c1c3fba62d6158f32d42b64a4e49df868ab62a1ae500b7277fd593990bd87718f81dc826a096604315c1d4dadfa71ee03e7d2500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0}, 0x94) (async) getsockname$packet(r12, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x400a805) splice(r0, &(0x7f00000000c0)=0x8, r3, &(0x7f0000000100)=0x9, 0x7, 0x8) recvmmsg$unix(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 49.880856065s ago: executing program 4 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) (async) 39.98211931s ago: executing program 2 (id=1427): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff"], 0x82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 39.610893475s ago: executing program 2 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) 39.257567973s ago: executing program 2 (id=1433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0xf6, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x6, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7fff, 0xdd64, 0x4, 0xb, 0x8001, 0xfffffffe, 0x6, 0x1, 0xfffffff7, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x0, 0x203, 0xff33, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x5, 0x267, 0x1, 0x0, 0x81, 0xff, 0xffffffff, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xa, 0x81, 0x111, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x1, 0x9, 0xc95d90a, 0xff, 0x5, 0x7, 0xd, 0xc8, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0xd, 0x9, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x5, 0x603c, 0x80000004, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x4003, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x6, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x1, 0x9c, 0xf9e, 0xfff, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0xdd7e}}]}]}}]}, 0x478}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x275147e0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19c00099}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4508c24c}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1f0, 0x0, 0xa, 0xf9e6fe511ca0e70f, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xc9, 0x6, "dc7d1699a346a518d3f6e6ad216f72af5c1966a0377aceef65f0c4d25e615918a4abd040ce6bf3dc24a8c6ec596663831e410f6e127fabacfab52508b354788f1e123f8daea7491c4626679df9d8aecff5e309d5a6aa465399a19e5a2e4ce41c60d6a6f3daac73a087e631d3614762f0afaf0f50c8532f5f56d9729c764aa9abaa69a8725baa54756fd8467f0f9c939d2628cb1e171195d2a125d2b261548199109d839a4be3f994d8192cef73f0f033055e865f00848bfc126280642f119a44ca79115a28"}, @NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x468}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 39.187125788s ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) (async) 38.502099493s ago: executing program 2 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000b00)="6e9b55", 0x3}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r6) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x40004}, 0x4001) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x40004}, 0x4001) 33.586287366s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) r1 = accept(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="df482abd7000000000000c000000a800038004000380080002000600000088000380340001800400030004000300080001000100000008000100100000000800020072656400040003000c0002007b3a2c27253a5d00080001800400030028000180060002005d000000080001009300000009000200736974300000000008000100010001002000018008000100d7a70000110002007874732873657270656e742900000000080002000400000008000200040000000c0003800800020001800000"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r0], 0x9c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x3ffe, 0x1, 0x2, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000003320a9c25413dcee17137e3f4cf6c1c3fba62d6158f32d42b64a4e49df868ab62a1ae500b7277fd593990bd87718f81dc826a096604315c1d4dadfa71ee03e7d2500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0}, 0x94) (async) getsockname$packet(r12, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x400a805) splice(r0, &(0x7f00000000c0)=0x8, r3, &(0x7f0000000100)=0x9, 0x7, 0x8) recvmmsg$unix(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 28.949620074s ago: executing program 4 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) (async) 21.343219971s ago: executing program 2 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000b00)="6e9b55", 0x3}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r6) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x40004}, 0x4001) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x40004}, 0x4001) 19.850874096s ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="7915a8000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160304000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04a19e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) (async) 16.887942065s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) r1 = accept(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="df482abd7000000000000c000000a800038004000380080002000600000088000380340001800400030004000300080001000100000008000100100000000800020072656400040003000c0002007b3a2c27253a5d00080001800400030028000180060002005d000000080001009300000009000200736974300000000008000100010001002000018008000100d7a70000110002007874732873657270656e742900000000080002000400000008000200040000000c0003800800020001800000"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r0], 0x9c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x3ffe, 0x1, 0x2, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000003320a9c25413dcee17137e3f4cf6c1c3fba62d6158f32d42b64a4e49df868ab62a1ae500b7277fd593990bd87718f81dc826a096604315c1d4dadfa71ee03e7d2500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0}, 0x94) (async) getsockname$packet(r12, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x400a805) splice(r0, &(0x7f00000000c0)=0x8, r3, &(0x7f0000000100)=0x9, 0x7, 0x8) recvmmsg$unix(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 7.421004855s ago: executing program 4 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x42804) (async) 1.813790181s ago: executing program 1 (id=1509): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 1.724870482s ago: executing program 1 (id=1510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088471b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@phonet={0x23, 0x1, 0x10, 0x5}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="5241a402abf2feb17223b7856fe5da38348e959054f07438f160af78a7d8a283592a2b92157642ef8082d63602c76d15e55c", 0x32}, {&(0x7f00000004c0)="78bc7279f249ecdc1000bcc056f61ac8db7b17ca58cb3a5e5d2c887e3b129e5ca3b3ef9c5c94bf1bed5e02b1d31932fc76e8538a2e794224bc007c8ab07f3dc001099b532adc1412fedcb0f9ed54043157d7ce3a1a7409463b5528cf021fe325db6b081c063e73e77baa5aed4fcb71a312bc01cf9c0b69ed1a77049e860f49ed3996804ba5def4b4606ef931aad76273a64ba2bb8807d0c230f930cb9edaf6d4e6d5ea1ef3df2d2209a9035192c45d3f9ccb58526db26d6644dba39be4f739068f1cbd83e84f7cdf13cad17cba8e8055cb819e60b0fb58954ca018748996aa2a6380688ba2", 0xe5}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000300)="5d98ec972ef7351152fdd4307f842d05be198e7f845f228cf23cfae308643288706e1cf707", 0x25}], 0x4}, 0x20000804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r1, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) socket$kcm(0x21, 0x2, 0xa) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001000000000000fdffff02"], 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) r9 = getpid() write$cgroup_pid(r8, &(0x7f0000000180)=r9, 0x12) 1.535066083s ago: executing program 1 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000c000000ba03010001000000000000007091239d614e049a07936be0b200f400ae4c9fb30c7749fce3a4699bbe00c59fa7905a6ae0296e26430f55994a72656f2d179d43e288757829a373a9fb3b0bd6a284254de62332a701", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4814) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c029c0193ae66458a761c2226a09b3b34964346232678c3daac177f261f12d43f240e1a77026f3921a091711969b6859f23161c9a40ca06450d30ac657743a5741a904821ba992fadf3c4e422dfcde4e26b1b51e4861fa685371d8921a30bbf5c6eeb5725eb240ce5feb7b6f5baf1a70166f6120b7fab380391ef0520dfef6f1e1b3a62eafb039c284d364c7da1934d3875c57d1a714", @ANYRES16=r9, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000000000000000bb0800010000000000"], 0x30}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) 1.17297582s ago: executing program 2 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000b00)="6e9b55", 0x3}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r6) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x40004}, 0x4001) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x40004}, 0x4001) 495.985567ms ago: executing program 1 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x200008c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x2000000000000078, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 201.702571ms ago: executing program 1 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x3, &(0x7f0000000080)=""/4048, &(0x7f0000000000)=0xfd0) close(0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002100)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0xfffffff7, @mcast1, 0xfb77}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001280)="aaa7c8d0d78671dccfcb02aa8cdbb94e21259341a473df0e9e0faed57278e966f978f036d0e35512d5c8faf0a3cce59f9a28470a34b3c279a1c4078115691a73af097ce0a4a5927f36b2bd039daf0c", 0x4f}, {&(0x7f0000001300)="01f110b41a1b913b543858a16e6f3048e65aaebc218be3b029c4eaeff71d4cd2b53b70f41ae810fd48ab4657488bea0baebcf42d30c2eba5bfea82dc47d26bf7bfc56dec245454531cf4572cb54538e2969377ce34a74ad63f53f78e34de8516d6a73456e07e1a3e8dbb7f53b412161fa26d001a217f358939eee737e566a73babcdc639023b4a71e9d08f6c60c150c9e0d8b99096708f82eaab437ed737c342502913c8795d55098d5878c7f6c0a677e3f3deb23a5f8ea1499959de8f96c257a8ef7f4671fe0e976332cee96b9d8353d2e9f5eaf57b01c9b25975bc426f86b4924dfca7b8c173", 0xe7}, {&(0x7f0000001400)="f9bff402f9ef15e3e3fe7ebc9c3f95219ef114b8f14dba523fb66833de696a3849ac45e436cf4b9923db4d3a8d066985586499316cb81c8c3282222de87c2d169f3c0aaa1af1b76b503d9f8d71bc91310352a35658de4ca03941ee52baf7f5c9726b8834612e91cbd680b8e6aac09aa07d624b5c9e78449ab1598ee0a5b2471414a6f20ecb7320903c62d4601d37683d0cd527287d9d5c6c39864bdce04b978a4b6361e159539ddc17e9f83572bb73055b45a851a88bdaeb4ef3a69252098e04009a5d0f90c150b65f95f0ff83b7df7a58b7156341af6ad7e235d86e", 0xdc}, {&(0x7f0000001500)="f4f2bed2c919b1a59c70ee62441eb5cec428bfe10c9a3a453bbe6366d03c61c1b2a5c84e2301e059a692d12a5fe61a7e05824e2fb4a22b52fc65e2eea0f2c43e27e7ef40be5fba1e92d9b09338ffe014f71302fa6709ca10ef0c03e9ec493bdbdcfe41ca92a95ceeed6f8895f7f6e36cd0e285dca5d362fcec1f12b64151793ea69a1ec5525fd5bef046ccc0250578fb93787eebd31b6220a280f09b4a22fef8f341ebd17ca484d3f356d2e47190cf7632030bc33ee080af9184564ae45d65e3ae94546111332c5a509a69483681a03519669336ccd919180bc93b3d4d888fb0cb31108ae1343e1e51b9839af068925d", 0xf0}, {&(0x7f0000001600)="78e3256669840c3f130a3e10725ece0dca2b82e41d6bf203b50ef7ed55d82bd7247a04c57e6cd5722aacb508865e30888132d67b", 0x34}, {&(0x7f0000001640)="54d3f652270c05307d00116651096d6f0b2e80687473f7cc780fd52c861e31aea0417c423b5e98057785031507aa9dd84bafa2d06312e3e17fa07ebbdcb306da027eebb6fc95509940b150473caaea95284908022dbf6690d787d694e945dfeb9dcf5280e69adc97afd6b7a01928fda7afff9f8f70b0443fbe6322a366fc447ecd2a28508b845157db1d3d34c011057578ffccedbee5166e0eb6de3097ecffce24e4bca1ef97e60138aabaef80cd949288bc032e7769a885efc797fb6be4ef8b8222e70d232f2d2d7d6c2859", 0xcc}, {&(0x7f0000001740)="ab47643fa3b0a6712c8643435646f6a5e7e19f3142a64d7e33f53548c9df5156f13ddf95598e77a13b8cb97dcda2a19655cea79d68280ee1a3d9da2abdb16661f272e626ffe12b0c9f8e8c90d3b70768025f0bb13847eeccaee2db5085975e0067870ef5e3322f5056d8409fb4bba41a8c3b90ce579e273aa3c28c3bb80017726940d2bb4c77ae3a19e764b231a1e33dbcbf873023803341b4bf8b2a01e6e5abc2d93ec217be0d81ccd86d3671bfac01ae3ae7ff7fa467c4473a266cedb455094768b974642c688292226ec69a23ae", 0xcf}], 0x7}}, {{&(0x7f00000018c0)={0xa, 0x4e23, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001900)="3105c68b098fae70136053adc17b290be22770c2e3fa1b0d64e026cc44e606167119fef910ad2d6c2fa28fb8f40f1ae2aa7df0c423c305d77afc31c5fd962555e2d3950669742430ebc0397461358fa7de3472599396e6ae6bd2931b302c19f340f22ebb0e68dc031fe58c634eb85d67be411772b2f73c3c14a7156a4ac2aba6bcd9790e5d35a30250041c9605e2380b5b287a5245", 0x95}, {&(0x7f00000019c0)="7a8cb6e846d6ddfd58c324f462b6cbffe4c63d3625e2597ddeb71af9cb033a0e5248eb40f0a49777", 0x28}, {&(0x7f0000002240)="95b8b02018944b035580fd7556da9c1613f951db833d1c5c844d5edcb76292874944e8b8e148a0ba2f0bc6537070f97c01c34373b603440e43a9d61373236fc01f9f23204773850c6fa9e1d8e51ccfbd2de0db7d2b23b7ac3ec360f23d322c6e4aa08a936549f7688c320b4f1dd06b576e4d363c2ed1be32e2a8a15ca6b3f43050b833cef5bbaf05a69fe0ed67ed2d0c561b7d4ff6e941b8c2747c3da2d89e382ccdfc0954fe7bd639eef47b29545c4721bd5e57148842acae6749cc06ff5fce9444845ac9f8", 0xc6}, {&(0x7f0000001b00)="f54746adf1102adab20ec1d83d87faf38ee3b1f09459d947e7e2f81fe706ca7d483453", 0x23}, {&(0x7f0000001b40)="bfa1329d4fb2131c2df156ad6336070e661c6d44abcc820aa310b2549d7837936326e295141a4f0e207f1c5af938b32dc6aceb39f1903fe236e9c0dd2c34568acc2a0cd02371e160132370de82a0e71f3496e827f6a457e681ca03300636f356b175de2b4d222e5831ce48e7a3efa42a5189064e12efeacfb95b53aa6071e19af0b585c6f680199f00a7f4eb80b34938edea91bbfdd6517f3fbfec19970c0042bccb9b6bbd0e223fbb172b04162347835f111da686dfa55a551915223eb8cbe3805f9d90df04700cdfb660ba39622f6bcd601fb76f0541f4724e3d203edb20e1094b8409", 0xe4}, {&(0x7f0000001c40)="d068de54bb45ddd346f2fd6fb97835fc6d73ba2d0244e6803c380db941758f0695719c11636580696225b1cfedacb78f163c137ebafc1c936ecda733e0f6a209be1e4a261c9e5f23dd503ca0f1f24abd515f259bb260db71be88ee273d7e55c3675cc39fa823031253e3904f0133d93de144d961a70365fa64feecb0e2f3f9de6639cab54320abce6b576b3973e3fd4246ed7cd29e68a164fb3d4adbe1d24f0b475407b93062c20368e3359d3da83f21d4cf0c6d485bf0adc639b12e0471001b60c3e896008cbb7cc1615ceebcb330", 0xcf}, {&(0x7f0000001d40)="64f903ea33f204b040ed9ad2a9975272187a085f70e4392e21e931f629fbd19811c1afd709cd86da1b975ce541c474d61bf09ac6f1d05132c27f53ff64ced47607bf4222320bdf9d0e7abfaf6177b52fe7366aa51d85b869060ac396730adccf5f918d8cb9dcb084e210270234fa3bc4a35c4bc0fb7c6202122c8ea9ef8febe114926dc98f6f4db8024b61c92fd1b744ee084da3f4354a0570d01f5d665b8de5a4f8f3f992e8d1f4162d9eb346f66a", 0xaf}, {&(0x7f0000001e00)="c4dd0a7360816b305caf75038277eb1f52bc583f319239004e8d320c63c60ad7cbd71ccf2aa72983cc711132423014e5e664b84dd092ef05c1af8a9f34f840eaefe9430fe15c22d924a9c9e79d2ac6199d3780112d363f873cdee189c5fef74c9cf28f5e448db78fff8abd7850adc6c3da79400ad5efb3e8e0b110c9fc788dfd41632142bb71", 0x86}, {&(0x7f0000002180)="689870b26b392f287642d196b43e578a9c8e6998614f9505cd5767f6259d7da9ee0ab6a6911fd3e49908e6d6593210e77c6c9f7068954e9784ecc9c3c143228795e80b8ae16df65153eee5a5f60a586e66abdf5587aa35a72ee6494e69e507aa2f2801388d14c3d819fc54dff2d4bd43ffc5a9007fc1f1b8ff877a9d8a8df7320e482eda1b397b4d36ff8a", 0x8b}, {&(0x7f0000001f00)="0333c33488a6c6348c1ccd2e3d6122a489eca20bd66569b56af1bab5019e55bbcdce450a7522700106170697eac70680ea922f1acaefbc25aa11a39a802d44296c8902c49b26e1dc86ae871bd5ad78c0f8ca36cfd74b9dd6624b27bbc397c59d457271f14d3323306d58bfb145ae63fccd2af6085d7463f50d82c403da56425d327d505582e171794008b54b27feb83422cc9d08beb2df368f6e322bf2994b846c8861bc37a748da19ce67022135798e06d0bd09e9770b3160e2f0389aec6be300", 0xc1}], 0xa, &(0x7f00000020c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x115b}}], 0x18}}], 0x2, 0x880) socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0xffff, 0xffc0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @multicast}, 0x5d, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}}) r6 = openat$cgroup_ro(r2, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0], 0x38) bind$llc(0xffffffffffffffff, &(0x7f0000001140)={0x1a, 0x22b, 0x8, 0xf9, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x8, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.833428ms ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="7915a8000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160304000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04a19e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3", @ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) (async) 0s ago: executing program 1 (id=1514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x80, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe3b}]}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x400c805) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 3] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.504257][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.537417][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.620432][T10518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.632556][T10518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.642187][T10518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.651001][T10518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.713956][ T6623] bridge_slave_1: left allmulticast mode [ 252.719671][ T6623] bridge_slave_1: left promiscuous mode [ 252.725733][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.737217][ T6623] bridge_slave_0: left allmulticast mode [ 252.742918][ T6623] bridge_slave_0: left promiscuous mode [ 252.750274][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.007393][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 253.371631][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 253.582479][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.593459][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.608278][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.634607][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.651709][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.764663][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.776525][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.799233][ T6623] bond0 (unregistering): Released all slaves [ 253.895873][ T9421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.913947][ T9421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.942747][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.999844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.095287][T10875] netlink: 'syz.2.1219': attribute type 10 has an invalid length. [ 254.106346][T10875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.202869][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.235503][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.433018][T10883] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1222'. [ 254.484845][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.492939][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.112982][ T6623] hsr_slave_0: left promiscuous mode [ 255.125502][ T6623] hsr_slave_1: left promiscuous mode [ 255.135304][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.142949][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.161735][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.170771][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.215069][ T6623] veth1_macvtap: left promiscuous mode [ 255.220761][ T6623] veth0_macvtap: left promiscuous mode [ 255.227617][ T6623] veth1_vlan: left promiscuous mode [ 255.234525][ T6623] veth0_vlan: left promiscuous mode [ 255.783550][ T5844] Bluetooth: hci0: command tx timeout [ 255.860061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.959653][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.975345][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.985827][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.007518][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.022744][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.062605][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 256.109702][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 256.769994][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.780727][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.797622][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.807011][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.821064][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.083092][T10914] nbd: must specify an index to disconnect [ 257.164461][T10914] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.176721][T10914] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.409437][T10861] chnl_net:caif_netlink_parms(): no params data found [ 257.442341][T10921] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1231'. [ 257.817084][T10861] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.844258][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.851602][T10861] bridge_slave_0: entered allmulticast mode [ 257.866068][T10861] bridge_slave_0: entered promiscuous mode [ 257.869490][ T5844] Bluetooth: hci0: command tx timeout [ 257.916478][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.929302][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.941020][T10861] bridge_slave_1: entered allmulticast mode [ 257.950696][T10861] bridge_slave_1: entered promiscuous mode [ 258.094424][ T5844] Bluetooth: hci4: command tx timeout [ 258.104730][ T6623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.127244][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.152999][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.258061][ T6623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.285951][T10861] team0: Port device team_slave_0 added [ 258.294165][T10908] chnl_net:caif_netlink_parms(): no params data found [ 258.316234][T10861] team0: Port device team_slave_1 added [ 258.372740][ T6623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.472794][ T6623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.491425][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.500304][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.531719][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.568615][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.582205][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.613569][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.783914][T10908] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.791101][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.798955][T10908] bridge_slave_0: entered allmulticast mode [ 258.808878][T10908] bridge_slave_0: entered promiscuous mode [ 258.903734][ T5844] Bluetooth: hci5: command tx timeout [ 258.913792][T10908] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.933698][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.948065][T10908] bridge_slave_1: entered allmulticast mode [ 258.965642][T10908] bridge_slave_1: entered promiscuous mode [ 259.148343][T10908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.639894][ T6623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.677105][T10892] chnl_net:caif_netlink_parms(): no params data found [ 259.716338][T10861] hsr_slave_0: entered promiscuous mode [ 259.722866][T10861] hsr_slave_1: entered promiscuous mode [ 259.736598][T10861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.748952][T10861] Cannot create hsr debugfs directory [ 259.761053][T10908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.936872][ T5844] Bluetooth: hci0: command tx timeout [ 259.954801][ T6623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.000380][T10908] team0: Port device team_slave_0 added [ 260.069853][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 260.080099][T10971] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 260.090111][T10969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'. [ 260.150914][T10908] team0: Port device team_slave_1 added [ 260.175764][ T5844] Bluetooth: hci4: command tx timeout [ 260.269868][ T6623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.344397][T10968] netlink: 'syz.1.1241': attribute type 9 has an invalid length. [ 260.383320][T10908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.390584][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.416932][T10908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.430246][T10908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.438108][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.465607][T10908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.549040][ T6623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.591674][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.604032][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.614148][T10892] bridge_slave_0: entered allmulticast mode [ 260.622108][T10892] bridge_slave_0: entered promiscuous mode [ 260.659899][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.668957][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.681914][T10892] bridge_slave_1: entered allmulticast mode [ 260.690258][T10892] bridge_slave_1: entered promiscuous mode [ 260.972375][T10908] hsr_slave_0: entered promiscuous mode [ 260.975454][ T5844] Bluetooth: hci5: command tx timeout [ 260.988105][T10908] hsr_slave_1: entered promiscuous mode [ 260.998593][T10908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.010970][T10908] Cannot create hsr debugfs directory [ 261.026477][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.185305][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.356547][T11020] netlink: 'syz.1.1248': attribute type 9 has an invalid length. [ 261.398173][T10892] team0: Port device team_slave_0 added [ 261.440185][T10892] team0: Port device team_slave_1 added [ 261.561614][ T6623] bridge_slave_1: left allmulticast mode [ 261.574860][ T6623] bridge_slave_1: left promiscuous mode [ 261.589977][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.601379][ T6623] bridge_slave_0: left allmulticast mode [ 261.610643][ T6623] bridge_slave_0: left promiscuous mode [ 261.616782][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.629435][ T6623] bridge_slave_1: left allmulticast mode [ 261.635755][ T6623] bridge_slave_1: left promiscuous mode [ 261.641507][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.652968][ T6623] bridge_slave_0: left allmulticast mode [ 261.659214][ T6623] bridge_slave_0: left promiscuous mode [ 261.666784][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.015483][ T5831] Bluetooth: hci0: command tx timeout [ 262.082483][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.100653][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.112064][ T6623] bond0 (unregistering): Released all slaves [ 262.254578][ T5831] Bluetooth: hci4: command tx timeout [ 262.448223][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.460114][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.470655][ T6623] bond0 (unregistering): Released all slaves [ 262.662104][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.673539][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.718392][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.893989][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.902139][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.936478][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.062016][ T5831] Bluetooth: hci5: command tx timeout [ 263.197213][T10892] hsr_slave_0: entered promiscuous mode [ 263.235847][T10892] hsr_slave_1: entered promiscuous mode [ 263.242342][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.267926][T10892] Cannot create hsr debugfs directory [ 263.636418][T11053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 264.023208][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'. [ 264.258286][ T6623] hsr_slave_0: left promiscuous mode [ 264.265477][ T6623] hsr_slave_1: left promiscuous mode [ 264.272375][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.281031][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.290098][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.297783][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.310658][ T6623] hsr_slave_0: left promiscuous mode [ 264.316818][ T6623] hsr_slave_1: left promiscuous mode [ 264.322834][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.330529][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.337835][ T5831] Bluetooth: hci4: command tx timeout [ 264.347266][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.355727][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.392348][ T6623] veth1_macvtap: left promiscuous mode [ 264.398214][ T6623] veth0_macvtap: left promiscuous mode [ 264.404010][ T6623] veth1_vlan: left promiscuous mode [ 264.410262][ T6623] veth0_vlan: left promiscuous mode [ 264.417899][ T6623] veth1_macvtap: left promiscuous mode [ 264.423565][ T6623] veth0_macvtap: left promiscuous mode [ 264.429202][ T6623] veth1_vlan: left promiscuous mode [ 264.434673][ T6623] veth0_vlan: left promiscuous mode [ 265.030665][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 265.078183][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 265.134134][ T5831] Bluetooth: hci5: command tx timeout [ 265.892987][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 265.932720][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 266.419447][T10861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.441118][T10861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.471607][T10861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.505257][T10861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.619276][T11071] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 266.655927][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 266.760848][T10908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.811154][T10908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.860391][T10908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.927467][T10908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.067973][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 267.104706][ T13] tipc: Subscription rejected, illegal request [ 267.237859][T10861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.271895][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 267.284073][T10861] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.327634][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.334921][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.357043][T11098] lo: entered promiscuous mode [ 267.361893][T11098] lo: entered allmulticast mode [ 267.389498][T11098] tunl0: entered promiscuous mode [ 267.401927][T11098] tunl0: entered allmulticast mode [ 267.408953][T11098] gre0: entered promiscuous mode [ 267.415284][T11098] gre0: entered allmulticast mode [ 267.423150][T11098] erspan0: entered promiscuous mode [ 267.428500][T11098] erspan0: entered allmulticast mode [ 267.436052][T11098] ip_vti0: entered promiscuous mode [ 267.441296][T11098] ip_vti0: entered allmulticast mode [ 267.448007][T11098] ip6_vti0: entered promiscuous mode [ 267.453331][T11098] ip6_vti0: entered allmulticast mode [ 267.460615][T11098] sit0: entered promiscuous mode [ 267.465807][T11098] sit0: entered allmulticast mode [ 267.498725][T11109] No such timeout policy "syz0" [ 267.509553][T11098] ip6tnl0: entered promiscuous mode [ 267.515332][T11098] ip6tnl0: entered allmulticast mode [ 267.526049][T11098] ip6gre0: entered promiscuous mode [ 267.531317][T11098] ip6gre0: entered allmulticast mode [ 267.538839][T11098] ip6gretap0: entered promiscuous mode [ 267.544949][T11098] ip6gretap0: entered allmulticast mode [ 267.552468][T11098] bridge0: port 3(gretap0) entered blocking state [ 267.559078][T11098] bridge0: port 3(gretap0) entered forwarding state [ 267.566075][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.573383][T11098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.580946][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.588207][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.597200][T11098] bridge0: entered promiscuous mode [ 267.602458][T11098] bridge0: entered allmulticast mode [ 267.609111][T11098] vcan0: entered promiscuous mode [ 267.614649][T11098] vcan0: entered allmulticast mode [ 267.621719][T11098] bond0: entered allmulticast mode [ 267.626964][T11098] bond_slave_0: entered allmulticast mode [ 267.632714][T11098] bond_slave_1: entered allmulticast mode [ 267.638877][T11098] geneve0: entered allmulticast mode [ 267.645939][T11098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.653846][T11098] dummy0: entered promiscuous mode [ 267.659022][T11098] dummy0: entered allmulticast mode [ 267.664986][T11098] nlmon0: entered promiscuous mode [ 267.670130][T11098] nlmon0: entered allmulticast mode [ 267.676543][T11098] caif0: entered promiscuous mode [ 267.681605][T11098] caif0: entered allmulticast mode [ 267.687065][T11098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.742689][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.749975][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.006693][T10892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.079237][T10892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.155346][T10892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.169171][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1278'. [ 