last executing test programs: 49.696123615s ago: executing program 1 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="18000300010003", 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0xd}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x0, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x90}}, 0x0) 49.423898021s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00f7ff00fdffffffffffffff0040000000000000d3b69acb5803bdbebcff64bc48c0bfc1a254bcd19962", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0000000000000000000000000aa91a20a5cc8fbabf01fe1c228b7a3a1cb14f46de0a6da0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="00001700", 0x4, 0x4850, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r3, @ANYBLOB="d26cf2895702369efd6abd7a4d26bf9b4919fb519eaa0b78925e69c912871157bc221924a9995153cacc93c1b993b23a24da43c5285fbd100306eff651d172549bc947a1adc143d4fc40738440779a5af3feb2235dbc9801b775786da2ad7fbf58864ef8a46cf1e74c4d6ebad40f4e7768a1cf2398ae71ee9516ca038ca5ab3cc30164e85ad466e00099b0103528a28e74222e7064b53a04b2f119c63b13d1ff078bb48e9387f897894ee7488d51ccd121b4ae372cff7438abc819db7ef5f990044cd44c017cf6db23b39a01d40c8d93663c5dfd1709d45cf8e554d51635312bbbdf5179e4ff46f0bcc63343820d6262bbb6", @ANYRES64=r3, @ANYRES32=r3], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = socket(0x11, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'wg0\x00', {0x10063b4}, 0xffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r7, &(0x7f0000001200)=ANY=[], 0xfe33) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 38.433281251s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00f7ff00fdffffffffffffff0040000000000000d3b69acb5803bdbebcff64bc48c0bfc1a254bcd19962", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0000000000000000000000000aa91a20a5cc8fbabf01fe1c228b7a3a1cb14f46de0a6da0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="00001700", 0x4, 0x4850, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r3, @ANYBLOB="d26cf2895702369efd6abd7a4d26bf9b4919fb519eaa0b78925e69c912871157bc221924a9995153cacc93c1b993b23a24da43c5285fbd100306eff651d172549bc947a1adc143d4fc40738440779a5af3feb2235dbc9801b775786da2ad7fbf58864ef8a46cf1e74c4d6ebad40f4e7768a1cf2398ae71ee9516ca038ca5ab3cc30164e85ad466e00099b0103528a28e74222e7064b53a04b2f119c63b13d1ff078bb48e9387f897894ee7488d51ccd121b4ae372cff7438abc819db7ef5f990044cd44c017cf6db23b39a01d40c8d93663c5dfd1709d45cf8e554d51635312bbbdf5179e4ff46f0bcc63343820d6262bbb6", @ANYRES64=r3, @ANYRES32=r3], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = socket(0x11, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'wg0\x00', {0x10063b4}, 0xffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r7, &(0x7f0000001200)=ANY=[], 0xfe33) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 27.936886037s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00f7ff00fdffffffffffffff0040000000000000d3b69acb5803bdbebcff64bc48c0bfc1a254bcd19962", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0000000000000000000000000aa91a20a5cc8fbabf01fe1c228b7a3a1cb14f46de0a6da0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="00001700", 0x4, 0x4850, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r3, @ANYBLOB="d26cf2895702369efd6abd7a4d26bf9b4919fb519eaa0b78925e69c912871157bc221924a9995153cacc93c1b993b23a24da43c5285fbd100306eff651d172549bc947a1adc143d4fc40738440779a5af3feb2235dbc9801b775786da2ad7fbf58864ef8a46cf1e74c4d6ebad40f4e7768a1cf2398ae71ee9516ca038ca5ab3cc30164e85ad466e00099b0103528a28e74222e7064b53a04b2f119c63b13d1ff078bb48e9387f897894ee7488d51ccd121b4ae372cff7438abc819db7ef5f990044cd44c017cf6db23b39a01d40c8d93663c5dfd1709d45cf8e554d51635312bbbdf5179e4ff46f0bcc63343820d6262bbb6", @ANYRES64=r3, @ANYRES32=r3], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = socket(0x11, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'wg0\x00', {0x10063b4}, 0xffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r7, &(0x7f0000001200)=ANY=[], 0xfe33) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 15.839444444s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00f7ff00fdffffffffffffff0040000000000000d3b69acb5803bdbebcff64bc48c0bfc1a254bcd19962", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0000000000000000000000000aa91a20a5cc8fbabf01fe1c228b7a3a1cb14f46de0a6da0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="00001700", 0x4, 0x4850, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r3, @ANYBLOB="d26cf2895702369efd6abd7a4d26bf9b4919fb519eaa0b78925e69c912871157bc221924a9995153cacc93c1b993b23a24da43c5285fbd100306eff651d172549bc947a1adc143d4fc40738440779a5af3feb2235dbc9801b775786da2ad7fbf58864ef8a46cf1e74c4d6ebad40f4e7768a1cf2398ae71ee9516ca038ca5ab3cc30164e85ad466e00099b0103528a28e74222e7064b53a04b2f119c63b13d1ff078bb48e9387f897894ee7488d51ccd121b4ae372cff7438abc819db7ef5f990044cd44c017cf6db23b39a01d40c8d93663c5dfd1709d45cf8e554d51635312bbbdf5179e4ff46f0bcc63343820d6262bbb6", @ANYRES64=r3, @ANYRES32=r3], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = socket(0x11, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'wg0\x00', {0x10063b4}, 0xffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r7, &(0x7f0000001200)=ANY=[], 0xfe33) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 6.22473139s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00f7ff00fdffffffffffffff0040000000000000d3b69acb5803bdbebcff64bc48c0bfc1a254bcd19962", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0000000000000000000000000aa91a20a5cc8fbabf01fe1c228b7a3a1cb14f46de0a6da0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="00001700", 0x4, 0x4850, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r3, @ANYBLOB="d26cf2895702369efd6abd7a4d26bf9b4919fb519eaa0b78925e69c912871157bc221924a9995153cacc93c1b993b23a24da43c5285fbd100306eff651d172549bc947a1adc143d4fc40738440779a5af3feb2235dbc9801b775786da2ad7fbf58864ef8a46cf1e74c4d6ebad40f4e7768a1cf2398ae71ee9516ca038ca5ab3cc30164e85ad466e00099b0103528a28e74222e7064b53a04b2f119c63b13d1ff078bb48e9387f897894ee7488d51ccd121b4ae372cff7438abc819db7ef5f990044cd44c017cf6db23b39a01d40c8d93663c5dfd1709d45cf8e554d51635312bbbdf5179e4ff46f0bcc63343820d6262bbb6", @ANYRES64=r3, @ANYRES32=r3], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = socket(0x11, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'wg0\x00', {0x10063b4}, 0xffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r7, &(0x7f0000001200)=ANY=[], 0xfe33) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 1.933094464s ago: executing program 2 (id=865): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8) unshare(0x22020600) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000006c0)={{r5}, 0x6, 0x40, 0x4b}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000100)=""/174, &(0x7f00000001c0)=0xae) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x9) 1.500173691s ago: executing program 2 (id=869): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4000000) 1.419160332s ago: executing program 2 (id=871): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @initdev={0xac, 0x1e, 0x2, 0x0}}, {0x4e21, 0xffff, 0x8}}}}}, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a01016328000000000000010000000900020073797a30000000000900010073797a300000000008080740000000032c000380000018000380140001006e657464657673696d30000000000000140000001000010000000000000000000000000a12bfbea8b97c421e8312e855fb7fb969ecf3e7d1646bee0c41c64a2f3169fcd9b171f84ec2a264bade5e825c8459755d2aa91af3f700"/221], 0xa8}}, 0x0) (async) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'sit0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000000)) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffe65, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x168, 0x0, 0x228, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0xff000000, 'nicvf0\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0xca}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x7, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) socket$packet(0x11, 0x2, 0x300) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb28f6ee412b8f86dd60ffff00002d2f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088a80000000007ff0001000008000006000086dd"], 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d6, 0x4d4], 0x1}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) (rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$kcm(0x2, 0xa, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000100)={@val={0x0, 0xa01}, @val={0x2, 0x80, 0x4, 0x5, 0x9, 0x7}, @eth={@broadcast, @dev, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x4, 0x0, 0x1, 0x32, 0x0, @rand_addr=0x64010100, @empty}, {0x4e21, 0x0, 0x12, 0x0, @opaque="ec29c92407ba93d0b3e0"}}}}}}, 0x46) 1.401028386s ago: executing program 0 (id=872): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000080)}, 0x10) 1.282734302s ago: executing program 3 (id=874): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8144fe1cace81ed0b7fece0b42a9ecbee5de6ccd40dd2e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162389a868a1e1fc60a", 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYRES8=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000041}, 0x4040000) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) socket$vsock_stream(0x28, 0x1, 0x0) 1.1665125s ago: executing program 0 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x3, 0x0, {0x9, 0x6, 0x0, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x3, 0x2}}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac0a, 0xfac0f, 0xfac0a, 0xfac0a, 0xfac03, 0xfac01, 0x0]}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000015}, 0x8030) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071113100000000008510000002000000850000000000000095000007900000009500a505000000004f82973b5ca5ff77c5e70b1cc7b63e8d621d9ef1d4916656c55d77fa452c0440abea32de54932faf24243b74a313fba12e0b456ef37a81606b306197f674899192ad25b948e7a97c5d90728196858ce6c71106f4267904fc84f20201b87711aa18a1a6aa0d757c12c6ff4c80759d17209bbf5a13"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.16594787s ago: executing program 2 (id=876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001900"], 0x24}}, 0x0) shutdown(r1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x79, 0xc8, &(0x7f0000000080)="3299837708fcfe58b599ff9acd904dd55071b4dabf02cfbe052fdb64bcca6b5df2a53d504586f52623f527a60f6770109ca073763450613181b9fa1e9270f63e23c53a9fe6f0cfa48b006b9a9369c07055328754913a64d466176b33caceedc2aa1707cc1906847be6a4230ad80023554743028afe5c51dd5e", &(0x7f00000003c0)=""/200, 0x3, 0x0, 0x1000, 0xa6, &(0x7f0000000980)="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", &(0x7f0000000100)="d242e06d3f50ab0d6d48a6390eb478ba62597dbf5942815806ba359a66f0480ff4ca388bc992698e880fe623256df8e58e8878e0b95902983d506dbfb796b852aed72ae1b11991f7d80d77b6d0f0f558410f14eb0e308e3d99d887cdf6464b5b03f814c2ef3d7800826cab05eafec45332442e3b479caccf7a928d5987b1b923281ab52e8d53969b273c58ae651e724c6af608d0b8aebfdfeaccc5af80157edb5717f2a2297d", 0x1, 0x0, 0xa}, 0x50) syz_emit_ethernet(0xda, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) 1.028082375s ago: executing program 0 (id=877): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delnexthop={0x38, 0x69, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xffffff7e}, {0x8, 0x1, 0x2}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x8081) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 999.653287ms ago: executing program 3 (id=879): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000002c0)={{}, "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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000002c0)={{}, "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"}) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf251b0000000c000600010000000100000010002e800c000400"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf251b0000000c000600010000000100000010002e800c000400"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x1000003}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}, {0xa}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x30}}, 0x800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x30}}, 0x800) 916.094838ms ago: executing program 4 (id=880): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x40, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque='5'}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0x6}, {0x0, 0x8}, {0x3, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 844.622611ms ago: executing program 0 (id=881): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xb000000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x100) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="786782fb6d630180c20000018100430008060001080006060008aff7e015956a118f53ba760180c2000000ffffff"], 0x0) 776.694438ms ago: executing program 0 (id=882): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x2d8, 0x168, 0x9, 0x0, 0xb, 0x3e8, 0x250, 0x250, 0x3e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x7f00007f], [], 'batadv_slave_1\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x9}, 0x6000000, 0x170, 0x1b8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0xff, 0xffffffff, 0xff000000], @ipv4=@broadcast, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x1000, 0x4, 0x77, 0x4e23, 0x4e21, 0x4e20, 0x4e23, 0x140, 0x280}, 0x180, 0x3006, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {0xff}, 0x1, 0x8, 0x4, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa, 0x6, 0x10000, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x18fe2a01ed25d92f, 0x70bd29, 0xfffffffd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000740)={@local, @remote, @void, {@can={0xc, {{0x3}, 0x6, 0x0, 0x0, 0x0, "f3281163f598249a"}}}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x1, 0x3, 0x18000000}}) syz_emit_ethernet(0x66, &(0x7f0000000980)=ANY=[@ANYBLOB="0ffa99050000aaaaaaaaaabb86dd6000000000303a000000000000000000000000abd50000000000ff02000000000000000000000000000104019078000000036178341b06be2ffffc000000000000000000000000000000fe8000"/102], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x2d8, 0x168, 0x9, 0x0, 0xb, 0x3e8, 0x250, 0x250, 0x3e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x7f00007f], [], 'batadv_slave_1\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x9}, 0x6000000, 0x170, 0x1b8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0xff, 0xffffffff, 0xff000000], @ipv4=@broadcast, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x1000, 0x4, 0x77, 0x4e23, 0x4e21, 0x4e20, 0x4e23, 0x140, 0x280}, 0x180, 0x3006, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {0xff}, 0x1, 0x8, 0x4, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa, 0x6, 0x10000, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x18fe2a01ed25d92f, 0x70bd29, 0xfffffffd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000000740)={@local, @remote, @void, {@can={0xc, {{0x3}, 0x6, 0x0, 0x0, 0x0, "f3281163f598249a"}}}}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x1, 0x3, 0x18000000}}) (async) syz_emit_ethernet(0x66, &(0x7f0000000980)=ANY=[@ANYBLOB="0ffa99050000aaaaaaaaaabb86dd6000000000303a000000000000000000000000abd50000000000ff02000000000000000000000000000104019078000000036178341b06be2ffffc000000000000000000000000000000fe8000"/102], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) 721.371255ms ago: executing program 3 (id=883): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="90c90000", @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="20005080050002000000000009000100e59e75e84c0000000800030005ac0f00"], 0x3c}}, 0x0) 635.824055ms ago: executing program 4 (id=884): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xd16, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) sendto$inet(r1, &(0x7f0000000200)="d77c96c10513469442", 0x9, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x1, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x4, 0x8, 'syz1\x00'}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = accept$packet(r0, 0x0, &(0x7f00000002c0)) recvfrom$packet(r6, 0x0, 0x0, 0x10040, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r9, &(0x7f0000000400)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x4020940d, 0x0) 599.922222ms ago: executing program 3 (id=885): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 528.133406ms ago: executing program 0 (id=886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) socket$inet(0x2, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x8001) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000028c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast1, 0x200000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x60, 0xc, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x4, 0x2e, [0x80000002, 0x100, 0x10001, 0x2, 0x7c7, 0x2, 0x400, 0x100000001]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}]}}}], 0x80}, 0x0) (async) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000440)=""/168, 0xa8}], 0x2}, 0x700) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 443.706899ms ago: executing program 4 (id=887): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0xffff0000, 0x9, 0x3, 0x12, 0xb, 0x5, 0x0, 0x0, 0x0, [0x55, 0xf32, 0x2, 0x88, 0x2, 0xff, 0x10, 0x1], [0x7, 0x8, 0x81, 0x8, 0x7fffffff, 0xf2bd, 0x9]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0xffff0000, 0x9, 0x3, 0x12, 0xb, 0x5, 0x0, 0x0, 0x0, [0x55, 0xf32, 0x2, 0x88, 0x2, 0xff, 0x10, 0x1], [0x7, 0x8, 0x81, 0x8, 0x7fffffff, 0xf2bd, 0x9]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00b29aea762cf99276cf7892835b0125bd7000fddbdf25190000000c009900020000006d00000005001c00060000006600000005001e00010000000500a2000d00f0ff06dd6d006b1bc7a600000000"], 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x200488c1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000479700850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000479700850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000012c0), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000012c0), 0x4) bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x64) (async) bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x64) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="28fd992c", 0x4}, {&(0x7f00000014c0)="b6e075b4d9348d8b545611b8ec837dfcc727bb64900a885ccba201a5e5d13e47a4f59b456c85c8572951a8399f9c99598ee1167db20d065b860801ed", 0x3c}], 0x2}}], 0x1, 0x4010) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34a30502", @ANYRES16=0x0, @ANYBLOB="b07225bd7000fedbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b006c00000006001600060000000500120001000000060011000600000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000300000006001600f9ff00000500120001000000060011000c00000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000300ffffffff08000b000700000006001600fc3400004000120000000000430011000101000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100008006001600010000000500120000000000060011000400000008000b0000100000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00070000000600160001fe000005001200000000000600110058fe000008000b002fa90000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00ff01000006001600010000000500120001000000060011000900000008000b0088e000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000300000006001600ff0f00000500120000000000060011000700000008000b000a000000"], 0x234}, 0x1, 0x0, 0x0, 0x44000}, 0x44804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40000000000080079109100000000006300400000000000950000a731e931a2a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 383.765821ms ago: executing program 3 (id=888): r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x2, {{0xa, 0x4e22, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x800}}, {{0xa, 0x4e24, 0x4, @remote, 0xfffffff8}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000000000)=""/144, &(0x7f0000e5f000)=0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r4, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008004) 320.558575ms ago: executing program 4 (id=889): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x7c}}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x140c, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004891}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x7c}}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x140c, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004891}, 0x80) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 240.106431ms ago: executing program 3 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @rand_addr, 0xfffffffe}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 202.656241ms ago: executing program 4 (id=891): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="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", 0xfd) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000400791202000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="688a19f89d3f", 'caif0\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)="659ca4573b93f029b3b28db6d99914de76aee78005a13664df0750e68407ca75241e1239c6e9729992c5980486aefb0648c005b2acd570ae067e8c969c06430f7844459f82a9d20f7453034d9d512dfd334a0fa9d84a74c6f6e4208597f1b69495cd69d69f90106eff8b8dc1cc21794091562a04bde1693444826817368279ab24400fd3c37705282321c77e26edcd37b77fc5351b40164d80d9e686ae0a14624aa7a859662561aa1665125e410014010d3ba8815ddbdfb25d25de2a6f91", 0xbe}, {&(0x7f0000000180)="03731de4cd4d7e25e8013eb17928b8c47aa9f32920a54cc602e00b7dfa6aa6e396706b9b9d1046e8507a027eb40bbe23e74e0236cd6d96", 0x37}, {&(0x7f00000005c0)="9d985e2925878bea79a9a2ac51cffef6d4657446c5edf914418bc74ad891093a888c5eeb07bb44e470bd4619fa625c60cf386ac6b9c5eba9fab04a6abc9743bc405b379627f04fb97a890d0299db3a4b808542dae8b8ed7f5252223309eb6862486e9fb990", 0x65}, {&(0x7f0000000640)="02a0b97dae8f6333e9b06b4450eef0729d707a4f0bc79a6612c21e0619dc3bc5c897180683a960526abb665b08fdc9ca2b632548fb5013fcce705f5cc88d5ef0449f7f20e7c2f9cd6467e4e0ee2202e64e1b5163b9a06be897ac7790334a5173b202ecd2d7692e80b2bddee0852d0258409dabfde7abc32be9ae134dfb5492fefdce2e2c1f800325", 0x88}, {&(0x7f0000000700)="0c9bef72432aa8d260d21a60512dca125c4065b5909cb70e62d6af5506166aa37eceee4510b7c2937f16dfe0a73df5a551f6e7c7385a76c3303ff22459bd0ef813f8be5665e3ab636a10d8596c5ed56921701dc22c35578b3ba5ff4e80c9c4d097c5ae524c2205a306a0d8d3a160538e013f845d45bae5434ce7bc791e3ce2837e2f3ee0ae8d", 0x86}, {&(0x7f0000000340)="5db6e049b7f07ae1686e01293886e214e2d1609fecc0bd254fd9e1ee72", 0x1d}, {&(0x7f00000007c0)="0d0236f7ee70fe76d34c43684cd43634bd4e5461991f9d5d8f129d08c88e144517cce37e65551d7876bb8bd986df2cbf62452d2db5b825b8218a755630946b21175ad145b735378905c53dd61cb7a2d32009734252d67b4b057b1ac8193de57cacf8678ad3272de9564297ccaa500a7d77382cbe922ede146a7c0d37ee7797c1bffc8d8076a77bc2b5d26262f4841012a4ffe01f59b61e5d167191ba617b1c10f642d32fd7b7799ff78f2fc20181bcaa5360535ceb12e12845586bc56203c4210b3a65eb1928", 0xc6}, {&(0x7f00000008c0)="5198ccf5c4b2f4d59fcfa807d49954ee39999fd082301cddf1f601ab9bcd8a", 0x1f}], 0x8, &(0x7f0000000980)=[{0x48, 0x0, 0xb19, "a65417fcd983f09fab258da0fb2456e5169f935c7880a0a1a2474eb67d314ae62ec1cb95bb6f08401f26b19ccf38d82e55bd9b9f"}, {0xe8, 0x103, 0x1, "996d67662d2849002f3887fdab40efd4bf3e945d503ded499befcb78ac3b001e903f87cf8f693a41009e23340541b2b13344d9636b5e68985ecd3ea5c5cbf1b7071b0b5829e6e7fcb3c31de221c46a09be125ebbefc039da4a6f2aed7d403e548800f0b82ba2009f81f8be682ac9cd6c041ab2a96f8e8990a73b91fa67f0485ec3148e69d25a6ad3e18fc4b3b18026fe6f218dfbe8077c71659bd160407c56bca6bce465614f8f8943c9d3b6460d9eac26903bb571f31594b26f0e014bb30fa4aec5498fd906fccf3ecdaad9267585ec44"}, {0xb8, 0x10e, 0x7fff, "5765ccbc1c9369ebb5621b86407976e9ae090b328a6b8b06867bfebbf0fc9844ed7e52b6086d356c28437f9f6978b5c4b7bdaab202dc699066af2c141109e79d9801adf90e18754cc2dbf50fa8f1016f9aacff94648bca37dc3e7075beec77959f61500ec257766c34ed7cde759922242b210f307dd69631afc513bb16094b10d67d90c2e09cd4112055a5fc61c9fb33347675de8dc52e8f475aa373a20131aa7ca049b80a95"}, {0x98, 0x10a, 0x3, "3b1776471a5726357daa755059c7f17243ae0512d99d9b32d77f133224975ee1b724d17f5c8e47c856d4a09ce7c8b3d59fc4bd093d01cc70d36e32a5a9b2e131226b8843a5547852da88b979922dfd35128866148980bd2fe3501887c9d004e5bf7f53c2db6d2c36e079140f5bdf491ff083a36021c3042ad609ab1a99e1f29af0894cdd"}, {0x10, 0x107, 0x1000}, {0x100, 0x1, 0x2, "9fcbc037968898bd589310adabd2c5427b97b2f040b8ecccf7e5c2255760f34b47b095e49d1465d7397f6480f21614b6f93eb3f098ef53fdbb7d98e404bf7bb0f54b4313b48c00aa3ccf563eec12ff69f094c8d97637335206b5655c5597c9885b4197d606725d2ed38d916e012bda212a3b4bf9fac475f31f915272810c1d795d396e3be9b5dd4d6d1771958d5b6cb1ca835d12159f1f0bacd27015b9e9c8f656985a4ff27da20cc8d7bce6705af963156e36a319d179802f9dd20f27d2bdae6a483e45df7e5b11f787a28469c5ab55b5b3582911803c7c260fa640cf7cc56abcdde3122656bd9ca9"}, {0xb0, 0x109, 0xfffffff9, "2ca5a99438112680559783a83bccfcf94904ea331e9d30c2d841b9cfa7356abaddeeed6579742679996134e0c9bc1128d9eec2f8fe81504e2cdedbf10737ac2e298b93b78e42ec99ec1b59945663b768b550adfdafbd5901746a6fa7c507542bb14d8eada44be7cc8aafedf4799986ca4911e433e76a40309431d63afd192d0e6ca5d3ad3d96e407da36195600a0d56e1d25e585249d68e9a431d2"}, {0x20, 0x117, 0x4, "4db445a6adb011ae2b4c5845491595"}, {0x108, 0x10b, 0x5, "998bf96f1debc4d36d8858f927687069a22f2755e9efc849f4f945a57c32ffc3102fb8232c6123d1253db74045bf87da4bb70ac8a40dfb829eed0825506606a4a696e7c61a7aa6e63468470866721065cd0bcc4f1032d8de669fd22f1f3c22cdfafa2f5c8c5048a71deef2bc91d15670056ea09d6d402754e252af7ada49f0259c5a48ca7165581f45557803e7870ca0199fc81915df957ebe7d1fc41858e6768646cefc2922dc09154e66df530e72863eebb34a0ae640b4f9929f50f2688c2b89c68236dddb18a9909890877d1dea92fdcb23d17d0d2da116d71deeec1395b3906e5d7122a002bc816da920e1c87c7887f7474c696f3c66"}], 0x568}, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 188.391915ms ago: executing program 2 (id=892): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 39.373369ms ago: executing program 2 (id=893): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@var={0x10, 0x0, 0x0, 0xe, 0x1}, @fwd={0x6}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @volatile={0x10, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x30, 0x5f, 0x2e, 0x61, 0x5f, 0x4f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000080)=""/4, 0x57, 0x4, 0x1, 0x6, 0x0, @void, @value}, 0x28) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sendto$inet6(r2, &(0x7f0000000240)="a152f30d025bd173dbf7c08c5d55eb79459d49ec66d431", 0x17, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x300, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_process_wait\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) clock_gettime(0x1, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r10, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a159160a275d9fa08000400ff0f00000800040007000000140001"], 0x12c}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 0s ago: executing program 4 (id=894): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00', 0xb04, 0x4, 0xf}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 59.678020][ T5819] cgroup: Unknown subsys name 'net' [ 59.784416][ T5819] cgroup: Unknown subsys name 'cpuset' [ 59.792189][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.215585][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.085859][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.111820][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.119688][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.132481][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.141468][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.150447][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.293627][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.305400][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.313069][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.324600][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.335325][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.344593][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.367754][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.376871][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.385425][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.408260][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.416147][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.433357][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.462473][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.483295][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.488228][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.491385][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.506154][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.511460][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.513853][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.521476][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.528149][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.535671][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.562958][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.570375][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.584314][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 65.770009][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.777963][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.785512][ T5829] bridge_slave_0: entered allmulticast mode [ 65.792438][ T5829] bridge_slave_0: entered promiscuous mode [ 65.803172][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.810268][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.817721][ T5829] bridge_slave_1: entered allmulticast mode [ 65.824343][ T5829] bridge_slave_1: entered promiscuous mode [ 65.886369][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.900700][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.910592][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 65.994981][ T5829] team0: Port device team_slave_0 added [ 66.029519][ T5829] team0: Port device team_slave_1 added [ 66.069429][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.077869][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.104912][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.119759][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.126808][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.153576][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.174702][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 66.213611][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.221577][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.228979][ T5835] bridge_slave_0: entered allmulticast mode [ 66.237078][ T5835] bridge_slave_0: entered promiscuous mode [ 66.265795][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.273616][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.280847][ T5835] bridge_slave_1: entered allmulticast mode [ 66.287845][ T5835] bridge_slave_1: entered promiscuous mode [ 