last executing test programs: 4.108944153s ago: executing program 1 (id=2): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x19}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 3.700589167s ago: executing program 32 (id=2): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x19}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 3.248437802s ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, @in6={0xa, 0x4e20, 0x0, @private0, 0x2}, @in6={0xa, 0x4e23, 0x5, @local, 0x1}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0xb57}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, @in6={0xa, 0x4e22, 0x4, @loopback, 0xff}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x8, @private1, 0x7fff}], 0xf4) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="38000000000000003c0012800e0001006970366772657461700000002800028014000600fe8000000000000000000000000000aa08000c000300000008000d000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) getgid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8040) 3.102117551s ago: executing program 0 (id=1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r6, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) write(r8, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmmsg$inet6(r9, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000) r13 = socket$inet6(0xa, 0x80003, 0xff) r14 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r14, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0) 2.687938097s ago: executing program 2 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0xa, 0x0, 0x11}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1fffffff}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2, 0xffffffffffffffff}, 0x18, &(0x7f0000000680)={0x0, 0x40}}, 0x440c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '!A}&+}:{-\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2.537427346s ago: executing program 3 (id=14): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000400000e000a000f0000000280cdb5c31f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000400000e000a000f0000000280cdb5c31f", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x1fe, "408b7c"}) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x810) (async) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001"], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) syz_emit_ethernet(0x92, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x1, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x200, 0x965}, @sack={0x5, 0x1e, [0x9, 0x3, 0x2, 0x0, 0x8, 0x1, 0x80000000]}, @fastopen={0x22, 0xb, "54df942f7e09586180"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x5, "ef5efc"}]}}}}}}}, 0x0) close(r0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = accept(r3, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000340)=0x80) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000500)="2ef71ed281f5c08d14b4a2bfe047f209e93c6a2c74a9b31e49b45acd502485172e2a2317907b2ddb5449926e4eb856b3a53d0bee9e35dde44f2e3508ac45f2d9e6be294d289fb497cee39df151a8c045a5e80c7cceaa569c8a8032eb468c8704a46f71e2b734e7af154f34325fb196baf0b3", 0x72) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x19}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x804) 2.486283282s ago: executing program 4 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001900010000000000000000008020900000110005001400000800f5ff6301010208000700e0000002"], 0x2c}, 0x1, 0x0, 0x0, 0x2000a880}, 0x20004002) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) (async) r7 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x4, 0x0, 0x0, 0x0, @rand_addr=0x64010101, @empty}}}}) (async) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2b, 0x0) (async, rerun: 32) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 32) sendto$inet6(r7, 0x0, 0x0, 0x4044080, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32) pwrite64(r4, &(0x7f0000000380)='k', 0x1, 0xc) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000500)=@ethtool_sfeatures={0x3b, 0x2, [{0x2f16, 0x3}, {0x244558f5, 0x8}]}}) 2.191941905s ago: executing program 4 (id=16): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001c0e9e2370ae6de00fc046250800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001101400000010000100"], 0xb0}}, 0x20050800) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000023c0)="a4", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400f1d7fd344e00000100000000000000000000000000000000000000000000000000000000000000fcaf3859816ab5d40e3316f8f13115bb64f2e091b2ea15cfaf905f069a705157377ba4379d82f2a73e8fe91100c8b109537c38b4036bed718b0f0780b5b890cdd1f8b4df8a7559f03606d949e1af45f958813a10dd08504e6170c96860fb1c03c6493be7a66f2916902e3cebadc64db0af9168a9c7407e882c3915f5e57ee64c88ca01b85e7fa7839dfe333cafcf3189f0de1ace4fc380d8d82ce8b7850ae8c1fff91bf28d", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000ff010000000000000000000000000001"], 0x50}, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) listen(r0, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001c0e9e2370ae6de00fc046250800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001101400000010000100"], 0xb0}}, 0x20050800) (async) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000023c0)="a4", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400f1d7fd344e00000100000000000000000000000000000000000000000000000000000000000000fcaf3859816ab5d40e3316f8f13115bb64f2e091b2ea15cfaf905f069a705157377ba4379d82f2a73e8fe91100c8b109537c38b4036bed718b0f0780b5b890cdd1f8b4df8a7559f03606d949e1af45f958813a10dd08504e6170c96860fb1c03c6493be7a66f2916902e3cebadc64db0af9168a9c7407e882c3915f5e57ee64c88ca01b85e7fa7839dfe333cafcf3189f0de1ace4fc380d8d82ce8b7850ae8c1fff91bf28d", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000ff010000000000000000000000000001"], 0x50}, 0x0) (async) 2.134152134s ago: executing program 2 (id=17): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x300}, 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000007000000000000000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 1.988442218s