last executing test programs: 47.752395556s ago: executing program 3 (id=2133): socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 47.752328135s ago: executing program 3 (id=2133): socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 47.75227897s ago: executing program 3 (id=2133): socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 33.768250143s ago: executing program 3 (id=2133): socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 24.258499274s ago: executing program 3 (id=2133): socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 12.729380708s ago: executing program 3 (id=2133): socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 6.938484256s ago: executing program 4 (id=2659): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xf001}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x20, 0x0, 0x4}, 0x18}}, 0x8014) 6.804657015s ago: executing program 4 (id=2660): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x240008a4}, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100)=r9, 0x4) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x0, 0x35}, 0x28) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r10) r12 = socket$kcm(0x2b, 0x1, 0x0) r13 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x89e1, &(0x7f0000000080)={r13}) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket(0x400000000010, 0x3, 0x0) 5.902415432s ago: executing program 4 (id=2665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) r1 = socket(0x10, 0x803, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x84}}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000000000000cdaa64cedb4c5f10000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r6}, 0x18) getpeername$netlink(r3, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x40810) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1, {[0x4, 0x9, 0x2, 0x8, 0x6, 0x8001, 0x5, 0x8]}}, 0x5c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.628146017s ago: executing program 4 (id=2670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0002003092b841c89e4824b3b5cbb3e4dd600bf87fe495611d1648f6297478caab54ef5d32f40730e81bdc16a6580aa435c003c3c0a6c31051a1d25e5ab72bcccfcd01a4b3507aaa7d9c202d94950a87ac086f3ed1fbeb71440b600970a9335710d4f840cb94828f3d740691efc9a2dab5c9d5c3d0588e3044e5c8f54ea594aa242aaa18bf23d874341d267b65a9bb277f", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf051e00000008000300", @ANYRES32=r4, @ANYBLOB="10002f800800010007000000d1fc0380000002000300000000000200030000000000010001000000000004000000004000000400040000000000040002000000000005000600000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRESHEX=r2, @ANYRESOCT=r3], 0x1c}}, 0x8c0) 2.857315656s ago: executing program 4 (id=2673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xe}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x1c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff2, 0x5}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x404c090) syz_emit_ethernet(0xb9, &(0x7f00000000c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x7f, 0x3a, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@fragment={0x5c, 0x0, 0x94, 0x1, 0x0, 0x5, 0x4d17b425}], "e740039cd8ad8807ac51291520dc926483c0d32e2e1f35c9bbae8df4aff7708e8c60af947fd1e7768f74f0c7f81423ccb7aa521dc47a591486bdb7a26c4a10d5151d934adbe737"}}}}}}}, 0x0) 2.843317699s ago: executing program 2 (id=2674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000f0ffffff00000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000017000000952e000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48, 0x21440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000900)=@req3={0x8, 0x40, 0x5, 0x6, 0x4, 0xfffffff8, 0xf}, 0x1c) r8 = openat$cgroup_ro(r6, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x4, 0x6, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x10, 0x8000, 0x7, 0x2}}) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000800000004000000094000000a"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x2a, 0x0}, 0x8) recvmsg$can_j1939(r8, &(0x7f0000000d40)={&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000b80)=""/157, 0x9d}, {&(0x7f0000000c40)=""/153, 0x99}], 0x3, &(0x7f0000000e80)=""/81, 0x51}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001e00000018100000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b70800003e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018210000", @ANYRES32, @ANYBLOB="0000000005000000186a0000080000000000000009000000bf91000000002efa633c40a0bd4100008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x92, &(0x7f0000000500)=""/146, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x105}, 0x8, 0x10, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @ldst={0x3, 0x0, 0x1, 0x6, 0x0, 0x40, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x800, 0xb6, &(0x7f00000005c0)=""/182, 0x41100, 0x9, '\x00', r9, @sock_ops=0x3, r8, 0x8, &(0x7f0000000700)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0xf8f8, 0xcf}, 0x10, r13, r8, 0x1, &(0x7f0000000780)=[r4, r8, r2, r4], &(0x7f00000007c0)=[{0x4, 0x3, 0x9, 0x3}], 0x10, 0x40}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r14}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=r9, 0x7, 0x1, 0x4, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r6, r15, 0x1e, 0x0, 0xffffffffffffffff, @void, @value=r5, @void, @void, r16}, 0x20) 2.404618266s ago: executing program 4 (id=2680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0xffffffff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000480)=0xa4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1, 0x70bd29}, 0x10}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000002b000b002bbd6fffffffffec08000000"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 2.362838554s ago: executing program 2 (id=2682): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x400}, 0x6b) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800d208a1d89ea7", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4060019}, 0x20000041) 1.916926058s ago: executing program 0 (id=2685): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000a804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x1, {@in6_addr=@local, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000000000002900000002000000d54d3fdfad1f3d84d236216dcf1249a1af97db884c3038867ae1f1bae962e76671ff34331e40b2e07d5ccdd3740ed31fd960cd5494506b51c5ef431512e105651ed0de33cb00a6544ac3f1075950d95f88d0a37568d7405b6eef0e5505f3734451f3d5e319c771b242c06aa77a2ef9601bbdebcc616b1906d580445d41fc2b25671453275c9f3f2b33bc1af79ba5a9c9bc6310087b83ce2f41943c7de057abee386b131acc1a9107967f8777b02a06274b5c7984c1d368477485a840aec5a8f2ff3a"], 0x10}}], 0x1, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) 1.752577889s ago: executing program 0 (id=2686): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000000c80)=@deltclass={0x34, 0x29, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff2, 0xffff}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6c}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000e041}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x40000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "3e728fba60f291346a102775eaeb3ccc94fed51640fd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3f9d}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r7, 0x0, 0x80004}, 0x18) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}, 0xe01}, 0x80, &(0x7f0000000200)=[{0x0}, {&(0x7f00000043c0)="df", 0x1}], 0x2}, 0x200ce0c0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async, rerun: 64) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40), 0x8) (rerun: 64) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000b80)={'geneve0\x00', @remote}) (async) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000380)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000400)="def133095121fd9c3370b9ad2e4413f8f8bd485a3af8b2b4d6193d91db92939ad3d4eb2e6ec36e38e2d78d4f607f4ef940220734e6391844deb0b1dab96c03fa5961c0680ac47c43d76542aad38cb81f8d265147831349d17ba8f5ce577b90fbfac4842fc011034ffe513acb959c27cd557c38f3e75128a1bfbfbb8ecd06f8b6aff0ab4eab83522fbf342ef77c78256ab7ab09895871cd30ac", 0x99}, {&(0x7f0000002c80)="d767cfae688c0b8736b3690d1a789cf6ffa25d85c50059c1b448e57057a5ee98f8817b2bfb25200e7dea63d6eba77d2033f619ff580d98824ef736b4590aacf37905503d49c717e628e5d4c6c04293a3fd225fa71120fb51cbfe915d2c66c73103f9760cc3e6484b40cfcfa13daf488fd7d97d815cb84d4604a015c308d4d12a120c18961082cdd2a772cf960b585c2e8813b5813357afceb250e470e96b8d075b34516cd046d806bcc52e3cbffb932e9b87cb8e7820ecd54fbd5743fc0810c480b02e9cb7eba41ca1f982af5892f870aed78371e32a50485d64284ae2d7f895ddc5a0216f252e70595f889fa889a5540cda87c04714a1a8934071819f5cfc8e9f2d1e6d300a85c3c8aebafd4c7c5b303aa2bfa6e4789f298fd5497c8b21f412b471986d9c1260acc6387a7975c11fa0650d32654c0207e1c4723f068f9991f45f7ed0a8258980398d6272f73cc981fc117007271b5976cbbfa8042a2a3e8a2d714ded986b0c06a583e23d04ede6c6bac23864863438d134880d64cd7753ef466474597daf4d31085173213731b0d52c01cdfd743adb1f9986a99082a45d85053d6fe2f274eeb734223253ccf040333b3591d1978a79534bdd365662f0e68825081c20aa80ab293ef74d598bb4b5b53f0894a82659ff45de1553ae59c89623d30242715746ce58bf0ccb9d0b22702759152cbfe043765914aa72a3664f59645ec010d4e022077cac6d0f8449e6e107cf1b584cab94815208d6127f36a6414ab2acca9eb96a68a8603a932547cec6ed8aaedb3eede9d40548feeed93939304feda75ec4e156f751b36516a1fe3bbe900d6c85e888532f13d8ab5b921efeee155863e11f70b327e1ad7f29b61ea3c63489d0ced2b398c5cdbbee685294aadb7fbe3b3d645fac55474e1eece45075f573233d7d73b18a48cf7f0087287b42dea34e32520b463b51c2487f5a7050c5370083279c17f31270408333b4907f32b8713635ac9e947ed2c5941bacd8931139755fff859e7d63cdf22dde0d11615f86dfc74c202ab8a927d2ed51e4eabab125c5ace7b8c4a4aef59c0a10f03c8676b077828d669890261c7c15dad8ae6361e387ffe68c9e4d000fdccc69c4538151f7a687804af50396389ef30258c1d8c89eb2f98a303c82e4bbb105c562dd071fc65cca504efcae1317455ea8868d81c3de845cc72e1e0bf5f8a0e4f4d798415b384d303b8bf21992d8f2dc866558df9a591f4ffb238803e953507082c8a6414098d8e9fa693b6fc5f97193f368e2c756ca7ce4cb6da3b062b4370cc15df374e906e9d3a10d25993b0a825ce1727f6444c3dab5bf3a7926a0b21d82f084859a8e4f6472d0143483ff1916c36570b97d65f872346e9932d3cd4f074ea17f7a4fe70080d9d359034dca94d644a00045421135b3e19549956594c9c15896e1678e17362a021bc9aa3893662abf3d63bd2cc7a9ecac145efd22097a68594c303a9f4ae909901c07361ff9294dd41ac35008370736af1b29714e03dc17b447b0b28a6fec72b53cfb8882503c7bbed1626e0077471f71f60f2f40246c2cefd14ceddddb273d456c9c0f411272a40ef479207e23620768898837879be4e1c8ee069bff21e50ccb1a9addf26c91b38b03a81074082d2287c439572543ca426f82cca11bf8a6b723438f4ef9a8b3679c23635c2e327a1456588a9679c84fe22db874907d525a1c3e97deab2d4e81609caca6a32860c3d93541a3c7cd48cdd4042cb7056359e5b6ad71d2f9df28159e253a86d0ef445a24bd57460b8d969914d6ccc97b8721b583e534a18fd1b6571140b307312cc517b9519f33bdbca9d3e95d74cee2efe539e02158b3f37bf5cf0e830624c44bd9bf480816ba8499ecec572ce12b24af8e17cf83d046e21a75d5ca6899316b63af35985a6d00a03678ed478baf0de9e4b1efcaadd78fa0565da08206c880b04ec0632724d10aea1050ef3e0ed348fa7275caea88b37e8ccebf3ad8e321b0df649dd3df96fc561cc1ae1d9779eee1af2f3a65f773d6c1e76a3c8829eaf6104e64fa7d027e52619a44f248975b73bba4b8667fab4fe14ba32852ba2b699210532bd671aa18611fe195819ef2e36552e8e3c138acd39e7d128dc7b961c76c0e7f5c2dd6ca821a15825b935f225f832dfabaf52e2dc5cb7ddf469818f6f6494b2dc04bfc6b4220aec83083d3da02c539a1c07c2a8a8a65d4b6bdd6bf964ece2d4c48e7576d4fbb8b86c1cafc1daf038073ab4c59991c6119084e2ec330f82d266e36e441f865cc66ab76e3362e604a00bf829ad938b4241739339da3ad85ef6c3ab08e9d9cde0bd5b2a9d0c5face37021ffa38c9f3432b082ae43a9ec358d123503179ac7a05b124cd90aad6ee1f94d33b4e5010881b9284d96dfd29dc68db5ce227775ad7ee8205020cd66978fa36e3ee2a8c38c26e1b61a3acb697568cd4943ac71b6ee835d818d23f0d33831a6f2e0f7411e23dc4b23f124e263429f68b75c6f110e4c0710df6a256570929e3940e2a7702e4f90d11690f2a0ffbfc45c2df5c2c350984865061f6a8967b45ae6adac8801a673a0321cbdb16b1e47086a9686202835560cb2e2da2fe8baac3c306d490a52d9d04df21b56bafd768225735d370b8067016f1636ca79fe84299fdc1a8ad90ec68272d065c3761cef477e2687c2c859a542bd7e8e2d4e20686012153d15b1fe96fbff592ff50a778de4801f2fc4ef8ba81d20afeafa117d091cba484f6d3df48492f4a4b933f4365743f8750ff36eb83e96af61c32bb525b45b58b75c54093164107af7d225c5fad586f407be632ae8db35c94790671f39cf5a52ad4cf06af9105f69bb464e79279e517a5cb4e92ad48f0793a1bcf00c06cbdae17d83aa5015708579633f560dfdf81f41ff4e37325f405634b6facad0173a7576f006798c2ace05965d1f48a4963c1e4d8bfbe069ff2c57f9c2202605cb5a4c7d5d8924b233b3029fe4840ba69b8ec7230d28631bd7bf8201ff4a411ff0ef9c8a585308d65e63436e16e43b33fb8df38e348ef68f88c58ab47dbce8cbb35a8f73c1b093ca9b024de90ab9e9faaa29dd5d04fa019427756be7a8119c01ba4968e4c8166a79b52549d332307fecfda0089f8cbf32db82141aefcb1f70a227994d58a881082d1c5bc9e8f0d556659f508cba4f7b075cf30b22013842fcc2c25a827a6429ae06a7880f7889ca3eaab925f4d774d2400805c0b0ba7c081f492696804ab78069de3bdd10c0bbff43cfee948268973ba621c5b2ef6da9c35023748577c2b02e20dff5eb7737fad12596499ca332b033a2eb3309516317ea433977ce6dc5406cf3317812f8932db35518791de9a524a9e835c07fba236f5eb961273e1cf063efcfd33a27505318903cf20fa0a3f8a85e15cc26f6bba874365eb49bafd8ea3bd106f8360c65bcc13b7e53e9fa62ea0a47d0cc0fe10f00cbe4d9d2a556661dca4df4647e07c36df30ecc89884c6eec41ff11fae0c684500a0cba7e71274fe4aa078831a20486eb558e959d817f0763d06b5961c25f0938771e2386ddff62a1f7552d05f3eefa7b212d5d7450b6da919a391939beb4a8bf6383dbbba3c5d04d26e200449c98c56573affc45a06a9ef55abaff221cd28c7283e7b4697439ed39c4eb44e785d63dd73fcf895af90b897f71134919ab2bb4bed851f06f5593ff408fa0aeac0b82730ca966637ad7d938ba7a2987d7b08fa6aa501dbf5bd453ff6728def9fdb645f91d52c55ca75946800c4eab122f23905c174dd360542c7517a3ff11da409a3c9d18c7bcdae4e0a9fd54e61c3b06148e0637ecf73149ae2667b0632f0a047f1270f394d79b75516c7963362d59dc23f009c2a8441ecd6914c6c73f4ad5705e2434ab443530a5fc74a57463909710f73cb904a83e4a48f810f2d9147425e474103813e25108dda0bb5c679bf8f9547b6fc6a28cbd3f17cdb99ba2a804b2ce5ef897eaefe360d95bbc655cfc69bd9258a7788074e44223eeedc3377662d80b7dd6cb7d57ea4d43ba00f42ca4cc4847e2b7d7762a3c924bb57b75fda92f29f0a1ba943e7916fca9854a7b6422dfb8a47cbc4cef14c8af8a015823f04ae407b3b4d150629993edadf056bc96a2def0cfb095a392d0b2e8d13cd109303a6f7b180a9ac856e87379b9e0dfb7d7e7a20d0d59ebafa4f31af652b35e7f3dc1e94db3191d2133fb320faa5787db9c6a5b64ca842935e0424e48b2b36e6ced530600940374532252e5361e7e1d0d7f1555170c7709dca8d192f9cc55d56ee1457a98dd2d6ce98a30168234435afafd10f54025c573110408cc23be2416c926b5905d676c4ecdc9a15936b7542c95dd91c9ff9384e348a1e7aa51e1f09b911f64849b6f96ef92ce1f1a71d3a2f651a392cfd49a6a870f328b7b612b432ca2eb81d1d23c26ed3308a377a0e302800d1026c268d8a55a6a07b254c2a07f559792562314453d3221b09f011e5fe4905d7eab4a0614863143e44a4dfd51e7dd807181f7b68695ee7ce3626a1dd1dcb6408a4373892633bf59a0a8d8d2cf4dd0103788865e089fccf8591b5685ce2bfc18e96749b10e42cfb77141ba9dd3fe56ff046b64491b008d4698a5aee591f9337abb88752534246f9ba105c339529395b10c90ef95a1490412a465bc87ea76532a44fd8070bd6b23a4d6717150205abb1b6e1c2b09bf483676a5eb9441852aad79ff441f7c71677601660db016afdc1af3d528774a5dc7c98e8cd718404e66a60004bffba5929c5ff43b0c596369e495cf7627b8a448aaa29af183944911d69f844ee47b365d9bfd8fcfb5d28f7eac9e32b514d980c7c14d3559eb232e1e6cd4b283fc13c56cfcb5c2a694e124fd3db7c7d3e1735573eb51be9bce8781b762dc0a354dda3fa94e6d54972ff4b5c35d52a3f9a97d642ad0d7edc2b7a5826819b9443307412acac4dcbc0d11bae087164fec63cd6f0d65df932241153f588e2abafd91d36c23f9a0b410275b9e7022630263a51b038d3fdefcb674147f7d2a224b6da8be9dfcef9ce8b915bf5c1f3b38e580fc2e4b3399ca9c679018712bb7b8364775b970e59dd88e26b8e42456f4e3978accf554a37ff5ba98545b33de84ccd99a092a3f83b157a462602fd0e4a613c587557f48d8c2ff85da34519e9da6c4ef82e06b67ee79cbcba6a3cdb7527d28afc649ef41e2929c59b73118fc99d3ab327bd48f046d15ab19ef2cf43d052eba0df4170897735c5c9f83d1b116b4d7f39f6b5aa3c60db00afa844a172fa2d4e415c79c17101656967175f81ed0e7b8536a62dabc125619754adfa0178a5601bda15baa661b86580cf68d4b1e300ac52773ce87adc383939723777c9f1281306bab2c8f8999e2c9e82da7728179705cd8b39cb7289429c0ef28ad6f5ce74ebb0a4272f62f0ca68cbc8531c47c351a4b3751cef835df597669721da94aa6452a1eb73ab2da029bf61b2f16dc67d9b640285e4303422a88d7ef815b9e279496621a8de62ae8bfd0dcc57a48c82ca7bb5af94e1a84d5eff633f6946c4ba5b1cee861d05daf0b652736b0326182380f3c7d1aa29f1a595bb34a089dcfb4f13fac65fe9f17944bc95234df39a6c635448b7bc4ca02a412ae3a1fbc40da803b1480996dc3058313480eb852a5fc07de504189747854ac074d6da25426412bda9e4f8456862f77a44cda1766aaa4bac345a8b2e6702557be2b88831ddf9d223c433d488cff47bffaf3477ee555bf35f420d9f40c75e06a69c94331374cb4c767373ccdaf8cad46249ccefaa8dceb550", 0x1000}, {&(0x7f0000000600)="8745e857a3759d77b696892538f5ccc309b13b59c57434539098bc322e893346fd51c591e1f0e0c4caa2b46726ae7fc29529c036e06cf5a67d49605701d94bec8bd882694c8d59f7db58e9008243be2f4408a3a38d01989c0c05e3474ccd169872eb946072ff0f30fb4d6fb55a68ef42014957f946f0cdbb904a0f22af8cfc4694f889831c3df8ab9d941a9c69729ea9f315c2f71eceb71299596752c2ec8cb4588f0a370fb01c1ca740949b9cf30cd7a293ab233ede9effa0c0b576a286471eac6c25aae8c1162753145c798f7d86452c0da873def3187d52291b15e38e11b20e7e859eb7608a34269699fd665a6f5be09d401f77", 0xf5}, {&(0x7f0000000700)="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", 0xfd}, {&(0x7f0000003c80)="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", 0x1000}, {&(0x7f0000000800)="5702fea1ef64015e91feaaa1c0de572eaff754e95f03ff4ef4e142c816f441c00a7afc497ba50d225547cb6a9dc360264ae20dee69f148bd5ea97b66faa0f258f21c61d00494d86bf7ecf94abac399b7aa6269e009452568ece8792bede1e3a449076ddf31354b4acc6001d7ec529e3bec8c4a9bae68f5a101869ca58b13b28d57797eebdd8f30186a51b7d0e05c200e7d7b73ea3f606e52afabcf08db44196793fcbcaf97673ed6bfb01051aae153ad973565143879d9e4d90231ae00c3903b1b0bd4f58a3a454d590ae7625075e9c066581249ba7e49a4d5a4da6b5f47c0483036ee4ad2f2", 0xe6}, {&(0x7f0000000280)="d198a2e501e9be35c9199004bf13a48e95d764560afb1d71e42b9b8ab62841963d36282dd7", 0x25}, {&(0x7f0000000900)="d613890ec5bcc91e5e32c3ca001ca9061838087d19500784c6121e9cdbb396c8b6a5063293a43746fc0c9117b96a290c993ffe7d6098c1e9909240dc598d7d3372f739f2c9bcc577fc3f7cf3219ad650515a02", 0x53}], 0x8, &(0x7f0000000a00)=[{0x68, 0x115, 0x3, "46586f9ce912eedd88b396f8314e632a099a9ffc5a342a9c3d3f0b19cf8093181667afdb87cae9782e245b03e1f54288c4483acf6a3b9b09058fb0562faca11b7433add937de4ecb3d443b5605881a83cd4562156138ae0e"}, {0x98, 0x104, 0xfffffc01, "ce88b2c6aafe0b7b6420babb543a62fcba524b9809be6054011bb5d005ad23481a649efd7112c8467030c2a553d1463c99530e200d257e889deb373e7ef6d0593439be93b9e17122cda07faf3d148baf04a419bdadcb02abaf0e30efd0758013db5ecda07fb3dd41115770d1e61e1c13419da289af75c84507eb81b38c18840c24355995ccbcfb"}], 0x100}, 0x40001) r12 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r12, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@prinfo={0x18, 