66.356589][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.368447][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.405789][ T5829] hsr_slave_0: entered promiscuous mode [ 66.413682][ T5829] hsr_slave_1: entered promiscuous mode [ 66.439101][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 66.453097][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 66.493444][ T5835] team0: Port device team_slave_0 added [ 66.541205][ T5835] team0: Port device team_slave_1 added [ 66.562236][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.569406][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.577313][ T5838] bridge_slave_0: entered allmulticast mode [ 66.584135][ T5838] bridge_slave_0: entered promiscuous mode [ 66.638447][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.645788][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.653587][ T5838] bridge_slave_1: entered allmulticast mode [ 66.660196][ T5838] bridge_slave_1: entered promiscuous mode [ 66.716451][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.744311][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.751544][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.777784][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.803425][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.821580][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.828741][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.841090][ T5847] bridge_slave_0: entered allmulticast mode [ 66.847680][ T5847] bridge_slave_0: entered promiscuous mode [ 66.855029][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.862465][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.888545][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.922950][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.930134][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.937635][ T5843] bridge_slave_0: entered allmulticast mode [ 66.944838][ T5843] bridge_slave_0: entered promiscuous mode [ 66.960819][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.968090][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.975852][ T5847] bridge_slave_1: entered allmulticast mode [ 66.982812][ T5847] bridge_slave_1: entered promiscuous mode [ 67.003863][ T5835] hsr_slave_0: entered promiscuous mode [ 67.009985][ T5835] hsr_slave_1: entered promiscuous mode [ 67.016863][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.025890][ T5835] Cannot create hsr debugfs directory [ 67.031794][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.038965][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.046754][ T5843] bridge_slave_1: entered allmulticast mode [ 67.053561][ T5843] bridge_slave_1: entered promiscuous mode [ 67.071375][ T5838] team0: Port device team_slave_0 added [ 67.117309][ T5838] team0: Port device team_slave_1 added [ 67.125348][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.140071][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.176898][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.188024][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.260324][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.268326][ T5841] Bluetooth: hci0: command tx timeout [ 67.274174][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.301183][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.315412][ T5843] team0: Port device team_slave_0 added [ 67.323430][ T5843] team0: Port device team_slave_1 added [ 67.332763][ T5847] team0: Port device team_slave_0 added [ 67.346121][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.358087][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.384921][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.414159][ T5847] team0: Port device team_slave_1 added [ 67.421046][ T5841] Bluetooth: hci1: command tx timeout [ 67.444798][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.452438][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.479518][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.498232][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.505686][ T5841] Bluetooth: hci2: command tx timeout [ 67.506893][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.537773][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.558598][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.565746][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.581935][ T5841] Bluetooth: hci4: command tx timeout [ 67.597546][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.634286][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.642794][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.669266][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.679915][ T5841] Bluetooth: hci3: command tx timeout [ 67.756485][ T5838] hsr_slave_0: entered promiscuous mode [ 67.762855][ T5838] hsr_slave_1: entered promiscuous mode [ 67.768881][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.776603][ T5838] Cannot create hsr debugfs directory [ 67.813232][ T5843] hsr_slave_0: entered promiscuous mode [ 67.819394][ T5843] hsr_slave_1: entered promiscuous mode [ 67.825740][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.833366][ T5843] Cannot create hsr debugfs directory [ 67.839106][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.853116][ T5847] hsr_slave_0: entered promiscuous mode [ 67.859308][ T5847] hsr_slave_1: entered promiscuous mode [ 67.865590][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.873470][ T5847] Cannot create hsr debugfs directory [ 67.894446][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.924466][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.966697][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.027233][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.053571][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.063970][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.106096][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.253984][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.286412][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.296475][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.318903][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.393272][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.425515][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.437874][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.451560][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.462831][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.473754][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.494595][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.505066][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.517743][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.575178][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.597445][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.604787][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.632452][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.639585][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.665458][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.727261][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.754331][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.789347][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.796527][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.809595][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.859040][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.866263][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.877041][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.884179][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.896500][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.903704][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.950478][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.974337][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.030533][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.075162][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.082349][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.117130][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.124347][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.146760][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.158286][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.165518][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.195966][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.215145][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.222385][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.292465][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.341153][ T5841] Bluetooth: hci0: command tx timeout [ 69.385858][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.397441][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.437006][ T5829] veth0_vlan: entered promiscuous mode [ 69.486236][ T5829] veth1_vlan: entered promiscuous mode [ 69.502311][ T5841] Bluetooth: hci1: command tx timeout [ 69.516080][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.581255][ T5841] Bluetooth: hci2: command tx timeout [ 69.639643][ T5829] veth0_macvtap: entered promiscuous mode [ 69.660170][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.661211][ T5841] Bluetooth: hci4: command tx timeout [ 69.697129][ T5829] veth1_macvtap: entered promiscuous mode [ 69.710810][ T5835] veth0_vlan: entered promiscuous mode [ 69.727614][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.741709][ T5841] Bluetooth: hci3: command tx timeout [ 69.772127][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.789158][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.809923][ T5835] veth1_vlan: entered promiscuous mode [ 69.834099][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.844568][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.853806][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862596][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.895798][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.944882][ T5838] veth0_vlan: entered promiscuous mode [ 70.000133][ T5838] veth1_vlan: entered promiscuous mode [ 70.013900][ T5835] veth0_macvtap: entered promiscuous mode [ 70.059304][ T5835] veth1_macvtap: entered promiscuous mode [ 70.103229][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.119583][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.166588][ T5838] veth0_macvtap: entered promiscuous mode [ 70.188465][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.200297][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.217701][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.228434][ T5843] veth0_vlan: entered promiscuous mode [ 70.247163][ T5838] veth1_macvtap: entered promiscuous mode [ 70.255517][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.255965][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.266969][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.284285][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.285368][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.312390][ T5843] veth1_vlan: entered promiscuous mode [ 70.320706][ T5847] veth0_vlan: entered promiscuous mode [ 70.333473][ T5847] veth1_vlan: entered promiscuous mode [ 70.341948][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.350676][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.360173][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.369273][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.410724][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.421881][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.432196][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.443045][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.455129][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.486642][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.497812][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.509482][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.520066][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.534400][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.551496][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.555059][ T5847] veth0_macvtap: entered promiscuous mode [ 70.596780][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.605822][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.614906][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.624605][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.649300][ T5847] veth1_macvtap: entered promiscuous mode [ 70.689786][ T5843] veth0_macvtap: entered promiscuous mode [ 70.768320][ T5843] veth1_macvtap: entered promiscuous mode [ 70.776940][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.789863][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.802300][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.813420][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.824221][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.835658][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.850114][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.858867][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.872070][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.905485][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 70.920449][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.935339][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.945621][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.956222][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.966121][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.976624][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.987446][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.006696][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.019086][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.039445][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.050694][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.061061][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.071968][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.082081][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.093104][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.108352][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.120157][ T5916] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7'. [ 71.127452][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.140523][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.155635][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.165521][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.175781][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185444][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.195969][ T5916] 0·: renamed from hsr0 (while UP) [ 71.204959][ T5916] 0·: entered promiscuous mode [ 71.210377][ T5916] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 71.229119][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.247888][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.258772][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.273645][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.283560][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.294093][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.316124][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.332938][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.346753][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.361263][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.370030][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.379095][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 