last executing test programs: 1m11.209722384s ago: executing program 0 (id=491): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x42}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000140)="2f2612dccefeb0a5bc4ef5d4854a5bed38c0af43289f9c8743fc15ec835a8bb596585ae277def17c94356c93b19f40a23ba7e70de0267ca61b8c8451c88ca778b50ef78fa3dfa9499e33f070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0xed4d3000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="e697404bc439a5b0fca3fb8e4107c6ff1734e913199c6fa7f73cd94a3c30d43330af71") getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) 58.880611558s ago: executing program 0 (id=491): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x42}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000140)="2f2612dccefeb0a5bc4ef5d4854a5bed38c0af43289f9c8743fc15ec835a8bb596585ae277def17c94356c93b19f40a23ba7e70de0267ca61b8c8451c88ca778b50ef78fa3dfa9499e33f070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0xed4d3000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="e697404bc439a5b0fca3fb8e4107c6ff1734e913199c6fa7f73cd94a3c30d43330af71") getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) 48.500676859s ago: executing program 0 (id=491): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x42}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000140)="2f2612dccefeb0a5bc4ef5d4854a5bed38c0af43289f9c8743fc15ec835a8bb596585ae277def17c94356c93b19f40a23ba7e70de0267ca61b8c8451c88ca778b50ef78fa3dfa9499e33f070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0xed4d3000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="e697404bc439a5b0fca3fb8e4107c6ff1734e913199c6fa7f73cd94a3c30d43330af71") getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) 36.608498094s ago: executing program 0 (id=491): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x42}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000140)="2f2612dccefeb0a5bc4ef5d4854a5bed38c0af43289f9c8743fc15ec835a8bb596585ae277def17c94356c93b19f40a23ba7e70de0267ca61b8c8451c88ca778b50ef78fa3dfa9499e33f070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0xed4d3000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="e697404bc439a5b0fca3fb8e4107c6ff1734e913199c6fa7f73cd94a3c30d43330af71") getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) 35.620083263s ago: executing program 2 (id=1069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYRES32=0x1, @ANYBLOB="0000707cf0000000000000000000000000000300008000c077af3aaa1c4adbe4e5f92715ebc8afbe2351badb0c15a6a16a03bb92f9903f6b6155f257103ebb3dda177f832be97f7eed89c1d77683c08e12d5eccb385fe0aa1d7f89dddee11f0400c90b3f0934bc286d30f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000001080)={0x2, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2e200c839223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e2a5b7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00113c6b4698ac8f3eff5baff0dd50c786dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8b28b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec7ef4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2abd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a53c100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae0001000056886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d9065510001ffa4add5647489b39601270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958fd235d6071619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b77cf4de00788adce638190f3570e0b4c80e8682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faeb44158bb440df2a695f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489eb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327039bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef1c1a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a226f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152ef098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe240c1f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa744fadd2d418ace1eb1086c4e660bdcf666c578c8fe236f785b5de8e5767eef3dbdd47fec92f89dfdfec5bdc7b0bd4618d96cfb7c07121189792f13440733c7a3b7ccbbe6b94b99c93a0bd1c5c821173ed3c690902fb6b7de9263da491151db370ca7eccbf2dd87e86a1bc97ee56edda8cb8d5524277eff5603540b964e53680b5e1a8c5eeadfaeca753d9188fea48b1d49c906148290fdf1ba17ca2a678d2d8203bbfca59e77b73939ec455af0f9ec39dd5cf8599e2d5997e5ad732c19b603578224f03c11c6f584e14b60cd3f8ecfdfaa35e2e3957fa72ac1519c7c48ee1928c916b32a3aaa8b4e6258b11040508b48d16bd889d6b3e009d3e64e88592e8b330344ca7f93e81ca6dc2c6d3a969f548c71b8ffafc1508ffea6884a1365c71793a0bf5c60a6294a2cfcc1b436e904cc17fb49a4c1f3fdbe515c49c18042503a44c15dd0908594ef7bc20256106a656ae2fd3b05bf55b9e892425b9a1b5aa2b72f817fa63ce72d7532cbd89eb8b95ce7c8ebf9ee2f55825fabd10c7fe98f76241e4db16dcaa093f7541483760b86deec3437c1157257b41a54f352c9492abf6e4c969cc7accde5ed57882e329072a7306d325463f67421f06ca3b142f0b5a28535389b478b9ab8fd1fb8304c2007c662ff6d7712ba19c4eebc02ea87fc5efae45f353d27265c8a543e9c"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) shutdown(r1, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) write$ppp(r7, &(0x7f0000000440)='\x00\x00', 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000101f01000000000000000ca8e1e4f4ab93f39e00000000000a40000000060a0b04006a7d417057085900000000000000000480100001800a00010072656469720000000900010073797a30000000000900020073797a320000140000001100010000000000000000000000000a5654eb4f5c9f928bcb63e8601363a60793fa00d5325af34e8dd7ad71b14021250db9c68c95764d91f1c97dff132ebf3ba0732985c4fe77725925d572c507e479f86682a9deb8338b8c2c959b4d0ce6d7ecccf78751cd75448849a120f3675ed52b7d9970a6c2fb4661fb309833bd52b1c601d94d12bfdbe4473e6f2a"], 0x68}}, 0x0) close(r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) unshare(0x22020400) connect$unix(r9, 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x9, 0xb, 0x81, 0x9}, {0x6, 0x3, 0x9, 0x3c}, {0x2, 0xe, 0x5, 0x1}]}, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000240)=0x1) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) 34.647018568s ago: executing program 2 (id=1079): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x200}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x49008) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r9, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 32.360475137s ago: executing program 2 (id=1089): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xa, 0x5, 0x81, 0x9, 0x7fff, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket(0x8, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3ff, 0xfff9}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 32.282650452s ago: executing program 2 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000020010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80) 22.085671921s ago: executing program 0 (id=491): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x42}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000140)="2f2612dccefeb0a5bc4ef5d4854a5bed38c0af43289f9c8743fc15ec835a8bb596585ae277def17c94356c93b19f40a23ba7e70de0267ca61b8c8451c88ca778b50ef78fa3dfa9499e33f070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0xed4d3000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="e697404bc439a5b0fca3fb8e4107c6ff1734e913199c6fa7f73cd94a3c30d43330af71") getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) 20.799946966s ago: executing program 2 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000020010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80) 6.817559657s ago: executing program 2 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000020010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80) 6.311800636s ago: executing program 0 (id=491): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x42}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000140)="2f2612dccefeb0a5bc4ef5d4854a5bed38c0af43289f9c8743fc15ec835a8bb596585ae277def17c94356c93b19f40a23ba7e70de0267ca61b8c8451c88ca778b50ef78fa3dfa9499e33f070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0xed4d3000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)="e697404bc439a5b0fca3fb8e4107c6ff1734e913199c6fa7f73cd94a3c30d43330af71") getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) 3.264904291s ago: executing program 4 (id=1274): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x44, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x6000041) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x4, 0x81, 0x4, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x1, 0x40}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090004060000094000000a000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.804706317s ago: executing program 3 (id=1279): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20, 0x1000000}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 2.692315478s ago: executing program 4 (id=1280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000040007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230003", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.517037152s ago: executing program 4 (id=1281): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_cmd={0x2e, 0x7, 0x4, 0x0, 0x14, 0x5, 0x1, 0x3, 0xfc, 0x5, 0x7ff, 0x29d, 0x8000, 0xee, 0x1c, 0x3, [0x4, 0x1]}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r2, 0x0, 0x6, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) unshare(0x2c020400) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pread64(r6, 0x0, 0x0, 0x9) 2.243530725s ago: executing program 4 (id=1282): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4b7e37a4efecf7e0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f000020f000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x2ba22000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x6, 0x1}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r9, @ANYBLOB="040013000600b500c9020000060012000000fb8c0a000600ffffffffffff00001c00810005"], 0x60}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0x0, 0xf8, 0xfeffffff, 0x0, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e24, 0x4e22], 0x2}}, @common=@inet=@tcp={{0x30}, {[], [0x0, 0x4e24], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {0xff}}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x423}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1.662090486s ago: executing program 3 (id=1286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 1.325517801s ago: executing program 3 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 1.10968556s ago: executing program 4 (id=1289): socket$packet(0x11, 0xa, 0x300) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010173397a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000400900030073797a32000000001400000011000100"], 0x7c}}, 0xc1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0x0) (async) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x110, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7b4f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x900}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8081}, 0x4004) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x3f412000) 1.038220004s ago: executing program 3 (id=1290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00640095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 937.233519ms ago: executing program 1 (id=1291): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 936.292828ms ago: executing program 4 (id=1292): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf0161797664", 0xaf}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f", 0xbe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef00000000020000", 0x3a}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76", 0xaa}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab1954", 0x3f}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@remote, 0x4e23, 0x2, 0x4e24, 0x1000, 0xa, 0x80, 0xc0, 0x33}, {0x4, 0x2, 0x400, 0x1, 0xfff, 0x3, 0x80000000, 0xffffffff}, {0x4, 0x7, 0xc, 0xff}, 0x539b13c6, 0x6e6bbc, 0x0, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x204d5, 0x32}, 0x2, @in6=@mcast1, 0x3505, 0x2, 0x2, 0x0, 0x0, 0x4, 0xfdcc}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xfffa, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x1, 0x80000001, 0x1c0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000051000000000000000800a0018010000756c6c2500000000002020206c1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000080085000000c800020095"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x80, &(0x7f0000000b80)=""/128, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) shutdown(r5, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@dellink={0x28, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x17001}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x20000400) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0x481}], 0x1, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000700)={@broadcast, @multicast2}, &(0x7f0000000800)=0xc) 931.17925ms ago: executing program 3 (id=1301): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="05008a0000003d1c0c27060008021100000100000a000600080211000001004d4b"], 0x48}, 0x1, 0x0, 0x0, 0x2000050}, 0x40) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x20000006}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x450a) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x98, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x10, 0xe4dc]}, @NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3, 0x1, 0xfc}}, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0xfd, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x4}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 849.495027ms ago: executing program 1 (id=1293): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0xc3ff}}], 0x7, 0x0, 0x0) 700.910747ms ago: executing program 1 (id=1294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000008000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)}, 0x10) socket(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x0) close(0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r3, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) 585.208118ms ago: executing program 1 (id=1295): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc11000012000102000000000000000000000000bf401db100"/56, @ANYRES32=r0, @ANYBLOB="000000007fffffff0000000000000000f504010007c01c0002"], 0x11fc}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004040) 509.421212ms ago: executing program 1 (id=1296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000000000a0000000000050005000000000005"], 0x70}, 0x1, 0x7}, 0x40000c0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 364.805858ms ago: executing program 1 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 0s ago: executing program 3 (id=1298): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b120bfa400000000000007040040f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): efaulting to 1000 [ 173.573347][ T5885] syz1: Port: 1 Link DOWN [ 173.688128][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.113103][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.250544][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.439611][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.759422][ T12] bridge_slave_1: left allmulticast mode [ 174.780308][ T12] bridge_slave_1: left promiscuous mode [ 174.794212][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.812804][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 174.831253][ T12] bridge_slave_0: left allmulticast mode [ 174.832020][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.844605][ T12] bridge_slave_0: left promiscuous mode [ 174.851889][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.852013][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.868714][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.880103][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.890629][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.898948][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 175.256324][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.267765][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.278641][ T12] bond0 (unregistering): Released all slaves [ 175.300617][ T8496] vlan3: entered promiscuous mode [ 175.305880][ T8496] batadv0: entered promiscuous mode [ 175.422518][ T8499] hsr0 speed is unknown, defaulting to 1000 [ 175.835098][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 175.850045][ T12] hsr_slave_0: left promiscuous mode [ 175.877773][ T12] hsr_slave_1: left promiscuous mode [ 175.883977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.918057][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.938485][ T8522] xt_hashlimit: size too large, truncated to 1048576 [ 175.948393][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.963494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.015004][ T12] veth1_macvtap: left promiscuous mode [ 176.041543][ T12] veth0_macvtap: left promiscuous mode [ 176.051757][ T12] veth1_vlan: left promiscuous mode [ 176.060496][ T12] veth0_vlan: left promiscuous mode [ 176.596995][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.640148][ T12] team0 (unregistering): Port device team_slave_0 removed [ 176.934141][ T5833] Bluetooth: hci1: command tx timeout [ 177.074554][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 177.131123][ T8547] vlan2: entered promiscuous mode [ 177.204779][ T8499] chnl_net:caif_netlink_parms(): no params data found [ 177.277618][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 177.466072][ T1113] wlan1: Selected IBSS BSSID 96:2a:8e:d9:aa:5d based on configured SSID [ 177.559083][ T8564] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 177.609524][ T8565] xt_hashlimit: size too large, truncated to 1048576 [ 178.244849][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.264228][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.288392][ T8499] bridge_slave_0: entered allmulticast mode [ 178.306670][ T8499] bridge_slave_0: entered promiscuous mode [ 178.327634][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.335103][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.345652][ T8499] bridge_slave_1: entered allmulticast mode [ 178.353803][ T8499] bridge_slave_1: entered promiscuous mode [ 178.530770][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.541655][ T8583] FAULT_INJECTION: forcing a failure. [ 178.541655][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 178.569045][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.578500][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.2.833 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 178.578528][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.578540][ T8583] Call Trace: [ 178.578548][ T8583] [ 178.578557][ T8583] dump_stack_lvl+0x189/0x250 [ 178.578596][ T8583] ? __pfx____ratelimit+0x10/0x10 [ 178.578623][ T8583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.578655][ T8583] ? __pfx__printk+0x10/0x10 [ 178.578685][ T8583] ? __pfx___might_resched+0x10/0x10 [ 178.578713][ T8583] ? fs_reclaim_acquire+0x7d/0x100 [ 178.578739][ T8583] should_fail_ex+0x414/0x560 [ 178.578772][ T8583] should_failslab+0xa8/0x100 [ 178.578787][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 178.578805][ T8583] __kmalloc_node_noprof+0xd1/0x4e0 [ 178.578835][ T8583] ? alloc_slab_obj_exts+0x39/0xa0 [ 178.578872][ T8583] alloc_slab_obj_exts+0x39/0xa0 [ 178.578906][ T8583] __memcg_slab_post_alloc_hook+0x36a/0x8c0 [ 178.578961][ T8583] kmem_cache_alloc_node_noprof+0x2bd/0x3c0 [ 178.578995][ T8583] ? __alloc_skb+0x112/0x2d0 [ 178.579037][ T8583] __alloc_skb+0x112/0x2d0 [ 178.579077][ T8583] alloc_skb_with_frags+0xca/0x890 [ 178.579106][ T8583] ? __pfx_process_measurement+0x10/0x10 [ 178.579149][ T8583] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 178.579188][ T8583] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 178.579237][ T8583] sock_alloc_send_pskb+0x857/0x990 [ 178.579292][ T8583] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 178.579322][ T8583] ? __pfx___scm_send+0x10/0x10 [ 178.579349][ T8583] ? __pfx___might_resched+0x10/0x10 [ 178.579379][ T8583] ? __lock_acquire+0xab9/0xd20 [ 178.579410][ T8583] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 178.579445][ T8583] unix_stream_sendmsg+0x4c2/0xc90 [ 178.579488][ T8583] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 178.579518][ T8583] ? aa_sock_msg_perm+0x94/0x160 [ 178.579562][ T8583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.579588][ T8583] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 178.579610][ T8583] __sock_sendmsg+0x219/0x270 [ 178.579644][ T8583] ____sys_sendmsg+0x505/0x830 [ 178.579673][ T8583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.579723][ T8583] ? import_iovec+0x74/0xa0 [ 178.579750][ T8583] ___sys_sendmsg+0x21f/0x2a0 [ 178.579785][ T8583] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.579853][ T8583] ? __fget_files+0x2a/0x420 [ 178.579885][ T8583] ? __fget_files+0x3a0/0x420 [ 178.579960][ T8583] __x64_sys_sendmsg+0x19b/0x260 [ 178.579987][ T8583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.580021][ T8583] ? __pfx_ksys_write+0x10/0x10 [ 178.580049][ T8583] ? rcu_is_watching+0x15/0xb0 [ 178.580088][ T8583] ? do_syscall_64+0xbe/0x3b0 [ 178.580123][ T8583] do_syscall_64+0xfa/0x3b0 [ 178.580150][ T8583] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.580177][ T8583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.580199][ T8583] ? clear_bhb_loop+0x60/0xb0 [ 178.580227][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.580250][ T8583] RIP: 0033:0x7fc8efb8e929 [ 178.580281][ T8583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.580300][ T8583] RSP: 002b:00007fc8f0a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.580325][ T8583] RAX: ffffffffffffffda RBX: 00007fc8efdb5fa0 RCX: 00007fc8efb8e929 [ 178.580342][ T8583] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 178.580357][ T8583] RBP: 00007fc8f0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 178.580372][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.580386][ T8583] R13: 0000000000000000 R14: 00007fc8efdb5fa0 R15: 00007ffebae02fe8 [ 178.580422][ T8583] [ 178.605554][ T5886] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 179.015352][ T5833] Bluetooth: hci1: command tx timeout [ 179.023283][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.837'. [ 179.131969][ T8499] team0: Port device team_slave_0 added [ 179.142374][ T8499] team0: Port device team_slave_1 added [ 179.165954][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 179.236401][ T8596] vlan2: entered promiscuous mode [ 179.309898][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.325313][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.358162][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.383544][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.391387][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.421970][ T8601] x_tables: ip_tables: udp match: only valid for protocol 17 [ 179.438266][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.659086][ T8499] hsr_slave_0: entered promiscuous mode [ 179.697010][ T8499] hsr_slave_1: entered promiscuous mode [ 179.707208][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.725118][ T8499] Cannot create hsr debugfs directory [ 179.837258][ T8607] hsr0 speed is unknown, defaulting to 1000 [ 179.933683][ T8610] xt_hashlimit: size too large, truncated to 1048576 [ 180.464050][ T8622] FAULT_INJECTION: forcing a failure. [ 180.464050][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 180.485579][ T8622] CPU: 0 UID: 0 PID: 8622 Comm: syz.4.845 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 180.485608][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.485621][ T8622] Call Trace: [ 180.485630][ T8622] [ 180.485638][ T8622] dump_stack_lvl+0x189/0x250 [ 180.485676][ T8622] ? __pfx____ratelimit+0x10/0x10 [ 180.485702][ T8622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.485735][ T8622] ? __pfx__printk+0x10/0x10 [ 180.485764][ T8622] ? __pfx___might_resched+0x10/0x10 [ 180.485800][ T8622] should_fail_ex+0x414/0x560 [ 180.485833][ T8622] should_failslab+0xa8/0x100 [ 180.485866][ T8622] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 180.485907][ T8622] ? __alloc_skb+0x112/0x2d0 [ 180.485940][ T8622] __alloc_skb+0x112/0x2d0 [ 180.485972][ T8622] netlink_sendmsg+0x5c6/0xb30 [ 180.486001][ T8622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.486023][ T8622] ? aa_sock_msg_perm+0x94/0x160 [ 180.486052][ T8622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.486077][ T8622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.486097][ T8622] __sock_sendmsg+0x219/0x270 [ 180.486127][ T8622] ____sys_sendmsg+0x505/0x830 [ 180.486154][ T8622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.486186][ T8622] ? import_iovec+0x74/0xa0 [ 180.486211][ T8622] ___sys_sendmsg+0x21f/0x2a0 [ 180.486235][ T8622] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.486298][ T8622] ? __fget_files+0x2a/0x420 [ 180.486328][ T8622] ? __fget_files+0x3a0/0x420 [ 180.486369][ T8622] __x64_sys_sendmsg+0x19b/0x260 [ 180.486393][ T8622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.486425][ T8622] ? __pfx_ksys_write+0x10/0x10 [ 180.486450][ T8622] ? rcu_is_watching+0x15/0xb0 [ 180.486486][ T8622] ? do_syscall_64+0xbe/0x3b0 [ 180.486521][ T8622] do_syscall_64+0xfa/0x3b0 [ 180.486546][ T8622] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.486571][ T8622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.486592][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 180.486618][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.486636][ T8622] RIP: 0033:0x7f0837f8e929 [ 180.486654][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.486671][ T8622] RSP: 002b:00007f0838e42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.486694][ T8622] RAX: ffffffffffffffda RBX: 00007f08381b5fa0 RCX: 00007f0837f8e929 [ 180.486709][ T8622] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 180.486721][ T8622] RBP: 00007f0838e42090 R08: 0000000000000000 R09: 0000000000000000 [ 180.486734][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.486746][ T8622] R13: 0000000000000000 R14: 00007f08381b5fa0 R15: 00007fff322cf4a8 [ 180.486780][ T8622] [ 181.023781][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 181.088239][ T5833] Bluetooth: hci1: command tx timeout [ 181.098335][ T8634] tun0: tun_chr_ioctl cmd 1074025681 [ 181.104663][ T8636] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 181.120241][ T8636] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 181.437688][ T8499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.463348][ T8499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.484032][ T8499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.508372][ T8499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.557988][ T8656] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 181.581096][ T8656] netlink: 224 bytes leftover after parsing attributes in process `syz.2.855'. [ 181.609306][ T8643] sctp: [Deprecated]: syz.1.852 (pid 8643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.609306][ T8643] Use struct sctp_sack_info instead [ 181.687855][ T8657] bridge0: entered allmulticast mode [ 181.730208][ T8657] pim6reg: entered allmulticast mode [ 181.774871][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.841706][ T8499] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.881543][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.888890][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.956482][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.963747][ T4058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.997989][ T8662] hsr0 speed is unknown, defaulting to 1000 [ 182.039318][ T8647] hsr0 speed is unknown, defaulting to 1000 [ 182.928199][ T8688] ipt_ECN: cannot use operation on non-tcp rule [ 182.934775][ T8688] ipt_ECN: cannot use operation on non-tcp rule [ 182.961325][ T8694] xt_ecn: cannot match TCP bits for non-tcp packets [ 182.970344][ T8695] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.127419][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.165428][ T5150] Bluetooth: hci1: command tx timeout [ 183.204743][ T8702] netlink: 'syz.3.867': attribute type 21 has an invalid length. [ 183.216220][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 183.279841][ T8702] netlink: 152 bytes leftover after parsing attributes in process `syz.3.867'. [ 183.290460][ T8708] netlink: zone id is out of range [ 183.328644][ T8708] netlink: zone id is out of range [ 183.352129][ T8708] netlink: zone id is out of range [ 183.357579][ T8708] netlink: zone id is out of range [ 183.377824][ T8499] veth0_vlan: entered promiscuous mode [ 183.387289][ T8708] netlink: zone id is out of range [ 183.393001][ T8708] netlink: zone id is out of range [ 183.414528][ T8499] veth1_vlan: entered promiscuous mode [ 183.419141][ T8708] netlink: zone id is out of range [ 183.455371][ T8708] netlink: zone id is out of range [ 183.460870][ T8708] netlink: zone id is out of range [ 183.470925][ T8708] netlink: zone id is out of range [ 183.494919][ T8718] x_tables: ip_tables: udp match: only valid for protocol 17 [ 183.542808][ T8499] veth0_macvtap: entered promiscuous mode [ 183.617938][ T8499] veth1_macvtap: entered promiscuous mode [ 183.841636][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.920420][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.954017][ T8499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.000261][ T8499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.029503][ T8499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.065450][ T8499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.237116][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.245005][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.349052][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.362143][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.653360][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.881'. [ 184.768980][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 184.845467][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.859248][ T8761] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 184.871355][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 184.873608][ T8761] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 184.896016][ T8761] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 184.904278][ T8761] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 184.948844][ T8761] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 184.960327][ T8761] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 184.969659][ T8761] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 184.979290][ T8761] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 184.995865][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.886'. [ 185.024104][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 185.034917][ T8760] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.044548][ T8760] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.054668][ T8760] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.064206][ T8760] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.084615][ T8760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.101253][ T8760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.111745][ T8760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.116441][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 185.129557][ T8760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.149847][ T8760] team0: Port device geneve0 added [ 185.245714][ T5150] Bluetooth: hci1: command 0x0411 tx timeout [ 185.619008][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.694592][ T36] wlan1: Selected IBSS BSSID 0e:cc:00:38:ba:0c based on configured SSID [ 185.780373][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.913669][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.016041][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.112956][ T1098] bridge_slave_1: left allmulticast mode [ 186.118734][ T1098] bridge_slave_1: left promiscuous mode [ 186.124516][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.136666][ T1098] bridge_slave_0: left allmulticast mode [ 186.144033][ T1098] bridge_slave_0: left promiscuous mode [ 