last executing test programs: 7.76880459s ago: executing program 2 (id=674): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 7.579136367s ago: executing program 2 (id=677): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x6, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x66, 0x7}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x10001, 0x7d}, {0x10, 0x8001, 0x7}, {0x2, 0xf, 0x8}, {0xf, 0x7, 0x4}, {0xb, 0x101, 0x9}, {0xe, 0x7, 0x1}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0xa, 0xe}, {0x3, 0xfff}, {0x8, 0x1}]}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0xfff, [{0x7, 0x0, 0x7}, {0x5, 0x0, 0xf}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0xb}]}, {0x0, [0x61, 0x30, 0x2e, 0x0]}}, &(0x7f0000000a40)=""/208, 0xfa, 0xd0, 0x0, 0xfc5b, 0x10000, @value=r0}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) 7.129256779s ago: executing program 2 (id=679): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f0000000000)={0x11, @empty=0x11e, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffffffffffc, 0x9, 0x0, 0xffff, 0xaee3, 0x5}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={[0x2]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff8a) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, &(0x7f0000000080)="c4b33da19360b2bf9cbac674b9eeb73303927fde9113c35218bd2cec8e96288c5233e7f21dc820f06aa03b62a6010c46721dbd85d254a5bc49734fbdb05d3e39fe7a848d73391f52", 0x48, 0x40080, &(0x7f0000000000)={0xa, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x41}, 0xff, 0xfffffffd}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x74}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.169320614s ago: executing program 2 (id=683): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x9, 0x9944d92d, 0x2, @local, @private0, 0x700, 0x700, 0x10, 0x88}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4000000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0xf00}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x4e20, 0x1000002, 'lblc\x00'}, 0x2c) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 6.105932799s ago: executing program 3 (id=684): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000040000000000600000914000200fe8800000000000000000000000002010f000700756e636f6e66696e6564000014000300000000000000008e8b2949e5afbf0801"], 0x4c}, 0x2, 0x34005, 0x0, 0x2000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) listen(r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01}, 0x0) 5.053901826s ago: executing program 1 (id=686): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f0000000000)={0x11, @empty=0x11e, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffffffffffc, 0x9, 0x0, 0xffff, 0xaee3, 0x5}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={[0x2]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff8a) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, &(0x7f0000000080)="c4b33da19360b2bf9cbac674b9eeb73303927fde9113c35218bd2cec8e96288c5233e7f21dc820f06aa03b62a6010c46721dbd85d254a5bc49734fbdb05d3e39fe7a848d73391f5215bdeb6c4c2ee76c7624d8836588b2f0d999ecd624a800ce", 0x60, 0x40080, &(0x7f0000000000)={0xa, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x41}, 0xff, 0xfffffffd}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x74}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000100)={0x10000010}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.797429342s ago: executing program 3 (id=688): socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x992c1000) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "96621d9d8991505a", "34c4afa1be05ad9dba301a63f6453165", "9621e2b4", "cdb3dec45dba3078"}, 0x28) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) 4.797204359s ago: executing program 0 (id=689): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 4.796659161s ago: executing program 2 (id=690): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x491, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000006dc0)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8081) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r10, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1002}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 4.27719912s ago: executing program 4 (id=691): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008001500"], 0x34}}, 0x4040010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) 4.044276102s ago: executing program 1 (id=692): socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 3.825371766s ago: executing program 3 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x80111500, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 3.285192279s ago: executing program 4 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x22, 0x3, 0x0) unshare(0x6020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) bind$can_j1939(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x84, 0x2}], 0x10}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x490c4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x4, 0x8}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, r5, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.550076083s ago: executing program 3 (id=695): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008001500"], 0x34}}, 0x4040010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) 2.477216274s ago: executing program 4 (id=696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@loopback, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000004740006080002000000000014000600626f6e6430000000000000000000000014"], 0x4c}, 0x1, 0xffffffff00000003}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f00000000c0)=0x80, 0x4) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r6, 0x0, 0x0, 0x2020, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a04", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304fcffefff3f00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) accept4$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000400)=0x10, 0x80000) 2.476836044s ago: executing program 1 (id=697): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a009157e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!', 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x104}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510", 0x22}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) socket$inet(0xa, 0x801, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.460152649s ago: executing program 0 (id=698): unshare(0x8040480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 2.316943141s ago: executing program 0 (id=699): r0 = socket(0x2a, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x60, 0xd, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r1 = socket(0x11, 0x80a, 0x0) sendto$x25(r1, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @loopback}, {0x1, @remote}, 0x2, {0x2, 0x4e23, @rand_addr=0x64010101}, 'veth0_macvtap\x00'}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r6, 0x1, 0x6}, 0x13) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x6, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16cf8238}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23d84f2a}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2af07bf3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x114}, 0x1, 0x0, 0x0, 0x8801}, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'xfrm0\x00', @local}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x581e}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000800000000000000000850000003600000095000000000000002673f2622e2cd9fa64d21f926cc33a0e3049de275f0c67474af6ca270c1144a108314aeed2fb9a0ac1dee71ad6f8cd872e1d85c3342f95d61f2cb74e33410b978a8dad8a28db486a625a5e6ccd7105e1f11cc1b10fd240fc0b772ddf6e5895813cb1ecc515f9ac3e09634956b0d20dee"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.201239279s ago: executing program 4 (id=700): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$key(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003840)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212ff060300000028bd7000fbdbdf25010018000dbc3b55"], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x1, 