71.379458][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.404861][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.421933][ T5841] Bluetooth: hci0: command tx timeout [ 71.443589][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.479349][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.581857][ T5841] Bluetooth: hci1: command tx timeout [ 71.604647][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.613757][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.661315][ T5841] Bluetooth: hci2: command tx timeout [ 71.745148][ T5841] Bluetooth: hci4: command tx timeout [ 71.746877][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.769526][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.816332][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.826482][ T5841] Bluetooth: hci3: command tx timeout [ 71.857224][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.895498][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.927254][ T5937] FAULT_INJECTION: forcing a failure. [ 71.927254][ T5937] name failslab, interval 1, probability 0, space 0, times 1 [ 71.947925][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.1.2 Not tainted 6.14.0-rc5-syzkaller-00131-gd0a4a1b36d7a #0 [ 71.947954][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.947968][ T5937] Call Trace: [ 71.947974][ T5937] [ 71.947982][ T5937] dump_stack_lvl+0x241/0x360 [ 71.948015][ T5937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.948031][ T5937] ? __pfx__printk+0x10/0x10 [ 71.948050][ T5937] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 71.948072][ T5937] ? __pfx___might_resched+0x10/0x10 [ 71.948097][ T5937] should_fail_ex+0x40a/0x550 [ 71.948123][ T5937] should_failslab+0xac/0x100 [ 71.948145][ T5937] kmem_cache_alloc_node_noprof+0x77/0x380 [ 71.948165][ T5937] ? __alloc_skb+0x1c3/0x440 [ 71.948190][ T5937] __alloc_skb+0x1c3/0x440 [ 71.948211][ T5937] ? __pfx_lock_release+0x10/0x10 [ 71.948237][ T5937] ? __pfx___alloc_skb+0x10/0x10 [ 71.948268][ T5937] inet_netconf_get_devconf+0x48c/0xbb0 [ 71.948289][ T5937] ? inet_netconf_get_devconf+0x584/0xbb0 [ 71.948310][ T5937] ? __dev_queue_xmit+0x1775/0x3f50 [ 71.948326][ T5937] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 71.948359][ T5937] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 71.948380][ T5937] rtnetlink_rcv_msg+0x791/0xcf0 [ 71.948398][ T5937] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 71.948420][ T5937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.948445][ T5937] ? ref_tracker_free+0x643/0x7e0 [ 71.948474][ T5937] netlink_rcv_skb+0x206/0x480 [ 71.948492][ T5937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.948512][ T5937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.948549][ T5937] ? netlink_deliver_tap+0x2e/0x1b0 [ 71.948568][ T5937] netlink_unicast+0x7f6/0x990 [ 71.948598][ T5937] ? __pfx_netlink_unicast+0x10/0x10 [ 71.948619][ T5937] ? __virt_addr_valid+0x45f/0x530 [ 71.948636][ T5937] ? __phys_addr_symbol+0x2f/0x70 [ 71.948650][ T5937] ? __check_object_size+0x47a/0x730 [ 71.948675][ T5937] netlink_sendmsg+0x8de/0xcb0 [ 71.948702][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.948723][ T5937] ? aa_sock_msg_perm+0x91/0x160 [ 71.948751][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.948766][ T5937] __sock_sendmsg+0x221/0x270 [ 71.948789][ T5937] ____sys_sendmsg+0x53a/0x860 [ 71.948812][ T5937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.948826][ T5937] ? __fget_files+0x2a/0x410 [ 71.948850][ T5937] ? __fget_files+0x2a/0x410 [ 71.948878][ T5937] __sys_sendmsg+0x269/0x350 [ 71.948898][ T5937] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.948925][ T5937] ? do_sys_openat2+0x17a/0x1d0 [ 71.948975][ T5937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.948998][ T5937] ? do_syscall_64+0x100/0x230 [ 71.949022][ T5937] ? do_syscall_64+0xb6/0x230 [ 71.949045][ T5937] do_syscall_64+0xf3/0x230 [ 71.949065][ T5937] ? clear_bhb_loop+0x35/0x90 [ 71.949089][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.949113][ T5937] RIP: 0033:0x7f95f5f8d169 [ 71.949131][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.949144][ T5937] RSP: 002b:00007f95f6e2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.949162][ T5937] RAX: ffffffffffffffda RBX: 00007f95f61a5fa0 RCX: 00007f95f5f8d169 [ 71.949173][ T5937] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 71.949183][ T5937] RBP: 00007f95f6e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.949193][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.949202][ T5937] R13: 0000000000000000 R14: 00007f95f61a5fa0 R15: 00007ffc4cf16e58 [ 71.949227][ T5937] [ 71.950109][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.009749][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 72.167209][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.333683][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.405284][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.427167][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.699152][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 72.966020][ T5971] netlink: 'syz.2.19': attribute type 3 has an invalid length. [ 72.980395][ T5971] netlink: 666 bytes leftover after parsing attributes in process `syz.2.19'. [ 72.993378][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 73.029529][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 73.079969][ T5960] netlink: 'syz.1.17': attribute type 20 has an invalid length. [ 73.463914][ T5983] Zero length message leads to an empty skb [ 73.505261][ T5841] Bluetooth: hci0: command tx timeout [ 73.663023][ T5841] Bluetooth: hci1: command tx timeout [ 73.721211][ T6006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.742868][ T5841] Bluetooth: hci2: command tx timeout [ 73.821820][ T5841] Bluetooth: hci4: command tx timeout [ 73.857836][ T6011] netlink: 'syz.1.32': attribute type 21 has an invalid length. [ 73.901593][ T5841] Bluetooth: hci3: command tx timeout [ 73.904676][ T6011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.32'. [ 74.033399][ T6011] af_packet: tpacket_rcv: packet too big, clamped from 2932 to 2928. macoff=96 [ 74.054648][ T6011] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 74.101806][ T6011] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 74.107691][ T6011] syzkaller1: Linktype set failed because interface is up [ 74.475784][ T6045] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 74.579593][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 75.385140][ T6096] FAULT_INJECTION: forcing a failure. [ 75.385140][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.440362][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.3.56 Not tainted 6.14.0-rc5-syzkaller-00131-gd0a4a1b36d7a #0 [ 75.440384][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.440393][ T6096] Call Trace: [ 75.440399][ T6096] [ 75.440406][ T6096] dump_stack_lvl+0x241/0x360 [ 75.440430][ T6096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.440446][ T6096] ? __pfx__printk+0x10/0x10 [ 75.440466][ T6096] ? snprintf+0xda/0x120 [ 75.440486][ T6096] should_fail_ex+0x40a/0x550 [ 75.440511][ T6096] _copy_to_user+0x31/0xb0 [ 75.440533][ T6096] simple_read_from_buffer+0xca/0x150 [ 75.440559][ T6096] proc_fail_nth_read+0x1e9/0x250 [ 75.440584][ T6096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.440606][ T6096] ? rw_verify_area+0x243/0x630 [ 75.440621][ T6096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.440651][ T6096] vfs_read+0x1f8/0xb40 [ 75.440668][ T6096] ? fdget_pos+0x254/0x320 [ 75.440690][ T6096] ? __pfx___mutex_lock+0x10/0x10 [ 75.440711][ T6096] ? __pfx_vfs_read+0x10/0x10 [ 75.440724][ T6096] ? do_sys_openat2+0x17a/0x1d0 [ 75.440747][ T6096] ? __fget_files+0x2a/0x410 [ 75.440770][ T6096] ? __fget_files+0x395/0x410 [ 75.440789][ T6096] ? __fget_files+0x2a/0x410 [ 75.440818][ T6096] ksys_read+0x18f/0x2b0 [ 75.440836][ T6096] ? __pfx_ksys_read+0x10/0x10 [ 75.440852][ T6096] ? do_syscall_64+0x100/0x230 [ 75.440874][ T6096] ? do_syscall_64+0xb6/0x230 [ 75.440895][ T6096] do_syscall_64+0xf3/0x230 [ 75.440914][ T6096] ? clear_bhb_loop+0x35/0x90 [ 75.440936][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.440955][ T6096] RIP: 0033:0x7f32ddd8bb7c [ 75.440969][ T6096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.440982][ T6096] RSP: 002b:00007f32debef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.440999][ T6096] RAX: ffffffffffffffda RBX: 00007f32ddfa5fa0 RCX: 00007f32ddd8bb7c [ 75.441009][ T6096] RDX: 000000000000000f RSI: 00007f32debef0a0 RDI: 0000000000000004 [ 75.441018][ T6096] RBP: 00007f32debef090 R08: 0000000000000000 R09: 0000000000000000 [ 75.441027][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.441036][ T6096] R13: 0000000000000000 R14: 00007f32ddfa5fa0 R15: 00007ffc84a8aae8 [ 75.441060][ T6096] [ 75.710731][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.895882][ T6118] x_tables: duplicate underflow at hook 1 [ 75.976676][ T6109] syz.2.55 (6109) used obsolete PPPIOCDETACH ioctl [ 76.012213][ T6122] lo speed is unknown, defaulting to 1000 [ 76.019980][ T6122] lo speed is unknown, defaulting to 1000 [ 76.051355][ T6122] lo speed is unknown, defaulting to 1000 [ 76.097559][ T6122] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.163674][ T6122] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.288930][ T6122] lo speed is unknown, defaulting to 1000 [ 76.310681][ T6130] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.325048][ T6122] lo speed is unknown, defaulting to 1000 [ 76.345939][ T6122] lo speed is unknown, defaulting to 1000 [ 76.372580][ T6122] lo speed is unknown, defaulting to 1000 [ 76.401359][ T5940] IPVS: starting estimator thread 0... [ 76.419894][ T6122] lo speed is unknown, defaulting to 1000 [ 76.491105][ T6134] IPVS: using max 26 ests per chain, 62400 per kthread [ 76.813680][ T6154] __nla_validate_parse: 2 callbacks suppressed [ 76.813699][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 76.913089][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 76.990341][ T6165] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 77.070453][ T6170] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 77.781171][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 77.782530][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 77.841157][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 78.731813][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 78.759881][ T6251] netlink: 39 bytes leftover after parsing attributes in process `syz.0.90'. [ 79.083199][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 79.936266][ T6312] netlink: 84 bytes leftover after parsing attributes in process `syz.2.106'. [ 79.964152][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.106'. [ 80.206847][ T6317] lo speed is unknown, defaulting to 1000 [ 80.294846][ T6325] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 80.608347][ T6339] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 80.617032][ T6337] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 80.710661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.824310][ T6346] netlink: 'syz.3.120': attribute type 29 has an invalid length. [ 80.867234][ T6347] netlink: 'syz.3.120': attribute type 29 has an invalid length. [ 80.900588][ T6357] netlink: 'syz.2.122': attribute type 29 has an invalid length. [ 80.926182][ T6350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.935218][ T6350] batadv_slave_1: entered promiscuous mode [ 80.943879][ T6350] batadv_slave_1: entered allmulticast mode [ 80.982289][ T6357] netlink: 'syz.2.122': attribute type 29 has an invalid length. [ 81.022729][ T6358] netlink: 'syz.2.122': attribute type 21 has an invalid length. [ 81.055573][ T6358] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.002390][ T9] cfg80211: failed to load regulatory.db [ 82.053392][ T6406] __nla_validate_parse: 2 callbacks suppressed [ 82.053408][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 82.083656][ T6406] bridge_slave_1: left allmulticast mode [ 82.089477][ T6406] bridge_slave_1: left promiscuous mode [ 82.103894][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.144326][ T6409] Bluetooth: MGMT ver 1.23 [ 82.157196][ T6406] bridge_slave_0: left allmulticast mode [ 82.164312][ T6406] bridge_slave_0: left promiscuous mode [ 82.170185][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.478535][ T6420] bond0: (slave macvlan3): Error -16 calling set_mac_address [ 82.616909][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'. [ 82.724257][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.149'. [ 82.812069][ T6428] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.826848][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 82.879221][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 82.976536][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.153'. [ 83.056225][ T6452] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 83.279851][ T6461] dvmrp0: entered allmulticast mode [ 83.354239][ T6465] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 83.391075][ T6465] netlink: 224 bytes leftover after parsing attributes in process `syz.4.160'. [ 83.458167][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 84.099654][ T6500] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 84.152992][ T6506] netlink: 84 bytes leftover after parsing attributes in process `syz.0.170'. [ 84.192168][ T6506] netlink: 72 bytes leftover after parsing attributes in process `syz.0.170'. [ 84.505542][ T6532] ip6gretap0: entered promiscuous mode [ 84.545969][ T6532] ip6gretap0: left promiscuous mode [ 84.690091][ T6540] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 84.709942][ T6540] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 84.740437][ T6540] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 84.929662][ T6555] netlink: zone id is out of range [ 84.966747][ T6555] netlink: zone id is out of range [ 84.996758][ T6555] netlink: zone id is out of range [ 85.035723][ T6555] netlink: zone id is out of range [ 85.051733][ T6555] netlink: zone id is out of range [ 85.086762][ T6555] netlink: zone id is out of range [ 85.098715][ T6555] netlink: zone id is out of range [ 85.106900][ T6555] netlink: zone id is out of range [ 85.118661][ T6555] netlink: zone id is out of range [ 85.566695][ T6578] validate_nla: 1 callbacks suppressed [ 85.566713][ T6578] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 85.606419][ T6578] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 86.671803][ T6635] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 86.694907][ T6640] sctp: [Deprecated]: syz.0.213 (pid 6640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.694907][ T6640] Use struct sctp_sack_info instead [ 87.304400][ T6669] __nla_validate_parse: 13 callbacks suppressed [ 87.304419][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 87.367516][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.379749][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.402262][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.409958][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.738676][ T6695] sit1: entered promiscuous mode [ 