186.149945][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.502160][ T8797] __nla_validate_parse: 1 callbacks suppressed [ 186.502179][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 186.568194][ T8801] validate_nla: 2 callbacks suppressed [ 186.568214][ T8801] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 186.712696][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.734368][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.750872][ T1098] bond0 (unregistering): Released all slaves [ 186.936133][ T8803] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 187.031797][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.041805][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.050348][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.059382][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.069196][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.116000][ T8814] hsr0 speed is unknown, defaulting to 1000 [ 187.727853][ T1098] hsr_slave_0: left promiscuous mode [ 187.735393][ T1098] hsr_slave_1: left promiscuous mode [ 187.747012][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.761716][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.771159][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.779218][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.811078][ T1098] veth1_macvtap: left promiscuous mode [ 187.818166][ T1098] veth0_macvtap: left promiscuous mode [ 187.829479][ T1098] veth1_vlan: left promiscuous mode [ 187.839454][ T1098] veth0_vlan: left promiscuous mode [ 188.498727][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 188.509254][ T8863] netlink: 'syz.2.916': attribute type 21 has an invalid length. [ 188.543472][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 188.584667][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 189.003350][ T36] wlan1: Selected IBSS BSSID 0e:cc:00:38:ba:0c based on configured SSID [ 189.015478][ T8863] netlink: 152 bytes leftover after parsing attributes in process `syz.2.916'. [ 189.033973][ T8814] chnl_net:caif_netlink_parms(): no params data found [ 189.099737][ T5833] Bluetooth: hci1: command tx timeout [ 189.256119][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 189.360671][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.373043][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.438400][ T8814] bridge_slave_0: entered allmulticast mode [ 189.467342][ T8814] bridge_slave_0: entered promiscuous mode [ 189.485652][ T8888] netlink: 244 bytes leftover after parsing attributes in process `syz.4.923'. [ 189.511849][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.535390][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.542726][ T8814] bridge_slave_1: entered allmulticast mode [ 189.559358][ T8814] bridge_slave_1: entered promiscuous mode [ 189.648294][ T8893] xt_hashlimit: size too large, truncated to 1048576 [ 189.693871][ T8814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.725111][ T8814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.732612][ T8897] x_tables: ip_tables: udp match: only valid for protocol 17 [ 189.967311][ T8814] team0: Port device team_slave_0 added [ 190.003504][ T8814] team0: Port device team_slave_1 added [ 190.230560][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.265789][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.349039][ T8814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.364996][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.372821][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.421506][ T8814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.612062][ T8814] hsr_slave_0: entered promiscuous mode [ 190.630935][ T8814] hsr_slave_1: entered promiscuous mode [ 190.671837][ T8814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.695495][ T8814] Cannot create hsr debugfs directory [ 190.966053][ T8938] net_ratelimit: 21 callbacks suppressed [ 190.966074][ T8938] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.165387][ T5833] Bluetooth: hci1: command tx timeout [ 191.538838][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 191.573476][ T8966] x_tables: ip_tables: udp match: only valid for protocol 17 [ 191.660883][ T1113] wlan1: Selected IBSS BSSID 0e:cc:00:38:ba:0c based on configured SSID [ 191.852455][ T8814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.901743][ T8814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.933683][ T8814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.949615][ T8814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.199506][ T8814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.218009][ T8982] x_tables: ip_tables: udp match: only valid for protocol 17 [ 192.248661][ T8814] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.262654][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.269941][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.384451][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.391726][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.415896][ T8986] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.972195][ T9000] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 193.248575][ T5833] Bluetooth: hci1: command tx timeout [ 193.320314][ T9000] team0: Port device team_slave_1 removed [ 193.540606][ T8814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.579914][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 193.748245][ T8814] veth0_vlan: entered promiscuous mode [ 193.788747][ T8814] veth1_vlan: entered promiscuous mode [ 193.877978][ T8814] veth0_macvtap: entered promiscuous mode [ 193.908023][ T8814] veth1_macvtap: entered promiscuous mode [ 193.949512][ T64] wlan1: Selected IBSS BSSID 96:2a:8e:d9:aa:5d based on configured SSID [ 193.954776][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.987253][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.004982][ T8814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.045468][ T8814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.054264][ T8814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.075307][ T8814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.237908][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.259282][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.343626][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.356308][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.445092][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 194.452772][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461131][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.727440][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.730778][ T9042] FAULT_INJECTION: forcing a failure. [ 194.730778][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 194.735361][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.773145][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.4.965 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 194.773178][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.773192][ T9042] Call Trace: [ 194.773200][ T9042] [ 194.773210][ T9042] dump_stack_lvl+0x189/0x250 [ 194.773248][ T9042] ? __pfx____ratelimit+0x10/0x10 [ 194.773272][ T9042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.773303][ T9042] ? __pfx__printk+0x10/0x10 [ 194.773334][ T9042] ? __pfx___might_resched+0x10/0x10 [ 194.773369][ T9042] should_fail_ex+0x414/0x560 [ 194.773402][ T9042] should_failslab+0xa8/0x100 [ 194.773435][ T9042] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.773465][ T9042] ? __alloc_skb+0x112/0x2d0 [ 194.773501][ T9042] __alloc_skb+0x112/0x2d0 [ 194.773536][ T9042] netlink_dump+0x22b/0xe20 [ 194.773574][ T9042] ? __pfx___mutex_lock+0x10/0x10 [ 194.773601][ T9042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.773629][ T9042] ? __pfx_netlink_dump+0x10/0x10 [ 194.773676][ T9042] ? genl_start+0x581/0x6c0 [ 194.773710][ T9042] __netlink_dump_start+0x5cb/0x7e0 [ 194.773750][ T9042] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 194.773780][ T9042] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 194.773804][ T9042] ? genl_get_cmd+0x496/0x910 [ 194.773834][ T9042] ? __pfx_genl_start+0x10/0x10 [ 194.773855][ T9042] ? __pfx_genl_dumpit+0x10/0x10 [ 194.773884][ T9042] ? __pfx_genl_done+0x10/0x10 [ 194.773926][ T9042] genl_rcv_msg+0x5da/0x790 [ 194.773959][ T9042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.773981][ T9042] ? ref_tracker_free+0x63a/0x7d0 [ 194.774007][ T9042] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 194.774027][ T9042] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 194.774047][ T9042] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 194.774071][ T9042] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.774111][ T9042] netlink_rcv_skb+0x205/0x470 [ 194.774145][ T9042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.774172][ T9042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.774224][ T9042] ? down_read+0x1ad/0x2e0 [ 194.774256][ T9042] genl_rcv+0x28/0x40 [ 194.774278][ T9042] netlink_unicast+0x758/0x8d0 [ 194.774319][ T9042] netlink_sendmsg+0x805/0xb30 [ 194.774349][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.774372][ T9042] ? aa_sock_msg_perm+0x94/0x160 [ 194.774401][ T9042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.774426][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.774447][ T9042] __sock_sendmsg+0x219/0x270 [ 194.774477][ T9042] ____sys_sendmsg+0x505/0x830 [ 194.774504][ T9042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.774535][ T9042] ? import_iovec+0x74/0xa0 [ 194.774560][ T9042] ___sys_sendmsg+0x21f/0x2a0 [ 194.774584][ T9042] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.774648][ T9042] ? __fget_files+0x2a/0x420 [ 194.774678][ T9042] ? __fget_files+0x3a0/0x420 [ 194.774722][ T9042] __x64_sys_sendmsg+0x19b/0x260 [ 194.774746][ T9042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.774780][ T9042] ? __pfx_ksys_write+0x10/0x10 [ 194.774805][ T9042] ? rcu_is_watching+0x15/0xb0 [ 194.774842][ T9042] ? do_syscall_64+0xbe/0x3b0 [ 194.774881][ T9042] do_syscall_64+0xfa/0x3b0 [ 194.774906][ T9042] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.774930][ T9042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.774951][ T9042] ? clear_bhb_loop+0x60/0xb0 [ 194.774977][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.774998][ T9042] RIP: 0033:0x7f0837f8e929 [ 194.775018][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.775036][ T9042] RSP: 002b:00007f0838e42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.775059][ T9042] RAX: ffffffffffffffda RBX: 00007f08381b5fa0 RCX: 00007f0837f8e929 [ 194.775074][ T9042] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 194.775087][ T9042] RBP: 00007f0838e42090 R08: 0000000000000000 R09: 0000000000000000 [ 194.775100][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.775112][ T9042] R13: 0000000000000000 R14: 00007f08381b5fa0 R15: 00007fff322cf4a8 [ 194.775147][ T9042] [ 195.269694][ T9045] netlink: 108 bytes leftover after parsing attributes in process `syz.1.966'. [ 195.293895][ T9049] netlink: ct family unspecified [ 195.299506][ T9049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.471790][ T9057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.970'. [ 195.594001][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 195.712654][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 195.909686][ T9065] netlink: 'syz.2.973': attribute type 39 has an invalid length. [ 195.968270][ T9067] openvswitch: netlink: Duplicate or invalid key (type 0). [ 196.016999][ T9067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.017431][ T1113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.658833][ T1113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.758524][ T1113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.839913][ T1113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.988362][ T1113] bridge_slave_1: left allmulticast mode [ 196.997075][ T1113] bridge_slave_1: left promiscuous mode [ 197.003248][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.024609][ T1113] bridge_slave_0: left allmulticast mode [ 197.056739][ T1113] bridge_slave_0: left promiscuous mode [ 197.062580][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.286168][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 197.453415][ T9088] netlink: 'syz.2.981': attribute type 21 has an invalid length. [ 197.529522][ T9089] netlink: zone id is out of range [ 197.540897][ T9089] netlink: zone id is out of range [ 197.553263][ T9089] netlink: zone id is out of range [ 197.566475][ T9089] netlink: zone id is out of range [ 197.577596][ T9089] netlink: zone id is out of range [ 197.589758][ T9089] netlink: zone id is out of range [ 197.608096][ T9089] netlink: zone id is out of range [ 197.629707][ T9089] netlink: zone id is out of range [ 197.650781][ T9089] netlink: zone id is out of range [ 197.676333][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.686312][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.701846][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.711777][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.727492][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.964556][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.981663][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.992280][ T1113] bond0 (unregistering): Released all slaves [ 198.034732][ T9088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.981'. [ 198.153782][ T9093] macvtap0: entered allmulticast mode [ 198.173138][ T9090] hsr0 speed is unknown, defaulting to 1000 [ 198.409331][ T9103] netlink: 'syz.4.986': attribute type 24 has an invalid length. [ 198.483286][ T9107] xt_bpf: check failed: parse error [ 198.522266][ T9110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 198.748436][ T9114] hsr0 speed is unknown, defaulting to 1000 [ 198.851696][ T1113] hsr_slave_0: left promiscuous mode [ 198.876157][ T1113] hsr_slave_1: left promiscuous mode [ 198.885794][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.905496][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.927372][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.945107][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.981490][ T9131] Cannot find add_set index 0 as target [ 199.001192][ T1113] veth1_macvtap: left promiscuous mode [ 199.021093][ T1113] veth0_macvtap: left promiscuous mode [ 199.038609][ T1113] veth1_vlan: left promiscuous mode [ 199.054669][ T1113] veth0_vlan: left promiscuous mode [ 199.080781][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 199.806055][ T5150] Bluetooth: hci1: command tx timeout [ 200.437940][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 200.477656][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 201.021120][ T9090] chnl_net:caif_netlink_parms(): no params data found [ 201.115653][ T9160] netlink: 'syz.1.1001': attribute type 24 has an invalid length. [ 201.244457][ T9169] netlink: 'syz.3.1002': attribute type 303 has an invalid length. [ 201.330734][ T9174] net_ratelimit: 4 callbacks suppressed [ 201.330754][ T9174] netlink: del zone limit has 4 unknown bytes [ 201.333856][ T9170] macsec1: entered promiscuous mode [ 201.386159][ T9170] dummy0: entered promiscuous mode [ 201.392209][ T9170] macsec1: entered allmulticast mode [ 201.427134][ T9170] dummy0: entered allmulticast mode [ 201.470624][ T9170] dummy0: left allmulticast mode [ 201.490648][ T9170] dummy0: left promiscuous mode [ 201.638991][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.648138][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.661168][ T9090] bridge_slave_0: entered allmulticast mode [ 201.671740][ T9090] bridge_slave_0: entered promiscuous mode [ 201.691743][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.704384][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.712012][ T9090] bridge_slave_1: entered allmulticast mode [ 201.721113][ T9090] bridge_slave_1: entered promiscuous mode [ 201.885429][ T5150] Bluetooth: hci1: command tx timeout [ 202.520957][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.554603][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.690729][ T9204] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 202.694411][ T9090] team0: Port device team_slave_0 added [ 202.727784][ T9090] team0: Port device team_slave_1 added [ 202.780245][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.787552][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.903055][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.917779][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.971048][ T9090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.997348][ T9204] bridge_slave_1: left allmulticast mode [ 203.003061][ T9204] bridge_slave_1: left promiscuous mode [ 203.021505][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.035538][ T9217] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.059314][ T9204] bridge_slave_0: left allmulticast mode [ 203.065035][ T9204] bridge_slave_0: left promiscuous mode [ 203.081294][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.132771][ T9204] bond0: (slave bridge0): Releasing backup interface [ 203.148068][ T9204] bridge0 (unregistering): left allmulticast mode [ 203.222946][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.230314][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.257317][ T9090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.343786][ T9090] hsr_slave_0: entered promiscuous mode [ 203.356203][ T9090] hsr_slave_1: entered promiscuous mode [ 203.381288][ T9090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.399517][ T9090] Cannot create hsr debugfs directory [ 203.939381][ T9253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.946731][ T9253] IPv6: NLM_F_CREATE should be set when creating new route [ 203.954020][ T9253] IPv6: NLM_F_CREATE should be set when creating new route [ 203.961340][ T9253] IPv6: NLM_F_CREATE should be set when creating new route [ 203.975984][ T5150] Bluetooth: hci1: command tx timeout [ 203.982469][ T9251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.088498][ T9090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.112331][ T9090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.132303][ T9090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.153330][ T9090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.273833][ T9261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 204.299811][ T9261] netlink: 'syz.4.1031': attribute type 1 has an invalid length. [ 204.317925][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.346669][ T9090] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.370833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.378100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.401824][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.409060][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.722469][ T9275] netlink: 'syz.3.1033': attribute type 39 has an invalid length. [ 204.751717][ T9275] FAULT_INJECTION: forcing a failure. [ 204.751717][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.790526][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.3.1033 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 204.790559][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.790573][ T9275] Call Trace: [ 204.790581][ T9275] [ 204.790591][ T9275] dump_stack_lvl+0x189/0x250 [ 204.790630][ T9275] ? __pfx____ratelimit+0x10/0x10 [ 204.790658][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.790708][ T9275] ? __pfx__printk+0x10/0x10 [ 204.790751][ T9275] should_fail_ex+0x414/0x560 [ 204.790785][ T9275] _copy_to_user+0x31/0xb0 [ 204.790810][ T9275] simple_read_from_buffer+0xe1/0x170 [ 204.790846][ T9275] proc_fail_nth_read+0x1df/0x250 [ 204.790872][ T9275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.790898][ T9275] ? rw_verify_area+0x258/0x650 [ 204.790924][ T9275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.790947][ T9275] vfs_read+0x200/0x980 [ 204.790982][ T9275] ? __pfx___mutex_lock+0x10/0x10 [ 204.791011][ T9275] ? __pfx_vfs_read+0x10/0x10 [ 204.791040][ T9275] ? __fget_files+0x2a/0x420 [ 204.791077][ T9275] ? __fget_files+0x3a0/0x420 [ 204.791108][ T9275] ? __fget_files+0x2a/0x420 [ 204.791150][ T9275] ksys_read+0x145/0x250 [ 204.791181][ T9275] ? __pfx_ksys_read+0x10/0x10 [ 204.791206][ T9275] ? rcu_is_watching+0x15/0xb0 [ 204.791244][ T9275] ? do_syscall_64+0xbe/0x3b0 [ 204.791275][ T9275] do_syscall_64+0xfa/0x3b0 [ 204.791301][ T9275] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.791327][ T9275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.791349][ T9275] ? clear_bhb_loop+0x60/0xb0 [ 204.791376][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.791398][ T9275] RIP: 0033:0x7f560438d33c [ 204.791417][ T9275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.791436][ T9275] RSP: 002b:00007f56021f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.791458][ T9275] RAX: ffffffffffffffda RBX: 00007f56045b5fa0 RCX: 00007f560438d33c [ 204.791473][ T9275] RDX: 000000000000000f RSI: 00007f56021f60a0 RDI: 000000000000000a [ 204.791486][ T9275] RBP: 00007f56021f6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.791499][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.791517][ T9275] R13: 0000000000000000 R14: 00007f56045b5fa0 R15: 00007ffcd677c508 [ 204.791553][ T9275] [ 205.446142][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.582433][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'. [ 205.642380][ T9307] netlink: 'syz.4.1038': attribute type 39 has an invalid length. [ 205.681987][ T9306] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 205.704188][ T9090] veth0_vlan: entered promiscuous mode [ 205.794261][ T9090] veth1_vlan: entered promiscuous mode [ 205.897218][ T9090] veth0_macvtap: entered promiscuous mode [ 205.912666][ T9090] veth1_macvtap: entered promiscuous mode [ 205.959715][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.990716][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.029391][ T9090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.055497][ T5150] Bluetooth: hci1: command tx timeout [ 206.075980][ T9090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.084756][ T9090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.101789][ T9090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.257883][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.281102][ T9327] netlink: 'syz.2.1046': attribute type 11 has an invalid length. [ 206.297297][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.344021][ T9325] wireguard0: entered promiscuous mode [ 206.361715][ T9325] wireguard0: entered allmulticast mode [ 206.619693][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.639103][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.700685][ T9342] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1049'. [ 207.164649][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 207.520713][ T9382] netlink: 'syz.4.1062': attribute type 10 has an invalid length. [ 207.529860][ T9382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1062'. [ 207.591370][ T9384] netlink: 'syz.2.1063': attribute type 24 has an invalid length. [ 207.749682][ T9392] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.865956][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.907554][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 208.160333][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.441408][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.523492][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.614082][ T36] bridge_slave_1: left allmulticast mode [ 208.620005][ T36] bridge_slave_1: left promiscuous mode [ 208.625905][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.636612][ T36] bridge_slave_0: left allmulticast mode [ 208.642304][ T36] bridge_slave_0: left promiscuous mode [ 208.649203][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.389389][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.405586][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.420558][ T36] bond0 (unregistering): Released all slaves [ 209.453124][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.463082][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.475600][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.477698][ T9405] netlink: 'syz.2.1069': attribute type 2 has an invalid length. [ 209.485259][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.500290][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.644696][ T9431] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 209.722560][ T9424] hsr0 speed is unknown, defaulting to 1000 [ 210.036560][ T36] hsr_slave_0: left promiscuous mode [ 210.063174][ T36] hsr_slave_1: left promiscuous mode [ 210.074376][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.085633][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 210.095681][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.120228][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.136198][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.258327][ T36] veth1_macvtap: left promiscuous mode [ 210.263939][ T36] veth0_macvtap: left promiscuous mode [ 210.293620][ T36] veth1_vlan: left promiscuous mode [ 210.303716][ T36] veth0_vlan: left promiscuous mode [ 210.389145][ T9451] x_tables: ip_tables: udp match: only valid for protocol 17 [ 210.546504][ T9454] FAULT_INJECTION: forcing a failure. [ 210.546504][ T9454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.585672][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.4.1084 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 210.585701][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.585713][ T9454] Call Trace: [ 210.585720][ T9454] [ 210.585729][ T9454] dump_stack_lvl+0x189/0x250 [ 210.585763][ T9454] ? __pfx____ratelimit+0x10/0x10 [ 210.585787][ T9454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.585816][ T9454] ? __pfx__printk+0x10/0x10 [ 210.585836][ T9454] ? __might_fault+0xb0/0x130 [ 210.585874][ T9454] should_fail_ex+0x414/0x560 [ 210.585904][ T9454] _copy_to_iter+0x575/0x16f0 [ 210.585944][ T9454] ? __pfx__copy_to_iter+0x10/0x10 [ 210.585969][ T9454] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 210.585996][ T9454] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 210.586024][ T9454] __skb_datagram_iter+0xf8/0x990 [ 210.586046][ T9454] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 210.586077][ T9454] skb_copy_datagram_iter+0xc5/0x230 [ 210.586102][ T9454] netlink_recvmsg+0x2ab/0xa30 [ 210.586132][ T9454] ? __pfx_netlink_recvmsg+0x10/0x10 [ 210.586155][ T9454] ? __lock_acquire+0xab9/0xd20 [ 210.586177][ T9454] ? aa_sock_msg_perm+0x94/0x160 [ 210.586204][ T9454] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 210.586226][ T9454] ? security_socket_recvmsg+0x7e/0x2e0 [ 210.586255][ T9454] ? __pfx_netlink_recvmsg+0x10/0x10 [ 210.586274][ T9454] sock_recvmsg+0x229/0x270 [ 210.586304][ T9454] ____sys_recvmsg+0x1c9/0x460 [ 210.586333][ T9454] ? __pfx_____sys_recvmsg+0x10/0x10 [ 210.586370][ T9454] ? import_iovec+0x74/0xa0 [ 210.586392][ T9454] ___sys_recvmsg+0x1b5/0x510 [ 210.586418][ T9454] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.586465][ T9454] ? __fget_files+0x3a0/0x420 [ 210.586506][ T9454] do_recvmmsg+0x307/0x770 [ 210.586542][ T9454] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.586576][ T9454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.586621][ T9454] __x64_sys_recvmmsg+0x190/0x240 [ 210.586645][ T9454] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 210.586663][ T9454] ? rcu_is_watching+0x15/0xb0 [ 210.586696][ T9454] ? do_syscall_64+0xbe/0x3b0 [ 210.586725][ T9454] do_syscall_64+0xfa/0x3b0 [ 210.586748][ T9454] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.586769][ T9454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.586788][ T9454] ? clear_bhb_loop+0x60/0xb0 [ 210.586812][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.586831][ T9454] RIP: 0033:0x7f0837f8e929 [ 210.586848][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.586865][ T9454] RSP: 002b:00007f0838e42038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.586885][ T9454] RAX: ffffffffffffffda RBX: 00007f08381b5fa0 RCX: 00007f0837f8e929 [ 210.586899][ T9454] RDX: 0000000000000007 RSI: 0000200000001b40 RDI: 0000000000000009 [ 210.586911][ T9454] RBP: 00007f0838e42090 R08: 0000000000000000 R09: 0000000000000000 [ 210.586922][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.586934][ T9454] R13: 0000000000000000 R14: 00007f08381b5fa0 R15: 00007fff322cf4a8 [ 210.586965][ T9454] [ 211.282623][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 211.572812][ T36] team0 (unregistering): Port device team_slave_1 removed [ 211.575418][ T5833] Bluetooth: hci1: command tx timeout [ 211.622708][ T36] team0 (unregistering): Port device team_slave_0 removed [ 211.657144][ T9463] Cannot find del_set index 1 as target [ 212.039555][ T9441] vlan3: entered promiscuous mode [ 212.531975][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 212.661185][ T9476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1093'. [ 212.678750][ T9476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1093'. [ 212.928042][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.937165][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.945028][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.953268][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.961147][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.008837][ T9492] netlink: 'syz.3.1096': attribute type 25 has an invalid length. [ 213.018975][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.032218][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.040150][ T9424] bridge_slave_0: entered allmulticast mode [ 213.051583][ T9424] bridge_slave_0: entered promiscuous mode [ 213.073289][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.097136][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.116975][ T9424] bridge_slave_1: entered allmulticast mode [ 213.136323][ T9424] bridge_slave_1: entered promiscuous mode [ 213.154629][ T9489] hsr0 speed is unknown, defaulting to 1000 [ 213.220561][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 213.222972][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.324546][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.326625][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 213.385382][ T9507] vlan2: entered promiscuous mode [ 213.656009][ T5833] Bluetooth: hci1: command tx timeout [ 213.761758][ T9424] team0: Port device team_slave_0 added [ 213.794499][ T9424] team0: Port device team_slave_1 added [ 214.048378][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.056544][ T9514] netlink: 'syz.4.1105': attribute type 4 has an invalid length. [ 214.064501][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.133714][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.194940][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.204791][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.236145][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.240056][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1106'. [ 214.263026][ T9519] netlink: 'syz.4.1106': attribute type 39 has an invalid length. [ 214.336967][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 214.382478][ T9424] hsr_slave_0: entered promiscuous mode [ 214.391621][ T9424] hsr_slave_1: entered promiscuous mode [ 214.401633][ T9424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.413095][ T9424] Cannot create hsr debugfs directory [ 214.434124][ T9512] hsr0 speed is unknown, defaulting to 1000 [ 214.639818][ T9533] netlink: 'syz.3.1110': attribute type 25 has an invalid length. [ 214.808880][ T9542] Bluetooth: MGMT ver 1.23 [ 214.820760][ T9542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1112'. [ 214.930405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.992252][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 215.019148][ T5150] Bluetooth: hci3: command tx timeout [ 215.024796][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 215.380929][ T9556] syzkaller0: entered promiscuous mode [ 215.386533][ T9556] syzkaller0: entered allmulticast mode [ 215.735822][ T5150] Bluetooth: hci1: command tx timeout [ 