0x400000, 0x40000000, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xb, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x8, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r8, 0x1, 0x70bd2b, 0x25dbdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, 0xfffffffffffffde7) 2.11651196s ago: executing program 0 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, 0x0, 0x0, 0x4008004) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r2, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c0005000100060000002400"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 2.061824823s ago: executing program 4 (id=702): unshare(0x68040200) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$x25(r0, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x20040810) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='percpu_create_chunk\x00', r7, 0x0, 0x80000000}, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 2.017442174s ago: executing program 2 (id=703): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x89ab, 0x62}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4048044) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r9 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r9, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1c, 0x1000}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r10], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0xb, 0xfff2}, {0xa, 0x10}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40046000}, 0x8c881) 1.941226208s ago: executing program 0 (id=704): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x4001) close(0x3) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040005"], 0x76}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@deltaction={0x14, 0x31, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000200000000000000008500000041000000180100002020732500000000002020207b1af8ff00faffffbea100000000000007010000f8ffffffb702000008fbff00b703000000000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r9, @ANYRES16=r9, @ANYBLOB="010000000000000000000800000004000480"], 0x18}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESDEC=r5, @ANYRESHEX=r3, @ANYRES32=r6, @ANYRES16, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRESHEX=r10], 0x24}, 0x1, 0x0, 0x0, 0x4008cc1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.691369087s ago: executing program 0 (id=705): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001011"], 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000088a8002985000000080600000000060000000181c2000000aaaaaaaaaabb"], 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000200)) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45310, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}]}}}]}, 0x44}}, 0x8080) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.575060334s ago: executing program 1 (id=706): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, 0x0, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, @null, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934", 0x63}], 0x1}, 0x44080) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400009e", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYBLOB='\x00'/10], 0x48) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x2f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000300), 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="b1f56ee29c4333d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d805000000d542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2", 0x4d}], 0x1}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 1.497301334s ago: executing program 3 (id=707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x74, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x74}}, 0x40c4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x60b}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48184}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a99d88dc857cd7eba38772c4bc12d03a53df2b9db041c1197faaebc8deebfb524c39fa77e2154478f831bee46b172c77e1f5d5cd8aa425bbfbd52b4cff320c71e1120bed9fbfc24f2d2a6e7100acc29064f0da919a28d3c7268ec2c31931c464dd0f1770bd03f3a9449a436c10cf82a9a839da6f3fcab11e5f006"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 577.306282ms ago: executing program 3 (id=708): unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x5, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @datasec={0xe81, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x9b, 0x6c9e}, {0x4, 0x6, 0x9}, {0x5, 0xa, 0x8}, {0x3, 0x7, 0x80}], "ed38"}, @fwd={0x6}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x2, 0xe3}, {0x4, 0x3, 0x8}, {0xa, 0x3, 0x5}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4d, 0x7}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x2e, 0x0]}}, 0x0, 0xdd, 0x0, 0x0, 0x10001, 0x10000, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x5c}], 0x1}, 0x800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_mptcp(0x2, 0x1, 0x106) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x800, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 496.357583ms ago: executing program 1 (id=709): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7f}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0x6, 0x8, 0x5, 0x20, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x446cfcd0e7469515, 0x0, 0x5}, 0xffffffffffffff85) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @random="6a050000003b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @empty, @empty, {[], @mld={0x84, 0x0, 0x0, 0x1c00, 0xe4c, @dev={0xfe, 0x80, '\x00', 0xd}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="070000000400000000004002d904000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, 0x0, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) 289.242895ms ago: executing program 4 (id=710): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(r5, 0x29, 0x40, 0x0, 0x60) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x7f, @local, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1873000000000000000000000100010081128000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r8) 0s ago: executing program 1 (id=711): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x10003}}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000000)=0x9b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @loopback}}}}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000040)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) r7 = epoll_create1(0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004c0000440000000000069078ac1e0001ac14140d8303d7441005030000b20000000000000000008606ffffffff00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="08000000907800003e47f5aef8107c70b59dc1e93343"], 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 71.039386][ T5817] cgroup: Unknown subsys name 'net' [ 71.190923][ T5817] cgroup: Unknown subsys name 'cpuset' [ 