268.201723][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.247203][T10892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.409156][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.441707][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1279'. [ 268.470819][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.478156][ T9421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.599601][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.606860][ T9421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.738488][T11134] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1280'. [ 268.781510][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1280'. [ 268.958463][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.038210][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.093540][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.100815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.159054][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.186384][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.193684][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.272356][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1282'. [ 269.422489][T10861] veth0_vlan: entered promiscuous mode [ 269.537330][T10861] veth1_vlan: entered promiscuous mode [ 269.625031][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.639906][T11157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1285'. [ 269.772365][T10861] veth0_macvtap: entered promiscuous mode [ 269.832169][T10861] veth1_macvtap: entered promiscuous mode [ 269.898051][T10908] veth0_vlan: entered promiscuous mode [ 269.942314][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.961162][T10908] veth1_vlan: entered promiscuous mode [ 269.998687][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.048676][T10861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.062880][T10861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.072813][T10861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.088522][T10861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.182734][T11167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1288'. [ 270.202096][T10908] veth0_macvtap: entered promiscuous mode [ 270.227855][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.247977][T11167] openvswitch: netlink: Flow key attr not present in new flow. [ 270.305387][T10908] veth1_macvtap: entered promiscuous mode [ 270.416952][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.442302][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.446669][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.508443][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.597734][T10908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.616722][T10908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.626048][T10908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.635028][T10908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.652303][ T9420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.664791][ T9420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.014697][T11201] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 271.141475][T11201] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.160180][ T9420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.174523][ T9420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.197606][T11206] bond7: (slave veth3): Enslaving as an active interface with a down link [ 271.227239][T11209] vlan2: entered allmulticast mode [ 271.232436][T11209] veth1: entered allmulticast mode [ 271.454339][ T9420] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.598133][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.607150][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.645853][ T9420] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.701693][T10892] veth0_vlan: entered promiscuous mode [ 271.731116][T10892] veth1_vlan: entered promiscuous mode [ 271.785556][ T9420] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.947725][ T9420] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.975518][T10892] veth0_macvtap: entered promiscuous mode [ 271.991916][T10892] veth1_macvtap: entered promiscuous mode [ 272.015726][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.034531][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.050953][T10892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.060422][T10892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.069797][T10892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.081327][T10892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.331502][T11215] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 272.360438][T11215] __nla_validate_parse: 2 callbacks suppressed [ 272.360458][T11215] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1297'. [ 272.384533][ T9420] bridge_slave_1: left allmulticast mode [ 272.406066][ T9420] bridge_slave_1: left promiscuous mode [ 272.411947][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.450285][ T9420] bridge_slave_0: left allmulticast mode [ 272.463780][ T9420] bridge_slave_0: left promiscuous mode [ 272.473860][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.503247][T11219] netlink: 'syz.2.1297': attribute type 33 has an invalid length. [ 272.511557][T11219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1297'. [ 272.887620][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.898120][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.906451][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.916020][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.924051][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.284114][ T9420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.311065][ T9420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.322587][ T9420] bond0 (unregistering): Released all slaves [ 273.355022][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.366340][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.476601][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.497423][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.120995][T11230] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1300'. [ 274.246601][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.263908][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.272384][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.295645][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.320610][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.805696][ T9420] hsr_slave_0: left promiscuous mode [ 274.829510][ T9420] hsr_slave_1: left promiscuous mode [ 274.864614][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.872295][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.900484][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.921610][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.974677][ T5844] Bluetooth: hci0: command tx timeout [ 275.004562][ T9420] veth1_macvtap: left promiscuous mode [ 275.015607][ T9420] veth0_macvtap: left promiscuous mode [ 275.021359][ T9420] veth1_vlan: left promiscuous mode [ 275.029936][ T9420] veth0_vlan: left promiscuous mode [ 275.839761][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.849966][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.865833][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.874958][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.883100][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.162203][ T9420] team0 (unregistering): Port device team_slave_1 removed [ 276.240753][ T9420] team0 (unregistering): Port device team_slave_0 removed [ 276.333659][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.413664][ T5844] Bluetooth: hci4: command tx timeout [ 277.053940][ T5844] Bluetooth: hci0: command tx timeout [ 277.348510][T11221] chnl_net:caif_netlink_parms(): no params data found [ 277.547241][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1304'. [ 277.748962][T11253] netlink: 'syz.1.1304': attribute type 83 has an invalid length. [ 277.778518][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1304'. [ 277.936723][ T5844] Bluetooth: hci5: command tx timeout [ 278.085913][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.097167][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.108080][T11221] bridge_slave_0: entered allmulticast mode [ 278.119441][T11221] bridge_slave_0: entered promiscuous mode [ 278.190990][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.204692][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.222239][T11221] bridge_slave_1: entered allmulticast mode [ 278.242920][T11221] bridge_slave_1: entered promiscuous mode [ 278.314769][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 278.344100][T11233] chnl_net:caif_netlink_parms(): no params data found [ 278.396127][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.421240][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.493863][ T5844] Bluetooth: hci4: command tx timeout [ 278.518869][ T9420] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.637466][ T9420] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.796624][ T9420] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.840575][T11221] team0: Port device team_slave_0 added [ 278.904490][T11221] team0: Port device team_slave_1 added [ 278.943772][ T9420] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.106489][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.114569][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.136518][ T5844] Bluetooth: hci0: command tx timeout [ 279.153659][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.189388][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.227813][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.244398][T11233] bridge_slave_0: entered allmulticast mode [ 279.269124][T11233] bridge_slave_0: entered promiscuous mode [ 279.331777][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.343873][T11295] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 279.345903][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.411848][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.428272][T11297] Bluetooth: MGMT ver 1.23 [ 279.457491][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.475869][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.483224][T11233] bridge_slave_1: entered allmulticast mode [ 279.515471][T11233] bridge_slave_1: entered promiscuous mode [ 279.646249][T11301] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.695148][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1315'. [ 279.733221][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.917020][T11221] hsr_slave_0: entered promiscuous mode [ 279.962586][T11221] hsr_slave_1: entered promiscuous mode [ 279.969551][T11221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.993529][T11221] Cannot create hsr debugfs directory [ 280.013638][ T5844] Bluetooth: hci5: command tx timeout [ 280.018933][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.369954][T11233] team0: Port device team_slave_0 added [ 280.441814][T11233] team0: Port device team_slave_1 added [ 280.478760][T11240] chnl_net:caif_netlink_parms(): no params data found [ 280.571654][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.573639][ T5844] Bluetooth: hci4: command tx timeout [ 280.579474][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.614386][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 280.634333][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.748624][ T9420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.891697][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.909556][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.969517][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.032575][ T9420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.204484][T11324] netlink: 'syz.1.1321': attribute type 2 has an invalid length. [ 281.212298][T11324] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1321'. [ 281.213583][ T5844] Bluetooth: hci0: command tx timeout [ 281.284271][T11324] nbd: must specify a device to reconfigure [ 281.350745][ T9420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.462035][ T9420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.778183][T11233] hsr_slave_0: entered promiscuous mode [ 281.790648][T11340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1324'. [ 281.800764][T11233] hsr_slave_1: entered promiscuous mode [ 281.814376][T11233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.822019][T11233] Cannot create hsr debugfs directory [ 281.846420][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.880937][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.899762][T11240] bridge_slave_0: entered allmulticast mode [ 281.928224][T11240] bridge_slave_0: entered promiscuous mode [ 281.965240][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.972932][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.984861][T11240] bridge_slave_1: entered allmulticast mode [ 281.993221][T11240] bridge_slave_1: entered promiscuous mode [ 282.094870][ T5844] Bluetooth: hci5: command tx timeout [ 282.215274][T11352] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 282.232294][T11352] netlink: 'syz.2.1327': attribute type 2 has an invalid length. [ 282.243635][T11352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'. [ 282.372686][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.411722][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.585202][T11356] netlink: 'syz.1.1328': attribute type 9 has an invalid length. [ 282.641944][T11240] team0: Port device team_slave_0 added [ 282.653553][ T5844] Bluetooth: hci4: command tx timeout [ 282.692224][ T9420] bridge_slave_1: left allmulticast mode [ 282.707412][ T9420] bridge_slave_1: left promiscuous mode [ 282.713293][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.767864][ T9420] bridge_slave_0: left allmulticast mode [ 282.787993][ T9420] bridge_slave_0: left promiscuous mode [ 282.799541][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.825270][ T9420] bridge_slave_1: left allmulticast mode [ 282.831000][ T9420] bridge_slave_1: left promiscuous mode [ 282.846396][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.862087][T11365] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 282.879703][ T9420] bridge_slave_0: left allmulticast mode [ 282.892180][ T9420] bridge_slave_0: left promiscuous mode [ 282.899145][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.608136][ T9420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.623928][ T9420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.648033][ T9420] bond0 (unregistering): Released all slaves [ 284.001325][ T9420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.015857][ T9420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.027432][ T9420] bond0 (unregistering): Released all slaves [ 284.042942][T11240] team0: Port device team_slave_1 added [ 284.173895][ T5844] Bluetooth: hci5: command tx timeout [ 284.199145][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.235238][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.271089][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.336377][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.350890][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.381053][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.632974][T11240] hsr_slave_0: entered promiscuous mode [ 284.641673][T11240] hsr_slave_1: entered promiscuous mode [ 284.651131][T11240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.673006][T11240] Cannot create hsr debugfs directory [ 284.820054][T11385] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 (while UP) [ 284.997171][T11221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.020534][T11221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.164165][T11221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.226705][T11221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.972537][ T9420] hsr_slave_0: left promiscuous mode [ 285.980924][ T9420] hsr_slave_1: left promiscuous mode [ 285.994362][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.001844][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.024428][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.031930][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.059093][ T9420] hsr_slave_0: left promiscuous mode [ 286.066461][ T9420] hsr_slave_1: left promiscuous mode [ 286.072659][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.080698][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.089944][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.100548][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.143082][ T9420] veth1_macvtap: left promiscuous mode [ 286.149126][ T9420] veth0_macvtap: left promiscuous mode [ 286.156803][ T9420] veth1_vlan: left promiscuous mode [ 286.162152][ T9420] veth0_vlan: left promiscuous mode [ 286.169671][ T9420] veth1_macvtap: left promiscuous mode [ 286.175476][ T9420] veth0_macvtap: left promiscuous mode [ 286.181122][ T9420] veth1_vlan: left promiscuous mode [ 286.186724][ T9420] veth0_vlan: left promiscuous mode [ 286.823054][ T9420] team0 (unregistering): Port device team_slave_1 removed [ 286.873195][ T9420] team0 (unregistering): Port device team_slave_0 removed [ 287.699286][ T9420] team0 (unregistering): Port device team_slave_1 removed [ 287.742536][ T9420] team0 (unregistering): Port device team_slave_0 removed [ 288.226493][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.249844][T11221] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.310006][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.317219][ T9418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.379282][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.386540][ T9418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.565330][T11221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.718872][T11233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.847881][T11233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.862386][ T24] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 288.885008][ T24] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 288.899736][T11233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.987727][T11233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.112318][T11240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.193571][T11240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.220785][T11240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.247067][T11240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.386391][T11221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.522052][T11233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.594153][T11466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1354'. [ 289.600068][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 289.630763][T11221] veth0_vlan: entered promiscuous mode [ 289.648185][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 289.657891][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'. [ 289.728772][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.773174][T11221] veth1_vlan: entered promiscuous mode [ 289.793203][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.800382][ T9420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.837335][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.889698][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.897110][ T9420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.975502][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.039662][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.047005][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.077741][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.085026][ T9418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.139101][T11221] veth0_macvtap: entered promiscuous mode [ 290.185610][T11221] veth1_macvtap: entered promiscuous mode [ 290.284645][T11221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.328048][T11221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.385793][T11221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.414168][T11221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.433302][T11221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.454801][T11221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.859523][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.928758][ T9420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.947808][ T9420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.993249][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.003320][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.022099][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.032814][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 291.103444][T11233] veth0_vlan: entered promiscuous mode [ 291.178389][T11233] veth1_vlan: entered promiscuous mode [ 292.940348][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.956481][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.965612][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.988194][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.998178][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.218954][ T3015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.284159][T11233] veth0_macvtap: entered promiscuous mode [ 293.359995][ T3015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.412452][T11233] veth1_macvtap: entered promiscuous mode [ 293.510928][ T3015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.622752][ T3015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.672633][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.697451][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 293.736185][T11240] veth0_vlan: entered promiscuous mode [ 293.751878][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.811579][T11240] veth1_vlan: entered promiscuous mode [ 293.825413][T11233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.838591][T11233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.847622][T11233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.858292][T11233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.975951][ T3015] bridge_slave_1: left allmulticast mode [ 293.981701][ T3015] bridge_slave_1: left promiscuous mode [ 293.994276][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.006122][ T3015] bridge_slave_0: left allmulticast mode [ 294.011818][ T3015] bridge_slave_0: left promiscuous mode [ 294.030019][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.431926][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.443230][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.455809][ T3015] bond0 (unregistering): Released all slaves [ 294.680920][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.701840][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.763300][T11240] veth0_macvtap: entered promiscuous mode [ 294.822562][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.831177][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.850096][T11240] veth1_macvtap: entered promiscuous mode [ 295.053892][ T5831] Bluetooth: hci0: command tx timeout [ 295.152999][ T3015] hsr_slave_0: left promiscuous mode [ 295.178570][ T3015] hsr_slave_1: left promiscuous mode [ 295.184815][T11551] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 295.192607][T11551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1372'. [ 295.202997][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.210642][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.221066][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.229691][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.291424][ T3015] veth1_macvtap: left promiscuous mode [ 295.299454][ T3015] veth0_macvtap: left promiscuous mode [ 295.305612][ T3015] veth1_vlan: left promiscuous mode [ 295.311020][ T3015] veth0_vlan: left promiscuous mode [ 295.354629][T11553] netlink: 'syz.2.1373': attribute type 3 has an invalid length. [ 295.365341][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 295.842421][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 295.891213][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 296.547974][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.605904][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.624132][T11517] chnl_net:caif_netlink_parms(): no params data found [ 296.661306][T11558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.737746][T11240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.766323][T11240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.793979][T11240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.831012][T11240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.118447][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.125908][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.133127][T11517] bridge_slave_0: entered allmulticast mode [ 297.146182][T11517] bridge_slave_0: entered promiscuous mode [ 297.151210][ T5831] Bluetooth: hci0: command tx timeout [ 297.156075][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.164807][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.172037][T11517] bridge_slave_1: entered allmulticast mode [ 297.180614][T11517] bridge_slave_1: entered promiscuous mode [ 297.231931][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.250725][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.313229][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.322055][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.345421][T11517] team0: Port device team_slave_0 added [ 297.355322][T11517] team0: Port device team_slave_1 added [ 297.394729][ T3015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.455138][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.462157][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.489629][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.527711][ T3015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.545932][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.552976][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.579134][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.631094][ T3015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.649234][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.668001][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.706015][ T3015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.749925][T11517] hsr_slave_0: entered promiscuous mode [ 297.760587][T11517] hsr_slave_1: entered promiscuous mode [ 297.767500][T11517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.780692][T11517] Cannot create hsr debugfs directory [ 298.007672][ T3015] bridge_slave_1: left allmulticast mode [ 298.017737][ T3015] bridge_slave_1: left promiscuous mode [ 298.027541][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.092971][ T3015] bridge_slave_0: left allmulticast mode [ 298.100224][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1378'. [ 298.120536][ T3015] bridge_slave_0: left promiscuous mode [ 298.130881][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.601136][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.624055][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.633032][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.652337][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.663003][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.799263][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.810496][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.824414][ T3015] bond0 (unregistering): Released all slaves [ 299.213552][ T5831] Bluetooth: hci0: command tx timeout [ 299.315412][T11586] tipc: New replicast peer: 255.255.255.255 [ 299.322568][T11586] tipc: Enabled bearer , priority 10 [ 299.399772][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 299.426251][T11587] tipc: Disabling bearer [ 299.837584][ T3015] hsr_slave_0: left promiscuous mode [ 299.855404][ T3015] hsr_slave_1: left promiscuous mode [ 299.863360][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.898709][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.920371][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.949404][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.030080][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.032162][ T3015] veth1_macvtap: left promiscuous mode [ 300.051108][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.057148][ T3015] veth0_macvtap: left promiscuous mode [ 300.068193][ T3015] veth1_vlan: left promiscuous mode [ 300.070969][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.074068][ T3015] veth0_vlan: left promiscuous mode [ 300.091366][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.114201][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.598864][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 300.643214][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 300.734011][ T5844] Bluetooth: hci4: command tx timeout [ 301.101518][T11601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'. [ 301.186600][T11517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.225311][T11517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.271597][T11517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.301429][ T5844] Bluetooth: hci0: command tx timeout [ 301.315213][T11517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.632212][T11631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1388'. [ 301.766242][T11580] chnl_net:caif_netlink_parms(): no params data found [ 302.125038][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.180309][ T5844] Bluetooth: hci5: command tx timeout [ 302.210043][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.226813][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.235373][T11580] bridge_slave_0: entered allmulticast mode [ 302.244019][T11580] bridge_slave_0: entered promiscuous mode [ 302.254251][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 302.391359][ T3015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.413173][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.425489][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.432907][T11580] bridge_slave_1: entered allmulticast mode [ 302.451737][T11580] bridge_slave_1: entered promiscuous mode [ 302.491689][T11659] netlink: 'syz.1.1394': attribute type 12 has an invalid length. [ 302.532123][ T3015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.582155][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.606183][T11662] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1395'. [ 302.657372][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.664630][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.735429][ T3015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.761616][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.780316][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.787498][ T9418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.813725][ T5844] Bluetooth: hci4: command tx timeout [ 302.840066][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.896707][ T3015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.977958][T11580] team0: Port device team_slave_0 added [ 302.992008][T11580] team0: Port device team_slave_1 added [ 303.103111][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.111382][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.138863][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.152905][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.160498][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.186938][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.371462][T11580] hsr_slave_0: entered promiscuous mode [ 303.381075][T11580] hsr_slave_1: entered promiscuous mode [ 303.389260][T11580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.397542][T11580] Cannot create hsr debugfs directory [ 303.430122][T11610] chnl_net:caif_netlink_parms(): no params data found [ 303.469863][ T3015] bridge_slave_1: left allmulticast mode [ 303.475802][ T3015] bridge_slave_1: left promiscuous mode [ 303.481650][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.508008][ T3015] bridge_slave_0: left allmulticast mode [ 303.518777][ T3015] bridge_slave_0: left promiscuous mode [ 303.525021][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.951305][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.962585][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.974285][ T3015] bond0 (unregistering): Released all slaves [ 304.261140][T11695] Bluetooth: MGMT ver 1.23 [ 304.266710][ T5844] Bluetooth: hci5: command tx timeout [ 304.291945][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 304.535334][T11610] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.542553][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.554686][T11610] bridge_slave_0: entered allmulticast mode [ 304.563197][T11610] bridge_slave_0: entered promiscuous mode [ 304.621071][T11610] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.637135][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.650902][T11610] bridge_slave_1: entered allmulticast mode [ 304.658973][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1405'. [ 304.671469][T11610] bridge_slave_1: entered promiscuous mode [ 304.723097][T11707] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 304.731864][T11707] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1406'. [ 304.890380][T11610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.903771][ T5844] Bluetooth: hci4: command tx timeout [ 305.025227][T11610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.060068][ T3015] hsr_slave_0: left promiscuous mode [ 305.076857][ T3015] hsr_slave_1: left promiscuous mode [ 305.083160][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.090892][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.099513][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.107437][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.131066][ T3015] veth1_macvtap: left promiscuous mode [ 305.137742][ T3015] veth0_macvtap: left promiscuous mode [ 305.143485][ T3015] veth1_vlan: left promiscuous mode [ 305.148869][ T3015] veth0_vlan: left promiscuous mode [ 305.647505][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 305.694444][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 306.219086][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.296770][T11610] team0: Port device team_slave_0 added [ 306.312148][T11610] team0: Port device team_slave_1 added [ 306.336290][ T5844] Bluetooth: hci5: command tx timeout [ 306.466263][T11724] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 306.491238][T11727] netlink: 'syz.2.1412': attribute type 1 has an invalid length. [ 306.507731][T11610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.516589][T11610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.542825][T11727] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1412'. [ 306.542869][T11727] netlink: 'syz.2.1412': attribute type 1 has an invalid length. [ 306.566146][T11610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.677682][T11610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.692800][T11610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.727004][T11610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.882101][T11610] hsr_slave_0: entered promiscuous mode [ 306.894475][T11610] hsr_slave_1: entered promiscuous mode [ 306.900785][T11610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.910292][T11610] Cannot create hsr debugfs directory [ 306.973660][ T5844] Bluetooth: hci4: command tx timeout [ 307.041730][T11517] veth0_vlan: entered promiscuous mode [ 307.158242][T11517] veth1_vlan: entered promiscuous mode [ 307.284147][T11744] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1420'. [ 307.371324][T11744] sctp: [Deprecated]: syz.2.1420 (pid 11744) Use of int in maxseg socket option. [ 307.371324][T11744] Use struct sctp_assoc_value instead [ 307.378434][T11580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.415451][T11580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.435053][T11580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.458359][T11580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.574253][T11517] veth0_macvtap: entered promiscuous mode [ 307.597937][T11517] veth1_macvtap: entered promiscuous mode [ 307.688994][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.741594][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.796842][T11517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.812699][T11517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.827442][T11517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.843012][T11517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.856448][T11764] xt_CT: No such helper "syz0" [ 308.203748][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.233704][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.278027][T11580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.297435][T11610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.330632][ T6623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.337411][T11610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.346074][ T6623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.372526][T11781] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1429'. [ 308.398714][T11610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.414261][ T5844] Bluetooth: hci5: command tx timeout [ 308.456473][T11580] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.471780][T11610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.562537][T11788] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1431'. [ 308.601775][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.609122][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.701672][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.708920][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.927798][ T3015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.077473][ T3015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.185234][ T3015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.408877][ T3015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.539450][T11610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.600925][T11610] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.675908][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.683088][ T9420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.736760][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.744028][ T9420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.005449][T11814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1437'. [ 310.019939][T11580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.058389][ T3015] bridge_slave_1: left allmulticast mode [ 310.073535][ T3015] bridge_slave_1: left promiscuous mode [ 310.079402][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.116842][ T3015] bridge_slave_0: left allmulticast mode [ 310.122576][ T3015] bridge_slave_0: left promiscuous mode [ 310.144111][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.324592][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.340866][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.379055][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.388519][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.404050][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.419085][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.427402][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.442844][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.453875][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.462714][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.749750][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.761113][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.771660][ T3015] bond0 (unregistering): Released all slaves [ 311.103207][T11829] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 311.104093][ T6628] bond0: (slave bond_slave_0): interface is now down [ 311.133656][T11580] veth0_vlan: entered promiscuous mode [ 311.140341][ T6628] bond0: (slave bond_slave_1): interface is now down [ 311.154052][ T6628] bond0: (slave bridge_slave_1): interface is now down [ 311.198192][ T6628] bond0: (slave bond_slave_0): interface is now down [ 311.213629][ T6628] bond0: (slave bond_slave_1): interface is now down [ 311.234082][ T6628] bond0: (slave bridge_slave_1): interface is now down [ 311.264806][ T9418] bond0: (slave bond_slave_0): interface is now down [ 311.280369][ T9418] bond0: (slave bond_slave_1): interface is now down [ 311.290431][ T9418] bond0: (slave bridge_slave_1): interface is now down [ 311.297918][T11580] veth1_vlan: entered promiscuous mode [ 311.314321][ T9418] bond0: (slave bond_slave_0): interface is now down [ 311.322710][ T9418] bond0: (slave bond_slave_1): interface is now down [ 311.332925][ T9418] bond0: (slave bridge_slave_1): interface is now down [ 311.354802][ T9421] bond0: (slave bond_slave_0): interface is now down [ 311.361873][ T9421] bond0: (slave bond_slave_1): interface is now down [ 311.390552][T11610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.399005][ T9421] bond0: (slave bridge_slave_1): interface is now down [ 311.434147][ T9421] bond0: (slave bond_slave_0): interface is now down [ 311.440911][ T9421] bond0: (slave bond_slave_1): interface is now down [ 311.472320][ T9421] bond0: (slave bridge_slave_1): interface is now down [ 311.497208][ T6623] bond0: (slave bond_slave_0): interface is now down [ 311.499941][T11580] veth0_macvtap: entered promiscuous mode [ 311.512743][ T6623] bond0: (slave bond_slave_1): interface is now down [ 311.543643][ T6623] bond0: (slave bridge_slave_1): interface is now down [ 311.573742][ T6648] bond0: (slave bond_slave_0): interface is now down [ 311.576162][T11580] veth1_macvtap: entered promiscuous mode [ 311.580493][ T6648] bond0: (slave bond_slave_1): interface is now down [ 311.629441][ T6648] bond0: (slave bridge_slave_1): interface is now down [ 311.682366][T11580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.689225][ T9418] bond0: (slave bond_slave_0): interface is now down [ 311.720353][ T9418] bond0: (slave bond_slave_1): interface is now down [ 311.737977][T11580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.742819][ T9418] bond0: (slave bridge_slave_1): interface is now down [ 311.765445][ T6648] bond0: (slave bond_slave_0): interface is now down [ 311.772169][ T6648] bond0: (slave bond_slave_1): interface is now down [ 311.784317][T11580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.793122][T11580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.805456][T11580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.814677][T11580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.826879][ T6648] bond0: (slave bridge_slave_1): interface is now down [ 311.861803][T11842] IPVS: set_ctl: invalid protocol: 135 172.30.0.2:20004 [ 311.875981][ T9420] bond0: (slave bond_slave_0): interface is now down [ 311.882731][ T9420] bond0: (slave bond_slave_1): interface is now down [ 311.951030][ T9420] bond0: (slave bridge_slave_1): interface is now down [ 311.994148][ T13] bond0: (slave bond_slave_0): interface is now down [ 312.016598][ T13] bond0: (slave bond_slave_1): interface is now down [ 312.036243][ T13] bond0: (slave bridge_slave_1): interface is now down [ 312.055642][ T13] bond0: now running without any active interface! [ 312.495151][ T5849] Bluetooth: hci1: command tx timeout [ 312.533257][ T3015] hsr_slave_0: left promiscuous mode [ 312.539747][ T3015] hsr_slave_1: left promiscuous mode [ 312.546848][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.554802][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.565595][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.573346][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.573799][ T5849] Bluetooth: hci0: command tx timeout [ 312.609013][ T3015] veth1_macvtap: left promiscuous mode [ 312.615470][ T3015] veth0_macvtap: left promiscuous mode [ 312.621117][ T3015] veth1_vlan: left promiscuous mode [ 312.626772][ T3015] veth0_vlan: left promiscuous mode [ 313.130574][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 313.178589][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 313.610770][T11824] chnl_net:caif_netlink_parms(): no params data found [ 313.645811][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.669420][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.829485][ T6628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.860616][ T6628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.992865][T11610] veth0_vlan: entered promiscuous mode [ 314.062444][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.070397][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.078090][T11824] bridge_slave_0: entered allmulticast mode [ 314.086295][T11824] bridge_slave_0: entered promiscuous mode [ 314.100108][T11610] veth1_vlan: entered promiscuous mode [ 314.152035][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.159658][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.167643][T11824] bridge_slave_1: entered allmulticast mode [ 314.176662][T11824] bridge_slave_1: entered promiscuous mode [ 314.272675][T11824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.335697][T11824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.460972][T11824] team0: Port device team_slave_0 added [ 314.489102][T11824] team0: Port device team_slave_1 added [ 314.573500][ T5849] Bluetooth: hci1: command tx timeout [ 314.588697][T11820] chnl_net:caif_netlink_parms(): no params data found [ 314.632652][T11824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.642817][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.657032][ T5849] Bluetooth: hci0: command tx timeout [ 314.674814][T11824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.687801][T11824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.694962][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.721447][T11824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.760716][ T3015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.831898][T11610] veth0_macvtap: entered promiscuous mode [ 314.862616][ T3015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.946123][T11824] hsr_slave_0: entered promiscuous mode [ 314.952606][T11824] hsr_slave_1: entered promiscuous mode [ 314.959717][T11824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.967399][T11824] Cannot create hsr debugfs directory [ 315.012044][T11610] veth1_macvtap: entered promiscuous mode [ 315.038439][ T3015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.056072][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.063301][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.075732][T11820] bridge_slave_0: entered allmulticast mode [ 315.083159][T11820] bridge_slave_0: entered promiscuous mode [ 315.097614][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.108306][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.115953][T11820] bridge_slave_1: entered allmulticast mode [ 315.126056][T11820] bridge_slave_1: entered promiscuous mode [ 315.187907][ T3015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.245491][T11820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.274788][T11820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.289253][T11610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.350058][T11610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.406018][T11820] team0: Port device team_slave_0 added [ 315.421300][T11610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.431295][T11610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.441520][T11610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.450699][T11610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.480254][T11820] team0: Port device team_slave_1 added [ 315.559958][T11820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.567521][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.593832][T11820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.608826][T11820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.616104][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.645758][T11820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.756420][ T3015] bridge_slave_1: left allmulticast mode [ 315.762223][ T3015] bridge_slave_1: left promiscuous mode [ 315.768782][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.804319][ T3015] bridge_slave_0: left allmulticast mode [ 315.810114][ T3015] bridge_slave_0: left promiscuous mode [ 315.832004][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.106413][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.127007][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.137840][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.155351][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.175963][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.391487][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.402904][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.413237][ T3015] bond0 (unregistering): Released all slaves [ 316.614870][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 316.630894][T11824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.664411][ T5837] Bluetooth: hci1: command tx timeout [ 316.739411][ T5837] Bluetooth: hci0: command tx timeout [ 316.760435][T11820] hsr_slave_0: entered promiscuous mode [ 316.767357][T11820] hsr_slave_1: entered promiscuous mode [ 316.774635][T11820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.782238][T11820] Cannot