0x84, 0x5, {0x70}}], 0x18, 0x4}], 0x1, 0x800) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x64, 0x6, 0x15c0, 0x14f0, 0x1a0, 0x12c8, 0x0, 0xd0, 0x14f0, 0x14f0, 0x14f0, 0x14f0, 0x14f0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x5, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x7}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1620) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r14, 0x0, 0xd1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r13) 1.512611094s ago: executing program 0 (id=2687): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x2, 0x70bd2a, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x9}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x3368}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_batadv\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', r2}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x3, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x6, 0x10001, 0x4, @remote, @local, 0x7800, 0x80c6, 0xfffffffe, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@loopback, @loopback, r4}, 0xc) 1.38922708s ago: executing program 2 (id=2688): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x73fe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x2}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0xfffffffffffffffc, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 1.277959918s ago: executing program 1 (id=2689): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1e, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xf0, &(0x7f0000000380)=""/240, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x4, 0x2, 0x0, 0x8}, {0x4, 0x5, 0x3, 0x1}, {0x0, 0x2, 0x8, 0x8}, {0x0, 0x5, 0x5, 0x9}, {0x0, 0x4, 0xa, 0x3}, {0x4, 0x5, 0x7, 0x1}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r2 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x7}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000008000000000000000a01040000000000000000010000000900010073797a310000000040000000030a01020073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c0004800800014000000001140000001100010000000000000000000000000a00"/192], 0xc0}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0xc134, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa982}, 0x1c) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}}], 0x1, 0x0, 0x0) 1.152609992s ago: executing program 0 (id=2690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000002, 0x1}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfffb}, {0xfff1, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20040805}, 0x24040040) 1.137040086s ago: executing program 1 (id=2691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa", 0xc5}, {&(0x7f0000000180)="d31197f10312018b1d2c04a8c90038174c153e84ef86f6de1202774793625998e5ab984e47aad634118b9c1aabb2694e2b346355c62523f7bfb24722efcd996d1fa0cf732cf52b3023b43a5626fbb38f38ea2c81dc1ac59b5f1e1502d9bd0b9ddae1f34e864c29ae7404384072ab7b5d749c4af95fc7972188bb89f22b84637c6c48db7bd174532d118b201805358bc8b1808e015ae4c2215e1f1bb609cd610e78800f092181d9506fb987f68b9b", 0xae}], 0x2}}], 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000001900)={0x500, 0xd, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "25fbea9a17bdac3480794c57a14b3170b9c3800b690c62eadeeb35d6cef23e9c1f0564bd1c39837dd4719616b8fa7204e7f9851258a121011dffafc95344f1138351fbff25a40106852b8ddd1e72d52cd37a5965b89173b1800187a629c94f37d3ea62e725c401e9007cb9092fa68085299c12429677f3b9f77601b3adcc022f6bbac1a82f32003a5c61c8e77864fad9df9bb95b6f930b5171c46e18f644455d9ee856bf35f979e4dc99bb9719d3a765165d737f709a0ad48a6880f30490eee07d5d73bf9c773458f4373da5d6ce74fd6d"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "98ef95690ad0af9092be591f2994dcf233a45ac4f9ec97a973b77fa7099051fa6144b2905a93f5265f1baf2e1c2b1f11b845663ba85af4e85745b412b730503f854196e47dddf9640015a283d5d5d3a61979"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}]}]}, {}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @flow_offload={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "065ed84dde7e9fa129c17def9ea6da7120ef075a0cc4e29a1dc5934915bbf9a8772bf0d9633192ec7021a436a6962f7a7ebb112cf9a1566599bca4a5370fb9a96df92a482e00511f6627d939c5107aa64246a4d51906432b6a9a5f314bf6caf6955e042d77c01b35551a4ffa197fb1886669e43789873f19ca1192930ece3d533e10ca47b9e5fdc1ca4db9a66b85bb9107090b468e13587a447af94c1462ee953404c1d69cfa915782c5f3e9126e44a5d7f2d356e3cd01d1a8ca2aa60f7d6ce76012b27e693ac42ef0f1ff7df1e7977aca"}, @NFTA_DATA_VALUE={0x0, 0x1, "75a32430f86fe99de9167702c7017fecb2e89a8d4bca974f7665020580b01ab6e9712c93a3f93bfdbd23eb7671cd37ef80df2fb2c602ec896c2277224666d4c2e5ffc7aa"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE]}, @NFTA_DATA_VALUE={0x0, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "f161ac436bee8e40b57c7bf50590934dac2fbd3f23452ec36ab2db97d94d1bf3bdaed581bf64c653ab527c98739dc3d2301962b0977b4a4db8ee28e81099331be7d3db931998"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "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"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x1e670d97cff25107}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "170246099ff98f0bcab7c7ec174159bd86fa644e991fe35c5c51d98e714b2cc35909fbca310936533bee8876c65f741960a16580d2d2ec42da95609d0ba2733a2ff5269a368bacabf5da85493f2e814d8f3547846662a2e674647298406830e1855b75add9ea9bcee111a4c75fa4b01db58c6e10fb4fd8a643fdb63f5f890683f47e9cb063c571af2224287681e523ab35f4bd3e681ed3fa954285d07ae82b1551401fb221f44e3c9238f37705f644087c737496eb0f97f0d6750e76624775104d42ff498d72dcb8008fe5ff044dc4fc32"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE]}]}, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "e1c672e6aceda872fba0c80808cc133137be76821ed9c1c8c054150c56559658"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "bb57bb024978d8204dc52a6742b03698bd2a41a3ee6c019865f02668f069fb77371ec4ded6f44e238d1c2f2a41cdd4700b4df5066649c417b93fa8d75d8f3677873f3d35d10dd6410881ec8c960c0b8cd79a783d2f66ea9540963b4e93967fcb6a9182330a501b56a0b4567691af05a233921c191beb76a9b84ed91952ac9b39197fe2b604e5dd2963f9d49cd55430e970026b3657907e712db02ba8111316806d491a3f09296565ba58e2a538e2935eae130b71dde49643ca6b34bffc5d3d06fa92afe7928ffbc9676505ef79b9b53f3e4be724589ca0f8cd03e84fc70b00eaaf8392"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x0, 0x1, "18c1b435a3efae3a0b76ec36d94c4976e8988b41593244bb58f6852f91eaf86f130eacf9712041c8fa76c73e78d0d936f167fb07d79bcd63023cdf67ff4a394ba2270e29eb113be5943314bc6aab92d559c06691e5ecd514ce96008ec332b46dbd390779300eb0be828c71fa45ad32eda552b31391d0911867f9b396a7d37429033c4beef1e9af85260b98789b998c8f8261b84f3fb08e6123fe808f9030f8032f6b9c40b1d42cbb53353735fe9d71141f76e2c660e2fe68df0a980732c77b90743f4f68ba709e06"}, @NFTA_DATA_VALUE={0x0, 0x1, "e9e71b95a68a4b0106fd3102098018108b0c27418f0e1bc1fa84502e0432a5b400821d133addfd15bd0ac9097607b6ecd69c4409d02d7e003e0335555a89d546102ba9df339ae190982036ab3ff53ea65f7baea60e0d6033f30d7cac0b9285e781504387eb3209b5341436244a34bd7ffa010454d624e6c394166436929c68cc97caf6a177c2e99da6ec7256f300647b13588daed7bd4040a6bff78aedbb910dab8c8e0bff32e173bfe75740b7b39e341a33860a43da7c823a8d909e1778747dc8c24d91597a1932b683f532588e7e01e251a73ba06027"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "88cd48e038472bcfb0722e035ba9600d1e14f4787d344a9c1a3b3c1897e714f4a5de4c1fa3a820f84a7502c36090d3e380a39eada2364b82ec361cf668368b3a63abf0162a6ec1306f68fd447ef44bc366860e29d48b36529147c0153b01fe62b3d3b6e3d262e36865fbb32ba66e744b685adeeed526313eeedcd1355b44150c13fdd9eca94cbbf8f3b7de832249108ad382d1c135fee6a7dd2737eb72c3f19aa0aa17891c"}, @NFTA_SET_ELEM_EXPIRATION, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "3b047052223cb95d1f7f2f84776a0b9a81121b7649e53dc96f0617c2aec96bea5bba448c54184bb70aeec23a11d63c110dcd864cfcb10e5bd93901f079cffb084cb1"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x494, 0x3, 0x0, 0x1, [{0x384, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "09e6b02ddbf76a5cde313449caa85ed39ba02c28e239e4ca0d670e470934ac36fd2fdf98e437cb537afa838b187bc584fbf5cc8d248877357e44fd7f4e982b5526de673a969b2c02efe8fba60ddd608c41fbce1979b36feaa3743a09c39009674bffd43033de7366c8eab9fe93d2ffb73e8383b18a1e292948dec7b96a69bbc15dc2c2d488669acbd1aa98e4bc66904048f8aa999e84ce05ef4385d6f0ca6191409dfe369602f50845efaf4a1adc35cac21fc0c7b8f4a71abef9c6b69cbcbc08e1b6548979017025e8b95106d6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS, @NFTA_SET_ELEM_KEY_END={0x1b8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "9fd0a7e295ec02f1b9c07074762e550c3e21d7efefb2f7f0b9565a32aa200fc428d8e586787c706a8da33f2a6e5611ceb6310e7f2180c274811e658ec249cecac18ee6e5b060701c493d7664599903d299efafe99cc460b87ba48d5d8d5bdf4911d8c9407afd015cb528c444aad72424fa9a35bc53c9f494ccdbeff6cf3d917ccac3770930ace1ab8c09cfdb38922d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x4c, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "7cab2854b6dacb4041a1096360a2b484620ebc07796c7715521c6f2e1df0397f545914457b7f0b1c6be22487a64554409617ef8922fa219098084624e4e644cf8b33da6f5b15556acab8ea5b5abfc25db7a6d5fa442ed1f1e1db2e5684e7535420e269e8eb024e5d4e8c17b2734c04d937bd1871b246103d54e457bef0a352e3d364efbe70252c482a746402544ceed41b93a34a25506f4d49f16e9a1166ec3c19c78969cd4668a97f85c7e93a107d5aa2719f4e99a189de0bfd2974e48b3241a46a6989c7237364c027c122b88cff56dbf2ceb4a8d6781a2d57526e11725f089f0c5f1c04357490b82598abdf3e506ae3fba8c515d4eadd44"}]}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "20c6e1f4712ac06c1e29fedefa8c4eabe093395d7dcb5fca32ac3f6a6eeecbca7e643c2f4c9db9b73a00c7891e3bbbe9548d7429a4bbf0b12a77e9cb2a31617980c9bff857269bfd4f69d3958eea6868a4317ad51c22be5f041a538678f97463dddcfb835b6be24b533f3e395a2b7d5454a9b03a03509428577a88267f3498a38680c8b69987443fd59e8913a91d8e5fb339c1e858eb68233f91f31d96b6b080a63bdf11e0c1bf1fc3a75087c32c087a"}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "e962e11aee0fb82645c80879543b439bbd41c1c5ea2bfe4841d9f2837090ec791be53b8c533fd1f214ef7e87f15540aa610ef13bd0bfd580da01ee458177f5f01719aa5ef9a921cbfcaf22eea980db346995cd5f155fb492bde467fafefe9af3c25504bcfb8d8c20422d5803f2f8943590dda2b6a9218abb5ebab846a80e8fc49da666748ec271513e479187860b507e32868ce9dc5aa00ab7da50defc127366cd123a12bd1e7ffdbb16bd2c22c0a7cfd8e887b67cdc4a5310d578da11694478bd8eb340c2cfd3b5cda5e674"}, @NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x500}, 0x1, 0x0, 0x0, 0x40000005}, 0x4044840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000d04cb51c602523de809944958342c3225bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000002480400240012800b0001006272796467650000140002800800020006000000361cdb9fb45f51da190500190084000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x404c840) getsockname$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000a40)={r2, 0x1, 0x6, @local}, 0x10) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) shutdown(r0, 0x1) 1.043088809s ago: executing program 0 (id=2692): socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000f385258c80e52ff9f51e81", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000250000000000000000000000070000009404feb84414880000000000000000000000000000000000110000000000000000000000010000"], 0x98}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff2}, {0x0, 0x9}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x24000090}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000003c0)={r10, @in={{0x2, 0x4e20, @multicast2}}, 0x4d660ca9, 0x8001, 0x8, 0x7fffffff, 0x7f}, &(0x7f0000000200)=0x98) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r12, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000031c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x2034}, 0x20) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r13, @ANYRES16=r11, @ANYRES16=0x0], 0x44}}, 0x804) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240001800b00010072656a656374000014000280080001400000000105ff07000000000000000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) 832.690679ms ago: executing program 1 (id=2693): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write(r0, &(0x7f0000000000)="3b000000010001ada89856a8edd9a222dfc5ac08", 0x14) 735.83902ms ago: executing program 0 (id=2694): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0, 0xfffffef8, 0xfffffffffffffdc8, 0x0, 0x200000}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x6, 0x4, 0x86, 0x6}]}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r5, 0x0, &(0x7f0000000200)) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="28144000", @ANYRESOCT=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) 598.178263ms ago: executing program 1 (id=2695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000001000000000c001800", @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x400d0) 398.197752ms ago: executing program 1 (id=2696): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x1, {@in6_addr=@local, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000000000002900000002000000d54d3fdfad1f3d84d236216dcf1249a1af97db884c3038867ae1f1bae962e76671ff34331e40b2e07d5ccdd3740ed31fd960cd5494506b51c5ef431512e105651ed0de33cb00a6544ac3f1075950d95f88d0a37568d7405b6eef0e5505f3734451f3d5e319c771b242c06aa77a2ef9601bbdebcc616b1906d580445d41fc2b25671453275c9f3f2b33bc1af79ba5a9c9bc6310087b83ce2f41943c7de057abee386b131acc1a9107967f8777b02a06274b5c7984c1d368477485a840aec5a8f2ff3a"], 0x10}}], 0x1, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) 397.930341ms ago: executing program 2 (id=2697): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) unshare(0x24020400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) (async) unshare(0x24020400) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x5, &(0x7f0000000300)="7c053c4c", 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) (async) unshare(0x28050c00) (async) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) 326.743956ms ago: executing program 1 (id=2698): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x400}, 0x6b) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800d208a1d89ea7", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4060019}, 0x20000041) 144.424392ms ago: executing program 2 (id=2699): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x400, {}, {}, {}, 0x1, @can={{}, 0x1, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x1}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r7}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="300300003a00000826bd7000fedbdf250900000008005300", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0400ab80b3cf372d245f47ef5bcad846dda941490eb7ddccb0f17f705d5e28fa6d7367e1541ee216bdec88e8fe5707023e38e557e78b0b85894952abc9c7f39d02edaedefd76a970b6ec6d1612cc098f4f16a8d19927d341a6c65085581aad460fcaf4c6cddcc1c30bab4589ef9c8cf5afa2bae302b692637a47462a9f9b04002d80000028000c8008002500", @ANYRES32=r1, @ANYBLOB="66180d1e0a2c7d1d083960b0b738ada05ac2c49a1d4e7a42414d6efbc81383acf150eb36fe7e8c65d2f134a097c2f344c3c3543aa9371d7d6d3b29726de20bf300000000000000", @ANYRES32=r3, @ANYBLOB="08008b00", @ANYRES32=r3, @ANYBLOB="0400db0008000400f4000000"], 0x330}, 0x1, 0x0, 0x0, 0x20000000}, 0x84000) socket$inet_icmp(0x2, 0x2, 0x1) 0s ago: executing program 2 (id=2700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) recvfrom$l2tp(r1, &(0x7f0000000240)=""/176, 0xb0, 0x23, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c000380080002400000000008000140000018"], 0x80}}, 0x4000000) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1e0, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xd9, 0x6, "7bd0f1cd72a19224662da4b8f6b3efa2fa2a31c5d876732360411ac63041fbd8709a69b249a163817622745106ae758fe231768630052d61c47a8ede49ca0f9f5935c0e3a7d49c4ee82b263447f44b8cb3c97b4876df35cb541a48c43bb30da9be3ce4c082655a8cbd89b05b05f55d523e6803d4c36b516aa48a2d6f837b9fdc86870826480090f52e4fcbfe0a2fa125877459ecd62742a5f39c79773c598a0581c0b67eaffc6ac6d62b24b599bcf711785f07cefdc22db5807b384b0cb690aae6278fac0abe9115759ac5d2d93fad80c4c812511b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "ea1bce1bc2cc55a74bd2a0f91d39464cff7360ac9ddf7a9d302011d56eee7821fce7fe888abdd4a47f63d22a33cde1b61179346499a2de535405a65e80fa39cb2810f29c0633a6fc9890c6e96a15383babe90bcfc750968e8f74d69baec230ddeda764c06c8aa74d2af77bb6d32bc187eef42eea34741134d3dd604f015efa22a4959bea3ad92abd046ef281a40736b9441da1e69036cc92631f7c50"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40080}, 0xc894) kernel console output (not intermixed with test programs): ] RIP: 0033:0x7f98dbd8e929 [ 367.079367][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.079385][T13963] RSP: 002b:00007f98dcc0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.079407][T13963] RAX: ffffffffffffffda RBX: 00007f98dbfb5fa0 RCX: 00007f98dbd8e929 [ 367.079422][T13963] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 367.079435][T13963] RBP: 00007f98dcc0e090 R08: 0000000000000000 R09: 0000000000000000 [ 367.079448][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.079460][T13963] R13: 0000000000000000 R14: 00007f98dbfb5fa0 R15: 00007ffd3aea0988 [ 367.079492][T13963] [ 367.907378][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 367.954548][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 368.286486][ T5851] Bluetooth: hci4: command 0x041b tx timeout [ 368.519486][T13874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.534661][T13874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.697340][T13874] team0: Port device team_slave_0 added [ 368.741114][T13874] team0: Port device team_slave_1 added [ 368.824244][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2295'. [ 368.841179][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 368.880602][T13874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.896636][T13874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.934809][T13874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.978746][T13874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.009864][T13874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.059789][T13874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.216045][T14002] geneve3: entered promiscuous mode [ 369.353884][T13874] hsr_slave_0: entered promiscuous mode [ 369.389203][T13874] hsr_slave_1: entered promiscuous mode [ 369.402341][T13874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.409964][T13874] Cannot create hsr debugfs directory [ 369.572365][T14020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.784226][T14030] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 