71.199755][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.720189][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.726706][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.701591][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.969443][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.982113][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.990344][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.008295][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.016104][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.023883][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.031863][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.034315][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.039908][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.053632][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.058012][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.065154][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.074907][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.098045][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.099488][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.113151][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.117214][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.128127][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.133409][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.136131][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.144075][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.152048][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.157347][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.165945][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.170449][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.189723][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.197112][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.210571][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.218331][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.226829][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.665541][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 75.693534][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 75.703176][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 75.758571][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 75.873823][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 75.945711][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.954052][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.961586][ T5833] bridge_slave_0: entered allmulticast mode [ 75.968950][ T5833] bridge_slave_0: entered promiscuous mode [ 75.985282][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.992524][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.003552][ T5828] bridge_slave_0: entered allmulticast mode [ 76.010412][ T5828] bridge_slave_0: entered promiscuous mode [ 76.019142][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.026267][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.033556][ T5828] bridge_slave_1: entered allmulticast mode [ 76.040552][ T5828] bridge_slave_1: entered promiscuous mode [ 76.078183][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.085355][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.092709][ T5833] bridge_slave_1: entered allmulticast mode [ 76.099396][ T5833] bridge_slave_1: entered promiscuous mode [ 76.105838][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.113581][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.120842][ T5827] bridge_slave_0: entered allmulticast mode [ 76.128578][ T5827] bridge_slave_0: entered promiscuous mode [ 76.160303][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.167608][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.174830][ T5839] bridge_slave_0: entered allmulticast mode [ 76.181914][ T5839] bridge_slave_0: entered promiscuous mode [ 76.210764][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.218283][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.225403][ T5827] bridge_slave_1: entered allmulticast mode [ 76.232776][ T5827] bridge_slave_1: entered promiscuous mode [ 76.241814][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.254024][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.263241][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.271171][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.278946][ T5839] bridge_slave_1: entered allmulticast mode [ 76.285553][ T5839] bridge_slave_1: entered promiscuous mode [ 76.355772][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.375125][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.386776][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.398181][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.418870][ T5828] team0: Port device team_slave_0 added [ 76.426271][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.460928][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.473166][ T5828] team0: Port device team_slave_1 added [ 76.485711][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.493399][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.500696][ T5845] bridge_slave_0: entered allmulticast mode [ 76.507574][ T5845] bridge_slave_0: entered promiscuous mode [ 76.555740][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.562993][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.570992][ T5845] bridge_slave_1: entered allmulticast mode [ 76.579021][ T5845] bridge_slave_1: entered promiscuous mode [ 76.595793][ T5833] team0: Port device team_slave_0 added [ 76.603850][ T5833] team0: Port device team_slave_1 added [ 76.613092][ T5827] team0: Port device team_slave_0 added [ 76.630326][ T5839] team0: Port device team_slave_0 added [ 76.636908][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.644203][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.670687][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.719577][ T5827] team0: Port device team_slave_1 added [ 76.726566][ T5839] team0: Port device team_slave_1 added [ 76.732824][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.740606][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.766749][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.779677][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.791524][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.801286][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.808500][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.834636][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.895268][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.902941][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.929241][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.955222][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.964869][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.991024][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.003844][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.011209][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.037179][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.049847][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.056810][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.082778][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.096703][ T5845] team0: Port device team_slave_0 added [ 77.105155][ T5845] team0: Port device team_slave_1 added [ 77.132352][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.139468][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.166277][ T54] Bluetooth: hci0: command tx timeout [ 77.166300][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.203093][ T5833] hsr_slave_0: entered promiscuous mode [ 77.209608][ T5833] hsr_slave_1: entered promiscuous mode [ 77.229930][ T5828] hsr_slave_0: entered promiscuous mode [ 77.236024][ T5828] hsr_slave_1: entered promiscuous mode [ 77.243151][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.243168][ T54] Bluetooth: hci1: command tx timeout [ 77.251198][ T54] Bluetooth: hci2: command tx timeout [ 77.251509][ T54] Bluetooth: hci3: command tx timeout [ 77.256994][ T5828] Cannot create hsr debugfs directory [ 77.314124][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.322097][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.348270][ T54] Bluetooth: hci4: command tx timeout [ 77.353846][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.367302][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.374283][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.400471][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.441611][ T5839] hsr_slave_0: entered promiscuous mode [ 77.448394][ T5839] hsr_slave_1: entered promiscuous mode [ 77.454368][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.462669][ T5839] Cannot create hsr debugfs directory [ 77.501375][ T5827] hsr_slave_0: entered promiscuous mode [ 77.507680][ T5827] hsr_slave_1: entered promiscuous mode [ 77.513597][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.522125][ T5827] Cannot create hsr debugfs directory [ 77.561085][ T5845] hsr_slave_0: entered promiscuous mode [ 77.567755][ T5845] hsr_slave_1: entered promiscuous mode [ 77.573690][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.581928][ T5845] Cannot create hsr debugfs directory [ 77.905616][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.919551][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.929744][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.944697][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.992661][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.004183][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.019249][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.041475][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.094965][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.104847][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.140942][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.150453][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.230479][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.245239][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.255678][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.265426][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.296351][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.313078][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.325210][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.350588][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.368112][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.434678][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.461912][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.490193][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.497447][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.529646][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.539023][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.546141][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.581461][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.595387][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.602495][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.626773][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.636447][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.643569][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.660227][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.675290][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.722787][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.729937][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.739952][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.747095][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.755667][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.762788][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.791655][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.798757][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.901040][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.018296][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.070533][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.077683][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.099591][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.106722][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.248359][ T54] Bluetooth: hci0: command tx timeout [ 79.271481][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.317366][ T54] Bluetooth: hci2: command tx timeout [ 79.322167][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.330197][ T54] Bluetooth: hci3: command tx timeout [ 79.334893][ T5838] Bluetooth: hci1: command tx timeout [ 79.383659][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.401856][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.408948][ T5838] Bluetooth: hci4: command tx timeout [ 79.419944][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.526036][ T5839] veth0_vlan: entered promiscuous mode [ 79.566556][ T5845] veth0_vlan: entered promiscuous mode [ 79.590690][ T5827] veth0_vlan: entered promiscuous mode [ 79.622839][ T5839] veth1_vlan: entered promiscuous mode [ 79.640382][ T5827] veth1_vlan: entered promiscuous mode [ 79.650475][ T5845] veth1_vlan: entered promiscuous mode [ 79.745233][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.761369][ T5827] veth0_macvtap: entered promiscuous mode [ 79.770704][ T5845] veth0_macvtap: entered promiscuous mode [ 79.789102][ T5827] veth1_macvtap: entered promiscuous mode [ 79.818745][ T5845] veth1_macvtap: entered promiscuous mode [ 79.826261][ T5839] veth0_macvtap: entered promiscuous mode [ 79.851389][ T5839] veth1_macvtap: entered promiscuous mode [ 79.862853][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.889338][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.919690][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.929617][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.938440][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.947581][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.965781][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.978555][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.990315][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.001393][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.012341][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.024469][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.038286][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.047427][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.056161][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.068128][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.084969][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.096456][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.106391][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.117920][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.131222][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.143729][ T5833] veth0_vlan: entered promiscuous mode [ 80.166298][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.177450][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.188642][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.199554][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.211049][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.222865][ T5828] veth0_vlan: entered promiscuous mode [ 80.253890][ T5833] veth1_vlan: entered promiscuous mode [ 80.264396][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.274516][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.284659][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.293708][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.311247][ T5828] veth1_vlan: entered promiscuous mode [ 80.418352][ T5833] veth0_macvtap: entered promiscuous mode [ 80.428428][ T5833] veth1_macvtap: entered promiscuous mode [ 80.450143][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.461152][ T5828] veth0_macvtap: entered promiscuous mode [ 80.463872][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.486926][ T5828] veth1_macvtap: entered promiscuous mode [ 