ago: executing program 0 (id=18): syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@generic={0x31}, @padn={0x5}, @ra]}]}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRESHEX=r0, @ANYRES8=r2], 0x44}}, 0x0) 1.659075849s ago: executing program 0 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@local, @in6=@private1, 0x4e24, 0xfff9, 0x4e24, 0x8000, 0xa, 0xa0, 0xa1b93edd2ced59d5, 0x0, 0x0, r3}, {0x1, 0xfffffffffffffffa, 0x4, 0x100, 0x3, 0x9, 0x9, 0x6}, {0x0, 0x5, 0xfffffffffffffff9, 0xfffe000000}, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4d6, 0x32}, 0x2, @in=@broadcast, 0x3500, 0x3, 0x0, 0x8, 0x8001, 0x10000, 0x7}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030500000000000000003df824c3b3a640163add5495901100000000", @ANYRES32=0x0, @ANYBLOB="04000400000000001800128008000100677470000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00M'], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRESHEX=r4], 0x44}, 0x1, 0x0, 0x0, 0x24040841}, 0x40014) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@remote, @local, 0x0, 0xffffff00, 0x0, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8dd, 0x800, 0xfff, 0x400, 0xffff, 0xdd, 'syzkaller0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xffffff82, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, 0x0, 0x0, 0x2, 0xd, {@mac, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="39d9791192f8", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x94, 0x1, 0xfdd, 0x8, 0x5, 'bond_slave_1\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x43}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xd}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000140)={r7, 0x1, 0x30, 0x1000, 0xa7a5}, &(0x7f00000002c0)=0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25000000000000000000000000000000000a01010200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000d959d67d0000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket(0x26, 0x80000, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000300)={r7, 0xfff9, 0x1150, 0x4b, 0x34, 0x6}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fbff90020000118bdc4a5d29ea356ef3b1bcc341e9ac11bcd74a40f3f2525c829cf7780b57f4cab99e80bb10cfd5c7ebd974fbf7260e719a4883c7a75f786c44dbcfc9f6feac6b6aa33ecc0f022a7dd4b4dcf6a5900a67db4d2714de15428bd32dcb53c48c94177f817661c7abcd0ce722ac24b24d1de0cc8030863b8670a756b41c85e7884b151678216772cf5cf00b49f3895206cca65c29641ee9d066d610d2128526ec971f862123cf915562faf1b469f73ef7d6222775bc136a6b28077c8380769081fd6601cd5d0d49aba334fc6f9f6c09c0716363b82f348b3e25f955243f665fbb23de98db772de3178276"], 0x0) 1.322974856s ago: executing program 4 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="9b0420f08a84421a8810d06d178af0a822a739ac7a7907e598e7392e01b55ce80ba6e67fb6865eb474e5ad185de72f7f8aa4d8ac8530359545f206da5cf208b0796a403d3d045df2ecfa10ddda8b201d85e7c6914e9bb9f673e5b0b39deb9a637907019875c754cefb040681319b3aba987827b30bb1e0a9afe1d79c55977e41cfb11fc17daad077331fdffdb53cea84348ba29249fe6ac8d50e125e3df2c9a70fce754820e327294898eb1d04e439cda4915ac8bb85bd779f493b734292491677e5c6f28fa4d969ac1743335a1c", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES64=r1], 0x50) r3 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x80, 0xa663c2d661e22030) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x1d, r5, 0x2, {0x2, 0xf, 0x3}, 0xff}, 0x18, &(0x7f0000000540)={&(0x7f00000004c0)="dd8d83c46ee8f896b170d8f1f6348917e37b4a015a0e6a41e6a54e5bba6f52f588c4fe20745759c06b45028c574dd7a7cdb09b542f50f60139373b59d3441e99822786c97a105e7628b2a9011e04fbfb9b8c7bd203e13d799c5762e22db00cd41f536c10af32224c0476e71e022298efc6a700bc1de39d50a0e5", 0x7a}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc5) setsockopt$ax25_int(r6, 0x101, 0x6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x8917, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000400000008000200050000009805da9e3a651a1d76103e5a7fd167f4fd3b99b63c043c450da6265ebfff3ba77a3a5e6dd4cdaa8d785d72af61c2"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) accept(r12, 0x0, &(0x7f0000000180)) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f0000000340)={r12, r12, 0x8, 0xffffffffffffffb3, &(0x7f00000005c0)="61a9b7da9182", 0x8, 0x5, 0xb57, 0x9c16, 0x801, 0x2, 0x0, 'syz1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 1.273675003s ago: executing program 2 (id=21): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x1, [{@broadcast}]}]}}}], 0x20}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.272616766s ago: executing program 3 (id=22): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430012003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff]}}) 1.219928886s ago: executing program 0 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000009000100626f6e6400000000000000000005000000b8102d89ad1a197cc6b17db6eac559919c8beabf7b2867668494d8d8e2a95483c88843e6b4b6937e2364"], 0x44}}, 0x0) 935.064648ms ago: executing program 3 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x800, @empty, 0x0, 0xfffffffb}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x7fb2, @empty, 0x6, 0x2}, 0x20) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2037}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast1}}}}]}]}, 0x6c}}, 0x0) 877.176194ms ago: executing program 4 (id=25): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4800000000, 0x100000000, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 855.079905ms ago: executing program 2 (id=26): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xfffffe8b, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xfffffe8b, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) (async) 603.988065ms ago: executing program 4 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r2, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1f}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647", 0x2}], 0x1}}], 0x1, 0x40408c1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 600.482461ms ago: executing program 0 (id=28): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x22020600) getpeername$packet(r1, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="80", 