last executing test programs: 3.866492473s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32=r1, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e004400028006000200010000000800010001000000080003000300000008000700050000000800010010000000"], 0x84}}, 0x20008040) 3.653177718s ago: executing program 3 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xd}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.422887066s ago: executing program 3 (id=7): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@default, @null}) 3.327575572s ago: executing program 3 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES16=r0]) bind$x25(0xffffffffffffffff, &(0x7f0000000440), 0x12) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000054800028058fd0180140003000000000000000000000000000000000114000400fc0000000000000000000000000000010c0002800500010000000000000002800500010084000000300004802c000180060005000502000006000500091900000500010009000000050001000d00000005000200e000000008001a4000000c8912ec77d2d185b15a5c46d42b64ec1c579b013b61"], 0x94}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=0x4, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x24) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x1) 2.91348792s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.816371577s ago: executing program 4 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, 0x0) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 2.618517183s ago: executing program 0 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4065, 0xfe1}], 0x1}, 0x2}], 0x1, 0x40010100, 0x0) 2.479372886s ago: executing program 2 (id=3): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.410428303s ago: executing program 0 (id=10): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}}, 0x20008040) 2.390355525s ago: executing program 1 (id=2): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0) 2.145254065s ago: executing program 2 (id=11): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a0000000380"], 0x20}, 0x4) 2.042927374s ago: executing program 0 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_raw(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000480)={0x0, 0x1, @status={[0x7c05, 0x80, 0x7, 0x2, 0x7, 0x420c2561]}, [0x9, 0x80, 0x100, 0x3, 0x8, 0xfffffffffffff74d, 0xffffffffffffff00, 0xb483, 0x6, 0xff, 0xc, 0x3, 0x6, 0x7ff, 0xdc8, 0x6, 0x6, 0xc, 0x9, 0x6, 0x53, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x80, 0x80, 0x8000000000000001, 0x6, 0x0, 0xec96, 0x3, 0x6, 0xa589, 0x3, 0x8, 0x2, 0x2, 0x7, 0x2, 0x1fe, 0x4, 0x401, 0x9, 0x1758783a, 0x2, 0x9, 0x2, 0x7fffffffffffffff, 0x4, 0x7, 0x7, 0x6, 0x5, 0x8, 0x8, 0x5, 0x17b000000000, 0x9361, 0x1, 0x7, 0x8000, 0x2, 0x7f]}) listen(r0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000240)="30cc92bfda4dbf8beb3d42e3180bf3b9ff46679282c1dba13b67dc3a0941adb695117fb9c690d3ccd629bb9f19ef330c5fc7893022abc559953a263c50e9f78d3fd9238d2b1cd1ba4d1caf34b6738426ad27000e4b6a19d1e2bd0345dec9abcf112a6a26c6d0b22219a90ff6259b0c15082ee1de635823ef93cc6dd18fb7a346509f9d5948") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x2) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r5, r5) 2.042643699s ago: executing program 3 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) 1.982807336s ago: executing program 2 (id=14): r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x12, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 1.813244769s ago: executing program 2 (id=15): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xffff0000, 0x4) socket(0x2, 0x2, 0x1) sendto$packet(r0, &(0x7f0000000800)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8ca0495946a45a620d2e572f104cae8403eaba932a9", 0x55, 0x400c010, &(0x7f00000004c0)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 1.742877602s ago: executing program 3 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x80, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.14577834s ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.074806955s ago: executing program 0 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x94, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff40623c01fe8000000000000000000000000000aafc0200000000000000000000000000003c00000000000000050200010000000000000004005290784200000080000000a41c00d4ea244737f5ae2d5b655e372fcd819a9c1f9c1e6d9a3265d52a3fd0e8f4b787ae76dcfe1b9e1eb6aa551a183302ac00000000f96e1386d37cb212082baad4d78665e4000e10c80e2d76b6278d7ace0a6912e8b620df971043760b8b99b3cd5000000000ac1702213536c1c6b24c"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188004000140a000000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 942.95186ms ago: executing program 2 (id=19): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 942.454601ms ago: executing program 1 (id=20): unshare(0x2c020400) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0xd, 0x0, 0x0) 942.069585ms ago: executing program 4 (id=21): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0) 713.679701ms ago: executing program 4 (id=22): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3f, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @typed={0xa, 0x3, 0x0, 0x0, @str='%,#$\\\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 256.230955ms ago: executing program 1 (id=23): unshare(0x22020600) unshare(0x26020480) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 54.762441ms ago: executing program 0 (id=24): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa4}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x69, 0x8, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x5, 0x0, 0x1c}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xc8ba, 0x7, 0x9, 'syz1\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000fd00f890300003802c00017f1400031f610000000000003c0002800c00028005000100000000002c000180140003005a0200"/82], 0x84}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) unshare(0x26020480) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 46.585471ms ago: executing program 2 (id=25): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) 0s ago: executing program 4 (id=26): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x35, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r1, 0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000000f00ed12bb34c627b9a4dc1c9487"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0xffffffffffffff43, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES64=r5, @ANYRESOCT=r5], 0x14c}}, 0xc800) sendto$inet6(r2, 0x0, 0x0, 0x4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffff51, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={@private1, @local, @remote, 0x3, 0x2, 0xe8, 0x100, 0x80000000, 0xa10008, r9}) bind(r0, &(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 67.765213][ T5812] cgroup: Unknown subsys name 'net' [ 67.886358][ T5812] cgroup: Unknown subsys name 'cpuset' [ 