80.529091][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.540248][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.552838][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.564116][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.574283][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.584827][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.595813][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.610236][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.622477][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.652480][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.663752][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.674359][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.686626][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.696831][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.707937][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.720134][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.728700][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.736575][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.737313][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.753394][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764172][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.773093][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.784823][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.797355][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.807247][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.818142][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.828044][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.840400][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.850313][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.860955][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.872269][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.896826][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.907751][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.919478][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.930125][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.940503][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.951129][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.961020][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.971579][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.982606][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.004163][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.024063][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.027381][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.041173][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.052861][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.064169][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098397][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.111449][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.210293][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.232615][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.295419][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.314039][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.324751][ T5838] Bluetooth: hci0: command tx timeout [ 81.338429][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.388021][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.397815][ T5838] Bluetooth: hci1: command tx timeout [ 81.403418][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.411274][ T5838] Bluetooth: hci3: command tx timeout [ 81.411317][ T5838] Bluetooth: hci2: command tx timeout [ 81.477229][ T54] Bluetooth: hci4: command tx timeout [ 81.616087][ T5920] bridge0: entered promiscuous mode [ 81.650327][ T5920] bridge0: port 3(macsec1) entered blocking state [ 81.663589][ T5920] bridge0: port 3(macsec1) entered disabled state [ 81.728074][ T5920] macsec1: entered allmulticast mode [ 81.733459][ T5920] bridge0: entered allmulticast mode [ 81.762732][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.799533][ T5920] macsec1: left allmulticast mode [ 81.828483][ T5920] bridge0: left allmulticast mode [ 81.846320][ T5920] bridge0: left promiscuous mode [ 81.969431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.978873][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.012926][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.042518][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.266612][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.584440][ T5939] syzkaller1: entered promiscuous mode [ 82.650153][ T5939] syzkaller1: entered allmulticast mode [ 82.754941][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.763332][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.295253][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.330950][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.381397][ T5953] Zero length message leads to an empty skb [ 83.397208][ T54] Bluetooth: hci0: command tx timeout [ 83.477545][ T5838] Bluetooth: hci3: command tx timeout [ 83.477552][ T5844] Bluetooth: hci1: command tx timeout [ 83.489613][ T54] Bluetooth: hci2: command tx timeout [ 83.505259][ T5943] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.524740][ T5943] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.537375][ T5943] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.557436][ T54] Bluetooth: hci4: command tx timeout [ 83.560034][ T5943] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.042456][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.082053][ T5966] team0: No ports can be present during mode change [ 84.303045][ T5977] batadv_slave_1: entered promiscuous mode [ 84.381415][ T5978] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 84.460880][ T5981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.684240][ T5981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.831734][ T5981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.900001][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 84.918111][ T5975] batadv_slave_1: left promiscuous mode [ 85.108746][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 85.391079][ T5981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.564782][ T6000] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 85.603203][ T6000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18'. [ 85.720600][ T5880] IPVS: starting estimator thread 0... [ 85.729308][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 85.758500][ T6012] netlink: 'syz.4.19': attribute type 10 has an invalid length. [ 85.854246][ T6014] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18'. [ 85.855375][ T6007] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.898302][ T6011] IPVS: using max 20 ests per chain, 48000 per kthread [ 85.985874][ T6010] bridge_slave_0: left allmulticast mode [ 86.025784][ T6010] bridge_slave_0: left promiscuous mode [ 86.053941][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.109920][ T6010] bridge_slave_1: left allmulticast mode [ 86.126977][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 86.130318][ T6010] bridge_slave_1: left promiscuous mode [ 86.244630][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.294650][ T6010] bond0: (slave bond_slave_0): Releasing backup interface [ 86.325219][ T6010] bond0: (slave bond_slave_1): Releasing backup interface [ 86.352940][ T6010] team0: Port device team_slave_0 removed [ 86.375236][ T6010] team0: Port device team_slave_1 removed [ 86.386644][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.401906][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.418330][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.433278][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.483070][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 86.521448][ T6012] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.553221][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 86.670280][ T5981] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.700609][ T5981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724625][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 86.745317][ T5981] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.766819][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.797225][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.815365][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.867204][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.942666][ T5981] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.987478][ T6034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.005388][ T6031] bond_slave_0: entered promiscuous mode [ 87.011426][ T6031] bond_slave_1: entered promiscuous mode [ 87.045133][ T6031] macvlan2: entered promiscuous mode [ 87.070361][ T6031] bond0: entered