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'veth0_to_team\x00', @random="0200ff7fffff"}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}], 0x1}, 0x0) 463.650019ms ago: executing program 4 (id=29): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64, @ANYBLOB="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", @ANYRES16=r1], 0x80}}, 0x4080) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0x19}], 0x1, 0x120, 0x0) unshare(0x400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x80, 0x7, 0x0, 0x1, {{0x5, 0x4, 0x1, 0x11, 0x14, 0x68, 0x0, 0x8, 0xbf024c3e130caf83, 0x0, @private=0xa010101, @loopback}}}}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, 0x0, &(0x7f0000000640)=0xfffffffffffffed6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a0001008000000000000002818080003c0361b9b6ef90960800"], 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000000)=0x201, 0x4) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100077f000001ac1414aa00186371ae9b1c03d5624953c1a27a9d35a96d6c62c8f4f98d38207300c4eb9cfcd6e8affe3ca1867b510bf13585c8b8cf8266d496d9a8a8ac35b3b6e88011c13ea1c3ea3e03d3c89a6fad22c98f7484c27c55"], 0x0) 434.29591ms ago: executing program 2 (id=30): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) unshare(0x28000600) (async) socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf4e) (async) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) pipe(&(0x7f0000000080)) (async) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x200000100000011, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000feffff7f0000000000d96e6c8d5e8508"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0x400fff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = accept4(r4, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000180)=0x80, 0x800) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000000200)) 0s ago: executing program 2 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xe0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006800e97800010000ffdbdf250a0000000400000008000500", @ANYRES32=0x0, @ANYBLOB="1400060000000000000000000000000000000001"], 0x34}}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646", 0x8f}, {0x0}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83", 0x49}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 84.483955][ T5821] cgroup: Unknown subsys name 'net' [ 84.612552][ T5821] cgroup: Unknown subsys name 'cpuset' [ 84.621567][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.384566][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.077943][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.088042][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.099750][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.107605][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.116220][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.125318][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.132956][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.141785][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.151926][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.160103][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.169497][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.181938][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.190670][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.199044][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.202790][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.214767][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.222643][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.230430][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.237929][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.246562][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.255921][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.256039][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.272304][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.279793][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.289613][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.772874][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.034964][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.155607][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.163579][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.173400][ T5845] bridge_slave_0: entered allmulticast mode [ 90.182033][ T5845] bridge_slave_0: entered promiscuous mode [ 90.201248][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.238356][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.245758][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.253400][ T5845] bridge_slave_1: entered allmulticast mode [ 90.261881][ T5845] bridge_slave_1: entered promiscuous mode [ 90.312938][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.386523][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.401336][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.415667][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 90.577383][ T5845] team0: Port device team_slave_0 added [ 90.583666][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.591016][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.598350][ T5834] bridge_slave_0: entered allmulticast mode [ 90.605650][ T5834] bridge_slave_0: entered promiscuous mode [ 90.648860][ T5845] team0: Port device team_slave_1 added [ 90.672863][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.680880][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.688169][ T5834] bridge_slave_1: entered allmulticast mode [ 90.695813][ T5834] bridge_slave_1: entered promiscuous mode [ 90.708163][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.715427][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.722707][ T5832] bridge_slave_0: entered allmulticast mode [ 90.730791][ T5832] bridge_slave_0: entered promiscuous mode [ 90.827805][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.835160][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.843445][ T5832] bridge_slave_1: entered allmulticast mode [ 90.853739][ T5832] bridge_slave_1: entered promiscuous mode [ 90.873738][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.883067][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.890454][ T5831] bridge_slave_0: entered allmulticast mode [ 90.897604][ T5831] bridge_slave_0: entered promiscuous mode [ 90.905878][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.913110][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.940494][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.984114][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.993396][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.001136][ T5831] bridge_slave_1: entered allmulticast mode [ 91.008466][ T5831] bridge_slave_1: entered promiscuous mode [ 91.016049][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.023226][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.049490][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.072017][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.098176][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.141328][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.154746][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.181127][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.206346][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.243776][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.252395][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.260272][ T5840] Bluetooth: hci0: command tx timeout [ 91.266371][ T5849] bridge_slave_0: entered allmulticast mode [ 91.268751][ T5840] Bluetooth: hci3: command tx timeout [ 91.274244][ T5849] bridge_slave_0: entered promiscuous mode [ 91.339313][ T5840] Bluetooth: hci1: command tx timeout [ 91.339443][ T51] Bluetooth: hci4: command tx timeout [ 91.344823][ T5842] Bluetooth: hci2: command tx timeout [ 91.367592][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.374862][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.383219][ T5849] bridge_slave_1: entered allmulticast mode [ 91.390959][ T5849] bridge_slave_1: entered promiscuous mode [ 91.414709][ T5832] team0: Port device team_slave_0 added [ 91.424493][ T5832] team0: Port device team_slave_1 added [ 91.432916][ T5831] team0: Port device team_slave_0 added [ 91.444009][ T5831] team0: Port device team_slave_1 added [ 91.452988][ T5834] team0: Port device team_slave_0 added [ 91.478361][ T5845] hsr_slave_0: entered promiscuous mode [ 91.485704][ T5845] hsr_slave_1: entered promiscuous mode [ 91.526271][ T5834] team0: Port device team_slave_1 added [ 91.574090][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.581347][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.607945][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.649680][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.669627][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.679904][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.686897][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.713448][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.725439][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.732514][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.758820][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.817437][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.824959][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.851163][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.863488][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.870883][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.897470][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.911302][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.918270][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.944553][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.981357][ T5849] team0: Port device team_slave_0 added [ 91.985057][ T10] cfg80211: failed to load regulatory.db [ 92.045439][ T5849] team0: Port device team_slave_1 added [ 92.116218][ T5831] hsr_slave_0: entered promiscuous mode [ 92.122818][ T5831] hsr_slave_1: entered promiscuous mode [ 92.129827][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.137596][ T5831] Cannot create hsr debugfs directory [ 92.184909][ T5832] hsr_slave_0: entered promiscuous mode [ 92.193377][ T5832] hsr_slave_1: entered promiscuous mode [ 92.199751][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.207331][ T5832] Cannot create hsr debugfs directory [ 92.243986][ T5834] hsr_slave_0: entered promiscuous mode [ 92.251272][ T5834] hsr_slave_1: entered promiscuous mode [ 92.257796][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.265437][ T5834] Cannot create hsr debugfs directory [ 92.276396][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.283449][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.310060][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.323366][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.330552][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.357363][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.661302][ T5849] hsr_slave_0: entered promiscuous mode [ 92.667761][ T5849] hsr_slave_1: entered promiscuous mode [ 92.674249][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.681901][ T5849] Cannot create hsr debugfs directory [ 92.957224][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.002075][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.040172][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.066556][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.115979][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.132219][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.154457][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.182990][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.232558][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.261981][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.278276][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.298047][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.339904][ T5840] Bluetooth: hci0: command tx timeout [ 93.341716][ T5842] Bluetooth: hci3: command tx timeout [ 93.421010][ T5842] Bluetooth: hci2: command tx timeout [ 93.421044][ T5840] Bluetooth: hci1: command tx timeout [ 93.426453][ T5842] Bluetooth: hci4: command tx timeout [ 93.501406][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.514852][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.555271][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.565583][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.598032][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.683582][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.709294][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.726535][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.746836][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.757163][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.779932][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.818191][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.851844][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.859250][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.885989][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.900494][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.907656][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.947528][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.958054][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.965232][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.975645][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.982843][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.043682][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.050878][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.125727][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.132931][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.151864][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.232170][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.356294][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.383993][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.403787][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.411342][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.465529][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.505649][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.512920][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.596469][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.697170][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.725970][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.733264][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.807923][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.815222][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.933218][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.037338][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.278572][ T5834] veth0_vlan: entered promiscuous mode [ 95.334438][ T5831] veth0_vlan: entered promiscuous mode [ 95.368224][ T5834] veth1_vlan: entered promiscuous mode [ 95.398100][ T5831] veth1_vlan: entered promiscuous mode [ 95.421355][ T5842] Bluetooth: hci3: command tx timeout [ 95.426845][ T5842] Bluetooth: hci0: command tx timeout [ 95.503367][ T51] Bluetooth: hci4: command tx timeout [ 95.503375][ T5840] Bluetooth: hci2: command tx timeout [ 95.514824][ T5842] Bluetooth: hci1: command tx timeout [ 95.523434][ T5834] veth0_macvtap: entered promiscuous mode [ 95.544063][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.570401][ T5834] veth1_macvtap: entered promiscuous mode [ 95.610536][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.635429][ T5845] veth0_vlan: entered promiscuous mode [ 95.648184][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.686612][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.701328][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712981][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.722107][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.731648][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.747806][ T5845] veth1_vlan: entered promiscuous mode [ 95.762305][ T5831] veth0_macvtap: entered promiscuous mode [ 95.776139][ T5831] veth1_macvtap: entered promiscuous mode [ 95.817510][ T5832] veth0_vlan: entered promiscuous mode [ 95.881243][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.897119][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.918486][ T5832] veth1_vlan: entered promiscuous mode [ 95.936014][ T5845] veth0_macvtap: entered promiscuous mode [ 95.955673][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.968570][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.983194][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994710][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.025316][ T5845] veth1_macvtap: entered promiscuous mode [ 96.067633][ T5849] veth0_vlan: entered promiscuous mode [ 96.074123][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.091906][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.137905][ T5849] veth1_vlan: entered promiscuous mode [ 96.194685][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.213731][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.227883][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.235613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.256451][ T5832] veth0_macvtap: entered promiscuous mode [ 96.273634][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282535][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.291800][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.302090][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.355609][ T5832] veth1_macvtap: entered promiscuous mode [ 96.358425][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.374851][ T5849] veth0_macvtap: entered promiscuous mode [ 