87.773991][ T6695] sit1: entered allmulticast mode [ 87.835158][ T6700] netlink: 'syz.0.226': attribute type 3 has an invalid length. [ 87.927533][ T6709] net_ratelimit: 1466 callbacks suppressed [ 87.927550][ T6709] openvswitch: netlink: IP tunnel dst address not specified [ 88.035802][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 88.146067][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 88.343871][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 88.581014][ T6744] warning: `syz.1.245' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.831371][ T6756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.249'. [ 88.853443][ T6756] netlink: 43 bytes leftover after parsing attributes in process `syz.1.249'. [ 88.861590][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 88.871409][ T6756] netlink: 'syz.1.249': attribute type 5 has an invalid length. [ 88.888428][ T6756] netlink: 43 bytes leftover after parsing attributes in process `syz.1.249'. [ 88.891713][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 89.163278][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 89.172674][ T6771] netlink: 'syz.2.253': attribute type 3 has an invalid length. [ 89.210177][ T6771] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.219469][ T6771] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.228774][ T6771] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.237907][ T6771] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.432662][ T5841] Bluetooth: hci4: command tx timeout [ 90.199008][ T6822] delete_channel: no stack [ 90.227038][ T6824] IPVS: length: 156 != 8 [ 90.382494][ T6830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.431521][ T6830] sctp: [Deprecated]: syz.4.274 (pid 6830) Use of int in max_burst socket option deprecated. [ 90.431521][ T6830] Use struct sctp_assoc_value instead [ 90.538371][ T6830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.458445][ T6893] batadv_slave_1: entered promiscuous mode [ 91.483354][ T6884] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 91.788844][ T5940] IPVS: starting estimator thread 0... [ 91.807308][ T6903] netlink: 'syz.2.290': attribute type 5 has an invalid length. [ 91.901278][ T6904] IPVS: using max 25 ests per chain, 60000 per kthread [ 92.070229][ T6915] x_tables: duplicate underflow at hook 2 [ 92.176876][ T6883] batadv_slave_1: left promiscuous mode [ 92.238042][ T6884] syz.0.286 (6884) used greatest stack depth: 18768 bytes left [ 92.408850][ T6928] x_tables: duplicate underflow at hook 3 [ 92.490094][ T6935] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 92.529904][ T6935] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 92.566016][ T6937] __nla_validate_parse: 17 callbacks suppressed [ 92.566036][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 92.609284][ T6937] geneve2: entered promiscuous mode [ 92.651337][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'. [ 92.740274][ T6946] netlink: 56 bytes leftover after parsing attributes in process `syz.4.304'. [ 92.758330][ T6943] ip6tnl1: entered allmulticast mode [ 93.126110][ T6953] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 93.143422][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.309'. [ 93.155545][ T6960] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 93.163641][ T6960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.309'. [ 93.294568][ T6967] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.704739][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 93.732992][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 93.977360][ T7007] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 93.989251][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.017594][ T7007] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.075309][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 94.092693][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 94.112588][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.126359][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.134661][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.147686][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.183529][ T7007] bond0: (slave batadv0): Releasing backup interface [ 94.206029][ T7012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.326'. [ 94.216055][ T7012] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 94.463776][ T9] IPVS: starting estimator thread 0... [ 94.571096][ T7035] IPVS: using max 21 ests per chain, 50400 per kthread [ 94.640538][ T7040] lo speed is unknown, defaulting to 1000 [ 95.599289][ T7040] netlink: 'syz.2.334': attribute type 3 has an invalid length. [ 95.715182][ T7108] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 95.756562][ T7108] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 96.127288][ T7125] netlink: 'syz.2.356': attribute type 7 has an invalid length. [ 96.154448][ T7125] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.169620][ T7127] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 97.344770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.732034][ T7147] veth1_to_hsr: entered promiscuous mode [ 97.750348][ T7148] veth1_to_hsr: left promiscuous mode [ 97.952811][ T7162] __nla_validate_parse: 159 callbacks suppressed [ 97.952831][ T7162] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.367'. [ 97.994358][ T7162] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 98.033005][ T7164] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 98.086967][ T7164] netlink: 244 bytes leftover after parsing attributes in process `syz.4.368'. [ 98.268574][ T7173] netlink: 388 bytes leftover after parsing attributes in process `syz.0.373'. [ 98.382950][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 98.872904][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.942978][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.380'. [ 98.986166][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.024807][ T7206] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 99.125328][ T7206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.186843][ T7206] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 99.200193][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.264942][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.274266][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.283010][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.285701][ T7211] gretap1: entered promiscuous mode [ 99.291758][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.303431][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.311045][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.391940][ T7222] netlink: 5 bytes leftover after parsing attributes in process `syz.2.386'. [ 99.395453][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 99.456311][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.573635][ T7216] lo speed is unknown, defaulting to 1000 [ 99.848022][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 99.849070][ T35] bridge_slave_1: left allmulticast mode [ 99.911416][ T5940] IPVS: starting estimator thread 0... [ 99.927048][ T35] bridge_slave_1: left promiscuous mode [ 99.936800][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.959171][ T35] bridge_slave_0: left allmulticast mode [ 99.977478][ T35] bridge_slave_0: left promiscuous mode [ 99.984573][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.031369][ T7248] IPVS: using max 20 ests per chain, 48000 per kthread [ 100.426163][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.437356][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.449389][ T35] bond0 (unregistering): Released all slaves [ 100.459732][ T35] bond1 (unregistering): Released all slaves [ 100.470813][ T35] bond2 (unregistering): Released all slaves [ 100.495027][ T7244] erspan0: entered promiscuous mode [ 100.500600][ T7244] macvtap1: entered promiscuous mode [ 100.507792][ T7244] macvtap1: entered allmulticast mode [ 100.521201][ T7244] erspan0: entered allmulticast mode [ 100.973572][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 101.042310][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 101.341701][ T5845] Bluetooth: hci2: command tx timeout [ 101.363779][ T7216] chnl_net:caif_netlink_parms(): no params data found [ 101.388397][ T7305] vlan2: entered promiscuous mode [ 101.396029][ T7305] bond0: entered promiscuous mode [ 101.408751][ T7305] bond_slave_0: entered promiscuous mode [ 101.418029][ T7305] bond_slave_1: entered promiscuous mode [ 101.436706][ T7305] bond0: left promiscuous mode [ 101.456745][ T7305] bond_slave_0: left promiscuous mode [ 101.463631][ T7305] bond_slave_1: left promiscuous mode [ 101.688086][ T35] hsr_slave_0: left promiscuous mode [ 101.714832][ T35] hsr_slave_1: left promiscuous mode [ 101.788994][ T35] veth1_macvtap: left promiscuous mode [ 101.825133][ T35] veth0_macvtap: left promiscuous mode [ 101.830794][ T35] veth1_vlan: left promiscuous mode [ 101.861370][ T35] veth0_vlan: left promiscuous mode [ 101.900993][ T5845] Bluetooth: hci0: command tx timeout [ 102.363933][ T35] team0 (unregistering): Port device team_slave_1 removed [ 102.398509][ T35] team0 (unregistering): Port device team_slave_0 removed [ 102.792558][ T7340] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 102.842089][ T7340] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 102.893983][ T7340] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 103.004708][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.021264][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.028988][ T7216] bridge_slave_0: entered allmulticast mode [ 103.062505][ T7216] bridge_slave_0: entered promiscuous mode [ 103.092779][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.099917][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.139718][ T7216] bridge_slave_1: entered allmulticast mode [ 103.146715][ T7372] can: request_module (can-proto-3) failed. [ 103.191475][ T7216] bridge_slave_1: entered promiscuous mode [ 103.316658][ T7384] __nla_validate_parse: 8 callbacks suppressed [ 103.316678][ T7384] netlink: 100 bytes leftover after parsing attributes in process `syz.4.419'. [ 103.329634][ T7385] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 103.384992][ T7379] ip6tnl1: entered allmulticast mode [ 103.421143][ T5845] Bluetooth: hci2: command tx timeout [ 103.472985][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.485407][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.639194][ T7216] team0: Port device team_slave_0 added [ 103.673840][ T7216] team0: Port device team_slave_1 added [ 103.828854][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.850986][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.913376][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.048314][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.093230][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.152831][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.372204][ T7216] hsr_slave_0: entered promiscuous mode [ 104.390367][ T7216] hsr_slave_1: entered promiscuous mode [ 104.408583][ T7434] bridge: RTM_NEWNEIGH with invalid ether address [ 104.624654][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 104.884865][ T7456] netlink: 'syz.2.441': attribute type 29 has an invalid length. [ 104.965883][ T7456] netlink: 'syz.2.441': attribute type 29 has an invalid length. [ 104.967596][ T7465] netlink: 'syz.2.441': attribute type 10 has an invalid length. [ 105.006117][ T7465] vlan0: entered allmulticast mode [ 105.034653][ T7465] veth0_vlan: entered allmulticast mode [ 105.076212][ T7465] team0: Port device vlan0 added [ 105.106638][ T7470] netlink: 'syz.4.445': attribute type 4 has an invalid length. [ 105.172204][ T7474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.507079][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 105.516759][ T5845] Bluetooth: hci2: command tx timeout [ 105.619937][ T7506] netlink: 'syz.4.450': attribute type 7 has an invalid length. [ 105.666864][ T7492] macsec0: entered promiscuous mode [ 106.023029][ T7216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.125812][ T7216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.145872][ T7216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.178638][ T7534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.456'. [ 106.190455][ T7216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.348909][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.474100][ T7545] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 106.598112][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.702801][ T7538] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.720060][ T7538] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.732319][ T7538] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.744955][ T7538] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.883830][ T7545] team0: Cannot enslave team device to itself [ 107.059447][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.106505][ T7567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.146202][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 107.203116][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.210355][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.229769][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.236933][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.504841][ T7216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.582488][ T5845] Bluetooth: hci2: command tx timeout [ 107.689121][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.787343][ T7216] veth0_vlan: entered promiscuous mode [ 107.826804][ T7216] veth1_vlan: entered promiscuous mode [ 107.924119][ T7216] veth0_macvtap: entered promiscuous mode [ 107.945952][ T7216] veth1_macvtap: entered promiscuous mode [ 107.988779][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.011008][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.021425][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.034511][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.046095][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.062335][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.078951][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.097824][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.109430][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.111984][ T7619] netlink: 'syz.2.478': attribute type 8 has an invalid length. [ 108.120756][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.247788][ T7216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.269451][ T7216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.291093][ T7216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.308192][ T7216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.533004][ T7639] netlink: 52 bytes leftover after parsing attributes in process `syz.0.484'. [ 108.600800][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 108.632415][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 108.668205][ T6238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.712674][ T6238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.775136][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.794294][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.025183][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 109.549986][ T7688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.499'. [ 109.594899][ T7688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.499'. [ 109.605534][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.699827][ T7691] gre1: entered promiscuous mode [ 109.710063][ T7691] gre1: entered allmulticast mode [ 109.730802][ T7693] gre1: entered promiscuous mode [ 109.768034][ T7693] gre1: entered allmulticast mode [ 109.842170][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.947531][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.962159][ T7703] netlink: 80 bytes leftover after parsing attributes in process `syz.0.503'. [ 109.977044][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 109.993026][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 110.002592][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 110.027910][ T7701] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 110.091772][ T7549] lo speed is unknown, defaulting to 1000 [ 110.388219][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.403351][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.417941][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.441162][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.451345][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.459395][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.566648][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.585528][ T7716] lo speed is unknown, defaulting to 1000 [ 110.848740][ T1144] bridge_slave_1: left allmulticast mode [ 110.856192][ T1144] bridge_slave_1: left promiscuous mode [ 110.862965][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.873766][ T1144] bridge_slave_0: left allmulticast mode [ 110.879526][ T1144] bridge_slave_0: left promiscuous mode [ 110.886543][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.288567][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.302533][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.327115][ T1144] bond0 (unregistering): Released all slaves [ 111.516150][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 111.602064][ T7748] netlink: 'syz.4.516': attribute type 32 has an invalid length. [ 111.639588][ T7557] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 111.681095][ T7557] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 111.731935][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.109553][ T1144] hsr_slave_0: left promiscuous mode [ 112.127317][ T1144] hsr_slave_1: left promiscuous mode [ 112.139979][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.161818][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.176830][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.186777][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.217660][ T1144] veth1_macvtap: left promiscuous mode [ 112.223765][ T1144] veth0_macvtap: left promiscuous mode [ 112.231275][ T1144] veth1_vlan: left promiscuous mode [ 112.236768][ T1144] veth0_vlan: left promiscuous mode [ 112.542667][ T5845] Bluetooth: hci2: command tx timeout [ 113.065491][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 113.105715][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 113.436907][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.444356][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.457299][ T7716] bridge_slave_0: entered allmulticast mode [ 113.468426][ T7716] bridge_slave_0: entered promiscuous mode [ 113.493001][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.500257][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.522562][ T7716] bridge_slave_1: entered allmulticast mode [ 113.529620][ T7716] bridge_slave_1: entered promiscuous mode [ 113.754801][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.803794][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.878601][ T7805] __nla_validate_parse: 71 callbacks suppressed [ 113.878619][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 113.979461][ T7716] team0: Port device team_slave_0 added [ 114.016105][ T7812] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 114.018673][ T7716] team0: Port device team_slave_1 added [ 114.066721][ T7812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.533'. [ 114.084370][ T7810] openvswitch: netlink: IP tunnel dst address not specified [ 114.117461][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 114.169904][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.183321][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.246509][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.265499][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.275623][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.302130][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.465399][ T7716] hsr_slave_0: entered promiscuous mode [ 114.487467][ T7716] hsr_slave_1: entered promiscuous mode [ 114.621035][ T5845] Bluetooth: hci2: command tx timeout [ 114.715015][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 114.894592][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 114.907809][ T7857] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 114.913198][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 115.098864][ T1316] tipc: Subscription rejected, illegal request [ 115.472632][ T7716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.507267][ T7716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.507858][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 115.552779][ T7885] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 115.580618][ T7716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.657167][ T7716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.727082][ T7891] veth1_to_hsr: entered promiscuous mode [ 115.753536][ T7891] veth1_to_hsr: left promiscuous mode [ 115.754315][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 115.931868][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.979793][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.092737][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.099913][ T6238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.145105][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.152310][ T6238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.405269][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 116.711080][ T5845] Bluetooth: hci2: command tx timeout [ 117.676411][ T7911] netlink: 10 bytes leftover after parsing attributes in process `syz.0.565'. [ 117.881953][ T7716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.979760][ T7937] trusted_key: syz.3.570 sent an empty control message without MSG_MORE. [ 118.174460][ T7947] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 118.217749][ T7950] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 118.227064][ T7950] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 118.248193][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.364543][ T7955] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 118.379835][ T7716] veth0_vlan: entered promiscuous mode [ 118.396165][ T7716] veth1_vlan: entered promiscuous mode [ 118.426154][ T7716] veth0_macvtap: entered promiscuous mode [ 118.437177][ T7716] veth1_macvtap: entered promiscuous mode [ 118.463613][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.474506][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.485677][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.532219][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.555671][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.580141][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.592593][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.604499][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.615522][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.629660][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.649471][ T7964] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 118.674833][ T7716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.684245][ T7716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.702103][ T7716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.719258][ T7716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.791444][ T5845] Bluetooth: hci2: command tx timeout [ 118.868405][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.897873][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.976113][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.989928][ T7975] x_tables: duplicate underflow at hook 1 [ 118.996186][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.173501][ T7984] __nla_validate_parse: 1 callbacks suppressed [ 119.173520][ T7984] netlink: 156 bytes leftover after parsing attributes in process `syz.2.585'. [ 119.377066][ T7990] bond3: entered allmulticast mode [ 119.384863][ T7990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.617939][ T8006] openvswitch: netlink: Duplicate key (type 32). [ 119.625167][ T8008] openvswitch: netlink: Duplicate key (type 32). [ 119.696012][ T8012] sch_fq: defrate 0 ignored. [ 120.049947][ T8031] Unknown options in mask 1f4 [ 120.099111][ T6238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.367169][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 120.543140][ T6238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.720234][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 120.741120][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 120.750023][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.3.606'. [ 120.815779][ T8057] Bluetooth: MGMT ver 1.23 [ 120.850295][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.868105][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.877463][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.903994][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.913773][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 120.923129][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.967021][ T8058] lo speed is unknown, defaulting to 1000 [ 121.068881][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 121.178355][ T6238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.314893][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 121.339767][ T6238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.547694][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 121.717797][ T6238] bridge_slave_1: left allmulticast mode [ 121.759060][ T6238] bridge_slave_1: left promiscuous mode [ 121.771424][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.794440][ T6238] bridge_slave_0: left allmulticast mode [ 121.800143][ T6238] bridge_slave_0: left promiscuous mode [ 121.821279][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.408275][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.419106][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.431123][ T6238] bond0 (unregistering): Released all slaves [ 122.458721][ T8114] netlink: 368 bytes leftover after parsing attributes in process `syz.4.624'. [ 122.733837][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.752595][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.775814][ T8058] bridge_slave_0: entered allmulticast mode [ 122.810051][ T8058] bridge_slave_0: entered promiscuous mode [ 122.864375][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.890565][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.899704][ T8058] bridge_slave_1: entered allmulticast mode [ 122.907875][ T8058] bridge_slave_1: entered promiscuous mode [ 122.941313][ T5845] Bluetooth: hci2: command tx timeout [ 123.166593][ T8148] IPVS: Unknown mcast interface: rose0 [ 123.220337][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.257823][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.381401][ T6238] hsr_slave_0: left promiscuous mode [ 123.401102][ T6238] hsr_slave_1: left promiscuous mode [ 123.406963][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.419901][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.443036][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.450489][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.479684][ T8172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.504811][ T6238] veth1_macvtap: left promiscuous mode [ 123.510374][ T6238] veth0_macvtap: left promiscuous mode [ 123.528863][ T6238] veth1_vlan: left promiscuous mode [ 123.535184][ T6238] veth0_vlan: left promiscuous mode [ 124.068589][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 124.107385][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 124.472401][ T8168] ipip0: entered promiscuous mode [ 124.522423][ T8179] netlink: 176 bytes leftover after parsing attributes in process `syz.3.635'. [ 124.552542][ T8179] netlink: 176 bytes leftover after parsing attributes in process `syz.3.635'. [ 124.616323][ T8193] netlink: 'syz.0.640': attribute type 21 has an invalid length. [ 124.636263][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 124.652300][ T8193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.640'. [ 124.662376][ T8058] team0: Port device team_slave_0 added [ 124.701373][ T8058] team0: Port device team_slave_1 added [ 124.709522][ T8195] netlink: 100 bytes leftover after parsing attributes in process `syz.4.641'. [ 124.843141][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.860746][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.989878][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.022144][ T5845] Bluetooth: hci2: command 0x041b tx timeout [ 125.025971][ T8213] IPv6: sit1: Disabled Multicast RS [ 125.085037][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.110529][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.147231][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.282833][ T8058] hsr_slave_0: entered promiscuous mode [ 125.303117][ T8058] hsr_slave_1: entered promiscuous mode [ 125.383047][ T8220] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 125.667789][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 125.845429][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 125.973152][ T8246] team0 (unregistering): Port device team_slave_0 removed [ 126.003706][ T8246] team0 (unregistering): Port device team_slave_1 removed [ 126.015382][ T8246] veth0_vlan: left allmulticast mode [ 126.035352][ T8246] team0 (unregistering): Port device vlan0 removed [ 126.065680][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 126.459065][ T8284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.599604][ T8294] netlink: 96 bytes leftover after parsing attributes in process `syz.0.669'. [ 126.635641][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'. [ 126.726883][ T8294] bridge_slave_0: entered allmulticast mode [ 126.994256][ T8058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.004963][ T8314] tipc: Started in network mode [ 127.010033][ T8314] tipc: Node identity , cluster identity 4711 [ 127.016480][ T8314] tipc: Failed to obtain node identity [ 127.022174][ T8314] tipc: Enabling of bearer rejected, failed to enable media [ 127.031462][ T8317] syzkaller0: entered promiscuous mode [ 127.039477][ T8317] syzkaller0: entered allmulticast mode [ 127.056822][ T8058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.086314][ T8058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.101034][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 127.254453][ T8058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.299839][ T8326] lo speed is unknown, defaulting to 1000 [ 127.546114][ T8340] delete_channel: no stack [ 127.753418][ T3541] syzkaller0: tun_net_xmit 76 [ 127.758725][ T3541] syzkaller0: tun_net_xmit 48 [ 127.763727][ T8319] syzkaller0: create flow: hash 3198960395 index 2 [ 127.777078][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.781173][ T7557] syzkaller0: tun_net_xmit 76 [ 127.849869][ T8318] syzkaller0: delete flow: hash 3198960395 index 2 [ 127.863638][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.181176][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 129.569045][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.576244][ T6238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.629681][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.636930][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.307416][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.469407][ T8058] veth0_vlan: entered promiscuous mode [ 130.515903][ T8058] veth1_vlan: entered promiscuous mode [ 130.557244][ T8414] __nla_validate_parse: 13 callbacks suppressed [ 130.557263][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 130.588002][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 130.599538][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 130.727880][ T8058] veth0_macvtap: entered promiscuous mode [ 130.770758][ T8058] veth1_macvtap: entered promiscuous mode [ 130.791930][ T8427] netlink: 'syz.0.705': attribute type 29 has an invalid length. [ 130.821808][ T8427] netlink: 'syz.0.705': attribute type 29 has an invalid length. [ 130.847701][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.891049][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.915918][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.927169][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.944320][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.954997][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 130.964567][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.976503][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 130.993342][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.011692][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.031110][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.046933][ T8438] xt_bpf: check failed: parse error [ 131.053121][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.134115][ T8058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.178178][ T8058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.188029][ T8058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.201004][ T8058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.267783][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 131.426598][ T8453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.714'. [ 131.446372][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.482285][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.530699][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.561301][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.599486][ T8461] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 131.616008][ T8461] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 131.930051][ T8480] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 132.131797][ T8487] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 132.187204][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.367884][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.617179][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.755870][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.861779][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 133.170240][ T52] bridge_slave_1: left allmulticast mode [ 133.184835][ T52] bridge_slave_1: left promiscuous mode [ 133.209069][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.249739][ T52] bridge_slave_0: left allmulticast mode [ 133.268168][ T52] bridge_slave_0: left promiscuous mode [ 133.310647][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.463822][ T8538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.733'. [ 133.512820][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 133.535862][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.546488][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.555644][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.571758][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.587214][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 133.606474][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.865070][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.876111][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.887334][ T52] bond0 (unregistering): Released all slaves [ 133.958518][ T8540] lo speed is unknown, defaulting to 1000 [ 134.059729][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 134.325026][ T8558] unknown channel width for channel at 909000KHz? [ 134.545380][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 134.564764][ T8570] netlink: 'syz.0.743': attribute type 12 has an invalid length. [ 134.746375][ T52] hsr_slave_0: left promiscuous mode [ 134.778034][ T52] hsr_slave_1: left promiscuous mode [ 134.789043][ T8588] Illegal XDP return value 16128 on prog (id 141) dev lo, expect packet loss! [ 134.790148][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.817742][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.849076][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.857003][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.901038][ T52] veth1_macvtap: left promiscuous mode [ 134.906770][ T52] veth0_macvtap: left promiscuous mode [ 134.913568][ T52] veth1_vlan: left promiscuous mode [ 134.918997][ T52] veth0_vlan: left promiscuous mode [ 135.233134][ T8604] can: request_module (can-proto-0) failed. [ 135.419746][ T52] team0 (unregistering): Port device team_slave_1 removed [ 135.461220][ T52] team0 (unregistering): Port device team_slave_0 removed [ 135.663697][ T5841] Bluetooth: hci2: command tx timeout [ 135.862174][ T8600] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 135.869863][ T8600] __nla_validate_parse: 5 callbacks suppressed [ 135.869873][ T8600] netlink: 236 bytes leftover after parsing attributes in process `syz.2.747'. [ 135.924873][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 136.172271][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.179415][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.191529][ T8611] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 136.215528][ T8540] bridge_slave_0: entered allmulticast mode [ 136.223397][ T8540] bridge_slave_0: entered promiscuous mode [ 136.244042][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.256891][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.272398][ T8540] bridge_slave_1: entered allmulticast mode [ 136.287312][ T8540] bridge_slave_1: entered promiscuous mode [ 136.313454][ T8627] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 136.322111][ T8627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.756'. [ 136.332301][ T8618] veth0: entered promiscuous mode [ 136.353085][ T8611] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.367542][ T8609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.397110][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.407484][ T8612] veth0: left promiscuous mode [ 136.415746][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.563725][ T8540] team0: Port device team_slave_0 added [ 136.591799][ T8540] team0: Port device team_slave_1 added [ 136.616882][ T8632] xt_SECMARK: invalid mode: 0 [ 136.633420][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.644409][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.679246][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.698909][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.706913][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.737674][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.880576][ T8540] hsr_slave_0: entered promiscuous mode [ 136.896265][ T8540] hsr_slave_1: entered promiscuous mode [ 137.292419][ T8668] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.301483][ T8668] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.310562][ T8668] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.319486][ T8668] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.339521][ T8669] Cannot find del_set index 3 as target [ 137.348808][ T8668] vxlan0: entered promiscuous mode [ 137.358428][ T8668] vxlan0: entered allmulticast mode [ 137.391563][ T8668] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.400623][ T8668] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.409673][ T8668] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.418627][ T8668] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.436193][ T8674] netlink: 76 bytes leftover after parsing attributes in process `syz.0.771'. [ 137.700173][ T8682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.733721][ T8683] IPv6: sit1: Disabled Multicast RS [ 137.741386][ T5841] Bluetooth: hci2: command tx timeout [ 137.806810][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 137.917799][ T8693] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.778'. [ 137.970498][ T8690] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.778'. [ 138.001312][ T8540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.033172][ T8540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.106713][ T8540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.160174][ T8540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.195274][ T8706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.431624][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.516600][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.569057][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.576241][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.638890][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.647159][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.744213][ T8733] netlink: 830 bytes leftover after parsing attributes in process `syz.2.788'. [ 138.881832][ T8740] x_tables: unsorted entry at hook 1 [ 138.963761][ T8743] xt_TCPMSS: Only works on TCP SYN packets [ 139.001815][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.789'. [ 139.041871][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.789'. [ 139.172275][ T8540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.315435][ T8540] veth0_vlan: entered promiscuous mode [ 139.360396][ T8540] veth1_vlan: entered promiscuous mode [ 139.468803][ T8766] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 139.480667][ T8540] veth0_macvtap: entered promiscuous mode [ 139.508494][ T8766] netlink: 'syz.4.795': attribute type 2 has an invalid length. [ 139.516649][ T8540] veth1_macvtap: entered promiscuous mode [ 139.558964][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.594953][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.618426][ T8766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.656290][ T8766] batadv_slave_0: entered promiscuous mode [ 139.691812][ T8766] batadv_slave_0: entered allmulticast mode [ 139.805238][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.821027][ T5841] Bluetooth: hci2: command tx timeout [ 139.856263][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.896559][ T8540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.931700][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.990979][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.022494][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.048072][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.065987][ T8540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.080116][ T8540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.099741][ T8540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.109538][ T8540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.119329][ T8540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.370830][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.406777][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.529026][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.551790][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.677319][ T8819] xt_NFQUEUE: number of total queues is 0 [ 141.217809][ T8848] syzkaller1: entered promiscuous mode [ 141.230154][ T8848] syzkaller1: entered allmulticast mode [ 141.483373][ T8864] xt_CT: No such helper "pptp" [ 141.771572][ T8880] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 141.794394][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.822077][ T8881] __nla_validate_parse: 4 callbacks suppressed [ 141.822096][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 142.233953][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.315304][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.363932][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.531368][ T12] bridge_slave_1: left allmulticast mode [ 142.541704][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 142.555552][ T12] bridge_slave_1: left promiscuous mode [ 142.566473][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.576060][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 142.593541][ T12] bridge_slave_0: left allmulticast mode [ 142.608934][ T12] bridge_slave_0: left promiscuous mode [ 142.611005][ T8890] netlink: 'syz.0.830': attribute type 20 has an invalid length. [ 142.621668][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.002618][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.027695][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.038043][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.056615][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.065407][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.073450][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.208047][ T8917] netlink: 'syz.4.838': attribute type 10 has an invalid length. [ 143.337680][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.349141][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.359406][ T12] bond0 (unregistering): Released all slaves [ 143.420381][ T8917] team0: Device veth0_macvtap failed to register rx_handler [ 143.569353][ T8917] syz.4.838 (8917) used greatest stack depth: 18736 bytes left [ 143.643494][ T8912] lo speed is unknown, defaulting to 1000 [ 143.748860][ T8932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.903239][ T8942] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 143.924669][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 144.021545][ T8942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.191304][ T12] hsr_slave_0: left promiscuous mode [ 144.223110][ T12] hsr_slave_1: left promiscuous mode [ 144.247687][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.256347][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.267904][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.289853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.333179][ T8967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.343132][ T12] veth1_macvtap: left promiscuous mode [ 144.349089][ T12] veth0_macvtap: left promiscuous mode [ 144.357719][ T12] veth1_vlan: left promiscuous mode [ 144.366244][ T12] veth0_vlan: left promiscuous mode [ 144.747559][ T12] team0 (unregistering): Port device team_slave_1 removed [ 144.791281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.155844][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 