369.803788][T14030] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2303'. [ 369.837778][T14024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.968863][T14027] lo speed is unknown, defaulting to 1000 [ 370.362068][ T5851] Bluetooth: hci4: command 0x041b tx timeout [ 370.938883][T14060] lo speed is unknown, defaulting to 1000 [ 371.235437][T14068] lo speed is unknown, defaulting to 1000 [ 371.246241][T13874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.302731][T13874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.336003][T13874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.380401][T13874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.678648][T14072] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 371.913456][T14068] syzkaller1: entered promiscuous mode [ 371.939345][T14068] syzkaller1: entered allmulticast mode [ 371.958166][T14070] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 94 [ 372.006227][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 372.180401][T13874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.228976][T14112] netlink: 'syz.2.2323': attribute type 1 has an invalid length. [ 372.249635][T13874] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.252850][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2323'. [ 372.284122][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.291309][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.436500][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2325'. [ 372.442126][ T5851] Bluetooth: hci4: command 0x041b tx timeout [ 372.499127][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 372.557227][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 372.568811][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2326'. [ 372.569631][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.585051][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.629830][T14122] veth5: entered promiscuous mode [ 372.721663][T14124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.768920][T14125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2326'. [ 372.858244][T14124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.951107][T14133] netlink: 'syz.2.2329': attribute type 10 has an invalid length. [ 372.999189][T14124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.114321][T14124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.183141][T14139] tipc: Enabled bearer , priority 0 [ 373.238583][T14136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2330'. [ 373.289536][T14136] syzkaller0: entered promiscuous mode [ 373.295196][T14136] syzkaller0: entered allmulticast mode [ 373.313633][T14136] tipc: Resetting bearer [ 373.421277][T14136] tipc: Resetting bearer [ 373.460390][T14136] tipc: Disabling bearer [ 373.486183][ T6448] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.526779][ T6426] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.599580][ T6426] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.611442][ T6426] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.654860][T13874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.884309][T14168] netlink: 'syz.0.2339': attribute type 5 has an invalid length. [ 373.931297][T13874] veth0_vlan: entered promiscuous mode [ 373.967986][T13874] veth1_vlan: entered promiscuous mode [ 374.093875][T14174] netlink: 'syz.1.2342': attribute type 1 has an invalid length. [ 374.119377][T14174] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2342'. [ 374.129756][T13874] veth0_macvtap: entered promiscuous mode [ 374.140911][T14174] NCSI netlink: No device for ifindex 0 [ 374.152627][T13874] veth1_macvtap: entered promiscuous mode [ 374.213617][T13874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.267319][T13874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.313712][ T6554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.335524][ T6554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.375346][ T6554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.385849][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.525524][ T5851] Bluetooth: hci4: command 0x041b tx timeout [ 374.630740][T14187] lo speed is unknown, defaulting to 1000 [ 374.797499][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.821269][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.057176][T14210] delete_channel: no stack [ 375.069973][ T6448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.091583][ T6448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.652876][T14234] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 375.804738][ T6426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.928943][T14240] vlan3: entered allmulticast mode [ 375.958109][T14240] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 376.139921][ T6426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.340233][T14252] lo speed is unknown, defaulting to 1000 [ 376.486221][ T6426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.557196][T14253] lo speed is unknown, defaulting to 1000 [ 376.692729][T14268] Bluetooth: MGMT ver 1.23 [ 376.703530][ T6426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.070658][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.086764][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.098100][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.109475][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.117673][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.149110][T14282] tipc: Enabled bearer , priority 0 [ 377.176518][T14282] syzkaller0: entered promiscuous mode [ 377.182405][T14282] syzkaller0: entered allmulticast mode [ 377.205263][T14282] tipc: Resetting bearer [ 377.213566][T14280] tipc: Resetting bearer [ 377.230198][T14280] tipc: Disabling bearer [ 377.272214][ T6426] bridge_slave_1: left allmulticast mode [ 377.277935][ T6426] bridge_slave_1: left promiscuous mode [ 377.289892][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.299951][ T6426] bridge_slave_0: left allmulticast mode [ 377.322713][ T6426] bridge_slave_0: left promiscuous mode [ 377.328532][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.649975][T14293] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 377.658233][T14293] __nla_validate_parse: 1 callbacks suppressed [ 377.658252][T14293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2373'. [ 377.789967][T14295] xt_CT: No such helper "snmp" [ 377.856139][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.868925][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.879519][ T6426] bond0 (unregistering): Released all slaves [ 377.905306][T14281] lo speed is unknown, defaulting to 1000 [ 378.009399][T14300] netlink: 'syz.4.2376': attribute type 35 has an invalid length. [ 378.134532][T14302] Set syz0 is full, maxelem 0 reached [ 378.399635][T14309] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 378.429509][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 378.508888][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 378.645858][ T6426] hsr_slave_0: left promiscuous mode [ 378.683904][ T6426] hsr_slave_1: left promiscuous mode [ 378.698466][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.710482][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.710496][T14325] FAULT_INJECTION: forcing a failure. [ 378.710496][T14325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.737192][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.745061][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.771828][T14325] CPU: 0 UID: 0 PID: 14325 Comm: syz.2.2382 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 378.771858][T14325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.771870][T14325] Call Trace: [ 378.771879][T14325] [ 378.771888][T14325] dump_stack_lvl+0x189/0x250 [ 378.771918][T14325] ? __pfx____ratelimit+0x10/0x10 [ 378.771944][T14325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.771967][T14325] ? __pfx__printk+0x10/0x10 [ 378.771994][T14325] ? __might_fault+0xb0/0x130 [ 378.772027][T14325] should_fail_ex+0x414/0x560 [ 378.772066][T14325] _copy_from_user+0x2d/0xb0 [ 378.772088][T14325] ___sys_sendmsg+0x158/0x2a0 [ 378.772112][T14325] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.772180][T14325] ? __might_fault+0xb0/0x130 [ 378.772217][T14325] __sys_sendmmsg+0x227/0x430 [ 378.772242][T14325] ? __pfx___sys_sendmmsg+0x10/0x10 [ 378.772257][T14325] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 378.772313][T14325] ? ksys_write+0x22a/0x250 [ 378.772339][T14325] ? __pfx_ksys_write+0x10/0x10 [ 378.772358][T14325] ? rcu_is_watching+0x15/0xb0 [ 378.772387][T14325] __x64_sys_sendmmsg+0xa0/0xc0 [ 378.772409][T14325] do_syscall_64+0xfa/0x3b0 [ 378.772437][T14325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.772466][T14325] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.772486][T14325] ? clear_bhb_loop+0x60/0xb0 [ 378.772511][T14325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.772529][T14325] RIP: 0033:0x7f0a5c38e929 [ 378.772547][T14325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.772564][T14325] RSP: 002b:00007f0a5d2dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.772584][T14325] RAX: ffffffffffffffda RBX: 00007f0a5c5b5fa0 RCX: 00007f0a5c38e929 [ 378.772599][T14325] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 378.772612][T14325] RBP: 00007f0a5d2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 378.772624][T14325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.772636][T14325] R13: 0000000000000000 R14: 00007f0a5c5b5fa0 R15: 00007ffe191785d8 [ 378.772667][T14325] [ 378.797332][ T6426] veth1_macvtap: left promiscuous mode [ 378.992857][T14331] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2386'. [ 379.016994][ T6426] veth0_macvtap: left promiscuous mode [ 379.022859][ T6426] veth1_vlan: left promiscuous mode [ 379.028253][ T6426] veth0_vlan: left promiscuous mode [ 379.039607][T14333] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2386'. [ 379.055257][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2386'. [ 379.161926][ T5851] Bluetooth: hci4: command tx timeout [ 379.185718][T14338] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2388'. [ 379.197648][T14339] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2388'. [ 379.617016][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 379.664344][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 380.223110][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 380.247204][T14309] lo speed is unknown, defaulting to 1000 [ 380.620609][T14363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.671569][T14281] chnl_net:caif_netlink_parms(): no params data found [ 380.688402][T14365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.819842][T14363] lo speed is unknown, defaulting to 1000 [ 381.055220][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.063223][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.070558][T14281] bridge_slave_0: entered allmulticast mode [ 381.078573][T14281] bridge_slave_0: entered promiscuous mode [ 381.111298][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.125428][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.135388][T14281] bridge_slave_1: entered allmulticast mode [ 381.147640][T14281] bridge_slave_1: entered promiscuous mode [ 381.243331][ T5851] Bluetooth: hci4: command tx timeout [ 381.333777][T14281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.421276][T14281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.527874][T14381] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 381.747252][T14281] team0: Port device team_slave_0 added [ 381.770233][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 381.923914][T14387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.960347][T14387] bond0: (slave bond3): making interface the new active one [ 381.994330][T14387] bond0: (slave bond3): Enslaving as an active interface with an up link [ 382.041262][T14395] bond0: (slave gretap3): Enslaving as a backup interface with an up link [ 382.066830][T14398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.078026][T14281] team0: Port device team_slave_1 added [ 382.258234][T14281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.263018][T14406] xt_TCPMSS: Only works on TCP SYN packets [ 382.272426][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.306222][T14281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.360011][T14281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.376308][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.424676][T14281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.488504][T14412] erspan0: entered promiscuous mode [ 382.522561][T14412] erspan0: left promiscuous mode [ 382.860602][T14281] hsr_slave_0: entered promiscuous mode [ 382.882788][T14281] hsr_slave_1: entered promiscuous mode [ 382.891290][T14281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.906452][T14281] Cannot create hsr debugfs directory [ 382.913608][T14420] vlan1: entered allmulticast mode [ 382.926396][T14420] veth0_vlan: entered allmulticast mode [ 383.190261][T14435] Set syz0 is full, maxelem 0 reached [ 383.322625][ T5851] Bluetooth: hci4: command tx timeout [ 383.411298][T14439] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 383.425466][T14439] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 383.515886][T14441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.785612][T14281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.977345][T14281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.078975][T14281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.121524][T14463] tipc: New replicast peer: 255.255.255.255 [ 384.145647][T14463] tipc: Enabled bearer , priority 10 [ 384.152458][T14461] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 384.159188][T14461] syzkaller1: ignored: set checksum disabled [ 384.177241][T14281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.272382][T14454] lo speed is unknown, defaulting to 1000 [ 384.452015][T14456] netlink: 'syz.4.2419': attribute type 9 has an invalid length. [ 384.480921][T14456] __nla_validate_parse: 2 callbacks suppressed [ 384.480942][T14456] netlink: 205648 bytes leftover after parsing attributes in process `syz.4.2419'. [ 384.774698][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.830504][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.877534][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.883084][T14486] FAULT_INJECTION: forcing a failure. [ 384.883084][T14486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.884906][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.898805][T14486] CPU: 0 UID: 0 PID: 14486 Comm: syz.4.2426 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 384.898839][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.898853][T14486] Call Trace: [ 384.898862][T14486] [ 384.898872][T14486] dump_stack_lvl+0x189/0x250 [ 384.898908][T14486] ? __pfx____ratelimit+0x10/0x10 [ 384.898939][T14486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.898976][T14486] ? __pfx__printk+0x10/0x10 [ 384.899019][T14486] ? __might_fault+0xb0/0x130 [ 384.899061][T14486] should_fail_ex+0x414/0x560 [ 384.899100][T14486] _copy_from_user+0x2d/0xb0 [ 384.899128][T14486] ___sys_sendmsg+0x158/0x2a0 [ 384.899166][T14486] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.899243][T14486] ? __might_fault+0xb0/0x130 [ 384.899275][T14486] __sys_sendmmsg+0x227/0x430 [ 384.899303][T14486] ? __pfx___sys_sendmmsg+0x10/0x10 [ 384.899322][T14486] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 384.899389][T14486] ? ksys_write+0x22a/0x250 [ 384.899420][T14486] ? __pfx_ksys_write+0x10/0x10 [ 384.899452][T14486] ? rcu_is_watching+0x15/0xb0 [ 384.899489][T14486] __x64_sys_sendmmsg+0xa0/0xc0 [ 384.899514][T14486] do_syscall_64+0xfa/0x3b0 [ 384.899544][T14486] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.899573][T14486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.899597][T14486] ? clear_bhb_loop+0x60/0xb0 [ 384.899626][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.899654][T14486] RIP: 0033:0x7f8cfb98e929 [ 384.899676][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.899696][T14486] RSP: 002b:00007f8cfc86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 384.899715][T14486] RAX: ffffffffffffffda RBX: 00007f8cfbbb5fa0 RCX: 00007f8cfb98e929 [ 384.899728][T14486] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 384.899738][T14486] RBP: 00007f8cfc86e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.899749][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.899759][T14486] R13: 0000000000000000 R14: 00007f8cfbbb5fa0 R15: 00007ffeab12cc18 [ 384.899794][T14486] [ 385.136361][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.143606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.152136][ T5964] tipc: Node number set to 2760985122 [ 385.336598][T14497] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2429'. [ 385.350955][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2429'. [ 385.363406][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2429'. [ 385.403591][ T5851] Bluetooth: hci4: command tx timeout [ 385.512812][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2431'. [ 385.550046][T14506] netlink: 'syz.0.2432': attribute type 13 has an invalid length. [ 385.558733][T14506] netlink: 'syz.0.2432': attribute type 17 has an invalid length. [ 385.679153][T14506] gretap0: left promiscuous mode [ 385.705348][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2432'. [ 385.771204][T14510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.850686][T14510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.915873][T14510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.002750][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.010652][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.449444][T14506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.670090][T14506] vlan1: left allmulticast mode [ 386.680885][T14506] veth0_vlan: left allmulticast mode [ 386.919588][T14506] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 386.927147][T14506] macsec1: left promiscuous mode [ 386.932541][T14506] macsec1: left allmulticast mode [ 386.952654][T14506] vlan2: left allmulticast mode [ 386.958287][T14506] veth1: left allmulticast mode [ 386.965157][T14506] ipvlan2: left promiscuous mode [ 386.999781][T14506] gtp0: left promiscuous mode [ 387.006695][T14506] gtp0: left allmulticast mode [ 387.020489][T14506] ip6erspan0: left promiscuous mode [ 387.041949][ T5964] lo speed is unknown, defaulting to 1000 [ 387.059143][ T5964] syz2: Port: 1 Link DOWN [ 387.062582][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.072912][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.084172][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.096268][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.121891][T14281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.198851][T14281] veth0_vlan: entered promiscuous mode [ 387.220194][T14281] veth1_vlan: entered promiscuous mode [ 387.250835][T14281] veth0_macvtap: entered promiscuous mode [ 387.260673][T14281] veth1_macvtap: entered promiscuous mode [ 387.286196][T14281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.301396][T14281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.317365][ T6426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.329368][ T6426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.341221][ T6426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.352300][ T6552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.424917][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.437066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.464936][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.476830][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.740003][ T6552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.317030][ T6552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.532245][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.540542][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.549316][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.559012][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.567226][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.602971][T14518] lo speed is unknown, defaulting to 1000 [ 389.732400][ T6552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.792878][T14518] chnl_net:caif_netlink_parms(): no params data found [ 389.829646][ T6552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.919186][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.926604][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.938623][T14518] bridge_slave_0: entered allmulticast mode [ 389.946605][T14518] bridge_slave_0: entered promiscuous mode [ 389.956384][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.963754][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.970990][T14518] bridge_slave_1: entered allmulticast mode [ 389.978666][T14518] bridge_slave_1: entered promiscuous mode [ 390.028523][T14518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.053524][T14518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.112415][T14518] team0: Port device team_slave_0 added [ 390.119634][ T6552] bridge_slave_1: left allmulticast mode [ 390.125621][ T6552] bridge_slave_1: left promiscuous mode [ 390.131547][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.143164][ T6552] bridge_slave_0: left allmulticast mode [ 390.149190][ T6552] bridge_slave_0: left promiscuous mode [ 390.155147][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.497009][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.509359][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.520112][ T6552] bond0 (unregistering): Released all slaves [ 390.539379][T14518] team0: Port device team_slave_1 added [ 390.585784][T14518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.593326][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.619561][T14518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.639315][T14518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.653218][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.679553][T14518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.759886][T14518] hsr_slave_0: entered promiscuous mode [ 390.767425][T14518] hsr_slave_1: entered promiscuous mode [ 390.773957][T14518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.781528][T14518] Cannot create hsr debugfs directory [ 390.908942][ T6552] hsr_slave_0: left promiscuous mode [ 390.915810][ T6552] hsr_slave_1: left promiscuous mode [ 390.922600][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.930015][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.937973][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.945952][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.969620][ T6552] veth1_macvtap: left promiscuous mode [ 390.975302][ T6552] veth0_macvtap: left promiscuous mode [ 390.980999][ T6552] veth1_vlan: left promiscuous mode [ 390.987661][ T6552] veth0_vlan: left promiscuous mode [ 391.456935][ T6552] team0 (unregistering): Port device team_slave_1 removed [ 391.497369][ T6552] team0 (unregistering): Port device team_slave_0 removed [ 391.643396][ T5851] Bluetooth: hci4: command tx timeout [ 392.368881][T14518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.381058][T14518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.391445][T14518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.402239][T14518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.489209][T14518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.509660][T14518] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.524025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.531171][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.546814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.554009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.768626][T14518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.819806][T14518] veth0_vlan: entered promiscuous mode [ 392.831260][T14518] veth1_vlan: entered promiscuous mode [ 392.866361][T14518] veth0_macvtap: entered promiscuous mode [ 392.879985][T14518] veth1_macvtap: entered promiscuous mode [ 392.901086][T14518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.917658][T14518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.931683][ T6552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.941382][ T6552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.954636][ T6552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.967971][ T6552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.036906][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.049760][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.083662][ T6552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.092281][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.813440][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.686105][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.694461][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.702340][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.710499][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.719405][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.757484][T14537] lo speed is unknown, defaulting to 1000 [ 395.918414][T14537] chnl_net:caif_netlink_parms(): no params data found [ 396.015096][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.022423][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.029621][T14537] bridge_slave_0: entered allmulticast mode [ 396.037820][T14537] bridge_slave_0: entered promiscuous mode [ 396.046198][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.055031][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.062590][T14537] bridge_slave_1: entered allmulticast mode [ 396.070023][T14537] bridge_slave_1: entered promiscuous mode [ 396.108140][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.120795][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.162899][T14537] team0: Port device team_slave_0 added [ 396.171092][T14537] team0: Port device team_slave_1 added [ 396.206083][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.213324][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.240239][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.253877][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.261259][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.291064][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.346430][T14537] hsr_slave_0: entered promiscuous mode [ 396.353871][T14537] hsr_slave_1: entered promiscuous mode [ 396.360811][T14537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.368461][T14537] Cannot create hsr debugfs directory [ 396.623831][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.720200][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.781089][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.909417][ T13] bridge_slave_1: left allmulticast mode [ 396.915194][ T13] bridge_slave_1: left promiscuous mode [ 396.921039][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.931385][ T13] bridge_slave_0: left allmulticast mode [ 396.937489][ T13] bridge_slave_0: left promiscuous mode [ 396.943579][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.271470][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.287683][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.298827][ T13] bond0 (unregistering): Released all slaves [ 397.561206][ T13] hsr_slave_0: left promiscuous mode [ 397.568740][ T13] hsr_slave_1: left promiscuous mode [ 397.574954][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.584594][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.597046][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.604731][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.628638][ T13] veth1_macvtap: left promiscuous mode [ 397.634374][ T13] veth0_macvtap: left promiscuous mode [ 397.640014][ T13] veth1_vlan: left promiscuous mode [ 397.646023][ T13] veth0_vlan: left promiscuous mode [ 397.813903][ T5851] Bluetooth: hci4: command tx timeout [ 398.121399][ T13] team0 (unregistering): Port device team_slave_1 removed [ 398.166931][ T13] team0 (unregistering): Port device team_slave_0 removed [ 398.825106][T14537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.838457][T14537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.856812][T14537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.869452][T14537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.976797][T14537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.999175][T14537] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.013063][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.020243][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.039849][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.047029][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.267204][T14537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.313911][T14537] veth0_vlan: entered promiscuous mode [ 399.328199][T14537] veth1_vlan: entered promiscuous mode [ 399.360579][T14537] veth0_macvtap: entered promiscuous mode [ 399.371660][T14537] veth1_macvtap: entered promiscuous mode [ 399.394661][T14537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.418315][T14537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.436055][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.445276][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.463848][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.479616][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.536568][ T6557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.551810][ T6557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.576092][ T6557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.584473][ T6557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.345599][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.355551][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.364820][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.372891][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.386526][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.394359][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.434362][T14556] lo speed is unknown, defaulting to 1000 [ 402.603066][T14556] chnl_net:caif_netlink_parms(): no params data found [ 402.695449][T14556] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.703041][T14556] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.710675][T14556] bridge_slave_0: entered allmulticast mode [ 402.719280][T14556] bridge_slave_0: entered promiscuous mode [ 402.727488][T14556] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.734849][T14556] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.742266][T14556] bridge_slave_1: entered allmulticast mode [ 402.749706][T14556] bridge_slave_1: entered promiscuous mode [ 402.788684][T14556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.800975][T14556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.844887][T14556] team0: Port device team_slave_0 added [ 402.853650][T14556] team0: Port device team_slave_1 added [ 402.910468][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.930345][T14556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.938652][T14556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.965420][T14556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.994856][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.012590][T14556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.019935][T14556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.046434][T14556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.080882][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.145562][T14556] hsr_slave_0: entered promiscuous mode [ 403.153861][T14556] hsr_slave_1: entered promiscuous mode [ 403.160116][T14556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.168273][T14556] Cannot create hsr debugfs directory [ 403.297935][ T13] bridge_slave_1: left allmulticast mode [ 403.303682][ T13] bridge_slave_1: left promiscuous mode [ 403.309462][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.319418][ T13] bridge_slave_0: left allmulticast mode [ 403.327790][ T13] bridge_slave_0: left promiscuous mode [ 403.333815][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.706650][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.718941][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.729454][ T13] bond0 (unregistering): Released all slaves [ 404.027695][ T13] hsr_slave_0: left promiscuous mode [ 404.033964][ T13] hsr_slave_1: left promiscuous mode [ 404.039872][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.047753][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.058819][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.066784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.096211][ T13] veth1_macvtap: left promiscuous mode [ 404.101979][ T13] veth0_macvtap: left promiscuous mode [ 404.107597][ T13] veth1_vlan: left promiscuous mode [ 404.113223][ T13] veth0_vlan: left promiscuous mode [ 404.442211][ T5851] Bluetooth: hci4: command tx timeout [ 404.610542][ T13] team0 (unregistering): Port device team_slave_1 removed [ 404.650010][ T13] team0 (unregistering): Port device team_slave_0 removed [ 405.249839][T14556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.263831][T14556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.283462][T14556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.301061][T14556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.415718][T14556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.439041][T14556] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.451578][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.458763][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.477554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.484746][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.707682][T14556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.759748][T14556] veth0_vlan: entered promiscuous mode [ 405.772978][T14556] veth1_vlan: entered promiscuous mode [ 405.804308][T14556] veth0_macvtap: entered promiscuous mode [ 405.815797][T14556] veth1_macvtap: entered promiscuous mode [ 405.839854][T14556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.856141][T14556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.873854][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.887129][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.901452][ T6557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.911556][ T6426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.973141][ T6438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.981019][ T6438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.013258][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.025737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.730255][ T6426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.784194][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.793923][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.801884][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.810260][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.820193][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.856324][T14575] lo speed is unknown, defaulting to 1000 [ 409.016716][T14575] chnl_net:caif_netlink_parms(): no params data found [ 409.114538][T14575] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.121865][T14575] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.129094][T14575] bridge_slave_0: entered allmulticast mode [ 409.137256][T14575] bridge_slave_0: entered promiscuous mode [ 409.146529][T14575] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.153807][T14575] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.161330][T14575] bridge_slave_1: entered allmulticast mode [ 409.168857][T14575] bridge_slave_1: entered promiscuous mode [ 409.206099][T14575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.218297][T14575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.260563][T14575] team0: Port device team_slave_0 added [ 409.269301][T14575] team0: Port device team_slave_1 added [ 409.309857][ T6426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.342829][T14575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.349834][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.376216][T14575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.391580][T14575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.400098][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.426933][T14575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.459525][ T6426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.525299][T14575] hsr_slave_0: entered promiscuous mode [ 409.532033][T14575] hsr_slave_1: entered promiscuous mode [ 409.538473][T14575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.546829][T14575] Cannot create hsr debugfs directory [ 409.573372][ T6426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.758187][ T6426] bridge_slave_1: left allmulticast mode [ 409.766731][ T6426] bridge_slave_1: left promiscuous mode [ 409.775130][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.785537][ T6426] bridge_slave_0: left allmulticast mode [ 409.791306][ T6426] bridge_slave_0: left promiscuous mode [ 409.797624][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.181663][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.193622][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.204615][ T6426] bond0 (unregistering): Released all slaves [ 410.454003][ T6426] hsr_slave_0: left promiscuous mode [ 410.459900][ T6426] hsr_slave_1: left promiscuous mode [ 410.466863][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.479823][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.489113][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.496731][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.520135][ T6426] veth1_macvtap: left promiscuous mode [ 410.525979][ T6426] veth0_macvtap: left promiscuous mode [ 410.531673][ T6426] veth1_vlan: left promiscuous mode [ 410.537170][ T6426] veth0_vlan: left promiscuous mode [ 410.848070][ T5851] Bluetooth: hci4: command tx timeout [ 411.037576][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 411.088360][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 411.585999][T14575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.600375][T14575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.624272][T14575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.636859][T14575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.769931][T14575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.800383][T14575] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.814071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.821234][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.847045][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.854262][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.065513][T14575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.111103][T14575] veth0_vlan: entered promiscuous mode [ 412.123378][T14575] veth1_vlan: entered promiscuous mode [ 412.158358][T14575] veth0_macvtap: entered promiscuous mode [ 412.168533][T14575] veth1_macvtap: entered promiscuous mode [ 412.188693][T14575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.205473][T14575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.221137][ T6557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.235042][ T6557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.247785][ T6557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.260208][ T6557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.336519][ T6552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.354571][ T6552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.381161][ T6552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.390298][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.150575][ T6426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.325582][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.334032][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.342554][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.350777][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.362770][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.400101][T14594] lo speed is unknown, defaulting to 1000 [ 415.564325][T14594] chnl_net:caif_netlink_parms(): no params data found [ 415.635484][ T6426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.686486][T14594] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.695171][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.708170][T14594] bridge_slave_0: entered allmulticast mode [ 415.716646][T14594] bridge_slave_0: entered promiscuous mode [ 415.742329][ T6426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.759345][T14594] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.766831][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.774469][T14594] bridge_slave_1: entered allmulticast mode [ 415.782570][T14594] bridge_slave_1: entered promiscuous mode [ 415.834440][ T6426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.854613][T14594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.868003][T14594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.908818][T14594] team0: Port device team_slave_0 added [ 415.919611][T14594] team0: Port device team_slave_1 added [ 415.959495][T14594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.966819][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.993440][T14594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.017874][T14594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.025685][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.052698][T14594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.117886][ T6426] bridge_slave_1: left allmulticast mode [ 416.124363][ T6426] bridge_slave_1: left promiscuous mode [ 416.130834][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.141608][ T6426] bridge_slave_0: left allmulticast mode [ 416.147683][ T6426] bridge_slave_0: left promiscuous mode [ 416.153826][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.518456][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.536629][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.547408][ T6426] bond0 (unregistering): Released all slaves [ 416.588386][T14594] hsr_slave_0: entered promiscuous mode [ 416.595384][T14594] hsr_slave_1: entered promiscuous mode [ 416.601884][T14594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.609498][T14594] Cannot create hsr debugfs directory [ 416.857395][ T6426] hsr_slave_0: left promiscuous mode [ 416.867531][ T6426] hsr_slave_1: left promiscuous mode [ 416.873522][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.880914][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.895567][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.903473][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.924753][ T6426] veth1_macvtap: left promiscuous mode [ 416.930317][ T6426] veth0_macvtap: left promiscuous mode [ 416.937097][ T6426] veth1_vlan: left promiscuous mode [ 416.942743][ T6426] veth0_vlan: left promiscuous mode [ 417.403273][ T5851] Bluetooth: hci4: command tx timeout [ 417.420250][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 417.465383][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 418.189874][T14594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.202074][T14594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.215180][T14594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.226635][T14594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 418.310300][T14594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.336138][T14594] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.349377][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.356563][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.376455][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.383639][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.592935][T14594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.636046][T14594] veth0_vlan: entered promiscuous mode [ 418.650115][T14594] veth1_vlan: entered promiscuous mode [ 418.687764][T14594] veth0_macvtap: entered promiscuous mode [ 418.699245][T14594] veth1_macvtap: entered promiscuous mode [ 418.719785][T14594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.738828][T14594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.758418][ T6552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.769587][ T6552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.784736][ T6552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.797017][ T6552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.860720][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.871870][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.903409][ T6552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.911277][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.650751][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.935456][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.948312][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.956494][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.969191][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.977158][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.016110][T14613] lo speed is unknown, defaulting to 1000 [ 422.174136][T14613] chnl_net:caif_netlink_parms(): no params data found [ 422.263707][T14613] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.271041][T14613] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.278805][T14613] bridge_slave_0: entered allmulticast mode [ 422.290637][T14613] bridge_slave_0: entered promiscuous mode [ 422.300864][T14613] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.308185][T14613] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.315460][T14613] bridge_slave_1: entered allmulticast mode [ 422.323351][T14613] bridge_slave_1: entered promiscuous mode [ 422.360357][T14613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.373796][T14613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.417729][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.451422][T14613] team0: Port device team_slave_0 added [ 422.461281][T14613] team0: Port device team_slave_1 added [ 422.516398][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.535246][T14613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.542825][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.569156][T14613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.582798][T14613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.589776][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.616006][T14613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.641655][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.705622][T14613] hsr_slave_0: entered promiscuous mode [ 422.712687][T14613] hsr_slave_1: entered promiscuous mode [ 422.718898][T14613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.727355][T14613] Cannot create hsr debugfs directory [ 422.851549][ T13] bridge_slave_1: left allmulticast mode [ 422.857604][ T13] bridge_slave_1: left promiscuous mode [ 422.863676][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.873520][ T13] bridge_slave_0: left allmulticast mode [ 422.879195][ T13] bridge_slave_0: left promiscuous mode [ 422.885307][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.248498][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.261017][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.271530][ T13] bond0 (unregistering): Released all slaves [ 423.620871][ T13] hsr_slave_0: left promiscuous mode [ 423.627061][ T13] hsr_slave_1: left promiscuous mode [ 423.639311][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.647243][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.655885][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.663477][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.685989][ T13] veth1_macvtap: left promiscuous mode [ 423.691621][ T13] veth0_macvtap: left promiscuous mode [ 423.698427][ T13] veth1_vlan: left promiscuous mode [ 423.703889][ T13] veth0_vlan: left promiscuous mode [ 424.042137][ T5851] Bluetooth: hci4: command tx timeout [ 424.190641][ T13] team0 (unregistering): Port device team_slave_1 removed [ 424.231512][ T13] team0 (unregistering): Port device team_slave_0 removed [ 424.860654][T14613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.872908][T14613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 424.885237][T14613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 424.895257][T14613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 424.997312][T14613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.019634][T14613] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.033565][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.040791][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.057398][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.064563][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.283249][T14613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.337284][T14613] veth0_vlan: entered promiscuous mode [ 425.351146][T14613] veth1_vlan: entered promiscuous mode [ 425.380279][T14613] veth0_macvtap: entered promiscuous mode [ 425.391342][T14613] veth1_macvtap: entered promiscuous mode [ 425.415615][T14613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.430074][T14613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.446135][ T6552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.457637][ T6552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.468102][ T6552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.478930][ T6552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.551224][ T6552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.559521][ T6552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.588541][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.597803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.329033][ T6448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.692694][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.700984][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.710928][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.719771][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.729032][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.763213][T14632] lo speed is unknown, defaulting to 1000 [ 428.918480][ T6448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.949910][T14632] chnl_net:caif_netlink_parms(): no params data found [ 429.010457][ T6448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.094003][ T6448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.108933][T14632] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.116591][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.124125][T14632] bridge_slave_0: entered allmulticast mode [ 429.132056][T14632] bridge_slave_0: entered promiscuous mode [ 429.140194][T14632] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.147604][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.154885][T14632] bridge_slave_1: entered allmulticast mode [ 429.162786][T14632] bridge_slave_1: entered promiscuous mode [ 429.206613][T14632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.219728][T14632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.264238][T14632] team0: Port device team_slave_0 added [ 429.286599][T14632] team0: Port device team_slave_1 added [ 429.349242][T14632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.356723][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.388167][T14632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.411178][T14632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.418271][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.444953][T14632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.456119][ T6448] bridge_slave_1: left allmulticast mode [ 429.466651][ T6448] bridge_slave_1: left promiscuous mode [ 429.472532][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.482467][ T6448] bridge_slave_0: left allmulticast mode [ 429.488140][ T6448] bridge_slave_0: left promiscuous mode [ 429.494956][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.890452][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.901933][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.912827][ T6448] bond0 (unregistering): Released all slaves [ 429.982114][T14632] hsr_slave_0: entered promiscuous mode [ 429.989125][T14632] hsr_slave_1: entered promiscuous mode [ 429.995689][T14632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.003428][T14632] Cannot create hsr debugfs directory [ 430.248815][ T6448] hsr_slave_0: left promiscuous mode [ 430.257360][ T6448] hsr_slave_1: left promiscuous mode [ 430.263906][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.271332][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.288286][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.295894][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.318235][ T6448] veth1_macvtap: left promiscuous mode [ 430.323952][ T6448] veth0_macvtap: left promiscuous mode [ 430.329560][ T6448] veth1_vlan: left promiscuous mode [ 430.335136][ T6448] veth0_vlan: left promiscuous mode [ 430.762061][ T5851] Bluetooth: hci4: command tx timeout [ 430.800711][ T6448] team0 (unregistering): Port device team_slave_1 removed [ 430.843495][ T6448] team0 (unregistering): Port device team_slave_0 removed [ 431.578013][T14632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.593519][T14632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.604928][T14632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.619659][T14632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.704413][T14632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.728073][T14632] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.740847][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.748015][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.766017][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.773267][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.980358][T14632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.029319][T14632] veth0_vlan: entered promiscuous mode [ 432.047242][T14632] veth1_vlan: entered promiscuous mode [ 432.078479][T14632] veth0_macvtap: entered promiscuous mode [ 432.089525][T14632] veth1_macvtap: entered promiscuous mode [ 432.109545][T14632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.127079][T14632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.147745][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.157306][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.170512][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.180988][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.248288][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.261507][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.290593][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.298777][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.216315][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.546869][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2436'. [ 