96.400303][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.422161][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.423678][ T5849] veth1_macvtap: entered promiscuous mode [ 96.520753][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.540907][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.571747][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.640355][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.641294][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.648236][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.673374][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686190][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.695117][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711011][ T5952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 96.738399][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.762718][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 96.790004][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.797745][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.809261][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.852613][ T5952] Zero length message leads to an empty skb [ 96.877210][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.906789][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.918028][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.928014][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.095245][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.113293][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.333685][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.353573][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 97.420872][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.450346][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.500385][ T5842] Bluetooth: hci0: command tx timeout [ 97.506211][ T51] Bluetooth: hci3: command tx timeout [ 97.526206][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.579582][ T5842] Bluetooth: hci2: command tx timeout [ 97.580842][ T51] Bluetooth: hci4: command tx timeout [ 97.621223][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.640119][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.695904][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.771294][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.779478][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.789475][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.806486][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.836600][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.891636][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.930515][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.337173][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11'. [ 98.466133][ T5970] tipc: Started in network mode [ 98.486509][ T5970] tipc: Node identity ca8345c32792, cluster identity 4711 [ 98.497269][ T5970] tipc: Enabled bearer , priority 10 [ 98.552864][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 98.583124][ T5966] tipc: Disabling bearer [ 98.628039][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.646393][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.657431][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.668852][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.680061][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.741093][ T49] bridge_slave_1: left allmulticast mode [ 98.746932][ T49] bridge_slave_1: left promiscuous mode [ 98.761102][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.865975][ T49] bridge_slave_0: left allmulticast mode [ 98.889743][ T49] bridge_slave_0: left promiscuous mode [ 98.909139][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.972200][ T5993] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 98.974624][ T5991] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 99.007365][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 99.034975][ T5997] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 99.049289][ T5997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.360154][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16'. [ 99.416765][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 99.427169][ T6006] sctp: failed to load transform for md5: -2 [ 99.543936][ T6018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.760620][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 99.917135][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.932250][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.944437][ T49] bond0 (unregistering): Released all slaves [ 100.228074][ T6032] netlink: 'syz.3.22': attribute type 5 has an invalid length. [ 100.293679][ T5921] hid (null): global environment stack underflow [ 100.352311][ T5921] hid (null): invalid report_size -1879914779 [ 100.779622][ T51] Bluetooth: hci1: command tx timeout [ 101.074275][ T6062] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 101.127584][ T6053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.130489][ T5205] udevd[5205]: worker [5836] terminated by signal 33 (Unknown signal 33) [ 101.311453][ T6045] tipc: Enabling of bearer rejected, failed to enable media Connection to 10.128.1.141 closed by remote host. [ 101.980209][ T49] hsr_slave_0: left promiscuous mode [ 102.022392][ T49] hsr_slave_1: left promiscuous mode [ 102.049017][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.056635][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.129988][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.137445][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.273748][ T49] veth1_macvtap: left promiscuous mode [ 102.302827][ T49] veth0_macvtap: left promiscuous mode [ 102.308555][ T49] veth1_vlan: left promiscuous mode [ 102.342758][ T49] veth0_vlan: left promiscuous mode [ 102.735242][ T5921] hid-generic 0005:0B57:9C16.0001: unknown main item tag 0x6 [ 102.748202][ T5921] hid-generic 0005:0B57:9C16.0001: global environment stack underflow [ 102.756614][ T5921] hid-generic 0005:0B57:9C16.0001: item 0 4 1 11 parsing failed [ 102.765103][ T5921] hid-generic 