216.818434][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.825943][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.833209][ T9489] bridge_slave_0: entered allmulticast mode [ 216.840620][ T9489] bridge_slave_0: entered promiscuous mode [ 216.851779][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.865164][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.872838][ T9489] bridge_slave_1: entered allmulticast mode [ 216.883250][ T9489] bridge_slave_1: entered promiscuous mode [ 216.995450][ T9571] netlink: 'syz.4.1122': attribute type 25 has an invalid length. [ 217.005400][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 217.022947][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.043986][ T9575] FAULT_INJECTION: forcing a failure. [ 217.043986][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.063674][ T9575] CPU: 0 UID: 0 PID: 9575 Comm: syz.3.1123 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 217.063707][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.063720][ T9575] Call Trace: [ 217.063729][ T9575] [ 217.063738][ T9575] dump_stack_lvl+0x189/0x250 [ 217.063777][ T9575] ? __pfx____ratelimit+0x10/0x10 [ 217.063804][ T9575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.063837][ T9575] ? __pfx__printk+0x10/0x10 [ 217.063861][ T9575] ? __might_fault+0xb0/0x130 [ 217.063905][ T9575] should_fail_ex+0x414/0x560 [ 217.063939][ T9575] _copy_from_user+0x2d/0xb0 [ 217.063962][ T9575] ___sys_recvmsg+0x12e/0x510 [ 217.063992][ T9575] ? __pfx____sys_recvmsg+0x10/0x10 [ 217.064052][ T9575] ? __might_fault+0xb0/0x130 [ 217.064086][ T9575] do_recvmmsg+0x307/0x770 [ 217.064120][ T9575] ? __pfx_do_recvmmsg+0x10/0x10 [ 217.064157][ T9575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.064207][ T9575] __x64_sys_recvmmsg+0x190/0x240 [ 217.064233][ T9575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 217.064254][ T9575] ? rcu_is_watching+0x15/0xb0 [ 217.064291][ T9575] ? do_syscall_64+0xbe/0x3b0 [ 217.064323][ T9575] do_syscall_64+0xfa/0x3b0 [ 217.064348][ T9575] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.064373][ T9575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.064395][ T9575] ? clear_bhb_loop+0x60/0xb0 [ 217.064434][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.064454][ T9575] RIP: 0033:0x7f560438e929 [ 217.064472][ T9575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.064490][ T9575] RSP: 002b:00007f56021f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 217.064513][ T9575] RAX: ffffffffffffffda RBX: 00007f56045b5fa0 RCX: 00007f560438e929 [ 217.064528][ T9575] RDX: 0000000000000007 RSI: 0000200000001b40 RDI: 0000000000000009 [ 217.064541][ T9575] RBP: 00007f56021f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.064553][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.064565][ T9575] R13: 0000000000000000 R14: 00007f56045b5fa0 R15: 00007ffcd677c508 [ 217.064599][ T9575] [ 217.089544][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.135440][ T5833] Bluetooth: hci3: command tx timeout [ 217.363332][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 217.427382][ T9489] team0: Port device team_slave_0 added [ 217.452218][ T9489] team0: Port device team_slave_1 added [ 217.509124][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 217.518481][ T9587] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 217.555937][ T9587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.587531][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.605333][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.654680][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.676895][ T9424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.716461][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.737667][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.804356][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.815380][ T5833] Bluetooth: hci1: command tx timeout [ 217.826461][ T9424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.874435][ T9424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.966671][ T9424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.008542][ T9489] hsr_slave_0: entered promiscuous mode [ 218.023603][ T9489] hsr_slave_1: entered promiscuous mode [ 218.031611][ T9489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.044667][ T9489] Cannot create hsr debugfs directory [ 218.159819][ T9598] hsr0 speed is unknown, defaulting to 1000 [ 218.170363][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1134'. [ 218.191239][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 218.235563][ T9606] netlink: 'syz.4.1134': attribute type 5 has an invalid length. [ 218.478542][ T13] wlan1: Selected IBSS BSSID 96:2a:8e:d9:aa:5d based on configured SSID [ 218.557646][ T9600] netlink: 'syz.1.1132': attribute type 39 has an invalid length. [ 218.697499][ T9489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.922332][ T9489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.049965][ T9489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.127952][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.177325][ T9489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.284662][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.330775][ T5833] Bluetooth: hci3: command tx timeout [ 219.360257][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.367479][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.436125][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.443398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.674631][ T9489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.738456][ T9489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.778295][ T9489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.796914][ T9634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1144'. [ 219.801940][ T9489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.837638][ T9637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.999852][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 220.266605][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.372916][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.420301][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.427580][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.452174][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.485496][ T1098] wlan1: Selected IBSS BSSID 96:2a:8e:d9:aa:5d based on configured SSID [ 220.544083][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.551311][ T4058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.746625][ T9489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.768523][ T9424] veth0_vlan: entered promiscuous mode [ 220.819161][ T9424] veth1_vlan: entered promiscuous mode [ 220.912268][ T9424] veth0_macvtap: entered promiscuous mode [ 220.937029][ T9668] x_tables: ip_tables: udp match: only valid for protocol 17 [ 220.949719][ T9424] veth1_macvtap: entered promiscuous mode [ 221.004854][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.072565][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.128871][ T9424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.165273][ T9424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.184329][ T9424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.213800][ T9424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.405688][ T5833] Bluetooth: hci3: command tx timeout [ 221.615823][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.624119][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.672313][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 221.703603][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.772646][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.803708][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.928012][ T9489] veth0_vlan: entered promiscuous mode [ 221.961535][ T9489] veth1_vlan: entered promiscuous mode [ 222.084302][ T9489] veth0_macvtap: entered promiscuous mode [ 222.201234][ T9489] veth1_macvtap: entered promiscuous mode [ 222.260136][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.273219][ T9688] xt_CT: No such helper "pptp" [ 222.284697][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.331501][ T9489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.353994][ T9489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.376230][ T9489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.394545][ T9695] netlink: 'syz.1.1158': attribute type 25 has an invalid length. [ 222.415435][ T9489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.563241][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.699655][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.848765][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.881123][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.911214][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.958774][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.014067][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.029625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.220636][ T36] bridge_slave_1: left allmulticast mode [ 223.226523][ T36] bridge_slave_1: left promiscuous mode [ 223.232294][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.242490][ T36] bridge_slave_0: left allmulticast mode [ 223.249121][ T36] bridge_slave_0: left promiscuous mode [ 223.254853][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.639285][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.718958][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.754963][ T36] bond0 (unregistering): Released all slaves [ 223.781320][ T9703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.988350][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1163'. [ 224.442288][ T9716] hsr0 speed is unknown, defaulting to 1000 [ 224.484612][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.494477][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.503716][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.511459][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.517397][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.531393][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.550626][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.568353][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.587593][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.609477][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.637673][ T36] hsr_slave_0: left promiscuous mode [ 224.649717][ T36] hsr_slave_1: left promiscuous mode [ 224.656035][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.663528][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.676696][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.685876][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.732982][ T36] veth1_macvtap: left promiscuous mode [ 224.768189][ T36] veth0_macvtap: left promiscuous mode [ 224.773929][ T36] veth1_vlan: left promiscuous mode [ 224.803859][ T36] veth0_vlan: left promiscuous mode [ 224.867805][ T9736] netlink: 'syz.3.1170': attribute type 25 has an invalid length. [ 225.196027][ T9741] openvswitch: netlink: Message has 24 unknown bytes. [ 225.203102][ T9741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.709272][ T36] team0 (unregistering): Port device team_slave_1 removed [ 225.750921][ T36] team0 (unregistering): Port device team_slave_0 removed [ 226.167108][ T9737] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 226.383356][ T9725] hsr0 speed is unknown, defaulting to 1000 [ 226.421085][ T9727] hsr0 speed is unknown, defaulting to 1000 [ 226.606472][ T5847] Bluetooth: hci1: command tx timeout [ 226.647294][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 226.693854][ T9773] netlink: 'syz.1.1182': attribute type 25 has an invalid length. [ 226.699598][ T5847] Bluetooth: hci3: command tx timeout [ 226.890762][ T9777] syzkaller1: entered promiscuous mode [ 226.906445][ T9777] syzkaller1: entered allmulticast mode [ 227.042500][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.260774][ T9797] xt_hashlimit: size too large, truncated to 1048576 [ 227.263347][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.284251][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 227.333797][ T9795] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.447141][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.501759][ T9725] chnl_net:caif_netlink_parms(): no params data found [ 227.711150][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.886887][ T9819] netlink: 'syz.3.1193': attribute type 25 has an invalid length. [ 228.011339][ T9824] FAULT_INJECTION: forcing a failure. [ 228.011339][ T9824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.023042][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.026989][ T9824] CPU: 1 UID: 0 PID: 9824 Comm: syz.1.1196 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 228.027023][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.027037][ T9824] Call Trace: [ 228.027047][ T9824] [ 228.027058][ T9824] dump_stack_lvl+0x189/0x250 [ 228.027103][ T9824] ? __pfx____ratelimit+0x10/0x10 [ 228.027133][ T9824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.027170][ T9824] ? __pfx__printk+0x10/0x10 [ 228.027196][ T9824] ? __might_fault+0xb0/0x130 [ 228.027245][ T9824] should_fail_ex+0x414/0x560 [ 228.027284][ T9824] _copy_from_user+0x2d/0xb0 [ 228.027311][ T9824] ___sys_recvmsg+0x12e/0x510 [ 228.027346][ T9824] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.027411][ T9824] ? __might_fault+0xb0/0x130 [ 228.027450][ T9824] do_recvmmsg+0x307/0x770 [ 228.027486][ T9824] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.027525][ T9824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.027594][ T9824] __x64_sys_recvmmsg+0x190/0x240 [ 228.027622][ T9824] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 228.027651][ T9824] ? rcu_is_watching+0x15/0xb0 [ 228.027692][ T9824] ? do_syscall_64+0xbe/0x3b0 [ 228.027727][ T9824] do_syscall_64+0xfa/0x3b0 [ 228.027755][ T9824] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.027782][ T9824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.027806][ T9824] ? clear_bhb_loop+0x60/0xb0 [ 228.027835][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.027858][ T9824] RIP: 0033:0x7fc5b978e929 [ 228.027879][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.027900][ T9824] RSP: 002b:00007fc5ba689038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 228.027925][ T9824] RAX: ffffffffffffffda RBX: 00007fc5b99b5fa0 RCX: 00007fc5b978e929 [ 228.027941][ T9824] RDX: 0000000000000007 RSI: 0000200000001b40 RDI: 0000000000000009 [ 228.027957][ T9824] RBP: 00007fc5ba689090 R08: 0000000000000000 R09: 0000000000000000 [ 228.027970][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.027985][ T9824] R13: 0000000000000000 R14: 00007fc5b99b5fa0 R15: 00007fff8a933ca8 [ 228.028040][ T9824] [ 228.273050][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.281359][ T9727] bridge_slave_0: entered allmulticast mode [ 228.290509][ T9727] bridge_slave_0: entered promiscuous mode [ 228.344989][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.355976][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 228.374335][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.382506][ T9727] bridge_slave_1: entered allmulticast mode [ 228.396429][ T9727] bridge_slave_1: entered promiscuous mode [ 228.481648][ T9839] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 228.494011][ T9839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.562363][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.584084][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.597005][ T9725] bridge_slave_0: entered allmulticast mode [ 228.605159][ T9725] bridge_slave_0: entered promiscuous mode [ 228.621355][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.631715][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.642728][ T9725] bridge_slave_1: entered allmulticast mode [ 228.653913][ T9725] bridge_slave_1: entered promiscuous mode [ 228.674020][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.695435][ T5847] Bluetooth: hci1: command tx timeout [ 228.732377][ T9849] xt_hashlimit: size too large, truncated to 1048576 [ 