145.181458][ T5841] Bluetooth: hci2: command tx timeout [ 145.331976][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 145.416940][ T8973] lo: entered allmulticast mode [ 145.462881][ T8973] lo: left allmulticast mode [ 145.579628][ T8912] chnl_net:caif_netlink_parms(): no params data found [ 146.009938][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.051103][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.081440][ T8912] bridge_slave_0: entered allmulticast mode [ 146.101511][ T8912] bridge_slave_0: entered promiscuous mode [ 146.109562][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.121216][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.128626][ T8912] bridge_slave_1: entered allmulticast mode [ 146.137520][ T8912] bridge_slave_1: entered promiscuous mode [ 146.236125][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 146.249724][ T8912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.301733][ T8912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.486550][ T8912] team0: Port device team_slave_0 added [ 146.552531][ T8912] team0: Port device team_slave_1 added [ 146.636590][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.654540][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.691053][ T8912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.739000][ T9041] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.753721][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.760713][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.821808][ T8912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.844008][ T9047] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 146.858390][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 146.867569][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 146.881132][ T9047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.876'. [ 146.973896][ T8912] hsr_slave_0: entered promiscuous mode [ 146.986022][ T8912] hsr_slave_1: entered promiscuous mode [ 147.023700][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.879'. [ 147.049002][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.879'. [ 147.059756][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 147.220094][ T9066] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 147.248319][ T9066] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 147.261327][ T5841] Bluetooth: hci2: command tx timeout [ 147.471134][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 147.482339][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 147.622831][ T9090] netlink: 260 bytes leftover after parsing attributes in process `syz.4.889'. [ 147.742621][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 147.750180][ T9095] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 147.798918][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.812900][ T9095] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.884411][ T9101] ================================================================== [ 147.892530][ T9101] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190 [ 147.901777][ T9101] Read of size 8 at addr ffff888030c28908 by task syz.2.893/9101 [ 147.909484][ T9101] [ 147.911811][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.2.893 Not tainted 6.14.0-rc5-syzkaller-00131-gd0a4a1b36d7a #0 [ 147.911827][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.911836][ T9101] Call Trace: [ 147.911841][ T9101] [ 147.911847][ T9101] dump_stack_lvl+0x241/0x360 [ 147.911866][ T9101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.911880][ T9101] ? __pfx__printk+0x10/0x10 [ 147.911891][ T9101] ? _printk+0xd5/0x120 [ 147.911903][ T9101] ? __virt_addr_valid+0x183/0x530 [ 147.911916][ T9101] ? __virt_addr_valid+0x183/0x530 [ 147.911928][ T9101] print_report+0x16e/0x5b0 [ 147.911944][ T9101] ? __virt_addr_valid+0x183/0x530 [ 147.911955][ T9101] ? __virt_addr_valid+0x183/0x530 [ 147.911966][ T9101] ? __virt_addr_valid+0x45f/0x530 [ 147.911977][ T9101] ? __phys_addr+0xba/0x170 [ 147.911988][ T9101] ? __list_del_entry_valid_or_report+0x31/0x190 [ 147.912007][ T9101] kasan_report+0x143/0x180 [ 147.912022][ T9101] ? __list_del_entry_valid_or_report+0x31/0x190 [ 147.912042][ T9101] __list_del_entry_valid_or_report+0x31/0x190 [ 147.912060][ T9101] mgmt_pending_remove+0x26/0x1a0 [ 147.912078][ T9101] mgmt_pending_foreach+0xd1/0x130 [ 147.912094][ T9101] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 147.912113][ T9101] __mgmt_power_off+0x189/0x440 [ 147.912131][ T9101] ? __pfx___mgmt_power_off+0x10/0x10 [ 147.912156][ T9101] ? __mutex_trylock_common+0x183/0x2e0 [ 147.912171][ T9101] ? __pfx___might_resched+0x10/0x10 [ 147.912188][ T9101] ? __pfx___mutex_trylock_common+0x10/0x10 [ 147.912203][ T9101] ? rcu_is_watching+0x15/0xb0 [ 147.912217][ T9101] ? trace_contention_end+0x3c/0x120 [ 147.912230][ T9101] ? __mutex_lock+0x397/0x1010 [ 147.912249][ T9101] ? __mutex_unlock_slowpath+0x227/0x800 [ 147.912266][ T9101] ? hci_dev_close_sync+0x60d/0x1260 [ 147.912281][ T9101] ? _raw_spin_lock_irq+0xdf/0x120 [ 147.912295][ T9101] ? __pfx___mutex_lock+0x10/0x10 [ 147.912311][ T9101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.912330][ T9101] ? _raw_spin_unlock_irq+0x2e/0x50 [ 147.912343][ T9101] ? drain_workqueue+0x2d3/0x3a0 [ 147.912361][ T9101] ? hci_discovery_set_state+0x57/0x180 [ 147.912379][ T9101] hci_dev_close_sync+0x6ff/0x1260 [ 147.912395][ T9101] ? __pfx_enable_work+0x10/0x10 [ 147.912414][ T9101] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 147.912432][ T9101] hci_dev_close+0x112/0x210 [ 147.912449][ T9101] sock_do_ioctl+0x158/0x460 [ 147.912465][ T9101] ? __pfx_sock_do_ioctl+0x10/0x10 [ 147.912486][ T9101] sock_ioctl+0x626/0x8e0 [ 147.912500][ T9101] ? __pfx_sock_ioctl+0x10/0x10 [ 147.912514][ T9101] ? __fget_files+0x2a/0x410 [ 147.912532][ T9101] ? __fget_files+0x2a/0x410 [ 147.912550][ T9101] ? __pfx_sock_ioctl+0x10/0x10 [ 147.912564][ T9101] __se_sys_ioctl+0xf5/0x170 [ 147.912578][ T9101] do_syscall_64+0xf3/0x230 [ 147.912595][ T9101] ? clear_bhb_loop+0x35/0x90 [ 147.912614][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.912631][ T9101] RIP: 0033:0x7f077018d169 [ 147.912644][ T9101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.912654][ T9101] RSP: 002b:00007f0771093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.912669][ T9101] RAX: ffffffffffffffda RBX: 00007f07703a5fa0 RCX: 00007f077018d169 [ 147.912679][ T9101] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 147.912687][ T9101] RBP: 00007f077020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.912695][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.912702][ T9101] R13: 0000000000000000 R14: 00007f07703a5fa0 R15: 00007ffe55f16f88 [ 147.912717][ T9101] [ 147.912721][ T9101] [ 148.264911][ T9101] Allocated by task 7245: [ 148.269228][ T9101] kasan_save_track+0x3f/0x80 [ 148.273898][ T9101] __kasan_kmalloc+0x98/0xb0 [ 148.278476][ T9101] __kmalloc_cache_noprof+0x243/0x390 [ 148.283925][ T9101] mgmt_pending_new+0x65/0x250 [ 148.288678][ T9101] mgmt_pending_add+0x36/0x120 [ 148.293427][ T9101] set_link_security+0x5da/0x820 [ 148.298350][ T9101] hci_mgmt_cmd+0xa1f/0xf10 [ 148.303020][ T9101] hci_sock_sendmsg+0x7b8/0x11c0 [ 148.307946][ T9101] __sock_sendmsg+0x221/0x270 [ 148.312614][ T9101] sock_write_iter+0x2d7/0x3f0 [ 148.317371][ T9101] vfs_write+0xacf/0xd10 [ 148.321605][ T9101] ksys_write+0x18f/0x2b0 [ 148.325949][ T9101] do_syscall_64+0xf3/0x230 [ 148.330467][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.336368][ T9101] [ 148.338683][ T9101] Freed by task 9102: [ 148.342643][ T9101] kasan_save_track+0x3f/0x80 [ 148.347308][ T9101] kasan_save_free_info+0x40/0x50 [ 148.352325][ T9101] __kasan_slab_free+0x59/0x70 [ 148.357078][ T9101] kfree+0x196/0x430 [ 148.360981][ T9101] mgmt_pending_foreach+0xd1/0x130 [ 148.366177][ T9101] mgmt_index_removed+0x133/0x390 [ 148.371211][ T9101] hci_sock_bind+0xd70/0x12d0 [ 148.375887][ T9101] __sys_bind+0x1e4/0x290 [ 148.380227][ T9101] __x64_sys_bind+0x7a/0x90 [ 148.384740][ T9101] do_syscall_64+0xf3/0x230 [ 148.389249][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.395241][ T9101] [ 148.397646][ T9101] The buggy address belongs to the object at ffff888030c28900 [ 148.397646][ T9101] which belongs to the cache kmalloc-96 of size 96 [ 148.411559][ T9101] The buggy address is located 8 bytes inside of [ 148.411559][ T9101] freed 96-byte region [ffff888030c28900, ffff888030c28960) [ 148.425108][ T9101] [ 148.427431][ T9101] The buggy address belongs to the physical page: [ 148.433830][ T9101] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030c28a00 pfn:0x30c28 [ 148.443891][ T9101] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 148.451947][ T9101] page_type: f5(slab) [ 148.455933][ T9101] raw: 00fff00000000200 ffff88801b041280 ffffea0000cde490 ffffea0001708790 [ 148.464522][ T9101] raw: ffff888030c28a00 0000000000200011 00000000f5000000 0000000000000000 [ 148.473093][ T9101] page dumped because: kasan: bad access detected [ 148.479502][ T9101] page_owner tracks the page as allocated [ 148.485201][ T9101] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 974, tgid 974 (kworker/0:2), ts 72491439159, free_ts 72477681636 [ 148.504216][ T9101] post_alloc_hook+0x1f4/0x240 [ 148.508976][ T9101] get_page_from_freelist+0x365c/0x37a0 [ 148.514512][ T9101] __alloc_frozen_pages_noprof+0x292/0x710 [ 148.520315][ T9101] alloc_pages_mpol+0x311/0x660 [ 148.525169][ T9101] allocate_slab+0x8f/0x3a0 [ 148.529666][ T9101] ___slab_alloc+0xc27/0x14a0 [ 148.534335][ T9101] __slab_alloc+0x58/0xa0 [ 148.538670][ T9101] __kmalloc_cache_noprof+0x27b/0x390 [ 148.544034][ T9101] dst_cow_metrics_generic+0x56/0x1c0 [ 148.549401][ T9101] icmp6_dst_alloc+0x270/0x420 [ 148.554158][ T9101] mld_sendpack+0x6a3/0xdb0 [ 148.558663][ T9101] mld_dad_work+0x44/0x500 [ 148.563069][ T9101] process_scheduled_works+0xabe/0x18e0 [ 148.568601][ T9101] worker_thread+0x870/0xd30 [ 148.573178][ T9101] kthread+0x7a9/0x920 [ 148.577239][ T9101] ret_from_fork+0x4b/0x80 [ 148.581650][ T9101] page last free pid 5847 tgid 5847 stack trace: [ 148.587958][ T9101] free_frozen_pages+0xe0d/0x10e0 [ 148.592978][ T9101] __put_partials+0x160/0x1c0 [ 148.597658][ T9101] put_cpu_partial+0x17c/0x250 [ 148.602405][ T9101] __slab_free+0x290/0x380 [ 148.606803][ T9101] qlist_free_all+0x9a/0x140 [ 148.611389][ T9101] kasan_quarantine_reduce+0x14f/0x170 [ 148.616834][ T9101] __kasan_slab_alloc+0x23/0x80 [ 148.621681][ T9101] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 148.627480][ T9101] shmem_alloc_inode+0x28/0x40 [ 148.632244][ T9101] alloc_inode+0x65/0x1a0 [ 148.636569][ T9101] new_inode+0x22/0x1d0 [ 148.640712][ T9101] shmem_get_inode+0x39d/0xf20 [ 148.645464][ T9101] shmem_mknod+0x191/0x3d0 [ 148.649867][ T9101] shmem_mkdir+0x33/0x70 [ 148.654098][ T9101] vfs_mkdir+0x2f9/0x4f0 [ 148.658326][ T9101] do_mkdirat+0x264/0x3a0 [ 148.662650][ T9101] [ 148.664959][ T9101] Memory state around the buggy address: [ 148.670570][ T9101] ffff888030c28800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 148.678615][ T9101] ffff888030c28880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 148.686670][ T9101] >ffff888030c28900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 148.694711][ T9101] ^ [ 148.699025][ T9101] ffff888030c28980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 148.707072][ T9101] ffff888030c28a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 148.715117][ T9101] ================================================================== [ 148.735657][ T9101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.742894][ T9101] CPU: 0 UID: 0 PID: 9101 Comm: syz.2.893 Not tainted 6.14.0-rc5-syzkaller-00131-gd0a4a1b36d7a #0 [ 148.753470][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.763630][ T9101] Call Trace: [ 148.766898][ T9101] [ 148.769817][ T9101] dump_stack_lvl+0x241/0x360 [ 148.774491][ T9101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.779674][ T9101] ? __pfx__printk+0x10/0x10 [ 148.784257][ T9101] ? preempt_schedule+0xe1/0xf0 [ 148.789100][ T9101] ? vscnprintf+0x5d/0x90 [ 148.793418][ T9101] panic+0x349/0x880 [ 148.797309][ T9101] ? check_panic_on_warn+0x21/0xb0 [ 148.802415][ T9101] ? __pfx_panic+0x10/0x10 [ 148.806819][ T9101] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 148.812789][ T9101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.819105][ T9101] ? print_report+0x519/0x5b0 [ 148.823783][ T9101] check_panic_on_warn+0x86/0xb0 [ 148.828714][ T9101] ? __list_del_entry_valid_or_report+0x31/0x190 [ 148.835037][ T9101] end_report+0x77/0x160 [ 148.839272][ T9101] kasan_report+0x154/0x180 [ 148.843765][ T9101] ? __list_del_entry_valid_or_report+0x31/0x190 [ 148.850087][ T9101] __list_del_entry_valid_or_report+0x31/0x190 [ 148.856239][ T9101] mgmt_pending_remove+0x26/0x1a0 [ 148.861267][ T9101] mgmt_pending_foreach+0xd1/0x130 [ 148.866388][ T9101] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 148.871758][ T9101] __mgmt_power_off+0x189/0x440 [ 148.876604][ T9101] ? __pfx___mgmt_power_off+0x10/0x10 [ 148.881973][ T9101] ? __mutex_trylock_common+0x183/0x2e0 [ 148.887509][ T9101] ? __pfx___might_resched+0x10/0x10 [ 148.892786][ T9101] ? __pfx___mutex_trylock_common+0x10/0x10 [ 148.898675][ T9101] ? rcu_is_watching+0x15/0xb0 [ 148.903686][ T9101] ? trace_contention_end+0x3c/0x120 [ 148.908981][ T9101] ? __mutex_lock+0x397/0x1010 [ 148.913739][ T9101] ? __mutex_unlock_slowpath+0x227/0x800 [ 148.919371][ T9101] ? hci_dev_close_sync+0x60d/0x1260 [ 148.924649][ T9101] ? _raw_spin_lock_irq+0xdf/0x120 [ 148.929749][ T9101] ? __pfx___mutex_lock+0x10/0x10 [ 148.934766][ T9101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.940740][ T9101] ? _raw_spin_unlock_irq+0x2e/0x50 [ 148.945926][ T9101] ? drain_workqueue+0x2d3/0x3a0 [ 148.950856][ T9101] ? hci_discovery_set_state+0x57/0x180 [ 148.956587][ T9101] hci_dev_close_sync+0x6ff/0x1260 [ 148.961692][ T9101] ? __pfx_enable_work+0x10/0x10 [ 148.966625][ T9101] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 148.972162][ T9101] hci_dev_close+0x112/0x210 [ 148.976748][ T9101] sock_do_ioctl+0x158/0x460 [ 148.981331][ T9101] ? __pfx_sock_do_ioctl+0x10/0x10 [ 148.986436][ T9101] sock_ioctl+0x626/0x8e0 [ 148.990778][ T9101] ? __pfx_sock_ioctl+0x10/0x10 [ 148.995613][ T9101] ? __fget_files+0x2a/0x410 [ 149.000199][ T9101] ? __fget_files+0x2a/0x410 [ 149.004778][ T9101] ? __pfx_sock_ioctl+0x10/0x10 [ 149.009616][ T9101] __se_sys_ioctl+0xf5/0x170 [ 149.014194][ T9101] do_syscall_64+0xf3/0x230 [ 149.018777][ T9101] ? clear_bhb_loop+0x35/0x90 [ 149.023448][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.029344][ T9101] RIP: 0033:0x7f077018d169 [ 149.033749][ T9101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.053340][ T9101] RSP: 002b:00007f0771093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.061744][ T9101] RAX: ffffffffffffffda RBX: 00007f07703a5fa0 RCX: 00007f077018d169 [ 149.069706][ T9101] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 149.077661][ T9101] RBP: 00007f077020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.085618][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.093577][ T9101] R13: 0000000000000000 R14: 00007f07703a5fa0 R15: 00007ffe55f16f88 [ 149.101549][ T9101] [ 149.104810][ T9101] Kernel Offset: disabled [ 149.109132][ T9101] Rebooting in 86400 seconds..