0005:0B57:9C16.0001: probe with driver hid-generic failed with error -22 [ 102.788175][ T5982] [ 102.790567][ T5982] ====================================================== [ 102.797601][ T5982] WARNING: possible circular locking dependency detected [ 102.804639][ T5982] 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 Not tainted [ 102.811483][ T5982] ------------------------------------------------------ [ 102.818637][ T5982] syz-executor/5982 is trying to acquire lock: [ 102.824804][ T5982] ffff8880791bf840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 102.836299][ T5982] [ 102.836299][ T5982] but task is already holding lock: [ 102.843757][ T5982] ffff8880791bfb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 102.852658][ T5982] [ 102.852658][ T5982] which lock already depends on the new lock. [ 102.852658][ T5982] [ 102.860326][ T51] Bluetooth: hci1: command tx timeout [ 102.863157][ T5982] [ 102.863157][ T5982] the existing dependency chain (in reverse order) is: [ 102.863167][ T5982] [ 102.863167][ T5982] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 102.885324][ T5982] lock_acquire+0x120/0x360 [ 102.890367][ T5982] __mutex_lock+0x182/0xe80 [ 102.895394][ T5982] l2cap_info_timeout+0x60/0xa0 [ 102.900769][ T5982] process_scheduled_works+0xae1/0x17b0 [ 102.907160][ T5982] worker_thread+0x8a0/0xda0 [ 102.912276][ T5982] kthread+0x70e/0x8a0 [ 102.916877][ T5982] ret_from_fork+0x3f9/0x770 [ 102.922097][ T5982] ret_from_fork_asm+0x1a/0x30 [ 102.927376][ T5982] [ 102.927376][ T5982] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 102.937626][ T5982] validate_chain+0xb9b/0x2140 [ 102.942918][ T5982] __lock_acquire+0xab9/0xd20 [ 102.948201][ T5982] lock_acquire+0x120/0x360 [ 102.953221][ T5982] __flush_work+0x6b8/0xbc0 [ 102.958238][ T5982] __cancel_work_sync+0xbe/0x110 [ 102.963784][ T5982] l2cap_conn_del+0x4f0/0x680 [ 102.968991][ T5982] hci_conn_hash_flush+0x10a/0x230 [ 102.974654][ T5982] hci_dev_close_sync+0xaef/0x1330 [ 102.980471][ T5982] hci_unregister_dev+0x206/0x500 [ 102.986129][ T5982] vhci_release+0x80/0xd0 [ 102.991017][ T5982] __fput+0x449/0xa70 [ 102.995527][ T5982] task_work_run+0x1d1/0x260 [ 103.000655][ T5982] do_exit+0x6ad/0x22e0 [ 103.005327][ T5982] do_group_exit+0x21c/0x2d0 [ 103.010436][ T5982] get_signal+0x1286/0x1340 [ 103.015460][ T5982] arch_do_signal_or_restart+0x9a/0x750 [ 103.021526][ T5982] exit_to_user_mode_loop+0x75/0x110 [ 103.027348][ T5982] do_syscall_64+0x2bd/0x3b0 [ 103.032479][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.038906][ T5982] [ 103.038906][ T5982] other info that might help us debug this: [ 103.038906][ T5982] [ 103.049162][ T5982] Possible unsafe locking scenario: [ 103.049162][ T5982] [ 103.056618][ T5982] CPU0 CPU1 [ 103.062012][ T5982] ---- ---- [ 103.067392][ T5982] lock(&conn->lock#2); [ 103.071665][ T5982] lock((work_completion)(&(&conn->info_timer)->work)); [ 103.081226][ T5982] lock(&conn->lock#2); [ 103.088135][ T5982] lock((work_completion)(&(&conn->info_timer)->work)); [ 103.095172][ T5982] [ 103.095172][ T5982] *** DEADLOCK *** [ 103.095172][ T5982] [ 103.103325][ T5982] 5 locks held by syz-executor/5982: [ 103.108609][ T5982] #0: ffff88806254cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 103.118575][ T5982] #1: ffff88806254c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 103.128268][ T5982] #2: ffffffff8f677668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 103.138266][ T5982] #3: ffff8880791bfb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 103.147576][ T5982] #4: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 103.156722][ T5982] [ 103.156722][ T5982] stack backtrace: [ 103.162615][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz-executor Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 103.162633][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.162639][ T5982] Call Trace: [ 103.162645][ T5982] [ 103.162650][ T5982] dump_stack_lvl+0x189/0x250 [ 103.162672][ T5982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.162687][ T5982] ? __pfx__printk+0x10/0x10 [ 103.162699][ T5982] ? print_lock_name+0xde/0x100 [ 103.162710][ T5982] print_circular_bug+0x2ee/0x310 [ 103.162723][ T5982] check_noncircular+0x134/0x160 [ 103.162735][ T5982] validate_chain+0xb9b/0x2140 [ 103.162746][ T5982] ? do_raw_spin_lock+0x121/0x290 [ 103.162759][ T5982] ? look_up_lock_class+0x74/0x170 [ 103.162774][ T5982] ? register_lock_class+0x51/0x320 [ 103.162789][ T5982] __lock_acquire+0xab9/0xd20 [ 103.162805][ T5982] ? __flush_work+0xd2/0xbc0 [ 103.162815][ T5982] lock_acquire+0x120/0x360 [ 103.162828][ T5982] ? __flush_work+0xd2/0xbc0 [ 103.162840][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.162853][ T5982] ? __flush_work+0xd2/0xbc0 [ 103.162863][ T5982] __flush_work+0x6b8/0xbc0 [ 103.162873][ T5982] ? __flush_work+0xd2/0xbc0 [ 103.162884][ T5982] ? __flush_work+0xd2/0xbc0 [ 103.162894][ T5982] ? __pfx___flush_work+0x10/0x10 [ 103.162905][ T5982] ? __pfx_wq_barrier_func+0x10/0x10 [ 103.162923][ T5982] ? __pfx___cancel_work+0x10/0x10 [ 103.162934][ T5982] ? hci_conn_drop+0x14d/0x280 [ 103.162949][ T5982] __cancel_work_sync+0xbe/0x110 [ 103.162961][ T5982] l2cap_conn_del+0x4f0/0x680 [ 103.162973][ T5982] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 103.162984][ T5982] hci_conn_hash_flush+0x10a/0x230 [ 103.162997][ T5982] hci_dev_close_sync+0xaef/0x1330 [ 103.163015][ T5982] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 103.163030][ T5982] ? up_write+0x1c4/0x420 [ 103.163042][ T5982] hci_unregister_dev+0x206/0x500 [ 103.163057][ T5982] vhci_release+0x80/0xd0 [ 103.163071][ T5982] ? __pfx_vhci_release+0x10/0x10 [ 103.163084][ T5982] __fput+0x449/0xa70 [ 103.163100][ T5982] task_work_run+0x1d1/0x260 [ 103.163121][ T5982] ? __pfx_task_work_run+0x10/0x10 [ 103.163135][ T5982] ? kmem_cache_free+0x18f/0x400 [ 103.163148][ T5982] do_exit+0x6ad/0x22e0 [ 103.163162][ T5982] ? do_raw_spin_lock+0x121/0x290 [ 103.163175][ T5982] ? __pfx_do_exit+0x10/0x10 [ 103.163191][ T5982] do_group_exit+0x21c/0x2d0 [ 