228.746455][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.775800][ T5847] Bluetooth: hci3: command tx timeout [ 228.807430][ T36] bridge_slave_1: left allmulticast mode [ 228.813155][ T36] bridge_slave_1: left promiscuous mode [ 228.818179][ T9847] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.825510][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.854825][ T36] bridge_slave_0: left allmulticast mode [ 228.867436][ T36] bridge_slave_0: left promiscuous mode [ 228.873997][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.252978][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.341377][ T9860] netlink: 'syz.4.1208': attribute type 25 has an invalid length. [ 229.521013][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.534122][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.549911][ T36] bond0 (unregistering): Released all slaves [ 229.572711][ T9725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.668490][ T9727] team0: Port device team_slave_0 added [ 229.729448][ T9725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.774094][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'. [ 229.833874][ T9727] team0: Port device team_slave_1 added [ 230.008136][ T9873] vlan3: entered promiscuous mode [ 230.052543][ T9725] team0: Port device team_slave_0 added [ 230.074131][ T9725] team0: Port device team_slave_1 added [ 230.185600][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.197100][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.233378][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.308820][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.365398][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.435267][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.485628][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.492628][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.534414][ T9725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.570662][ T36] hsr_slave_0: left promiscuous mode [ 230.589239][ T36] hsr_slave_1: left promiscuous mode [ 230.596725][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.604166][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.618837][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.635444][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.680545][ T36] veth1_macvtap: left promiscuous mode [ 230.688252][ T36] veth0_macvtap: left promiscuous mode [ 230.694074][ T36] veth1_vlan: left promiscuous mode [ 230.704544][ T36] veth0_vlan: left promiscuous mode [ 230.726186][ T9885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1216'. [ 230.775999][ T5847] Bluetooth: hci1: command tx timeout [ 230.845575][ T5847] Bluetooth: hci3: command tx timeout [ 230.853836][ T9888] xt_hashlimit: size too large, truncated to 1048576 [ 231.412716][ T36] team0 (unregistering): Port device team_slave_1 removed [ 231.456435][ T36] team0 (unregistering): Port device team_slave_0 removed [ 231.828000][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.835011][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.861185][ T9725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.010113][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 232.093569][ T9725] hsr_slave_0: entered promiscuous mode [ 232.101831][ T9725] hsr_slave_1: entered promiscuous mode [ 232.111134][ T9725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.123028][ T9725] Cannot create hsr debugfs directory [ 232.139398][ T9900] netlink: 'syz.3.1220': attribute type 25 has an invalid length. [ 232.168340][ T9727] hsr_slave_0: entered promiscuous mode [ 232.187769][ T9727] hsr_slave_1: entered promiscuous mode [ 232.204951][ T9727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.225699][ T9727] Cannot create hsr debugfs directory [ 232.845384][ T5847] Bluetooth: hci1: command tx timeout [ 232.925441][ T5847] Bluetooth: hci3: command tx timeout [ 233.158380][ T9926] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.330617][ T9929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.343371][ T9929] bridge0: port 3(bond1) entered blocking state [ 233.351072][ T9929] bridge0: port 3(bond1) entered disabled state [ 233.357888][ T9929] bond1: entered allmulticast mode [ 233.365929][ T9929] bond1: entered promiscuous mode [ 233.651193][ T9725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.692031][ T9725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.708818][ T9725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.747203][ T9725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.801989][ T9941] x_tables: ip_tables: udp match: only valid for protocol 17 [ 233.822183][ T9727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.849988][ T9727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.868619][ T9727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.904227][ T9727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.977244][ T9943] FAULT_INJECTION: forcing a failure. [ 233.977244][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.025527][ T9943] CPU: 1 UID: 0 PID: 9943 Comm: syz.3.1232 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 234.025558][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.025572][ T9943] Call Trace: [ 234.025580][ T9943] [ 234.025590][ T9943] dump_stack_lvl+0x189/0x250 [ 234.025627][ T9943] ? __pfx____ratelimit+0x10/0x10 [ 234.025654][ T9943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.025686][ T9943] ? __pfx__printk+0x10/0x10 [ 234.025713][ T9943] ? __might_fault+0xb0/0x130 [ 234.025756][ T9943] should_fail_ex+0x414/0x560 [ 234.025789][ T9943] _copy_from_user+0x2d/0xb0 [ 234.025812][ T9943] ___sys_recvmsg+0x12e/0x510 [ 234.025841][ T9943] ? __pfx____sys_recvmsg+0x10/0x10 [ 234.025899][ T9943] ? __might_fault+0xb0/0x130 [ 234.025932][ T9943] do_recvmmsg+0x307/0x770 [ 234.025963][ T9943] ? __pfx_do_recvmmsg+0x10/0x10 [ 234.026000][ T9943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.026047][ T9943] __x64_sys_recvmmsg+0x190/0x240 [ 234.026073][ T9943] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 234.026093][ T9943] ? rcu_is_watching+0x15/0xb0 [ 234.026138][ T9943] ? do_syscall_64+0xbe/0x3b0 [ 234.026169][ T9943] do_syscall_64+0xfa/0x3b0 [ 234.026193][ T9943] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.026217][ T9943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.026238][ T9943] ? clear_bhb_loop+0x60/0xb0 [ 234.026263][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.026284][ T9943] RIP: 0033:0x7f560438e929 [ 234.026303][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.026321][ T9943] RSP: 002b:00007f56021f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 234.026343][ T9943] RAX: ffffffffffffffda RBX: 00007f56045b5fa0 RCX: 00007f560438e929 [ 234.026358][ T9943] RDX: 0000000000000007 RSI: 0000200000001b40 RDI: 0000000000000009 [ 234.026371][ T9943] RBP: 00007f56021f6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.026383][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.026395][ T9943] R13: 0000000000000000 R14: 00007f56045b5fa0 R15: 00007ffcd677c508 [ 234.026428][ T9943] [ 234.202950][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.316983][ T9725] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.343196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.350460][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.385239][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.392468][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.490520][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.504114][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 234.538916][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.566776][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1235'. [ 234.639519][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.646775][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.674357][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.681877][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.816752][ T9727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.859368][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 235.179434][ T9971] netlink: 'syz.4.1241': attribute type 21 has an invalid length. [ 235.209154][ T9971] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1241'. [ 235.245092][ T9971] netlink: zone id is out of range [ 235.261482][ T9725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.268489][ T9971] netlink: zone id is out of range [ 235.268563][ T9971] netlink: zone id is out of range [ 235.268627][ T9971] netlink: zone id is out of range [ 235.268637][ T9971] netlink: zone id is out of range [ 235.268647][ T9971] netlink: zone id is out of range [ 235.268658][ T9971] netlink: zone id is out of range [ 235.268668][ T9971] netlink: zone id is out of range [ 235.268730][ T9971] netlink: zone id is out of range [ 235.482827][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 235.511377][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 235.724855][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.840757][ T9725] veth0_vlan: entered promiscuous mode [ 235.968019][ T9725] veth1_vlan: entered promiscuous mode [ 236.009037][ T9727] veth0_vlan: entered promiscuous mode [ 236.055150][ T9727] veth1_vlan: entered promiscuous mode [ 236.143639][ T9725] veth0_macvtap: entered promiscuous mode [ 236.176635][ T9725] veth1_macvtap: entered promiscuous mode [ 236.266048][ T9727] veth0_macvtap: entered promiscuous mode [ 236.298829][ T9727] veth1_macvtap: entered promiscuous mode [ 236.333328][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.402718][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 236.418431][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.450933][ T9725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.470259][ T9725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.485064][ T9725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.503148][ T9725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.540469][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.559244][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.584978][ T9727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.600334][ T9727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.615316][ T9727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.624925][ T9727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.711458][T10002] bond2 (unregistering): Released all slaves [ 236.934572][T10010] netlink: 'syz.3.1255': attribute type 21 has an invalid length. [ 236.970026][T10010] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1255'. [ 237.029690][ T4058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.048727][ T4058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.066983][T10014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1256'. [ 237.125923][T10017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1256'. [ 237.150192][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.165465][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.270633][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.295165][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.329031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.351140][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.789003][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.977306][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.100841][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.268601][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.683387][ T12] bridge_slave_1: left allmulticast mode [ 238.705569][ T12] bridge_slave_1: left promiscuous mode [ 238.711436][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.739482][ T12] bridge_slave_0: left allmulticast mode [ 238.749473][ T12] bridge_slave_0: left promiscuous mode [ 238.765498][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.808795][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.822944][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.831513][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.840226][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.855358][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.171223][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.184506][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.195389][ T12] bond0 (unregistering): Released all slaves [ 239.232170][T10040] hsr0 speed is unknown, defaulting to 1000 [ 239.485707][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'. [ 239.548486][ T12] hsr_slave_0: left promiscuous mode [ 239.587213][ T12] hsr_slave_1: left promiscuous mode [ 239.608368][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.644572][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.689743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.705685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.768591][ T12] veth1_macvtap: left promiscuous mode [ 239.781198][ T12] veth0_macvtap: left promiscuous mode [ 239.792967][ T12] veth1_vlan: left promiscuous mode [ 239.806699][ T12] veth0_vlan: left promiscuous mode [ 240.076411][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.088889][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.097343][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.109562][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.128287][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.449218][ T12] team0 (unregistering): Port device team_slave_1 removed [ 240.491996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 240.906830][T10040] chnl_net:caif_netlink_parms(): no params data found [ 240.935429][ T5833] Bluetooth: hci1: command tx timeout [ 241.062561][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 241.082786][T10066] hsr0 speed is unknown, defaulting to 1000 [ 241.141785][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 241.153251][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 241.168525][T10074] netlink: 'syz.3.1273': attribute type 11 has an invalid length. [ 241.196307][T10077] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1273'. [ 241.383564][T10088] netlink: 'syz.4.1274': attribute type 303 has an invalid length. [ 241.415142][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.441420][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.479011][T10040] bridge_slave_0: entered allmulticast mode [ 241.501886][T10040] bridge_slave_0: entered promiscuous mode [ 241.534842][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.543092][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.550810][T10040] bridge_slave_1: entered allmulticast mode [ 241.558817][T10040] bridge_slave_1: entered promiscuous mode [ 241.760085][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.814380][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.021068][T10040] team0: Port device team_slave_0 added [ 242.039521][T10040] team0: Port device team_slave_1 added [ 242.083428][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.210951][ T5833] Bluetooth: hci3: command tx timeout [ 242.222734][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.410425][T10116] x_tables: ip_tables: udp match: only valid for protocol 17 [ 242.438554][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.460499][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.515797][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.552444][T10066] chnl_net:caif_netlink_parms(): no params data found [ 242.579240][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.593863][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.691617][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.783067][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.881261][T10123] netlink: 'syz.3.1286': attribute type 21 has an invalid length. [ 242.903349][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.947858][T10123] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1286'. [ 242.955789][T10125] net_ratelimit: 47 callbacks suppressed [ 242.955808][T10125] netlink: zone id is out of range [ 242.968719][T10125] netlink: zone id is out of range [ 242.981570][T10125] netlink: zone id is out of range [ 242.987082][T10125] netlink: zone id is out of range [ 