promiscuous mode [ 87.096433][ T6031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.466360][ T6039] dvmrp0: entered allmulticast mode [ 87.825221][ T6051] __nla_validate_parse: 1 callbacks suppressed [ 87.825240][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22'. [ 88.010569][ T6058] batadv_slave_1: entered promiscuous mode [ 88.550200][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 88.697986][ T6057] batadv_slave_1: left promiscuous mode [ 88.980995][ T6072] netlink: 88 bytes leftover after parsing attributes in process `syz.0.31'. [ 89.002228][ T6073] bridge_slave_0: left allmulticast mode [ 89.009990][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 89.018496][ T6070] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 89.020839][ T6073] bridge_slave_0: left promiscuous mode [ 89.043814][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.099266][ T6073] bridge_slave_1: left allmulticast mode [ 89.104974][ T6073] bridge_slave_1: left promiscuous mode [ 89.117803][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.193766][ T6073] bond0: (slave bond_slave_0): Releasing backup interface [ 89.230220][ T6073] bond0: (slave bond_slave_1): Releasing backup interface [ 89.274577][ T6073] team0: Port device team_slave_0 removed [ 89.297209][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 89.349132][ T6073] team0: Port device team_slave_1 removed [ 89.382458][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.424327][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.441796][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.451910][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.654801][ T6070] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.744728][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 90.815546][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.40'. [ 91.439123][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 91.512094][ T6129] netlink: 88 bytes leftover after parsing attributes in process `syz.1.44'. [ 91.535415][ T6129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.44'. [ 91.730924][ T6136] Bluetooth: MGMT ver 1.23 [ 92.203653][ T25] cfg80211: failed to load regulatory.db [ 92.455355][ T6154] openvswitch: netlink: Message has 8 unknown bytes. [ 92.917280][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 93.042698][ T6155] smc: net device bond0 applied user defined pnetid SYZ2 [ 93.487946][ T5910] IPVS: starting estimator thread 0... [ 93.490489][ T6164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.617224][ T6172] IPVS: using max 19 ests per chain, 45600 per kthread [ 93.785446][ T6180] __nla_validate_parse: 1 callbacks suppressed [ 93.785466][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.53'. [ 93.852220][ T6164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.100598][ T6179] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.115718][ T6179] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.129496][ T6179] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.139065][ T6179] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.177976][ T6178] team0: No ports can be present during mode change [ 94.246601][ T6164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.314362][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 94.402743][ T6186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.490062][ T6164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.584836][ T6186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.655683][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 94.707596][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 94.708067][ T6164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.754628][ T6164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.843704][ T6186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.885611][ T6201] vlan2: entered promiscuous mode [ 94.896674][ T6201] dummy0: entered promiscuous mode [ 94.913473][ T6201] dummy0: left promiscuous mode [ 94.958174][ T6164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.129185][ T6186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.149352][ T6164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.228337][ T6186] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.281693][ T6186] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.313889][ T6186] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.339034][ T6186] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.591602][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 95.805746][ T6219] bond0: (slave wlan1): Releasing backup interface [ 95.814683][ T6220] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 95.861441][ T6220] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.040944][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 96.375764][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 96.448073][ T6234] team0: Mode "broadcas" not found [ 96.851330][ T6241] Bluetooth: MGMT ver 1.23 [ 96.961243][ T6243] bond0: (slave wlan1): Releasing backup interface [ 97.225751][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 97.323008][ T6256] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 97.377207][ T6256] netlink: 2 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.415091][ T6256] team0: entered promiscuous mode [ 97.428231][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.445611][ T6256] bridge0: port 1(team0) entered blocking state [ 97.465642][ T6256] bridge0: port 1(team0) entered disabled state [ 97.474096][ T6256] team0: entered allmulticast mode [ 97.507513][ T6259] netlink: 'syz.1.71': attribute type 22 has an invalid length. [ 97.519058][ T6259] netlink: 'syz.1.71': attribute type 11 has an invalid length. [ 97.796228][ T6263] lo speed is unknown, defaulting to 1000 [ 97.837289][ T6263] lo speed is unknown, defaulting to 1000 [ 97.851206][ T6263] lo speed is unknown, defaulting to 1000 [ 97.891121][ T6266] netlink: 'syz.1.73': attribute type 39 has an invalid length. [ 97.894488][ T6263] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.005013][ T6263] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.096185][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.69'. [ 98.166594][ T6263] lo speed is unknown, defaulting to 1000 [ 98.177828][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.211292][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.238588][ T6263] lo speed is unknown, defaulting to 1000 [ 98.245587][ T6263] lo speed is unknown, defaulting to 1000 [ 98.308864][ T6263] lo speed is unknown, defaulting to 1000 [ 98.325306][ T6263] lo speed is unknown, defaulting to 1000 [ 98.509745][ T6281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.606786][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.614432][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.737855][ T6292] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 98.889572][ T6283] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.898447][ T6283] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.906911][ T6283] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.915624][ T6283] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.958901][ T6283] bond0: left promiscuous mode [ 98.963870][ T6283] bond_slave_0: left promiscuous mode [ 98.972513][ T6283] bond_slave_1: left promiscuous mode [ 98.979079][ T6283] macvlan2: left promiscuous mode [ 98.999747][ T6289] bridge_slave_0: left allmulticast mode [ 99.007347][ T6289] bridge_slave_0: left promiscuous mode [ 99.018669][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.035228][ T6289] bridge_slave_1: left allmulticast mode [ 99.041566][ T6289] bridge_slave_1: left promiscuous mode [ 99.051743][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.066699][ T6289] bond0: (slave bond_slave_0): Releasing backup interface [ 99.085084][ T6289] bond0: (slave bond_slave_1): Releasing backup interface [ 99.106579][ T6289] team0: Port device team_slave_0 removed [ 99.121042][ T6289] team0: Port device