67.895236][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.309815][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.337924][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344453][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.144003][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.151877][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.160475][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.179313][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.188568][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.197218][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.204917][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.213063][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.221744][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.222340][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.236423][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.237906][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.250996][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.252602][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.259169][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.268402][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.274412][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.288271][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.289929][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.301755][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.303505][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.317124][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.331407][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.338870][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.347705][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.901865][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.000414][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 73.042589][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 73.178924][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.186760][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.194445][ T5824] bridge_slave_0: entered allmulticast mode [ 73.201574][ T5824] bridge_slave_0: entered promiscuous mode [ 73.252644][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.260060][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.267334][ T5824] bridge_slave_1: entered allmulticast mode [ 73.274573][ T5824] bridge_slave_1: entered promiscuous mode [ 73.287093][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 73.382734][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.390577][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.398092][ T5837] bridge_slave_0: entered allmulticast mode [ 73.406560][ T5837] bridge_slave_0: entered promiscuous mode [ 73.440140][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.476282][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.483614][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.490936][ T5837] bridge_slave_1: entered allmulticast mode [ 73.498234][ T5837] bridge_slave_1: entered promiscuous mode [ 73.519280][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.540025][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.547245][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.554534][ T5823] bridge_slave_0: entered allmulticast mode [ 73.561563][ T5823] bridge_slave_0: entered promiscuous mode [ 73.569108][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 73.608154][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.615673][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.622827][ T5823] bridge_slave_1: entered allmulticast mode [ 73.630015][ T5823] bridge_slave_1: entered promiscuous mode [ 73.661682][ T5824] team0: Port device team_slave_0 added [ 73.709858][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.727006][ T5824] team0: Port device team_slave_1 added [ 73.745564][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.757234][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.796400][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.873192][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.880457][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.888180][ T5833] bridge_slave_0: entered allmulticast mode [ 73.895675][ T5833] bridge_slave_0: entered promiscuous mode [ 73.903897][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.910851][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.937355][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.967585][ T5837] team0: Port device team_slave_0 added [ 73.973897][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.981100][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.988380][ T5833] bridge_slave_1: entered allmulticast mode [ 73.995712][ T5833] bridge_slave_1: entered promiscuous mode [ 74.003909][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.010858][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.037006][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.061354][ T5823] team0: Port device team_slave_0 added [ 74.069465][ T5837] team0: Port device team_slave_1 added [ 74.130102][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.138088][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.146059][ T5832] bridge_slave_0: entered allmulticast mode [ 74.153311][ T5832] bridge_slave_0: entered promiscuous mode [ 74.162571][ T5823] team0: Port device team_slave_1 added [ 74.169288][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.176514][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.202681][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.229081][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.238397][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.245880][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.253075][ T5832] bridge_slave_1: entered allmulticast mode [ 74.260180][ T5832] bridge_slave_1: entered promiscuous mode [ 74.280981][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.288123][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.314130][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.327683][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.373971][ T5834] Bluetooth: hci0: command tx timeout [ 74.379700][ T5834] Bluetooth: hci1: command tx timeout [ 74.385884][ T5827] Bluetooth: hci3: command tx timeout [ 74.436326][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.443957][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.470050][ T5834] Bluetooth: hci2: command tx timeout [ 74.470409][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.475873][ T5827] Bluetooth: hci4: command tx timeout [ 74.489125][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.498748][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.524701][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.546337][ T5833] team0: Port device team_slave_0 added [ 74.570778][ T5824] hsr_slave_0: entered promiscuous mode [ 74.577271][ T5824] hsr_slave_1: entered promiscuous mode [ 74.586630][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.599249][ T5833] team0: Port device team_slave_1 added [ 74.625487][ T5837] hsr_slave_0: entered promiscuous mode [ 74.632158][ T5837] hsr_slave_1: entered promiscuous mode [ 74.638757][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 74.644657][ T5837] Cannot create hsr debugfs directory [ 74.652258][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.729291][ T5832] team0: Port device team_slave_0 added [ 74.747910][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.755226][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.781259][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.809695][ T5832] team0: Port