242.992564][T10125] netlink: zone id is out of range [ 242.998431][T10125] netlink: zone id is out of range [ 243.004064][T10125] netlink: zone id is out of range [ 243.005451][ T5833] Bluetooth: hci1: command tx timeout [ 243.012590][T10125] netlink: zone id is out of range [ 243.023207][T10125] netlink: zone id is out of range [ 243.028493][T10125] netlink: zone id is out of range [ 243.102477][T10040] hsr_slave_0: entered promiscuous mode [ 243.126507][T10040] hsr_slave_1: entered promiscuous mode [ 243.133094][T10040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.166281][T10040] Cannot create hsr debugfs directory [ 243.218835][T10130] netlink: 'syz.3.1287': attribute type 21 has an invalid length. [ 243.282613][T10130] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1287'. [ 243.579382][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.595546][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.603119][T10066] bridge_slave_0: entered allmulticast mode [ 243.637719][T10066] bridge_slave_0: entered promiscuous mode [ 243.652469][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.662287][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.673771][T10066] bridge_slave_1: entered allmulticast mode [ 243.682940][T10066] bridge_slave_1: entered promiscuous mode [ 243.817791][T10066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.828406][ T12] bridge_slave_1: left allmulticast mode [ 243.837593][ T12] bridge_slave_1: left promiscuous mode [ 243.843559][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.857990][ T12] bridge_slave_0: left allmulticast mode [ 243.863820][ T12] bridge_slave_0: left promiscuous mode [ 243.870062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.068963][T10161] netlink: 'syz.1.1297': attribute type 21 has an invalid length. [ 244.285709][ T5833] Bluetooth: hci3: command tx timeout [ 244.317190][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.331379][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.344520][ T12] bond0 (unregistering): Released all slaves [ 244.371047][T10066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.408417][T10161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1297'. [ 244.582558][T10166] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 244.633336][T10171] x_tables: ip_tables: udp match: only valid for protocol 17 [ 244.663384][T10066] team0: Port device team_slave_0 added [ 244.665341][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'. [ 244.675071][T10066] team0: Port device team_slave_1 added [ 244.862030][T10066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.879405][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.962228][T10066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.000548][T10066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.015692][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.042717][T10066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.085451][ T5833] Bluetooth: hci1: command tx timeout [ 245.139625][T10166] hsr0 speed is unknown, defaulting to 1000 [ 245.202150][ T12] hsr_slave_0: left promiscuous mode [ 245.209405][ T12] hsr_slave_1: left promiscuous mode [ 245.216056][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.227209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.235598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.243038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.269829][ T12] veth1_macvtap: left promiscuous mode [ 245.275577][ T12] veth0_macvtap: left promiscuous mode [ 245.281214][ T12] veth1_vlan: left promiscuous mode [ 245.286797][ T12] veth0_vlan: left promiscuous mode [ 245.924864][ T12] team0 (unregistering): Port device team_slave_1 removed [ 245.981916][ T12] team0 (unregistering): Port device team_slave_0 removed [ 246.365684][ T5833] Bluetooth: hci3: command tx timeout [ 246.560477][T10066] hsr_slave_0: entered promiscuous mode [ 246.571565][T10066] hsr_slave_1: entered promiscuous mode [ 246.579198][T10066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.590877][T10066] Cannot create hsr debugfs directory [ 247.087682][T10040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.100963][T10040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.131987][T10040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.143606][T10040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.176644][ T5833] Bluetooth: hci1: command tx timeout [ 247.278213][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.303993][T10040] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.338748][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.345981][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.363279][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.370455][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.503237][T10066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.526567][T10066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.547121][T10066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.564284][T10066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.684172][T10066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.711095][T10066] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.730080][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.737310][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.757611][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.764777][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.778277][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.885149][T10040] veth0_vlan: entered promiscuous mode [ 247.902953][T10040] veth1_vlan: entered promiscuous mode [ 247.953186][T10040] veth0_macvtap: entered promiscuous mode [ 247.969161][T10040] veth1_macvtap: entered promiscuous mode [ 248.008442][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.026584][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.043755][T10040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.061939][T10040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.071031][T10040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.080216][T10040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.134017][T10066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.174449][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.182753][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.241009][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.247729][T10066] veth0_vlan: entered promiscuous mode [ 248.260255][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.281649][T10066] veth1_vlan: entered promiscuous mode [ 248.332199][T10066] veth0_macvtap: entered promiscuous mode [ 248.349170][T10066] veth1_macvtap: entered promiscuous mode [ 248.391099][T10066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.411722][T10066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.423624][T10066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.433011][T10066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.443308][T10066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.452988][T10066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.455770][ T5833] Bluetooth: hci3: command tx timeout [ 248.529745][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.544958][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.574149][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.582276][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.534150][ T1089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.411274][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.420069][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.430607][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.439942][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.449897][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.486284][T10207] hsr0 speed is unknown, defaulting to 1000 [ 250.550221][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.649754][T10207] chnl_net:caif_netlink_parms(): no params data found [ 250.735742][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.742923][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.750365][T10207] bridge_slave_0: entered allmulticast mode [ 250.759901][T10207] bridge_slave_0: entered promiscuous mode [ 250.771632][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.778993][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.786608][T10207] bridge_slave_1: entered allmulticast mode [ 250.793790][T10207] bridge_slave_1: entered promiscuous mode [ 250.832247][T10207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.844002][T10207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.886788][T10207] team0: Port device team_slave_0 added [ 250.894719][T10207] team0: Port device team_slave_1 added [ 250.926632][T10207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.933615][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.962128][T10207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.994252][ T1089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.017158][T10207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.024141][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.050953][T10207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.113540][ T1089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.136087][T10207] hsr_slave_0: entered promiscuous mode [ 251.142521][T10207] hsr_slave_1: entered promiscuous mode [ 251.149450][T10207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.157082][T10207] Cannot create hsr debugfs directory [ 251.193623][ T1089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.352325][ T1089] bridge_slave_1: left allmulticast mode [ 251.360026][ T1089] bridge_slave_1: left promiscuous mode [ 251.365947][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.382012][ T1089] bridge_slave_0: left allmulticast mode [ 251.388786][ T1089] bridge_slave_0: left promiscuous mode [ 251.394656][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.739681][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.750426][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.759071][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.784455][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.794372][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.864401][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.890733][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.902084][ T1089] bond0 (unregistering): Released all slaves [ 251.964894][T10219] hsr0 speed is unknown, defaulting to 1000 [ 252.208143][ T1089] hsr_slave_0: left promiscuous mode [ 252.214367][ T1089] hsr_slave_1: left promiscuous mode [ 252.223629][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.231224][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.239366][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.247584][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.268887][ T1089] veth1_macvtap: left promiscuous mode [ 252.274688][ T1089] veth0_macvtap: left promiscuous mode [ 252.280656][ T1089] veth1_vlan: left promiscuous mode [ 252.287380][ T1089] veth0_vlan: left promiscuous mode [ 252.539996][ T5833] Bluetooth: hci1: command tx timeout [ 252.703307][ T1098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.727044][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 252.766558][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 253.219949][T10219] chnl_net:caif_netlink_parms(): no params data found [ 253.321026][T10207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.333164][T10207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.373744][T10207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.384250][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.391779][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.399186][T10219] bridge_slave_0: entered allmulticast mode [ 253.408540][T10219] bridge_slave_0: entered promiscuous mode [ 253.417733][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.424936][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.432257][T10219] bridge_slave_1: entered allmulticast mode [ 253.440286][T10219] bridge_slave_1: entered promiscuous mode [ 253.447684][T10207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.498193][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.510473][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.571730][T10219] team0: Port device team_slave_0 added [ 253.581891][T10219] team0: Port device team_slave_1 added [ 253.632932][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.640192][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.667285][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.681951][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.692106][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.719231][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.789865][T10219] hsr_slave_0: entered promiscuous mode [ 253.797345][T10219] hsr_slave_1: entered promiscuous mode [ 253.803517][T10219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.811902][T10219] Cannot create hsr debugfs directory [ 253.843890][ T1089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.886151][ T5833] Bluetooth: hci3: command tx timeout [ 253.932914][ T1089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.042367][ T1089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.080385][T10207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.124936][ T1089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.145727][T10207] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.161930][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.169120][ T4058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.183483][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.190790][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.320411][ T1089] bridge_slave_1: left allmulticast mode [ 254.328800][ T1089] bridge_slave_1: left promiscuous mode [ 254.334679][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.352849][ T1089] bridge_slave_0: left allmulticast mode [ 254.365089][ T1089] bridge_slave_0: left promiscuous mode [ 254.371214][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.607094][ T5833] Bluetooth: hci1: command tx timeout [ 254.699824][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.711584][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.723396][ T1089] bond0 (unregistering): Released all slaves [ 254.891320][T10207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.994149][T10207] veth0_vlan: entered promiscuous mode [ 255.048863][T10207] veth1_vlan: entered promiscuous mode [ 255.079856][ T1089] hsr_slave_0: left promiscuous mode [ 255.088423][ T1089] hsr_slave_1: left promiscuous mode [ 255.094330][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.102776][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.111730][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.119318][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.140733][ T1089] veth1_macvtap: left promiscuous mode [ 255.147477][ T1089] veth0_macvtap: left promiscuous mode [ 255.153100][ T1089] veth1_vlan: left promiscuous mode [ 255.158722][ T1089] veth0_vlan: left promiscuous mode [ 255.594738][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 255.634241][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 255.894036][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.901940][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.968688][ T5833] Bluetooth: hci3: command tx timeout [ 256.083536][T10219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.104046][T10219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.131997][T10219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.158080][T10219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.183987][T10207] veth0_macvtap: entered promiscuous mode [ 256.222338][T10207] veth1_macvtap: entered promiscuous mode [ 