create hsr debugfs directory [ 316.892917][T11824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.930237][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.942546][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.110557][T11824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.242381][T11824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.317098][ T9420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.325879][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.338801][ T9420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.533006][ T3015] hsr_slave_0: left promiscuous mode [ 317.555746][ T3015] hsr_slave_1: left promiscuous mode [ 317.561886][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.570658][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.580183][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.587776][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.637222][ T3015] veth1_macvtap: left promiscuous mode [ 317.642880][ T3015] veth0_macvtap: left promiscuous mode [ 317.648640][ T3015] veth1_vlan: left promiscuous mode [ 317.654728][ T3015] veth0_vlan: left promiscuous mode [ 318.229209][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 318.258209][ T5837] Bluetooth: hci4: command tx timeout [ 318.287169][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 318.733848][ T5837] Bluetooth: hci1: command tx timeout [ 318.813762][ T5837] Bluetooth: hci0: command tx timeout [ 319.082798][T11824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.139007][T11824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.238505][T11824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.267361][T11824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.285072][T11884] chnl_net:caif_netlink_parms(): no params data found [ 319.497762][T11884] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.510423][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.517904][T11884] bridge_slave_0: entered allmulticast mode [ 319.526438][T11884] bridge_slave_0: entered promiscuous mode [ 319.538507][T11884] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.545798][T11884] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.553070][T11884] bridge_slave_1: entered allmulticast mode [ 319.560775][T11884] bridge_slave_1: entered promiscuous mode [ 319.597821][ T3015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.659145][T11884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.673629][T11884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.721243][ T3015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.773275][T11884] team0: Port device team_slave_0 added [ 319.840802][ T3015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.860648][T11884] team0: Port device team_slave_1 added [ 319.935130][ T3015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.990879][T11884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.998317][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.029055][T11884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.042200][T11884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.049549][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.076067][T11884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.097298][T11820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.108775][T11820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.128320][T11820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.142328][T11820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.210547][T11884] hsr_slave_0: entered promiscuous mode [ 320.218027][T11884] hsr_slave_1: entered promiscuous mode [ 320.225547][T11884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.233140][T11884] Cannot create hsr debugfs directory [ 320.334903][ T5837] Bluetooth: hci4: command tx timeout [ 320.644585][T11824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.677283][ T3015] bridge_slave_1: left allmulticast mode [ 320.683025][ T3015] bridge_slave_1: left promiscuous mode [ 320.696889][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.717049][ T3015] bridge_slave_0: left allmulticast mode [ 320.718901][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.722761][ T3015] bridge_slave_0: left promiscuous mode [ 320.734811][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.745002][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.746169][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.756261][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.767650][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.198995][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.210186][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.222102][ T3015] bond0 (unregistering): Released all slaves [ 321.360249][T11824] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.445472][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.452678][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.534877][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.542092][ T6623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.884223][T11820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.157556][T11820] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.252624][ T3015] hsr_slave_0: left promiscuous mode [ 322.261569][ T3015] hsr_slave_1: left promiscuous mode [ 322.268805][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.276768][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.289740][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.297458][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.321617][ T3015] veth1_macvtap: left promiscuous mode [ 322.328374][ T3015] veth0_macvtap: left promiscuous mode [ 322.334979][ T3015] veth1_vlan: left promiscuous mode [ 322.340459][ T3015] veth0_vlan: left promiscuous mode [ 322.416280][ T5837] Bluetooth: hci4: command tx timeout [ 322.813669][ T5837] Bluetooth: hci5: command tx timeout [ 322.860842][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 322.912839][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 323.416000][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.423167][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.559262][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.566510][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.596901][T11884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.625043][T11884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.773759][T11884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.830368][T11884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.936029][T11932] chnl_net:caif_netlink_parms(): no params data found [ 324.130034][T11820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.180862][T11824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.236812][T11973] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1464'. [ 324.256750][T11932] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.264547][T11932] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.271818][T11932] bridge_slave_0: entered allmulticast mode [ 324.281096][T11932] bridge_slave_0: entered promiscuous mode [ 324.291071][T11932] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.298477][T11932] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.306461][T11932] bridge_slave_1: entered allmulticast mode [ 324.314218][T11932] bridge_slave_1: entered promiscuous mode [ 324.417655][T11932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.440505][T11932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.504534][ T5837] Bluetooth: hci4: command tx timeout [ 324.696150][T11932] team0: Port device team_slave_0 added [ 324.744180][T11932] team0: Port device team_slave_1 added [ 324.778236][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 324.791194][T11989] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 324.803194][T11989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.886991][T11932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.894929][ T5837] Bluetooth: hci5: command tx timeout [ 324.901172][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.928861][T11932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.966954][T11824] veth0_vlan: entered promiscuous mode [ 324.974416][T11932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.981512][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.011709][T11932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.056113][T11824] veth1_vlan: entered promiscuous mode [ 325.080828][T11820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.115354][T11884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.181239][T11932] hsr_slave_0: entered promiscuous mode [ 325.188495][T11932] hsr_slave_1: entered promiscuous mode [ 325.195626][T11932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.203352][T11932] Cannot create hsr debugfs directory [ 325.349873][T11824] veth0_macvtap: entered promiscuous mode [ 325.361433][T11884] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.396818][T11824] veth1_macvtap: entered promiscuous mode [ 325.428620][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.435857][ T9420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.487258][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.494462][ T9420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.618145][T11824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.626416][T11820] veth0_vlan: entered promiscuous mode [ 325.674768][T11824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.696320][T11824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.705864][T11824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.715663][T11824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.724928][T11824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.764298][T11820] veth1_vlan: entered promiscuous mode [ 325.912575][T11820] veth0_macvtap: entered promiscuous mode [ 325.959245][T11820] veth1_macvtap: entered promiscuous mode [ 326.053334][ T9420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.077124][ T9420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.108768][T11820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.197258][T11820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.230628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.244935][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.282144][T11820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.300089][T11820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.309259][T11820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.318391][T11820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.388668][T11932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.410241][T11932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.424175][T11932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.470212][T11932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.518865][T11884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.755368][ T6623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.909858][ T6623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.983891][ T5837] Bluetooth: hci5: command tx timeout [ 326.995125][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.021577][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.075463][ T6623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.116879][T11884] veth0_vlan: entered promiscuous mode [ 327.183329][ T6623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.268067][T11884] veth1_vlan: entered promiscuous mode [ 327.343039][ T9420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.366193][ T9420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.459924][T11884] veth0_macvtap: entered promiscuous mode [ 327.524951][T11884] veth1_macvtap: entered promiscuous mode [ 327.632374][T11932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.665890][T11884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.695347][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.706016][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.714904][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.726666][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.737513][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.752177][T11932] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.820855][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.828108][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.861923][T11884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.915649][T11884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.933146][T11884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.950495][T11884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.959580][T11884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.021831][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.029101][ T9420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.066069][ T6623] bridge_slave_1: left allmulticast mode [ 328.071975][ T6623] bridge_slave_1: left promiscuous mode [ 328.084807][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.144397][ T6623] bridge_slave_0: left allmulticast mode [ 328.150228][ T6623] bridge_slave_0: left promiscuous mode [ 328.176371][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.741238][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.758830][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.769273][ T6623] bond0 (unregistering): Released all slaves [ 329.066949][ T5837] Bluetooth: hci5: command tx timeout [ 329.094140][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.099809][T11932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.101995][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.325001][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.333071][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.520668][T12045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.612580][ T6623] hsr_slave_0: left promiscuous mode [ 329.655931][ T6623] hsr_slave_1: left promiscuous mode [ 329.690626][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.699165][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.708980][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.722865][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.752479][ T6623] veth1_macvtap: left promiscuous mode [ 329.758363][ T6623] veth0_macvtap: left promiscuous mode [ 329.764276][ T6623] veth1_vlan: left promiscuous mode [ 329.769761][ T6623] veth0_vlan: left promiscuous mode [ 329.778561][ T5837] Bluetooth: hci0: command tx timeout [ 329.992260][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.002048][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.010783][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.021404][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.030902][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.369977][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 330.412665][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 330.940024][T12023] chnl_net:caif_netlink_parms(): no params data found [ 331.088132][T12054] bond4: entered promiscuous mode [ 331.093315][T12054] bond4: entered allmulticast mode [ 331.109518][T12054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.335593][T12054] bond4 (unregistering): Released all slaves [ 331.479615][T11932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.565271][T12023] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.572475][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.594039][T12023] bridge_slave_0: entered allmulticast mode [ 331.602155][T12023] bridge_slave_0: entered promiscuous mode [ 331.633022][T12023] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.646944][T12023] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.661059][T12023] bridge_slave_1: entered allmulticast mode [ 331.672875][T12023] bridge_slave_1: entered promiscuous mode [ 331.838385][T12023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.856918][ T5837] Bluetooth: hci0: command tx timeout [ 331.876663][T12023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.920510][ T6623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.046116][T12023] team0: Port device team_slave_0 added [ 332.067726][ T6623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.093691][ T5837] Bluetooth: hci1: command tx timeout [ 332.102032][T12023] team0: Port device team_slave_1 added [ 332.163985][ T6623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.207338][T12023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.217449][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.245034][T12023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.257438][T12023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.264784][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.291504][T12023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.331842][ T6623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.466260][T12023] hsr_slave_0: entered promiscuous mode [ 332.477564][T12023] hsr_slave_1: entered promiscuous mode [ 332.491271][T12023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.524014][T12023] Cannot create hsr debugfs directory [ 332.696620][T11932] veth0_vlan: entered promiscuous mode [ 332.784678][T12071] netlink: 'syz.1.1478': attribute type 39 has an invalid length. [ 332.842448][T12073] netlink: 'syz.1.1478': attribute type 4 has an invalid length. [ 332.966489][T11932] veth1_vlan: entered promiscuous mode [ 333.001204][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.010584][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.018781][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.029981][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.038537][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.199181][ T6623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.275337][T12049] chnl_net:caif_netlink_parms(): no params data found [ 333.360948][ T6623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.515779][ T6623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.611795][T12082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1481'. [ 333.658288][ T6623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.760347][T11932] veth0_macvtap: entered promiscuous mode [ 333.852975][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.865615][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.875142][T12049] bridge_slave_0: entered allmulticast mode [ 333.883775][T12049] bridge_slave_0: entered promiscuous mode [ 333.892095][T12088] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1482'. [ 333.928181][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.939077][ T5849] Bluetooth: hci0: command tx timeout [ 333.942381][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.954312][T12049] bridge_slave_1: entered allmulticast mode [ 333.962602][T12049] bridge_slave_1: entered promiscuous mode [ 334.053814][T11932] veth1_macvtap: entered promiscuous mode [ 334.068573][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.082884][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.175079][ T5849] Bluetooth: hci1: command tx timeout [ 334.207255][T12049] team0: Port device team_slave_0 added [ 334.217760][T12049] team0: Port device team_slave_1 added [ 334.324654][ T6623] bridge_slave_1: left allmulticast mode [ 334.330396][ T6623] bridge_slave_1: left promiscuous mode [ 334.337741][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.365283][ T6623] bridge_slave_0: left allmulticast mode [ 334.371785][ T6623] bridge_slave_0: left promiscuous mode [ 334.384953][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.400344][ T6623] bridge_slave_1: left allmulticast mode [ 334.409643][ T6623] bridge_slave_1: left promiscuous mode [ 334.419990][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.445442][ T6623] bridge_slave_0: left allmulticast mode [ 334.451168][ T6623] bridge_slave_0: left promiscuous mode [ 334.462290][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.741013][T12098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1484'. [ 334.867848][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.879166][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.889885][ T6623] bond0 (unregistering): Released all slaves [ 335.053740][ T5849] Bluetooth: hci4: command tx timeout [ 335.249203][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.260735][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.271646][ T6623] bond0 (unregistering): Released all slaves [ 335.294162][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.311006][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.338053][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.352949][T11932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.525291][T12097] C: renamed from team_slave_0 (while UP) [ 335.532992][T12097] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 335.541572][T12097] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.581529][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.590930][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.620627][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.701562][T11932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.860003][T11932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.869866][T11932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.879854][T11932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.891584][T11932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.914154][T12049] hsr_slave_0: entered promiscuous mode [ 335.922099][T12049] hsr_slave_1: entered promiscuous mode [ 335.929295][T12049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.938347][T12049] Cannot create hsr debugfs directory [ 335.985901][T12102] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 336.013699][ T5849] Bluetooth: hci0: command tx timeout [ 336.243608][T12023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.254435][ T5849] Bluetooth: hci1: command tx timeout [ 336.275109][T12023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.313208][T12075] chnl_net:caif_netlink_parms(): no params data found [ 336.403145][T12023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.414107][T12023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.054177][ T6623] hsr_slave_0: left promiscuous mode [ 337.061053][ T6623] hsr_slave_1: left promiscuous mode [ 337.078364][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.086296][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.094764][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.102278][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.104831][T12128] netlink: 'syz.1.1489': attribute type 5 has an invalid length. [ 337.131527][ T6623] hsr_slave_0: left promiscuous mode [ 337.134767][ T5849] Bluetooth: hci4: command tx timeout [ 337.146262][ T6623] hsr_slave_1: left promiscuous mode [ 337.152673][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.173666][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.182138][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.192957][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.241588][ T6623] veth1_macvtap: left promiscuous mode [ 337.247981][ T6623] veth0_macvtap: left promiscuous mode [ 337.254285][ T6623] veth1_vlan: left promiscuous mode [ 337.259893][ T6623] veth0_vlan: left promiscuous mode [ 337.276833][ T6623] veth1_macvtap: left promiscuous mode [ 337.282489][ T6623] veth0_macvtap: left promiscuous mode [ 337.302051][ T6623] veth1_vlan: left promiscuous mode [ 337.321227][ T6623] veth0_vlan: left promiscuous mode [ 338.024806][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 338.076651][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 338.333767][ T5849] Bluetooth: hci1: command tx timeout [ 338.930981][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 338.980843][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 339.213636][ T5849] Bluetooth: hci4: command tx timeout [ 339.436307][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.445067][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.452274][T12075] bridge_slave_0: entered allmulticast mode [ 339.460115][T12075] bridge_slave_0: entered promiscuous mode [ 339.468351][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.477384][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.484963][T12075] bridge_slave_1: entered allmulticast mode [ 339.492891][T12075] bridge_slave_1: entered promiscuous mode [ 339.565815][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.577489][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.645000][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.680724][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.768278][T12075] team0: Port device team_slave_0 added [ 339.791788][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.802274][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.852424][T12075] team0: Port device team_slave_1 added [ 339.943122][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'. [ 339.997360][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.014261][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.056792][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.097270][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.123026][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.178995][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.223037][T12152] netlink: 'syz.1.1494': attribute type 3 has an invalid length. [ 340.231356][T12152] netlink: 'syz.1.1494': attribute type 3 has an invalid length. [ 340.549273][T12075] hsr_slave_0: entered promiscuous mode [ 340.582185][T12075] hsr_slave_1: entered promiscuous mode [ 340.618739][T12075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.629979][T12075] Cannot create hsr debugfs directory [ 340.711701][T12023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.850404][T12023] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.861200][T12049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.898269][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.905495][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.915991][T12049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.947964][T12049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.987731][ T6623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.015706][T12049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.031554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.038811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.088358][ T6623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.172653][ T6623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.280961][ T6623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.293812][ T5849] Bluetooth: hci4: command tx timeout [ 341.381182][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.424201][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.458118][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.465348][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.516096][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.523288][ T9418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.721958][ T6623] bridge_slave_1: left allmulticast mode [ 341.729757][ T6623] bridge_slave_1: left promiscuous mode [ 341.735927][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.746334][ T6623] bridge_slave_0: left allmulticast mode [ 341.752039][ T6623] bridge_slave_0: left promiscuous mode [ 341.759961][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.322976][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.340436][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.348932][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.365529][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.373950][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.462339][T12191] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 342.471017][T12191] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1502'. [ 342.520711][ T6623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.533210][ T6623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.544181][ T6623] bond0 (unregistering): Released all slaves [ 342.564919][T12191] tipc: Enabling of bearer rejected, failed to enable media [ 342.762861][T12023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.777411][T12075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.006503][T12075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.056176][T12075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.145199][T12075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.422340][T12023] veth0_vlan: entered promiscuous mode [ 343.508472][T12023] veth1_vlan: entered promiscuous mode [ 343.599497][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.822754][ T6623] hsr_slave_0: left promiscuous mode [ 343.834287][ T6623] hsr_slave_1: left promiscuous mode [ 343.840528][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.849911][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.861221][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.869544][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.878528][T12226] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 343.909074][ T6623] veth1_macvtap: left promiscuous mode [ 343.915185][ T6623] veth0_macvtap: left promiscuous mode [ 343.920849][ T6623] veth1_vlan: left promiscuous mode [ 343.926447][ T6623] veth0_vlan: left promiscuous mode [ 344.405064][ T6623] team0 (unregistering): Port device team_slave_1 removed [ 344.414259][ T5837] Bluetooth: hci5: command tx timeout [ 344.457376][ T6623] team0 (unregistering): Port device team_slave_0 removed [ 345.001441][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.064144][T12023] veth0_macvtap: entered promiscuous mode [ 345.088299][T12049] veth0_vlan: entered promiscuous mode [ 345.117445][T12184] chnl_net:caif_netlink_parms(): no params data found [ 345.154860][T12023] veth1_macvtap: entered promiscuous mode [ 345.250027][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.335316][T12049] veth1_vlan: entered promiscuous mode [ 345.345372][T12023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.357220][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.364436][ T9420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.406371][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.414007][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.421307][T12184] bridge_slave_0: entered allmulticast mode [ 345.429149][T12184] bridge_slave_0: entered promiscuous mode [ 345.438290][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.445817][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.453056][T12184] bridge_slave_1: entered allmulticast mode [ 345.461522][T12184] bridge_slave_1: entered promiscuous mode [ 345.475411][T12023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.522894][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.546406][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.553655][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.578436][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.590806][T12023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.600949][T12023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.609944][T12023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.619354][T12023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.687002][T12184] team0: Port device team_slave_0 added [ 345.712644][T12184] team0: Port device team_slave_1 added [ 345.807189][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.815233][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.841619][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.857124][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.865431][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.891779][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.925105][T12049] veth0_macvtap: entered promiscuous mode [ 346.004160][T12184] hsr_slave_0: entered promiscuous mode [ 346.010853][T12184] hsr_slave_1: entered promiscuous mode [ 346.021418][T12184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.029200][T12184] Cannot create hsr debugfs directory [ 346.045666][T12049] veth1_macvtap: entered promiscuous mode [ 346.081475][ T6623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.095929][ T6623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.257703][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.269192][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.289538][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.322921][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.418610][T12049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.441020][T12049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.453756][T12049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.462505][T12049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.494600][ T5837] Bluetooth: hci5: command tx timeout [ 346.917693][ T6628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.044663][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.071915][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.118627][ T6628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.156671][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.255717][ T6628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.306765][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.353815][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.449471][ T6628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.718893][T12075] veth0_vlan: entered promiscuous mode [ 347.740419][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.757782][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.767719][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.779515][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.800654][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.868463][T12075] veth1_vlan: entered promiscuous mode [ 347.889537][T12184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.911800][T12184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.028852][T12184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.058469][T12184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.229025][ T6628] bridge_slave_1: left allmulticast mode [ 348.234869][ T6628] bridge_slave_1: left promiscuous mode [ 348.240640][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.276658][ T6628] bridge_slave_0: left allmulticast mode [ 348.282392][ T6628] bridge_slave_0: left promiscuous mode [ 348.303827][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.578200][ T5837] Bluetooth: hci5: command tx timeout [ 348.749197][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.760479][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.770964][ T6628] bond0 (unregistering): Released all slaves [ 348.825859][T12075] veth0_macvtap: entered promiscuous mode [ 348.880149][T12075] veth1_macvtap: entered promiscuous mode [ 348.990319][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.071731][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.106008][T12075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.120481][T12075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.132398][T12075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.142637][T12075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.294684][ T31] INFO: task syz-executor:8850 blocked for more than 143 seconds. [ 349.303562][ T31] Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 [ 349.311242][ T31] Blocked by coredump. [ 349.316013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.324940][ T31] task:syz-executor state:D stack:21160 pid:8850 tgid:8850 ppid:1 task_flags:0x40014c flags:0x00004002 [ 349.338350][ T31] Call Trace: [ 349.341709][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.345395][ T31] __schedule+0x16f5/0x4d00 [ 349.359729][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.373811][ T31] ? schedule+0x165/0x360 [ 349.378232][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.383149][ T31] ? __pfx___schedule+0x10/0x10 [ 349.403574][ T31] ? schedule+0x91/0x360 [ 349.407919][ T31] schedule+0x165/0x360 [ 349.412130][ T31] schedule_timeout+0x9a/0x270 [ 349.453907][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 349.459402][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.523725][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.529035][ T31] ? wait_for_completion+0x267/0x5d0 [ 349.573877][ T31] wait_for_completion+0x2bf/0x5d0 [ 349.579191][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 349.591440][ T31] ? __flush_work+0xd2/0xbc0 [ 349.596279][ T31] ? __flush_work+0xd2/0xbc0 [ 349.600915][ T31] __flush_work+0x9b9/0xbc0 [ 349.606239][ T31] ? __flush_work+0xd2/0xbc0 [ 349.611103][ T31] ? __pfx___flush_work+0x10/0x10 [ 349.618564][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 349.630347][ T31] ? __pfx___cancel_work+0x10/0x10 [ 349.637635][ T31] ? __pfx___might_resched+0x10/0x10 [ 349.649171][ T31] ? __cancel_work+0x254/0x2e0 [ 349.655700][ T31] __cancel_work_sync+0xbe/0x110 [ 349.660714][ T31] hci_cmd_sync_clear+0x30/0x230 [ 349.672032][ T31] hci_unregister_dev+0x194/0x510 [ 349.678917][ T31] vhci_release+0x80/0xd0 [ 349.683339][ T31] ? __pfx_vhci_release+0x10/0x10 [ 349.699066][ T31] __fput+0x449/0xa70 [ 349.703129][ T31] task_work_run+0x1d1/0x260 [ 349.715380][ T31] ? __pfx_task_work_run+0x10/0x10 [ 349.720577][ T31] ? kmem_cache_free+0x18f/0x400 [ 349.726154][ T31] do_exit+0x6b5/0x22e0 [ 349.730368][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 349.736368][ T31] ? __pfx_do_exit+0x10/0x10 [ 349.741026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.747393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.752661][ T31] do_group_exit+0x21c/0x2d0 [ 349.757976][ T31] __x64_sys_exit_group+0x3f/0x40 [ 349.763047][ T31] x64_sys_call+0x21ba/0x21c0 [ 349.767906][ T31] do_syscall_64+0xfa/0x3b0 [ 349.772470][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.782192][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.788779][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.797621][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.806990][ T31] RIP: 0033:0x7f95f6f8e929 [ 349.811475][ T31] RSP: 002b:00007fff9e215408 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 349.826799][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95f6f8e929 [ 349.837270][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 349.847429][ T31] RBP: 00007f95f6fee8f0 R08: 00007fff9e2131a7 R09: 0000000000000003 [ 349.855793][ T5837] Bluetooth: hci0: command tx timeout [ 349.861937][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.870383][ T31] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff9e2155c0 [ 349.879673][ T31] [ 349.882884][ T31] [ 349.882884][ T31] Showing all locks held in the system: [ 349.890797][ T31] 1 lock held by khungtaskd/31: [ 349.895850][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.906266][ T31] 2 locks held by getty/5591: [ 349.911011][ T31] #0: ffff8880307740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 349.921044][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 349.944621][ T31] 3 locks held by kworker/u9:8/5851: [ 349.951873][ T31] #0: ffff888024980148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 349.962870][ T31] #1: ffffc9000418fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 349.993673][ T31] #2: ffff8880297dcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 350.004048][ T31] 3 locks held by kworker/u8:11/6623: [ 350.009461][ T31] #0: ffff88802fda0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.022733][ T31] #1: ffffc9001b597bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.036083][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 350.045684][ T31] 4 locks held by kworker/u8:14/6628: [ 350.052018][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.063266][ T31] #1: ffffc9001b5f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.074289][ T31] #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 350.083803][ T31] #3: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 350.121430][ T31] [ 350.138004][ T31] ============================================= [ 350.138004][ T31] [ 350.179860][ T6628] hsr_slave_0: left promiscuous mode [ 350.184520][ T31] NMI backtrace for cpu 0 [ 350.184555][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 350.184585][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.184600][ T31] Call Trace: [ 350.184610][ T31] [ 350.184620][ T31] dump_stack_lvl+0x189/0x250 [ 350.184664][ T31] ? __wake_up_klogd+0xd9/0x110 [ 350.184696][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.184733][ T31] ? __pfx__printk+0x10/0x10 [ 350.184777][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 350.184812][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 350.184838][ T31] ? _printk+0xcf/0x120 [ 350.184871][ T31] ? __pfx__printk+0x10/0x10 [ 350.184900][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 350.184937][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 350.184971][ T31] watchdog+0xfee/0x1030 [ 350.185020][ T31] ? watchdog+0x1de/0x1030 [ 350.185070][ T31] kthread+0x70e/0x8a0 [ 350.185103][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.185133][ T31] ? __pfx_kthread+0x10/0x10 [ 350.185164][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.185196][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.185226][ T31] ? __pfx_kthread+0x10/0x10 [ 350.185249][ T31] ret_from_fork+0x3fc/0x770 [ 350.185288][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.185325][ T31] ? __switch_to_asm+0x39/0x70 [ 350.185345][ T31] ? __switch_to_asm+0x33/0x70 [ 350.185365][ T31] ? __pfx_kthread+0x10/0x10 [ 350.185390][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.185430][ T31] [ 350.185439][ T31] Sending NMI from CPU 0 to CPUs 1: [ 350.185467][ C1] NMI backtrace for cpu 1 [ 350.185480][ C1] CPU: 1 UID: 0 PID: 6628 Comm: kworker/u8:14 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 350.185501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.185513][ C1] Workqueue: netns cleanup_net [ 350.185535][ C1] RIP: 0010:pie_calculate_probability+0x5d9/0x7e0 [ 350.185563][ C1] Code: f8 85 db 0f 84 c1 00 00 00 e8 53 ba 3b f8 eb 05 e8 4c ba 3b f8 48 8b 44 24 08 48 8d 78 10 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 05 e8 e0 3e 9f f8 48 8b 44 24 08 48 c7 40 10 46 c3 23 00 48 8d [ 350.185579][ C1] RSP: 0018:ffffc90000a08a90 EFLAGS: 00000246 [ 350.185594][ C1] RAX: 1ffff1100db91962 RBX: 0000000000000000 RCX: ffff88802598bc00 [ 350.185607][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff88806dc8cb10 [ 350.185619][ C1] RBP: ffff88806dc8cb08 R08: 0000000000000003 R09: 0000000000000004 [ 350.185631][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: dffffc0000000000 [ 350.185644][ C1] R13: ffff888078b5eb1a R14: 1ffff1100f16bd63 R15: 0000000000000000 [ 350.185657][ C1] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 350.185671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.185683][ C1] CR2: 00007fb55d5b6038 CR3: 000000000df38000 CR4: 00000000003526f0 [ 350.185698][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.185709][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.185719][ C1] Call Trace: [ 350.185726][ C1] [ 350.185742][ C1] fq_pie_timer+0x288/0x5b0 [ 350.185760][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 350.185778][ C1] call_timer_fn+0x17e/0x5f0 [ 350.185809][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 350.185823][ C1] ? call_timer_fn+0xbe/0x5f0 [ 350.185846][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 350.185875][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.185898][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.185922][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 350.185938][ C1] __run_timer_base+0x61a/0x860 [ 350.185958][ C1] ? ktime_get+0x3e/0x1f0 [ 350.185984][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 350.186003][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 350.186033][ C1] run_timer_softirq+0xb7/0x180 [ 350.186056][ C1] handle_softirqs+0x286/0x870 [ 350.186085][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 350.186115][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 350.186144][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 350.186168][ C1] __irq_exit_rcu+0xca/0x1f0 [ 350.186194][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 350.186226][ C1] irq_exit_rcu+0x9/0x30 [ 350.186250][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 350.186274][ C1] [ 350.186280][ C1] [ 350.186287][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.186305][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 350.186325][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 35 26 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 26 26 1f 00 eb 06 e8 1f 26 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ca a9 82 00 48 8b 1b 48 8b 44 24 [ 350.186340][ C1] RSP: 0018:ffffc9001b5f70e0 EFLAGS: 00000293 [ 350.186354][ C1] RAX: 1ffffffff1d36a27 RBX: ffffffff8e9b5138 RCX: ffff88802598bc00 [ 350.186367][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.186377][ C1] RBP: ffffc9001b5f7230 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 350.186391][ C1] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: dffffc0000000000 [ 350.186404][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b50e0 [ 350.186429][ C1] ? console_flush_all+0x13a/0xc40 [ 350.186453][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 350.186479][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 350.186504][ C1] console_unlock+0xc4/0x270 [ 350.186521][ C1] ? __pfx_console_unlock+0x10/0x10 [ 350.186541][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 350.186565][ C1] vprintk_emit+0x5b7/0x7a0 [ 350.186584][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 350.186613][ C1] _printk+0xcf/0x120 [ 350.186634][ C1] ? __pfx__printk+0x10/0x10 [ 350.186656][ C1] ? __netdev_printk+0x365/0x4d0 [ 350.186685][ C1] netdev_info+0x10a/0x160 [ 350.186706][ C1] ? synchronize_rcu_expedited+0x630/0x730 [ 350.186726][ C1] ? __pfx_netdev_info+0x10/0x10 [ 350.186759][ C1] __dev_set_promiscuity+0x307/0x740 [ 350.186779][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 350.186809][ C1] netif_set_promiscuity+0x50/0xe0 [ 350.186831][ C1] dev_set_promiscuity+0x126/0x260 [ 350.186853][ C1] hsr_del_port+0x260/0x300 [ 350.186877][ C1] ? __pfx_hsr_dellink+0x10/0x10 [ 350.186900][ C1] hsr_del_ports+0x31/0xc0 [ 350.186920][ C1] hsr_dellink+0x5b/0x90 [ 350.186942][ C1] default_device_exit_batch+0x766/0x890 [ 350.186965][ C1] ? __pfx___might_resched+0x10/0x10 [ 350.186992][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 350.187011][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 350.187036][ C1] ? net_generic+0x1e/0x240 [ 350.187063][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 350.187082][ C1] ops_undo_list+0x522/0x990 [ 350.187104][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 350.187129][ C1] cleanup_net+0x4c5/0x800 [ 350.187149][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 350.187169][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.187191][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 350.187218][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 350.187246][ C1] process_scheduled_works+0xae1/0x17b0 [ 350.187291][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.187328][ C1] worker_thread+0x8a0/0xda0 [ 350.187372][ C1] kthread+0x70e/0x8a0 [ 350.187394][ C1] ? __pfx_worker_thread+0x10/0x10 [ 350.187420][ C1] ? __pfx_kthread+0x10/0x10 [ 350.187440][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.187463][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.187487][ C1] ? __pfx_kthread+0x10/0x10 [ 350.187506][ C1] ret_from_fork+0x3fc/0x770 [ 350.187532][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 350.187561][ C1] ? __switch_to_asm+0x39/0x70 [ 350.187578][ C1] ? __switch_to_asm+0x33/0x70 [ 350.187595][ C1] ? __pfx_kthread+0x10/0x10 [ 350.187615][ C1] ret_from_fork_asm+0x1a/0x30 [ 350.187643][ C1] [ 350.188475][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 350.188493][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 350.188522][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.188538][ T31] Call Trace: [ 350.188547][ T31] [ 350.188558][ T31] dump_stack_lvl+0x99/0x250 [ 350.188596][ T31] ? __asan_memcpy+0x40/0x70 [ 350.188650][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.188689][ T31] ? __pfx__printk+0x10/0x10 [ 350.188733][ T31] panic+0x2db/0x790 [ 350.188778][ T31] ? __pfx_panic+0x10/0x10 [ 350.188816][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 350.188863][ T31] ? irq_work_queue+0xc3/0x140 [ 350.188909][ T31] watchdog+0x102d/0x1030 [ 350.188946][ T31] ? watchdog+0x1de/0x1030 [ 350.188990][ T31] kthread+0x70e/0x8a0 [ 350.189023][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.189063][ T31] ? __pfx_kthread+0x10/0x10 [ 350.189095][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.189127][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.189161][ T31] ? __pfx_kthread+0x10/0x10 [ 350.189190][ T31] ret_from_fork+0x3fc/0x770 [ 350.189229][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.189273][ T31] ? __switch_to_asm+0x39/0x70 [ 350.189298][ T31] ? __switch_to_asm+0x33/0x70 [ 350.189321][ T31] ? __pfx_kthread+0x10/0x10 [ 350.189352][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.189399][ T31] [ 350.193034][ T31] Kernel Offset: disabled