device team_slave_1 added [ 74.835439][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.842397][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.868617][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.895576][ T5823] hsr_slave_0: entered promiscuous mode [ 74.901898][ T5823] hsr_slave_1: entered promiscuous mode [ 74.908395][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 74.914236][ T5823] Cannot create hsr debugfs directory [ 74.968381][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.975379][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.001413][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.063567][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.070528][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.097794][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.165298][ T5833] hsr_slave_0: entered promiscuous mode [ 75.171599][ T5833] hsr_slave_1: entered promiscuous mode [ 75.178381][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 75.184902][ T5833] Cannot create hsr debugfs directory [ 75.290552][ T5832] hsr_slave_0: entered promiscuous mode [ 75.297905][ T5832] hsr_slave_1: entered promiscuous mode [ 75.304235][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 75.309964][ T5832] Cannot create hsr debugfs directory [ 75.695258][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.708627][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.718961][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.738610][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.800357][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.811315][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.839210][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.850099][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.920447][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.934486][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.947479][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.959241][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.065947][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.081697][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.104193][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.115615][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.225703][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.249137][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.261657][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.282952][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.297449][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.328036][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.350635][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.417513][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.424799][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.436881][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.453761][ T5827] Bluetooth: hci3: command tx timeout [ 76.454033][ T52] Bluetooth: hci0: command tx timeout [ 76.464904][ T5834] Bluetooth: hci1: command tx timeout [ 76.496316][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.503522][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.512911][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.520097][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.534209][ T52] Bluetooth: hci4: command tx timeout [ 76.539645][ T52] Bluetooth: hci2: command tx timeout [ 76.549987][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.576003][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.583257][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.710894][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.735337][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.742431][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.769727][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.777032][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.812638][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.887069][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.961600][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.009419][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.027285][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.034503][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.052821][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.060047][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.111209][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.122943][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.130139][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.139858][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.146993][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.175693][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.270176][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.309409][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.390357][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.418986][ T5824] veth0_vlan: entered promiscuous mode [ 77.480294][ T5824] veth1_vlan: entered promiscuous mode [ 77.645988][ T5824] veth0_macvtap: entered promiscuous mode [ 77.702060][ T5824] veth1_macvtap: entered promiscuous mode [ 77.806947][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.861705][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.892108][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.914991][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.934783][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.962031][ T3518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.972796][ T3518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.997530][ T3518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006401][ T3518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.062607][ T5837] veth0_vlan: entered promiscuous mode [ 78.098236][ T5823] veth0_vlan: entered promiscuous mode [ 78.126714][ T5837] veth1_vlan: entered promiscuous mode [ 78.156442][ T5832] veth0_vlan: entered promiscuous mode [ 78.177218][ T5823] veth1_vlan: entered promiscuous mode [ 78.199167][ T5832] veth1_vlan: entered promiscuous mode [ 78.235857][ T5833] veth0_vlan: entered promiscuous mode [ 78.257293][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.267154][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.307659][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.316301][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.340665][ T5837] veth0_macvtap: entered promiscuous mode [ 78.349356][ T5833] veth1_vlan: entered promiscuous mode [ 78.368862][ T5837] veth1_macvtap: entered promiscuous mode [ 78.378136][ T5823] veth0_macvtap: entered promiscuous mode [ 78.390518][ T5823] veth1_macvtap: entered promiscuous mode [ 78.412969][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.431190][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.447394][ T5832] veth0_macvtap: entered promiscuous mode [ 78.482727][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.495634][ T5832] veth1_macvtap: entered promiscuous mode [ 78.534031][ T52] Bluetooth: hci3: command tx timeout [ 78.539512][ T52] Bluetooth: hci0: command tx timeout [ 78.545089][ T5834] Bluetooth: hci1: command tx timeout [ 