256.274083][T10207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.303895][T10207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.326475][T10207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.335741][T10207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.344494][T10207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.356000][T10207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.416987][T10219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.471201][T10219] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.500661][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.507852][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.523813][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.531031][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.547502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.576770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.612201][ T4058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.621764][ T4058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.687168][ T5833] Bluetooth: hci1: command tx timeout [ 256.842473][T10219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.892111][T10219] veth0_vlan: entered promiscuous mode [ 256.904673][T10219] veth1_vlan: entered promiscuous mode [ 256.938742][T10219] veth0_macvtap: entered promiscuous mode [ 256.949097][T10219] veth1_macvtap: entered promiscuous mode [ 256.970211][T10219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.984906][T10219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.998858][T10219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.009402][T10219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.019584][T10219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.028642][T10219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.104448][ T4058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.117517][ T4058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.148709][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.158044][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.300380][ T4058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.618241][ T4058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.772738][ T4058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.903049][ T4058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.991018][ T4058] bridge_slave_1: left allmulticast mode [ 257.997633][ T4058] bridge_slave_1: left promiscuous mode [ 258.003479][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.021042][ T4058] bridge_slave_0: left allmulticast mode [ 258.029024][ T4058] bridge_slave_0: left promiscuous mode [ 258.034832][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.334140][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.346916][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.362047][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.389308][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.404279][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.462231][ T4058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.473284][ T4058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.483613][ T4058] bond0 (unregistering): Released all slaves [ 258.542400][T10239] hsr0 speed is unknown, defaulting to 1000 [ 258.752602][T10239] chnl_net:caif_netlink_parms(): no params data found [ 258.846647][ T4058] hsr_slave_0: left promiscuous mode [ 258.852557][ T4058] hsr_slave_1: left promiscuous mode [ 258.858983][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.866684][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.874546][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.882676][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.907234][ T4058] veth1_macvtap: left promiscuous mode [ 258.912878][ T4058] veth0_macvtap: left promiscuous mode [ 258.920565][ T4058] veth1_vlan: left promiscuous mode [ 258.927523][ T4058] veth0_vlan: left promiscuous mode [ 259.449298][ T4058] team0 (unregistering): Port device team_slave_1 removed [ 259.493952][ T4058] team0 (unregistering): Port device team_slave_0 removed [ 259.882647][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.894872][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.902217][T10239] bridge_slave_0: entered allmulticast mode [ 259.910750][T10239] bridge_slave_0: entered promiscuous mode [ 259.919231][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.927967][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.935578][T10239] bridge_slave_1: entered allmulticast mode [ 259.944302][T10239] bridge_slave_1: entered promiscuous mode [ 259.990153][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.011194][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.065711][T10239] team0: Port device team_slave_0 added [ 260.074764][T10239] team0: Port device team_slave_1 added [ 260.111724][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.118848][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.145730][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.158583][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.166690][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.193080][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.249376][T10239] hsr_slave_0: entered promiscuous mode [ 260.256118][T10239] hsr_slave_1: entered promiscuous mode [ 260.262240][T10239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.270063][T10239] Cannot create hsr debugfs directory [ 260.340596][ T4058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.427927][ T4058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.446724][ T5847] Bluetooth: hci1: command tx timeout [ 260.498326][ T4058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.574115][ T4058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.618303][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.628224][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.636553][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.653810][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.661574][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.730832][T10248] hsr0 speed is unknown, defaulting to 1000 [ 260.756594][ T4058] bridge_slave_1: left allmulticast mode [ 260.762258][ T4058] bridge_slave_1: left promiscuous mode [ 260.768354][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.779762][ T4058] bridge_slave_0: left allmulticast mode [ 260.786328][ T4058] bridge_slave_0: left promiscuous mode [ 260.792438][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.085355][ T4058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.102549][ T4058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.112584][ T4058] bond0 (unregistering): Released all slaves [ 261.454048][ T4058] hsr_slave_0: left promiscuous mode [ 261.460133][ T4058] hsr_slave_1: left promiscuous mode [ 261.466547][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.473971][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.482550][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.491143][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.510159][ T4058] veth1_macvtap: left promiscuous mode [ 261.515814][ T4058] veth0_macvtap: left promiscuous mode [ 261.521431][ T4058] veth1_vlan: left promiscuous mode [ 261.526918][ T4058] veth0_vlan: left promiscuous mode [ 261.885437][ C1] ------------[ cut here ]------------ [ 261.893581][ C1] refcount_t: addition on 0; use-after-free. [ 261.900162][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 261.909240][ C1] Modules linked in: [ 261.913290][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 261.924597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.934695][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 261.940801][ C1] Code: 00 00 e8 d9 72 00 fd 5b 41 5e e9 01 df a6 06 cc e8 cb 72 00 fd c6 05 67 23 cb 0a 01 90 48 c7 c7 80 19 e2 8b e8 17 5f c4 fc 90 <0f> 0b 90 90 eb d7 e8 ab 72 00 fd c6 05 48 23 cb 0a 01 90 48 c7 c7 [ 261.960439][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 261.966540][ C1] RAX: 4f0e812c21be6000 RBX: 0000000000000002 RCX: ffff88801d695a00 [ 261.974518][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 261.982510][ C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004 [ 261.990504][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: ffff88807e46c100 [ 261.998503][ C1] R13: dffffc0000000000 R14: ffff88807e46c26c R15: ffff888060bb7400 [ 262.006572][ C1] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 262.015537][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.022135][ C1] CR2: 00007f6d4afb5f40 CR3: 000000000df36000 CR4: 00000000003526f0 [ 262.030138][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.038137][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.046135][ C1] Call Trace: [ 262.049421][ C1] [ 262.052275][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 262.057343][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 262.062733][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 262.067960][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 262.073261][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 262.079020][ C1] tipc_disc_timeout+0x580/0x6d0 [ 262.083974][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.089476][ C1] call_timer_fn+0x17e/0x5f0 [ 262.094081][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.099567][ C1] ? call_timer_fn+0xbe/0x5f0 [ 262.104253][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 262.109399][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.114608][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.119842][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.125359][ C1] __run_timer_base+0x61a/0x860 [ 262.130240][ C1] ? ktime_get+0x3e/0x1f0 [ 262.134590][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 262.139987][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 262.146269][ C1] run_timer_softirq+0xb7/0x180 [ 262.151135][ C1] handle_softirqs+0x286/0x870 [ 262.155931][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 262.160718][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 262.166038][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 262.171250][ C1] __irq_exit_rcu+0xca/0x1f0 [ 262.175869][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 262.181088][ C1] irq_exit_rcu+0x9/0x30 [ 262.185406][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 262.191107][ C1] [ 262.194053][ C1] [ 262.197017][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.203011][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 262.208776][ C1] Code: 43 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 92 24 00 f3 0f 1e fa fb f4 18 d5 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 262.228427][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 262.234508][ C1] RAX: 4f0e812c21be6000 RBX: ffffffff819710c8 RCX: 4f0e812c21be6000 [ 262.242518][ C1] RDX: 0000000000000001 RSI: ffffffff8d96be2f RDI: ffffffff8be26400 [ 262.250516][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 262.258520][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b1b0 [ 262.266523][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad2b40 [ 262.274506][ C1] ? do_idle+0x1e8/0x510 [ 262.278796][ C1] default_idle+0x13/0x20 [ 262.283143][ C1] default_idle_call+0x74/0xb0 [ 262.287944][ C1] do_idle+0x1e8/0x510 [ 262.292042][ C1] ? __pfx_do_idle+0x10/0x10 [ 262.296667][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.301895][ C1] cpu_startup_entry+0x44/0x60 [ 262.306696][ C1] start_secondary+0x101/0x110 [ 262.311474][ C1] common_startup_64+0x13e/0x147 [ 262.316446][ C1] [ 262.319483][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.326767][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 262.338055][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.348205][ C1] Call Trace: [ 262.351489][ C1] [ 262.354338][ C1] dump_stack_lvl+0x99/0x250 [ 262.358949][ C1] ? __asan_memcpy+0x40/0x70 [ 262.363550][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.368792][ C1] ? __pfx__printk+0x10/0x10 [ 262.373405][ C1] panic+0x2db/0x790 [ 262.377332][ C1] ? __pfx_panic+0x10/0x10 [ 262.381761][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 262.386986][ C1] ? common_startup_64+0x13e/0x147 [ 262.392108][ C1] __warn+0x31b/0x4b0 [ 262.396106][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 262.401597][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 262.407064][ C1] report_bug+0x2be/0x4f0 [ 262.411404][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 262.416874][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 262.422338][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 262.427803][ C1] handle_bug+0x84/0x160 [ 262.432065][ C1] exc_invalid_op+0x1a/0x50 [ 262.436581][ C1] asm_exc_invalid_op+0x1a/0x20 [ 262.441436][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 262.447521][ C1] Code: 00 00 e8 d9 72 00 fd 5b 41 5e e9 01 df a6 06 cc e8 cb 72 00 fd c6 05 67 23 cb 0a 01 90 48 c7 c7 80 19 e2 8b e8 17 5f c4 fc 90 <0f> 0b 90 90 eb d7 e8 ab 72 00 fd c6 05 48 23 cb 0a 01 90 48 c7 c7 [ 262.467257][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 262.473349][ C1] RAX: 4f0e812c21be6000 RBX: 0000000000000002 RCX: ffff88801d695a00 [ 262.481334][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 262.489312][ C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004 [ 262.497289][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: ffff88807e46c100 [ 262.505273][ C1] R13: dffffc0000000000 R14: ffff88807e46c26c R15: ffff888060bb7400 [ 262.513304][ C1] ? refcount_warn_saturate+0xf9/0x1d0 [ 262.518785][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 262.523841][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 262.529237][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 262.534450][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 262.539763][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 262.545608][ C1] tipc_disc_timeout+0x580/0x6d0 [ 262.550653][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.556174][ C1] call_timer_fn+0x17e/0x5f0 [ 262.560804][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.566277][ C1] ? call_timer_fn+0xbe/0x5f0 [ 262.570970][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 262.576190][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.581398][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.586694][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.592167][ C1] __run_timer_base+0x61a/0x860 [ 262.597113][ C1] ? ktime_get+0x3e/0x1f0 [ 262.601457][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 262.606848][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 262.613125][ C1] run_timer_softirq+0xb7/0x180 [ 262.617990][ C1] handle_softirqs+0x286/0x870 [ 262.622773][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 262.627560][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 262.632868][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 262.638080][ C1] __irq_exit_rcu+0xca/0x1f0 [ 262.642686][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 262.647910][ C1] irq_exit_rcu+0x9/0x30 [ 262.652164][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 262.657809][ C1] [ 262.660747][ C1] [ 262.663684][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.669681][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 262.675418][ C1] Code: 43 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 92 24 00 f3 0f 1e fa fb f4 18 d5 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 262.695042][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 262.701121][ C1] RAX: 4f0e812c21be6000 RBX: ffffffff819710c8 RCX: 4f0e812c21be6000 [ 262.709107][ C1] RDX: 0000000000000001 RSI: ffffffff8d96be2f RDI: ffffffff8be26400 [ 262.717084][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 262.725061][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b1b0 [ 262.733129][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad2b40 [ 262.741113][ C1] ? do_idle+0x1e8/0x510 [ 262.745394][ C1] default_idle+0x13/0x20 [ 262.749750][ C1] default_idle_call+0x74/0xb0 [ 262.754547][ C1] do_idle+0x1e8/0x510 [ 262.758638][ C1] ? __pfx_do_idle+0x10/0x10 [ 262.763255][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.768493][ C1] cpu_startup_entry+0x44/0x60 [ 262.773287][ C1] start_secondary+0x101/0x110 [ 262.778086][ C1] common_startup_64+0x13e/0x147 [ 262.783046][ C1] [ 262.786649][ C1] Kernel Offset: disabled [ 262.790993][ C1] Rebooting in 86400 seconds..