103.163204][ T5982] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.163218][ T5982] get_signal+0x1286/0x1340 [ 103.163239][ T5982] arch_do_signal_or_restart+0x9a/0x750 [ 103.163255][ T5982] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 103.163272][ T5982] ? exit_to_user_mode_loop+0x40/0x110 [ 103.163289][ T5982] exit_to_user_mode_loop+0x75/0x110 [ 103.163304][ T5982] do_syscall_64+0x2bd/0x3b0 [ 103.163319][ T5982] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.163332][ T5982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.163343][ T5982] ? clear_bhb_loop+0x60/0xb0 [ 103.163355][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.163366][ T5982] RIP: 0033:0x7f2d8a7907bc [ 103.163377][ T5982] Code: Unable to access opcode bytes at 0x7f2d8a790792. [ 103.163382][ T5982] RSP: 002b:00007ffcc12ddaa0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 103.163396][ T5982] RAX: 0000000000000028 RBX: 00007f2d8b4e4620 RCX: 00007f2d8a7907bc [ 103.163404][ T5982] RDX: 0000000000000028 RSI: 00007f2d8b4e4670 RDI: 0000000000000003 [ 103.163411][ T5982] RBP: 0000000000000000 R08: 00007ffcc12ddaf4 R09: 000000000000000c [ 103.163418][ T5982] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 103.163425][ T5982] R13: 0000000000000000 R14: 00007f2d8b4e4670 R15: 0000000000000000 [ 103.163435][ T5982] [ 103.660451][ T49] team0 (unregistering): Port device team_slave_1 removed [ 103.686004][ T49] team0 (unregistering): Port device team_slave_0 removed [ 104.345743][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.591470][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.643107][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.712662][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.788424][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.832461][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.872160][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.922942][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.976705][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.033221][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.512814][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.563557][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.614843][ T49] bridge_slave_1: left allmulticast mode [ 105.620586][ T49] bridge_slave_1: left promiscuous mode [ 105.626245][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.634990][ T49] bridge_slave_0: left allmulticast mode [ 105.641230][ T49] bridge_slave_0: left promiscuous mode [ 105.647151][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.657600][ T49] bridge_slave_1: left allmulticast mode [ 105.663815][ T49] bridge_slave_1: left promiscuous mode [ 105.669831][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.677976][ T49] bridge_slave_0: left allmulticast mode [ 105.683868][ T49] bridge_slave_0: left promiscuous mode [ 105.689708][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.698570][ T49] bridge_slave_1: left allmulticast mode [ 105.704882][ T49] bridge_slave_1: left promiscuous mode [ 105.710707][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.719879][ T49] bridge_slave_0: left allmulticast mode [ 105.725633][ T49] bridge_slave_0: left promiscuous mode [ 105.731450][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.867419][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.877476][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.887002][ T49] bond0 (unregistering): Released all slaves [ 105.966220][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.976346][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.986011][ T49] bond0 (unregistering): Released all slaves [ 106.066066][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.076192][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.085939][ T49] bond0 (unregistering): Released all slaves [ 106.485878][ T49] hsr_slave_0: left promiscuous mode [ 106.491641][ T49] hsr_slave_1: left promiscuous mode [ 106.497239][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.508704][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.516405][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.523968][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.534687][ T49] hsr_slave_0: left promiscuous mode [ 106.541704][ T49] hsr_slave_1: left promiscuous mode [ 106.547306][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.554953][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.562813][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.570319][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.580853][ T49] hsr_slave_0: left promiscuous mode [ 106.586637][ T49] hsr_slave_1: left promiscuous mode [ 106.592387][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.599863][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.607579][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.615200][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.628713][ T49] veth1_macvtap: left promiscuous mode [ 106.634314][ T49] veth0_macvtap: left promiscuous mode [ 106.640204][ T49] veth1_vlan: left promiscuous mode [ 106.645504][ T49] veth0_vlan: left promiscuous mode [ 106.652070][ T49] veth1_macvtap: left promiscuous mode [ 106.657748][ T49] veth0_macvtap: left promiscuous mode [ 106.663964][ T49] veth1_vlan: left promiscuous mode [ 106.669309][ T49] veth0_vlan: left promiscuous mode [ 106.675232][ T49] veth1_macvtap: left promiscuous mode [ 106.680775][ T49] veth0_macvtap: left promiscuous mode [ 106.686310][ T49] veth1_vlan: left promiscuous mode [ 106.691618][ T49] veth0_vlan: left promiscuous mode [ 106.895136][ T49] team0 (unregistering): Port device team_slave_1 removed [ 106.916487][ T49] team0 (unregistering): Port device team_slave_0 removed [ 107.066637][ T49] team0 (unregistering): Port device team_slave_1 removed [ 107.089401][ T49] team0 (unregistering): Port device team_slave_0 removed [ 107.225330][ T49] team0 (unregistering): Port device team_slave_1 removed [ 107.247000][ T49] team0 (unregistering): Port device team_slave_0 removed