78.551890][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.557072][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.570366][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.574394][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.605009][ T5942] macvlan0: entered allmulticast mode [ 78.610422][ T5942] veth1_vlan: entered allmulticast mode [ 78.614548][ T52] Bluetooth: hci2: command tx timeout [ 78.621363][ T52] Bluetooth: hci4: command tx timeout [ 78.633648][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.642399][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.653635][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.704643][ T5833] veth0_macvtap: entered promiscuous mode [ 78.712503][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.725960][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.745930][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.764764][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775344][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.806168][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.816940][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827115][ T5833] veth1_macvtap: entered promiscuous mode [ 78.872777][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931656][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.945065][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.958522][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.969029][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.978863][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.001424][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.046232][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.081771][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.103282][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.129922][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.145074][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.169973][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.179500][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.189548][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.199448][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.240852][ T5948] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8'. [ 79.277257][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.285415][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.392195][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.417219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.547054][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.581555][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.652703][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.675968][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.744870][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.764329][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.071602][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 80.127589][ T5964] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 80.166474][ T5964] macvtap1: entered allmulticast mode [ 80.179661][ T5964] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 81.074678][ T52] Bluetooth: hci0: command tx timeout [ 81.085264][ T52] Bluetooth: hci1: command tx timeout [ 81.090779][ T52] Bluetooth: hci3: command tx timeout [ 81.097813][ T52] Bluetooth: hci4: command tx timeout [ 81.103349][ T52] Bluetooth: hci2: command tx timeout [ 81.454882][ T5985] syzkaller0: entered promiscuous mode [ 81.488875][ T5985] syzkaller0: entered allmulticast mode [ 81.514060][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 81.522940][ T5988] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 81.608371][ T5988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18'. [ 82.475145][ T6001] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 82.487058][ T6001] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 82.495491][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 82.504598][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.514647][ T6001] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 82.519674][ T6001] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 c9 67 6a 00 4d 8b 3e 31 ff 4c [ 82.539288][ T6001] RSP: 0018:ffffc9000b91fcd0 EFLAGS: 00010206 [ 82.545344][ T6001] RAX: ffffffff81bde646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 82.553299][ T6001] RDX: ffffc90004681000 RSI: 0000000000001b5e RDI: 0000000000001b5f [ 82.561254][ T6001] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 82.569213][ T6001] R10: dffffc0000000000 R11: fffff52001723f78 R12: dffffc0000000000 [ 82.577176][ T6001] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88807c65cff8 [ 82.585134][ T6001] FS: 00007fb9cf1046c0(0000) GS:ffff888125fc1000(0000) knlGS:0000000000000000 [ 82.594045][ T6001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.600606][ T6001] CR2: 0000200000000640 CR3: 0000000076198000 CR4: 00000000003526f0 [ 82.608561][ T6001] Call Trace: [ 82.611824][ T6001] [ 82.614753][ T6001] nsproxy_free+0x20f/0x7c0 [ 82.619260][ T6001] create_new_namespaces+0x47a/0x540 [ 82.624531][ T6001] unshare_nsproxy_namespaces+0x11c/0x170 [ 82.630243][ T6001] ksys_unshare+0x4c8/0x8c0 [ 82.634728][ T6001] ? __pfx_ksys_unshare+0x10/0x10 [ 82.639749][ T6001] __x64_sys_unshare+0x38/0x50 [ 82.644491][ T6001] do_syscall_64+0xfa/0xfa0 [ 82.648979][ T6001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.655028][ T6001] ? clear_bhb_loop+0x60/0xb0 [ 82.659686][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.665571][ T6001] RIP: 0033:0x7fb9ce18f6c9 [ 82.669977][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.689564][ T6001] RSP: 002b:00007fb9cf104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.697966][ T6001] RAX: ffffffffffffffda RBX: 00007fb9ce3e5fa0 RCX: 00007fb9ce18f6c9 [ 82.705918][ T6001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 82.713871][ T6001] RBP: 00007fb9ce211f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.721823][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.729778][ T6001] R13: 00007fb9ce3e6038 R14: 00007fb9ce3e5fa0 R15: 00007ffd2a657918 [ 82.738262][ T6001] [ 82.741261][ T6001] Modules linked in: [ 82.746220][ T6001] ---[ end trace 0000000000000000 ]--- [ 82.780263][ T6001] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 82.806881][ T6001] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 c9 67 6a 00 4d 8b 3e 31 ff 4c [ 82.827714][ T6001] RSP: 0018:ffffc9000b91fcd0 EFLAGS: 00010206 [ 82.855828][ T6001] RAX: ffffffff81bde646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 82.872101][ T6001] RDX: ffffc90004681000 RSI: 0000000000001b5e RDI: 0000000000001b5f [ 82.885662][ T6001] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 82.894577][ T6001] R10: dffffc0000000000 R11: fffff52001723f78 R12: dffffc0000000000 [ 82.902611][ T6001] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88807c65cff8 [ 82.911583][ T6001] FS: 00007fb9cf1046c0(0000) GS:ffff888125ec1000(0000) knlGS:0000000000000000 [ 82.920742][ T6001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.929707][ T6001] CR2: 000056072b35ea10 CR3: 0000000076198000 CR4: 00000000003526f0 [ 82.938548][ T6001] Kernel panic - not syncing: Fatal exception [ 82.944913][ T6001] Kernel Offset: disabled [ 82.949222][ T6001] Rebooting in 86400 seconds..