435.589511][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2436'. [ 435.865027][T14666] lo speed is unknown, defaulting to 1000 [ 436.296963][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.307450][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.316629][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.325275][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.333406][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.383562][T14671] lo speed is unknown, defaulting to 1000 [ 436.649658][T14676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.732426][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.916411][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.976688][T14671] chnl_net:caif_netlink_parms(): no params data found [ 437.007345][T14677] lo speed is unknown, defaulting to 1000 [ 437.050026][T14687] FAULT_INJECTION: forcing a failure. [ 437.050026][T14687] name failslab, interval 1, probability 0, space 0, times 0 [ 437.072215][T14687] CPU: 0 UID: 0 PID: 14687 Comm: syz.2.2441 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 437.072246][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.072259][T14687] Call Trace: [ 437.072268][T14687] [ 437.072276][T14687] dump_stack_lvl+0x189/0x250 [ 437.072309][T14687] ? __pfx____ratelimit+0x10/0x10 [ 437.072337][T14687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.072363][T14687] ? __pfx__printk+0x10/0x10 [ 437.072403][T14687] ? __pfx___might_resched+0x10/0x10 [ 437.072427][T14687] ? fs_reclaim_acquire+0x7d/0x100 [ 437.072461][T14687] should_fail_ex+0x414/0x560 [ 437.072497][T14687] should_failslab+0xa8/0x100 [ 437.072525][T14687] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 437.072550][T14687] ? __alloc_skb+0x112/0x2d0 [ 437.072585][T14687] __alloc_skb+0x112/0x2d0 [ 437.072619][T14687] alloc_skb_with_frags+0xca/0x890 [ 437.072648][T14687] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 437.072673][T14687] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.072703][T14687] ? do_raw_spin_unlock+0x122/0x240 [ 437.072738][T14687] sock_alloc_send_pskb+0x857/0x990 [ 437.072780][T14687] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 437.072813][T14687] ? __lock_acquire+0xab9/0xd20 [ 437.072839][T14687] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 437.072871][T14687] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 437.072895][T14687] ? __pfx___mutex_trylock_common+0x10/0x10 [ 437.072920][T14687] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 437.072954][T14687] l2cap_chan_send+0x1b7/0x2790 [ 437.072985][T14687] ? __lock_acquire+0xab9/0xd20 [ 437.073018][T14687] ? __pfx_l2cap_chan_send+0x10/0x10 [ 437.073040][T14687] ? __local_bh_enable_ip+0x12d/0x1c0 [ 437.073086][T14687] l2cap_sock_sendmsg+0x32e/0x4a0 [ 437.073110][T14687] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 437.073134][T14687] ? aa_sock_msg_perm+0x94/0x160 [ 437.073166][T14687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.073196][T14687] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 437.073217][T14687] __sock_sendmsg+0x21c/0x270 [ 437.073245][T14687] ____sys_sendmsg+0x52d/0x830 [ 437.073283][T14687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.073326][T14687] ? import_iovec+0x74/0xa0 [ 437.073355][T14687] ___sys_sendmsg+0x21f/0x2a0 [ 437.073418][T14687] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.073488][T14687] ? __might_fault+0xb0/0x130 [ 437.073517][T14687] __sys_sendmmsg+0x227/0x430 [ 437.073544][T14687] ? __pfx___sys_sendmmsg+0x10/0x10 [ 437.073561][T14687] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 437.073620][T14687] ? ksys_write+0x22a/0x250 [ 437.073647][T14687] ? __pfx_ksys_write+0x10/0x10 [ 437.073666][T14687] ? rcu_is_watching+0x15/0xb0 [ 437.073699][T14687] __x64_sys_sendmmsg+0xa0/0xc0 [ 437.073721][T14687] do_syscall_64+0xfa/0x3b0 [ 437.073749][T14687] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.073775][T14687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.073796][T14687] ? clear_bhb_loop+0x60/0xb0 [ 437.073821][T14687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.073841][T14687] RIP: 0033:0x7f0a5c38e929 [ 437.073861][T14687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.073878][T14687] RSP: 002b:00007f0a5d2dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.073901][T14687] RAX: ffffffffffffffda RBX: 00007f0a5c5b5fa0 RCX: 00007f0a5c38e929 [ 437.073916][T14687] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 437.073929][T14687] RBP: 00007f0a5d2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 437.073942][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.073954][T14687] R13: 0000000000000000 R14: 00007f0a5c5b5fa0 R15: 00007ffe191785d8 [ 437.073987][T14687] [ 437.479924][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.587868][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 437.655721][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.092066][T14699] lo speed is unknown, defaulting to 1000 [ 438.229221][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 438.281522][T14722] geneve2: entered promiscuous mode [ 438.295331][T14722] geneve2: entered allmulticast mode [ 438.363216][ T5852] Bluetooth: hci4: command tx timeout [ 438.411927][T14715] lo speed is unknown, defaulting to 1000 [ 438.412176][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.447064][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.455047][T14671] bridge_slave_0: entered allmulticast mode [ 438.463190][T14671] bridge_slave_0: entered promiscuous mode [ 438.471269][ T6426] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 48095 - 0 [ 438.490242][ T6426] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 48095 - 0 [ 438.567066][T14720] lo speed is unknown, defaulting to 1000 [ 438.568003][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.597638][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.617137][T14671] bridge_slave_1: entered allmulticast mode [ 438.634068][T14671] bridge_slave_1: entered promiscuous mode [ 438.642382][ T6426] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 48095 - 0 [ 438.750110][ T6426] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 48095 - 0 [ 438.944624][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.963436][ T13] bridge_slave_1: left allmulticast mode [ 438.971733][ T13] bridge_slave_1: left promiscuous mode [ 438.977620][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.988585][ T13] bridge_slave_0: left allmulticast mode [ 438.994684][ T13] bridge_slave_0: left promiscuous mode [ 439.000748][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.037156][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 439.526230][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.537854][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.549810][ T13] bond0 (unregistering): Released all slaves [ 439.597627][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.737890][T14671] team0: Port device team_slave_0 added [ 439.784661][T14671] team0: Port device team_slave_1 added [ 439.815953][T14735] syz.4.2452 (14735) used greatest stack depth: 15960 bytes left [ 439.976442][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.989858][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.027829][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.054002][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.061017][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.101835][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.159861][ T13] hsr_slave_0: left promiscuous mode [ 440.180063][ T13] hsr_slave_1: left promiscuous mode [ 440.188074][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.207539][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.232814][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.240309][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.290529][ T13] veth1_macvtap: left promiscuous mode [ 440.303955][ T13] veth0_macvtap: left promiscuous mode [ 440.309681][ T13] veth1_vlan: left promiscuous mode [ 440.326207][ T13] veth0_vlan: left promiscuous mode [ 440.441972][ T5852] Bluetooth: hci4: command tx timeout [ 441.024164][ T13] team0 (unregistering): Port device team_slave_1 removed [ 441.070613][ T13] team0 (unregistering): Port device team_slave_0 removed [ 441.783345][T14671] hsr_slave_0: entered promiscuous mode [ 441.790139][T14671] hsr_slave_1: entered promiscuous mode [ 441.815495][T14671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.826496][T14762] netlink: 'syz.4.2460': attribute type 13 has an invalid length. [ 441.837679][T14762] netlink: 'syz.4.2460': attribute type 17 has an invalid length. [ 441.852678][T14671] Cannot create hsr debugfs directory [ 441.864361][T14762] lo: left promiscuous mode [ 441.936010][T14762] tunl0: left promiscuous mode [ 441.988257][T14762] gre0: left promiscuous mode [ 442.030715][T14762] erspan0: left promiscuous mode [ 442.064294][T14762] ip_vti0: left promiscuous mode [ 442.070731][T14762] ip6_vti0: left promiscuous mode [ 442.084749][T14762] sit0: left promiscuous mode [ 442.107462][T14762] ip6tnl0: left promiscuous mode [ 442.142202][T14762] ip6gre0: left promiscuous mode [ 442.149283][T14762] syz_tun: left promiscuous mode [ 442.179751][T14779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.196609][T14777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.224518][T14762] ip6gretap0: left promiscuous mode [ 442.252636][T14762] bond0: left promiscuous mode [ 442.259164][T14762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.278562][T14783] netlink: 'syz.2.2464': attribute type 1 has an invalid length. [ 442.288973][T14783] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2464'. [ 442.308659][T14762] team0: left promiscuous mode [ 442.309214][T14773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.319504][T14762] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.353519][T14762] dummy0: left promiscuous mode [ 442.359163][T14762] nlmon0: left promiscuous mode [ 442.378805][T14762] caif0: left promiscuous mode [ 442.385440][T14762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.407489][T14773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.419378][T14771] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2461'. [ 442.538021][ T5852] Bluetooth: hci4: command tx timeout [ 442.693685][T14769] lo speed is unknown, defaulting to 1000 [ 442.747854][T14779] lo speed is unknown, defaulting to 1000 [ 442.998851][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 443.029915][T14803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2470'. [ 443.062931][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 443.109610][T14803] netlink: 'syz.0.2470': attribute type 12 has an invalid length. [ 443.201534][T14811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.301400][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'. [ 443.364680][T14814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.369716][T14811] netlink: 'syz.4.2473': attribute type 1 has an invalid length. [ 443.387724][T14811] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2473'. [ 443.412646][T14816] lo speed is unknown, defaulting to 1000 [ 443.714792][T14815] lo speed is unknown, defaulting to 1000 [ 444.006915][T14825] lo speed is unknown, defaulting to 1000 [ 444.261130][T14822] mpoa:mpoad_close: () going down [ 444.521380][T14671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.560724][T14671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.582923][T14851] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 444.597794][T14850] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 444.606804][ T5852] Bluetooth: hci4: command tx timeout [ 444.748798][T14671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.769003][T14671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.054421][T14871] syzkaller0: entered promiscuous mode [ 445.065776][T14871] syzkaller0: entered allmulticast mode [ 445.101641][T14873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2485'. [ 445.172791][T14871] tipc: Enabled bearer , priority 0 [ 445.289300][T14671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.335752][T14671] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.354155][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.361367][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.409897][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.417120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.786550][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 445.900885][T14898] xt_hashlimit: size too large, truncated to 1048576 [ 446.140211][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.170287][T14901] lo speed is unknown, defaulting to 1000 [ 446.291957][ T2150] tipc: Node number set to 4133426396 [ 446.341148][T14671] veth0_vlan: entered promiscuous mode [ 446.451658][T14671] veth1_vlan: entered promiscuous mode [ 446.564806][T14671] veth0_macvtap: entered promiscuous mode [ 446.597400][T14671] veth1_macvtap: entered promiscuous mode [ 446.646980][T14901] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2491'. [ 446.697435][T14901] netlink: 'syz.0.2491': attribute type 4 has an invalid length. [ 446.698828][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.769495][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.793618][ T6438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.812657][ T6438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.841221][ T6438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.872792][ T6438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.995055][T14924] SET target dimension over the limit! [ 447.153818][T14927] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 447.320226][T14938] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 447.328357][T14932] xt_HMARK: spi-set and port-set can't be combined [ 447.428054][T14934] lo speed is unknown, defaulting to 1000 [ 447.480056][T14927] batadv_slave_0: entered promiscuous mode [ 447.502191][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.528559][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.546254][T14944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.585732][T14927] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2498'. [ 447.622843][T14927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2498'. [ 447.639783][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.656013][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.656359][T14944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.791514][T14944] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 447.871806][T14944] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2504'. [ 447.908786][T14948] lo speed is unknown, defaulting to 1000 [ 447.953527][T14960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2508'. [ 447.998076][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 448.118092][T14967] netlink: 4063 bytes leftover after parsing attributes in process `syz.0.2510'. [ 448.269193][T14958] lo speed is unknown, defaulting to 1000 [ 448.524985][T14961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2507'. [ 448.648263][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2514'. [ 448.706384][T14961] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 448.767776][ T6552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.800853][T14982] syzkaller1: entered promiscuous mode [ 448.807039][T14982] syzkaller1: entered allmulticast mode [ 448.870913][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 449.102863][ T6552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.189220][ T6552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.282504][ T6552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.365696][ T6552] bridge_slave_1: left allmulticast mode [ 449.371365][ T6552] bridge_slave_1: left promiscuous mode [ 449.377248][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.388074][ T6552] bridge_slave_0: left allmulticast mode [ 449.394119][ T6552] bridge_slave_0: left promiscuous mode [ 449.399828][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.727926][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.739315][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.749598][ T6552] bond0 (unregistering): Released all slaves [ 449.963088][ T6552] hsr_slave_0: left promiscuous mode [ 449.969038][ T6552] hsr_slave_1: left promiscuous mode [ 449.975371][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.984994][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.992994][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.000394][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.024426][ T6552] veth1_macvtap: left promiscuous mode [ 450.030061][ T6552] veth0_macvtap: left promiscuous mode [ 450.035759][ T6552] veth1_vlan: left promiscuous mode [ 450.041043][ T6552] veth0_vlan: left promiscuous mode [ 450.234072][T14998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2518'. [ 450.716346][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 450.726011][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 450.735327][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 450.746605][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 450.754576][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.064669][ T6552] team0 (unregistering): Port device team_slave_1 removed [ 451.108168][ T6552] team0 (unregistering): Port device team_slave_0 removed [ 451.689620][T15016] lo speed is unknown, defaulting to 1000 [ 451.887403][T15030] pimreg: entered allmulticast mode [ 452.005053][T15030] pimreg: left allmulticast mode [ 452.038733][T15026] openvswitch: netlink: IP tunnel dst address not specified [ 452.426877][T15016] chnl_net:caif_netlink_parms(): no params data found [ 452.662853][T15016] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.670520][T15016] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.678955][T15016] bridge_slave_0: entered allmulticast mode [ 452.687896][T15016] bridge_slave_0: entered promiscuous mode [ 452.705904][T15016] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.713621][T15016] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.721582][T15016] bridge_slave_1: entered allmulticast mode [ 452.730492][T15016] bridge_slave_1: entered promiscuous mode [ 452.841940][ T5851] Bluetooth: hci4: command tx timeout [ 452.916317][T15016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.977463][T15016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.150988][T15016] team0: Port device team_slave_0 added [ 453.175402][T15016] team0: Port device team_slave_1 added [ 453.180432][T15084] __nla_validate_parse: 2 callbacks suppressed [ 453.180545][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 453.305696][T15016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.341977][T15016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.391626][T15016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.427003][T15016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.439326][T15016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.466286][T15016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.609309][T15016] hsr_slave_0: entered promiscuous mode [ 453.617001][T15016] hsr_slave_1: entered promiscuous mode [ 453.624284][T15016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.632140][T15016] Cannot create hsr debugfs directory [ 453.914088][T15107] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 453.938088][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 454.109058][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 454.120995][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 454.287606][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'. [ 454.300408][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'. [ 454.454738][T15016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.488436][T15016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.509927][T15016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.529722][T15016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.633534][T15131] tap0: tun_chr_ioctl cmd 1074025677 [ 454.649362][T15131] tap0: linktype set to 776 [ 454.845740][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 454.882347][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2546'. [ 454.922974][ T5851] Bluetooth: hci4: command tx timeout [ 454.966966][T15144] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2547'. [ 455.064689][T15016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.189555][T15016] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.239258][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.246513][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.308073][T15147] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 455.319966][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.321786][T15147] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 455.327206][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.392659][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.654551][T15164] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.794152][T15164] netlink: 'syz.2.2551': attribute type 16 has an invalid length. [ 455.820736][T15164] netlink: 'syz.2.2551': attribute type 3 has an invalid length. [ 455.834981][T15164] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2551'. [ 455.857207][T15175] netlink: 'syz.4.2554': attribute type 15 has an invalid length. [ 456.111346][T15016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.177448][T15186] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 456.246422][T15186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 456.273853][T15183] netlink: 'syz.4.2556': attribute type 12 has an invalid length. [ 456.511211][T15195] lo speed is unknown, defaulting to 1000 [ 456.512443][T15016] veth0_vlan: entered promiscuous mode [ 456.545741][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.669517][T15016] veth1_vlan: entered promiscuous mode [ 456.692050][T15191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.881492][T15016] veth0_macvtap: entered promiscuous mode [ 456.924364][T15016] veth1_macvtap: entered promiscuous mode [ 457.002202][ T5851] Bluetooth: hci4: command tx timeout [ 457.009861][T15016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.036897][T15016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.079575][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.090872][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.120741][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.138286][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.237647][T15217] tun0: tun_chr_ioctl cmd 1074812117 [ 457.350184][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.370231][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.418171][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.438083][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.538960][T15223] sock: sock_timestamping_bind_phc: sock not bind to device [ 457.541621][T15224] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 457.614594][T15224] syzkaller1: entered promiscuous mode [ 457.620324][T15224] syzkaller1: entered allmulticast mode [ 458.074753][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.218231][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.289828][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 458.320798][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 458.423866][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.461505][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 458.481114][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 458.525174][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.888518][ T12] bridge_slave_1: left allmulticast mode [ 458.894485][ T12] bridge_slave_1: left promiscuous mode [ 458.900279][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.909603][ T12] bridge_slave_0: left allmulticast mode [ 458.915729][ T12] bridge_slave_0: left promiscuous mode [ 458.921459][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.243137][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.254428][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.264880][ T12] bond0 (unregistering): Released all slaves [ 459.512571][ T12] hsr_slave_0: left promiscuous mode [ 459.518576][ T12] hsr_slave_1: left promiscuous mode [ 459.524958][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.532425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.540290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.548116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.575374][ T12] veth1_macvtap: left promiscuous mode [ 459.580920][ T12] veth0_macvtap: left promiscuous mode [ 459.587688][ T12] veth1_vlan: left promiscuous mode [ 459.593460][ T12] veth0_vlan: left promiscuous mode [ 460.394196][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.403877][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.412723][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.434304][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.451082][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.595448][ T12] team0 (unregistering): Port device team_slave_1 removed [ 460.677975][ T12] team0 (unregistering): Port device team_slave_0 removed [ 461.402948][T15243] __nla_validate_parse: 5 callbacks suppressed [ 461.402968][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 461.439967][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 461.451033][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 461.460886][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 461.527605][T15257] lo speed is unknown, defaulting to 1000 [ 461.613623][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'. [ 461.697427][T15280] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2582'. [ 462.014036][T15257] chnl_net:caif_netlink_parms(): no params data found [ 462.088079][T15295] openvswitch: netlink: Message has 4 unknown bytes. [ 462.340547][T15257] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.382077][T15257] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.417527][T15257] bridge_slave_0: entered allmulticast mode [ 462.444172][T15257] bridge_slave_0: entered promiscuous mode [ 462.475007][T15257] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.489257][T15257] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.505929][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 462.508128][T15257] bridge_slave_1: entered allmulticast mode [ 462.525944][ T5851] Bluetooth: hci4: command tx timeout [ 462.555178][T15257] bridge_slave_1: entered promiscuous mode [ 462.695591][T15317] No such timeout policy "syz1" [ 462.816033][T15257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.836153][T15257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.941622][T15257] team0: Port device team_slave_0 added [ 462.960311][T15257] team0: Port device team_slave_1 added [ 463.061552][T15257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.077441][T15257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.110453][T15257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.130894][T15257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.138111][T15257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.199174][T15257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.420506][T15257] hsr_slave_0: entered promiscuous mode [ 463.434455][T15257] hsr_slave_1: entered promiscuous mode [ 463.448905][T15257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.460195][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2596'. [ 463.464031][T15257] Cannot create hsr debugfs directory [ 463.502022][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2596'. [ 463.589222][T15346] gretap0: entered promiscuous mode [ 463.596767][T15346] gretap0: left promiscuous mode [ 463.701513][T15353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2598'. [ 463.822268][T15358] FAULT_INJECTION: forcing a failure. [ 463.822268][T15358] name failslab, interval 1, probability 0, space 0, times 0 [ 463.862595][T15358] CPU: 0 UID: 0 PID: 15358 Comm: syz.4.2600 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 463.862629][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.862642][T15358] Call Trace: [ 463.862651][T15358] [ 463.862660][T15358] dump_stack_lvl+0x189/0x250 [ 463.862692][T15358] ? __pfx____ratelimit+0x10/0x10 [ 463.862720][T15358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.862752][T15358] ? __pfx__printk+0x10/0x10 [ 463.862784][T15358] ? __pfx___might_resched+0x10/0x10 [ 463.862808][T15358] ? fs_reclaim_acquire+0x7d/0x100 [ 463.862843][T15358] should_fail_ex+0x414/0x560 [ 463.862878][T15358] should_failslab+0xa8/0x100 [ 463.862907][T15358] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 463.862933][T15358] ? __alloc_skb+0x112/0x2d0 [ 463.862967][T15358] __alloc_skb+0x112/0x2d0 [ 463.863001][T15358] alloc_skb_with_frags+0xca/0x890 [ 463.863034][T15358] ? __pfx_bpf_trace_printk+0x10/0x10 [ 463.863071][T15358] sock_alloc_send_pskb+0x857/0x990 [ 463.863115][T15358] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 463.863143][T15358] ? __bpf_trace_contention_end+0xcd/0x130 [ 463.863173][T15358] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 463.863197][T15358] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 463.863220][T15358] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 463.863254][T15358] l2cap_chan_send+0x1b7/0x2790 [ 463.863285][T15358] ? __lock_acquire+0xab9/0xd20 [ 463.863319][T15358] ? __pfx_l2cap_chan_send+0x10/0x10 [ 463.863340][T15358] ? __local_bh_enable_ip+0x12d/0x1c0 [ 463.863393][T15358] l2cap_sock_sendmsg+0x32e/0x4a0 [ 463.863417][T15358] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 463.863441][T15358] ? aa_sock_msg_perm+0x94/0x160 [ 463.863473][T15358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.863503][T15358] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 463.863523][T15358] __sock_sendmsg+0x21c/0x270 [ 463.863552][T15358] ____sys_sendmsg+0x52d/0x830 [ 463.863591][T15358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.863633][T15358] ? import_iovec+0x74/0xa0 [ 463.863662][T15358] ___sys_sendmsg+0x21f/0x2a0 [ 463.863685][T15358] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.863761][T15358] ? __might_fault+0xb0/0x130 [ 463.863789][T15358] __sys_sendmmsg+0x227/0x430 [ 463.863815][T15358] ? __pfx___sys_sendmmsg+0x10/0x10 [ 463.863832][T15358] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 463.863890][T15358] ? ksys_write+0x22a/0x250 [ 463.863917][T15358] ? __pfx_ksys_write+0x10/0x10 [ 463.863938][T15358] ? rcu_is_watching+0x15/0xb0 [ 463.863970][T15358] __x64_sys_sendmmsg+0xa0/0xc0 [ 463.863992][T15358] do_syscall_64+0xfa/0x3b0 [ 463.864019][T15358] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.864045][T15358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.864065][T15358] ? clear_bhb_loop+0x60/0xb0 [ 463.864090][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.864111][T15358] RIP: 0033:0x7f8cfb98e929 [ 463.864129][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.864148][T15358] RSP: 002b:00007f8cfc86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 463.864170][T15358] RAX: ffffffffffffffda RBX: 00007f8cfbbb5fa0 RCX: 00007f8cfb98e929 [ 463.864186][T15358] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 463.864200][T15358] RBP: 00007f8cfc86e090 R08: 0000000000000000 R09: 0000000000000000 [ 463.864213][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.864225][T15358] R13: 0000000000000000 R14: 00007f8cfbbb5fa0 R15: 00007ffeab12cc18 [ 463.864258][T15358] [ 464.506951][T15365] lo speed is unknown, defaulting to 1000 [ 464.601854][ T5851] Bluetooth: hci4: command tx timeout [ 464.622108][T15362] lo speed is unknown, defaulting to 1000 [ 465.092882][T15257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.113826][T15257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.144440][T15257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.173154][T15257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.443819][T15395] block nbd1: Unsupported socket: shutdown callout must be supported. [ 465.468333][T15257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.516478][T15257] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.543497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.550767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.603287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.610550][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.379919][T15257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.419805][T15409] lo speed is unknown, defaulting to 1000 [ 466.476028][T15411] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 466.569548][T15411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.682350][ T5851] Bluetooth: hci4: command tx timeout [ 466.713056][T15414] bond3: (slave bridge2): making interface the new active one [ 466.729743][T15414] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 466.761447][T15257] veth0_vlan: entered promiscuous mode [ 466.776662][T15257] veth1_vlan: entered promiscuous mode [ 466.810939][T15411] gretap1: entered promiscuous mode [ 466.837054][T15411] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 466.877661][T15415] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 466.907009][T15421] netlink: 'syz.1.2613': attribute type 32 has an invalid length. [ 466.915699][T15421] __nla_validate_parse: 9 callbacks suppressed [ 466.915720][T15421] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2613'. [ 467.083081][T15412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2611'. [ 467.123828][T15427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2616'. [ 467.171088][T15426] sctp: [Deprecated]: syz.0.2615 (pid 15426) Use of int in max_burst socket option deprecated. [ 467.171088][T15426] Use struct sctp_assoc_value instead [ 467.287398][T15430] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 467.438228][T15257] veth0_macvtap: entered promiscuous mode [ 467.461481][T15430] bond0: entered promiscuous mode [ 467.491760][T15430] bond_slave_0: entered promiscuous mode [ 467.497707][T15430] bond_slave_1: entered promiscuous mode [ 467.528446][T15430] macvlan1: entered promiscuous mode [ 467.543041][T15430] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 467.557207][T15430] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 467.570950][T15430] hsr1: entered promiscuous mode [ 467.625149][T15257] veth1_macvtap: entered promiscuous mode [ 467.698750][T15257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.770291][T15257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.831740][T15446] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 467.903039][T15446] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 467.908759][ T6426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.008946][ T6426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.023137][ T6426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.064364][ T6426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.336337][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.380492][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.458478][ T6448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.474818][ T6448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.761969][ T5851] Bluetooth: hci4: command tx timeout [ 469.365118][T15475] netlink: 'syz.1.2629': attribute type 2 has an invalid length. [ 469.374373][T15475] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2629'. [ 469.840832][T15490] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2632'. [ 469.941629][ T6554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.039069][ T6554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.736461][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.752858][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.773416][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.791396][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.812124][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.019478][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'. [ 472.048443][T15510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2636'. [ 472.057633][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'. [ 472.072094][T15510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2636'. [ 472.131544][ T6554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.216938][T15519] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 472.259556][ T6554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.279438][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 472.325076][T15511] lo speed is unknown, defaulting to 1000 [ 472.551574][ T6554] bridge_slave_1: left allmulticast mode [ 472.558735][ T6554] bridge_slave_1: left promiscuous mode [ 472.571466][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.588821][ T6554] bridge_slave_0: left allmulticast mode [ 472.594747][ T6554] bridge_slave_0: left promiscuous mode [ 472.600637][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.178195][ T6554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.195855][ T6554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.206947][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 473.237076][ T6554] bond0 (unregistering): Released all slaves [ 473.546305][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 473.562259][T15553] xt_cgroup: path and classid specified [ 473.589736][T15548] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2647'. [ 473.673664][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 473.760761][T15561] pimreg: entered allmulticast mode [ 473.864365][T15548] pimreg: left allmulticast mode [ 473.893285][ T5851] Bluetooth: hci4: command tx timeout [ 473.907144][T15558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2649'. [ 473.994199][T15570] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 474.096040][T15511] chnl_net:caif_netlink_parms(): no params data found [ 474.214233][T15568] lo speed is unknown, defaulting to 1000 [ 474.534496][ T6554] hsr_slave_0: left promiscuous mode [ 474.580212][ T6554] hsr_slave_1: left promiscuous mode [ 474.590007][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.635827][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.661425][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.678067][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.775001][ T6554] veth1_macvtap: left promiscuous mode [ 474.780600][ T6554] veth0_macvtap: left promiscuous mode [ 474.788916][ T6554] veth1_vlan: left promiscuous mode [ 474.801588][ T6554] veth0_vlan: left promiscuous mode [ 475.418935][ T6554] team0 (unregistering): Port device team_slave_1 removed [ 475.473815][ T6554] team0 (unregistering): Port device team_slave_0 removed [ 475.977220][ T5851] Bluetooth: hci4: command tx timeout [ 476.211098][T15511] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.236405][T15511] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.252545][T15511] bridge_slave_0: entered allmulticast mode [ 476.260527][T15511] bridge_slave_0: entered promiscuous mode [ 476.273262][T15511] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.281605][T15511] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.304115][T15511] bridge_slave_1: entered allmulticast mode [ 476.311547][T15511] bridge_slave_1: entered promiscuous mode [ 476.430970][T15511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.485747][T15511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.632827][T15511] team0: Port device team_slave_0 added [ 476.660587][T15511] team0: Port device team_slave_1 added [ 476.735300][T15511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.746007][T15511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.772490][T15511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.827470][T15627] syzkaller0: entered promiscuous mode [ 476.833656][T15627] syzkaller0: entered allmulticast mode [ 476.855981][T15511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.871111][T15511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.907605][T15511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.055352][T15511] hsr_slave_0: entered promiscuous mode [ 477.069470][T15511] hsr_slave_1: entered promiscuous mode [ 477.076996][T15511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.090904][T15511] Cannot create hsr debugfs directory [ 477.144810][T15637] FAULT_INJECTION: forcing a failure. [ 477.144810][T15637] name failslab, interval 1, probability 0, space 0, times 0 [ 477.159801][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.0.2668 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 477.159845][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.159862][T15637] Call Trace: [ 477.159870][T15637] [ 477.159880][T15637] dump_stack_lvl+0x189/0x250 [ 477.159911][T15637] ? __pfx____ratelimit+0x10/0x10 [ 477.159939][T15637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.159964][T15637] ? __pfx__printk+0x10/0x10 [ 477.159994][T15637] ? __pfx___might_resched+0x10/0x10 [ 477.160019][T15637] ? fs_reclaim_acquire+0x7d/0x100 [ 477.160054][T15637] should_fail_ex+0x414/0x560 [ 477.160088][T15637] should_failslab+0xa8/0x100 [ 477.160115][T15637] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 477.160140][T15637] ? __alloc_skb+0x112/0x2d0 [ 477.160173][T15637] __alloc_skb+0x112/0x2d0 [ 477.160205][T15637] alloc_skb_with_frags+0xca/0x890 [ 477.160235][T15637] ? __schedule+0x1713/0x4d00 [ 477.160275][T15637] sock_alloc_send_pskb+0x857/0x990 [ 477.160331][T15637] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 477.160363][T15637] ? __lock_acquire+0xab9/0xd20 [ 477.160401][T15637] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 477.160428][T15637] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 477.160451][T15637] ? __pfx___mutex_trylock_common+0x10/0x10 [ 477.160474][T15637] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 477.160505][T15637] l2cap_chan_send+0x1b7/0x2790 [ 477.160534][T15637] ? __lock_acquire+0xab9/0xd20 [ 477.160564][T15637] ? __pfx_l2cap_chan_send+0x10/0x10 [ 477.160585][T15637] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.160627][T15637] l2cap_sock_sendmsg+0x32e/0x4a0 [ 477.160648][T15637] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 477.160670][T15637] ? aa_sock_msg_perm+0x94/0x160 [ 477.160718][T15637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.160747][T15637] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 477.160767][T15637] __sock_sendmsg+0x21c/0x270 [ 477.160796][T15637] ____sys_sendmsg+0x52d/0x830 [ 477.160834][T15637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.160877][T15637] ? import_iovec+0x74/0xa0 [ 477.160904][T15637] ___sys_sendmsg+0x21f/0x2a0 [ 477.160927][T15637] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.161004][T15637] ? __might_fault+0xb0/0x130 [ 477.161033][T15637] __sys_sendmmsg+0x227/0x430 [ 477.161059][T15637] ? __pfx___sys_sendmmsg+0x10/0x10 [ 477.161119][T15637] ? rcu_is_watching+0x15/0xb0 [ 477.161149][T15637] __x64_sys_sendmmsg+0xa0/0xc0 [ 477.161170][T15637] do_syscall_64+0xfa/0x3b0 [ 477.161197][T15637] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.161222][T15637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.161241][T15637] ? clear_bhb_loop+0x60/0xb0 [ 477.161264][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.161283][T15637] RIP: 0033:0x7f33c758e929 [ 477.161302][T15637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.161326][T15637] RSP: 002b:00007f33c8389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.161347][T15637] RAX: ffffffffffffffda RBX: 00007f33c77b5fa0 RCX: 00007f33c758e929 [ 477.161362][T15637] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 477.161375][T15637] RBP: 00007f33c8389090 R08: 0000000000000000 R09: 0000000000000000 [ 477.161387][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.161399][T15637] R13: 0000000000000000 R14: 00007f33c77b5fa0 R15: 00007fff8b2a49e8 [ 477.161431][T15637] [ 478.047262][ T5851] Bluetooth: hci4: command tx timeout [ 479.587283][T15665] __nla_validate_parse: 4 callbacks suppressed [ 479.587304][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 479.652526][T15665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2674'. [ 479.961475][T15685] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2681'. [ 480.125686][ T5851] Bluetooth: hci4: command tx timeout [ 480.393465][T15511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.432176][T15511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.458875][T15511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.487490][T15511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.617062][T15511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.653816][T15511] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.689824][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.697144][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.731256][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.738548][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.809079][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2687'. [ 481.240135][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 481.262493][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2691'. [ 481.308223][T15511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.347176][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 481.389575][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 481.410497][T15511] veth0_vlan: entered promiscuous mode [ 481.445104][T15511] veth1_vlan: entered promiscuous mode [ 481.545182][T15511] veth0_macvtap: entered promiscuous mode [ 481.580333][T15511] veth1_macvtap: entered promiscuous mode [ 481.626079][T15511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.674266][T15511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.718737][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.750089][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.774883][ T6557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.803275][T15752] lo speed is unknown, defaulting to 1000 [ 481.804024][ T6557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.929717][ T30] audit: type=1804 audit(1752740997.991:7): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2697" name="/newroot/541/memory.events" dev="tmpfs" ino=2774 res=1 errno=0 [ 481.979520][ T30] audit: type=1800 audit(1752740997.991:8): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2697" name="memory.events" dev="tmpfs" ino=2774 res=0 errno=0 [ 482.004558][ T30] audit: type=1804 audit(1752740998.031:9): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2697" name="/newroot/541/memory.events" dev="tmpfs" ino=2774 res=1 errno=0 [ 482.145950][T15767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.171816][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.179671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.258873][ T6448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.267168][ T6448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.381101][T15541] ------------[ cut here ]------------ [ 482.388085][T15541] refcount_t: underflow; use-after-free. [ 482.394528][T15541] WARNING: CPU: 1 PID: 15541 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 482.404512][T15541] Modules linked in: [ 482.408689][T15541] CPU: 1 UID: 0 PID: 15541 Comm: kbnepd bnep0 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 482.421471][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.431786][T15541] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 482.438433][T15541] Code: 80 53 e2 8b e8 17 59 c2 fc 90 0f 0b 90 90 eb d7 e8 9b 7a fe fc c6 05 3c 6b ca 0a 01 90 48 c7 c7 e0 53 e2 8b e8 f7 58 c2 fc 90 <0f> 0b 90 90 eb b7 e8 7b 7a fe fc c6 05 19 6b ca 0a 01 90 48 c7 c7 [ 482.458460][T15541] RSP: 0018:ffffc90003fdf700 EFLAGS: 00010246 [ 482.465043][T15541] RAX: cd60a180dbddaf00 RBX: 0000000000000003 RCX: ffff88804d068000 [ 482.473521][T15541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 482.481855][T15541] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 482.489830][T15541] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dffffc0000000000 [ 482.498488][T15541] R13: ffff88807c448460 R14: ffff88807c448478 R15: ffffffff85f6c0c0 [ 482.506779][T15541] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 482.515952][T15541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.522789][T15541] CR2: 00007ffc847f7890 CR3: 0000000075988000 CR4: 00000000003526f0 [ 482.530769][T15541] Call Trace: [ 482.534265][T15541] [ 482.537222][T15541] klist_dec_and_del+0x3c7/0x3d0 [ 482.542540][T15541] ? __pfx_klist_children_put+0x10/0x10 [ 482.548090][T15541] klist_del+0xa6/0x110 [ 482.552758][T15541] device_del+0x280/0x8e0 [ 482.557125][T15541] ? _raw_spin_unlock_irq+0x2e/0x50 [ 482.562462][T15541] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 482.568645][T15541] ? __pfx_device_del+0x10/0x10 [ 482.573611][T15541] ? netdev_unregister_kobject+0x344/0x450 [ 482.579480][T15541] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 482.586214][T15541] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 482.593272][T15541] ? rtnl_net_dev_lock+0x257/0x2f0 [ 482.598423][T15541] unregister_netdevice_queue+0x33c/0x380 [ 482.604289][T15541] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 482.610630][T15541] ? rtnl_net_dev_lock+0x36/0x2f0 [ 482.615741][T15541] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 482.620956][T15541] unregister_netdev+0x1f/0x60 [ 482.625777][T15541] bnep_session+0x294d/0x2b40 [ 482.630465][T15541] ? trace_sched_exit_tp+0x38/0x120 [ 482.635878][T15541] ? __lock_acquire+0xab9/0xd20 [ 482.640775][T15541] ? __pfx_bnep_session+0x10/0x10 [ 482.645876][T15541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 482.651847][T15541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.658214][T15541] ? __pfx_woken_wake_function+0x10/0x10 [ 482.663972][T15541] ? __kthread_parkme+0x7b/0x200 [ 482.668938][T15541] ? __kthread_parkme+0x1a1/0x200 [ 482.674160][T15541] kthread+0x70e/0x8a0 [ 482.678249][T15541] ? __pfx_bnep_session+0x10/0x10 [ 482.683568][T15541] ? __pfx_kthread+0x10/0x10 [ 482.688187][T15541] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.693604][T15541] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.698816][T15541] ? __pfx_kthread+0x10/0x10 [ 482.703513][T15541] ret_from_fork+0x3fc/0x770 [ 482.708204][T15541] ? __pfx_ret_from_fork+0x10/0x10 [ 482.713368][T15541] ? __switch_to_asm+0x39/0x70 [ 482.718833][T15541] ? __switch_to_asm+0x33/0x70 [ 482.723690][T15541] ? __pfx_kthread+0x10/0x10 [ 482.728291][T15541] ret_from_fork_asm+0x1a/0x30 [ 482.733117][T15541] [ 482.736156][T15541] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 482.743434][T15541] CPU: 1 UID: 0 PID: 15541 Comm: kbnepd bnep0 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 482.755689][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.765755][T15541] Call Trace: [ 482.769044][T15541] [ 482.771988][T15541] dump_stack_lvl+0x99/0x250 [ 482.776679][T15541] ? __asan_memcpy+0x40/0x70 [ 482.781271][T15541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.786468][T15541] ? __pfx__printk+0x10/0x10 [ 482.791068][T15541] panic+0x2db/0x790 [ 482.794969][T15541] ? __pfx_panic+0x10/0x10 [ 482.799381][T15541] ? show_trace_log_lvl+0x4fb/0x550 [ 482.804591][T15541] ? ret_from_fork_asm+0x1a/0x30 [ 482.809535][T15541] __warn+0x31b/0x4b0 [ 482.813521][T15541] ? refcount_warn_saturate+0x11a/0x1d0 [ 482.819079][T15541] ? refcount_warn_saturate+0x11a/0x1d0 [ 482.824635][T15541] report_bug+0x2be/0x4f0 [ 482.828971][T15541] ? refcount_warn_saturate+0x11a/0x1d0 [ 482.834514][T15541] ? refcount_warn_saturate+0x11a/0x1d0 [ 482.840074][T15541] ? refcount_warn_saturate+0x11c/0x1d0 [ 482.845623][T15541] handle_bug+0x84/0x160 [ 482.849878][T15541] exc_invalid_op+0x1a/0x50 [ 482.854390][T15541] asm_exc_invalid_op+0x1a/0x20 [ 482.859236][T15541] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 482.865391][T15541] Code: 80 53 e2 8b e8 17 59 c2 fc 90 0f 0b 90 90 eb d7 e8 9b 7a fe fc c6 05 3c 6b ca 0a 01 90 48 c7 c7 e0 53 e2 8b e8 f7 58 c2 fc 90 <0f> 0b 90 90 eb b7 e8 7b 7a fe fc c6 05 19 6b ca 0a 01 90 48 c7 c7 [ 482.884993][T15541] RSP: 0018:ffffc90003fdf700 EFLAGS: 00010246 [ 482.891063][T15541] RAX: cd60a180dbddaf00 RBX: 0000000000000003 RCX: ffff88804d068000 [ 482.899054][T15541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 482.907036][T15541] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 482.915001][T15541] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dffffc0000000000 [ 482.922976][T15541] R13: ffff88807c448460 R14: ffff88807c448478 R15: ffffffff85f6c0c0 [ 482.930947][T15541] ? __pfx_klist_children_put+0x10/0x10 [ 482.936504][T15541] klist_dec_and_del+0x3c7/0x3d0 [ 482.941457][T15541] ? __pfx_klist_children_put+0x10/0x10 [ 482.946995][T15541] klist_del+0xa6/0x110 [ 482.951159][T15541] device_del+0x280/0x8e0 [ 482.955510][T15541] ? _raw_spin_unlock_irq+0x2e/0x50 [ 482.960723][T15541] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 482.966791][T15541] ? __pfx_device_del+0x10/0x10 [ 482.971643][T15541] ? netdev_unregister_kobject+0x344/0x450 [ 482.980039][T15541] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 482.986525][T15541] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 482.993336][T15541] ? rtnl_net_dev_lock+0x257/0x2f0 [ 482.998478][T15541] unregister_netdevice_queue+0x33c/0x380 [ 483.004247][T15541] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 483.010497][T15541] ? rtnl_net_dev_lock+0x36/0x2f0 [ 483.015541][T15541] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 483.020774][T15541] unregister_netdev+0x1f/0x60 [ 483.025553][T15541] bnep_session+0x294d/0x2b40 [ 483.030234][T15541] ? trace_sched_exit_tp+0x38/0x120 [ 483.035436][T15541] ? __lock_acquire+0xab9/0xd20 [ 483.040307][T15541] ? __pfx_bnep_session+0x10/0x10 [ 483.045340][T15541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 483.051236][T15541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 483.057650][T15541] ? __pfx_woken_wake_function+0x10/0x10 [ 483.063306][T15541] ? __kthread_parkme+0x7b/0x200 [ 483.068349][T15541] ? __kthread_parkme+0x1a1/0x200 [ 483.073384][T15541] kthread+0x70e/0x8a0 [ 483.077463][T15541] ? __pfx_bnep_session+0x10/0x10 [ 483.082504][T15541] ? __pfx_kthread+0x10/0x10 [ 483.087119][T15541] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.092327][T15541] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.097549][T15541] ? __pfx_kthread+0x10/0x10 [ 483.102170][T15541] ret_from_fork+0x3fc/0x770 [ 483.106785][T15541] ? __pfx_ret_from_fork+0x10/0x10 [ 483.111905][T15541] ? __switch_to_asm+0x39/0x70 [ 483.116669][T15541] ? __switch_to_asm+0x33/0x70 [ 483.121467][T15541] ? __pfx_kthread+0x10/0x10 [ 483.126075][T15541] ret_from_fork_asm+0x1a/0x30 [ 483.130870][T15541] [ 484.262829][T15541] Shutting down cpus with NMI [ 484.267764][T15541] Kernel Offset: disabled [ 484.272092][T15541] Rebooting in 86400 seconds..