team_slave_1 removed [ 99.149060][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.162222][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.243294][ T6302] lo speed is unknown, defaulting to 1000 [ 99.292141][ T6305] __nla_validate_parse: 2 callbacks suppressed [ 99.292158][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 99.351204][ T6306] syzkaller1: entered promiscuous mode [ 99.356953][ T6306] syzkaller1: entered allmulticast mode [ 99.553345][ T6310] lo speed is unknown, defaulting to 1000 [ 99.624318][ T6316] team0: No ports can be present during mode change [ 99.775356][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.801219][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.825485][ T6323] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 99.837698][ T6323] netlink: 10 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.912952][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 99.973914][ T54] block nbd0: Receive control failed (result -107) [ 100.736661][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 101.072361][ T6366] syzkaller0: entered promiscuous mode [ 101.090120][ T6366] syzkaller0: entered allmulticast mode [ 101.109829][ T6369] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.144894][ T6366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97'. [ 101.432062][ T6369] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.601234][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 101.683391][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.92'. [ 103.410686][ T6369] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.426165][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.585169][ T6369] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.672436][ T6402] lo speed is unknown, defaulting to 1000 [ 103.680560][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.729240][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.850893][ T6406] lo speed is unknown, defaulting to 1000 [ 103.875419][ T6369] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.003451][ T6369] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.221893][ T6415] syzkaller1: entered promiscuous mode [ 104.242501][ T6415] syzkaller1: entered allmulticast mode [ 104.295573][ T6369] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.418760][ T6410] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 104.455582][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.3.105 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 104.455611][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.455628][ T6410] Call Trace: [ 104.455639][ T6410] [ 104.455648][ T6410] dump_stack_lvl+0x241/0x360 [ 104.455687][ T6410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.455709][ T6410] ? __pfx__printk+0x10/0x10 [ 104.455740][ T6410] ? __kmalloc_cache_noprof+0x243/0x390 [ 104.455768][ T6410] ? sysfs_warn_dup+0x51/0xa0 [ 104.455797][ T6410] sysfs_warn_dup+0x8e/0xa0 [ 104.455820][ T6410] sysfs_do_create_link_sd+0xbe/0x110 [ 104.455847][ T6410] device_add_class_symlinks+0x1c5/0x250 [ 104.455881][ T6410] device_add+0x553/0xbf0 [ 104.455916][ T6410] wiphy_register+0x1922/0x2650 [ 104.455949][ T6410] ? __pfx_wiphy_register+0x10/0x10 [ 104.455967][ T6410] ? minstrel_ht_alloc+0x84b/0x940 [ 104.455995][ T6410] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 104.456022][ T6410] ieee80211_register_hw+0x35d9/0x42e0 [ 104.456062][ T6410] ? ieee80211_register_hw+0x15f1/0x42e0 [ 104.456095][ T6410] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 104.456130][ T6410] ? __asan_memset+0x23/0x50 [ 104.456150][ T6410] ? __hrtimer_init+0x170/0x250 [ 104.456175][ T6410] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 104.456228][ T6410] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 104.456250][ T6410] ? trace_kmalloc+0x1f/0xd0 [ 104.456273][ T6410] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 104.456301][ T6410] ? kstrndup+0xbb/0x150 [ 104.456339][ T6410] hwsim_new_radio_nl+0xece/0x2290 [ 104.456375][ T6410] ? __pfx___nla_validate_parse+0x10/0x10 [ 104.456400][ T6410] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 104.456456][ T6410] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 104.456495][ T6410] genl_rcv_msg+0xb1f/0xec0 [ 104.456538][ T6410] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.456596][ T6410] ? __pfx_lock_acquire+0x10/0x10 [ 104.456625][ T6410] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 104.456649][ T6410] ? __pfx___might_resched+0x10/0x10 [ 104.456685][ T6410] netlink_rcv_skb+0x206/0x480 [ 104.456709][ T6410] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.456787][ T6410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.456847][ T6410] genl_rcv+0x28/0x40 [ 104.456876][ T6410] netlink_unicast+0x7f6/0x990 [ 104.456909][ T6410] ? __pfx_netlink_unicast+0x10/0x10 [ 104.456929][ T6410] ? __virt_addr_valid+0x45f/0x530 [ 104.456951][ T6410] ? __phys_addr_symbol+0x2f/0x70 [ 104.456984][ T6410] ? __check_object_size+0x47a/0x730 [ 104.457018][ T6410] netlink_sendmsg+0x8de/0xcb0 [ 104.457057][ T6410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.457086][ T6410] ? aa_sock_msg_perm+0x91/0x160 [ 104.457122][ T6410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.457145][ T6410] __sock_sendmsg+0x221/0x270 [ 104.457174][ T6410] ____sys_sendmsg+0x53a/0x860 [ 104.457217][ T6410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.457247][ T6410] ? __fget_files+0x2a/0x410 [ 104.457281][ T6410] ? __fget_files+0x2a/0x410 [ 104.457321][ T6410] __sys_sendmsg+0x269/0x350 [ 104.457375][ T6410] ? __pfx_futex_wake+0x10/0x10 [ 104.457410][ T6410] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.457490][ T6410] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.457524][ T6410] ? do_syscall_64+0x100/0x230 [ 104.457560][ T6410] ? do_syscall_64+0xb6/0x230 [ 104.457595][ T6410] do_syscall_64+0xf3/0x230 [ 104.457626][ T6410] ? clear_bhb_loop+0x35/0x90 [ 104.457660][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.457688][ T6410] RIP: 0033:0x7f91aeb8d169 [ 104.457715][ T6410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.457738][ T6410] RSP: 002b:00007f91af966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.457761][ T6410] RAX: ffffffffffffffda RBX: 00007f91aeda6080 RCX: 00007f91aeb8d169 [ 104.457777][ T6410] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 104.457791][ T6410] RBP: 00007f91aec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.457804][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.457816][ T6410] R13: 0000000000000000 R14: 00007f91aeda6080 R15: 00007ffc8bf13178 [ 104.457850][ T6410] [ 104.982121][ T6369] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.110971][ T6426] lo speed is unknown, defaulting to 1000 [ 105.313764][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 105.584675][ T6443] netlink: 'syz.2.107': attribute type 7 has an invalid length. [ 105.593313][ T6443] netlink: 'syz.2.107': attribute type 8 has an invalid length. [ 105.780694][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.788306][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.031284][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.044741][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.171477][ T6445] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.186133][ T6445] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.204079][ T6445] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.218268][ T6445] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.254905][ T6466] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 106.267561][ T6466] netlink: 2 bytes leftover after parsing attributes in process `syz.2.110'. [ 106.336312][ T6447] bridge0: port 3(gretap0) entered blocking state [ 106.360156][ T6447] bridge0: port 3(gretap0) entered disabled state [ 106.370722][ T6447] gretap0: entered allmulticast mode [ 106.380015][ T6447] gretap0: entered promiscuous mode [ 106.395790][ T6448] gretap0: left allmulticast mode [ 106.401347][ T6448] gretap0: left promiscuous mode [ 106.406611][ T6448] bridge0: port 3(gretap0) entered disabled state [ 106.415772][ T9] lo speed is unknown, defaulting to 1000 [ 106.426446][ T6466] team0: entered promiscuous mode [ 106.433042][ T6466] team_slave_0: entered promiscuous mode [ 106.447372][ T6466] team_slave_1: entered promiscuous mode [ 106.456344][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.463904][ T6466] bridge0: port 3(team0) entered blocking state [ 106.470721][ T6466] bridge0: port 3(team0) entered disabled state [ 106.478415][ T6466] team0: entered allmulticast mode [ 106.483764][ T6466] team_slave_0: entered allmulticast mode [ 106.490010][ T6466] team_slave_1: entered allmulticast mode [ 106.754796][ T6476] lo speed is unknown, defaulting to 1000 [ 106.953271][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 106.994272][ T6484] vlan2: entered allmulticast mode [ 106.999791][ T6484] veth0_to_batadv: entered allmulticast mode [ 107.242648][ T6487] syzkaller0: entered promiscuous mode [ 107.287541][ T6487] syzkaller0: entered allmulticast mode [ 107.381194][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 109.521601][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.819085][ T6552] netlink: 84 bytes leftover after parsing attributes in process `syz.2.120'. [ 110.193722][ T6564] xt_NFQUEUE: number of total queues is 0 [ 110.285953][ T6567] lo speed is unknown, defaulting to 1000 [ 110.409530][ T6569] lo speed is unknown, defaulting to 1000 [ 110.445956][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 110.605324][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 110.759880][ T6588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 111.191437][ T6604] lo speed is unknown, defaulting to 1000 [ 111.531688][ T6616] xt_nfacct: accounting object `syz1' does not exists [ 111.552881][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 112.443888][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 112.576516][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 112.903429][ T6646] team0: Mode "broa" not found [ 113.227465][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 113.645057][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 113.681672][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 113.782893][ T6677] dvmrp0: entered allmulticast mode [ 114.056240][ T6683] lo speed is unknown, defaulting to 1000 [ 114.767824][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'. [ 115.216914][ T6720] batadv_slave_1: entered promiscuous mode [ 115.333176][ T6721] lo speed is unknown, defaulting to 1000 [ 115.479759][ T6718] batadv_slave_1: left promiscuous mode [ 115.847573][ T6682] dccp_close: ABORT with 116 bytes unread [ 115.914608][ T6733] __nla_validate_parse: 1 callbacks suppressed [ 115.914629][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 116.103816][ T6741] lo speed is unknown, defaulting to 1000 [ 116.120637][ T6741] lo speed is unknown, defaulting to 1000 [ 116.138271][ T6741] lo speed is unknown, defaulting to 1000 [ 116.183230][ T6741] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 116.294967][ T6741] lo speed is unknown, defaulting to 1000 [ 116.302601][ T6741] lo speed is unknown, defaulting to 1000 [ 116.310710][ T6741] lo speed is unknown, defaulting to 1000 [ 116.371870][ T6741] lo speed is unknown, defaulting to 1000 [ 116.385360][ T6746] dvmrp0: entered allmulticast mode [ 116.392111][ T6741] lo speed is unknown, defaulting to 1000 [ 116.422733][ T6741] lo speed is unknown, defaulting to 1000 [ 116.638222][ T6749] veth0_to_batadv: left allmulticast mode [ 116.644028][ T6749] vlan2: left allmulticast mode [ 116.668207][ T6750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 117.036638][ T6758] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 117.068887][ T6758] batman_adv: batadv0: Adding interface: team0 [ 117.075126][ T6758] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.154224][ T6758] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 117.162683][ T6764] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 117.172168][ T6764] netlink: 2 bytes leftover after parsing attributes in process `syz.0.171'. [ 117.220537][ T6764] team0: entered promiscuous mode [ 117.248240][ T6764] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.283467][ T6764] batman_adv: batadv0: Interface activated: team0 [ 117.313137][ T6764] batman_adv: batadv0: Interface deactivated: team0 [ 117.354610][ T6764] batman_adv: batadv0: Removing interface: team0 [ 117.373694][ T6764] bridge0: port 1(team0) entered blocking state [ 117.399688][ T6764] bridge0: port 1(team0) entered disabled state [ 117.436891][ T6764] team0: entered allmulticast mode [ 117.554146][ T6763] bridge0: port 3(macsec1) entered blocking state [ 117.566215][ T6763] bridge0: port 3(macsec1) entered disabled state [ 117.594422][ T6763] macsec1: entered allmulticast mode [ 117.622907][ T6763] bridge0: entered allmulticast mode [ 117.643410][ T6763] macsec1: left allmulticast mode [ 117.658151][ T6763] bridge0: left allmulticast mode [ 117.754108][ T6770] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.171'. [ 117.985340][ T6777] lo speed is unknown, defaulting to 1000 [ 117.997006][ T6778] netlink: 148 bytes leftover after parsing attributes in process `syz.2.176'. [ 118.006204][ T6778] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 118.119626][ T6777] lo speed is unknown, defaulting to 1000 [ 118.630042][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.172'. [ 118.668838][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 119.470888][ T6827] dvmrp0: entered allmulticast mode [ 120.936113][ T6877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.946197][ T6878] team0: left allmulticast mode [ 120.951198][ T6878] team_slave_0: left allmulticast mode [ 120.956702][ T6878] team_slave_1: left allmulticast mode [ 120.967526][ T6878] bridge0: port 3(team0) entered disabled state [ 121.041164][ T6878] bridge_slave_0: left allmulticast mode [ 121.073272][ T6878] bridge_slave_0: left promiscuous mode [ 121.107365][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.169052][ T6878] bridge_slave_1: left allmulticast mode [ 121.181788][ T6878] bridge_slave_1: left promiscuous mode [ 121.202862][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.313104][ T6878] bond0: (slave bond_slave_0): Releasing backup interface [ 121.329291][ T6878] bond0: (slave bond_slave_1): Releasing backup interface [ 121.370549][ T6878] team_slave_0: left promiscuous mode [ 121.391346][ T6878] team0: Port device team_slave_0 removed [ 121.411860][ T6878] team_slave_1: left promiscuous mode [ 121.445841][ T6878] team0: Port device team_slave_1 removed [ 121.683376][ T6900] lo speed is unknown, defaulting to 1000 [ 121.759900][ T6900] lo speed is unknown, defaulting to 1000 [ 121.759900][ T6889] lo speed is unknown, defaulting to 1000 [ 121.899878][ T6889] lo speed is unknown, defaulting to 1000 [ 121.921935][ T6906] netlink: 'syz.4.206': attribute type 10 has an invalid length. [ 122.010953][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.072476][ T6906] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.187902][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 122.352319][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 123.194616][ T6940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.445048][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 123.599383][ T6957] netlink: 3 bytes leftover after parsing attributes in process `syz.2.216'. [ 124.099005][ T6972] team0: left promiscuous mode [ 124.183652][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 124.458280][ T6979] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 124.515905][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 124.595322][ T6979] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 124.604954][ T6979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.220'. [ 124.606410][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'. [ 124.674129][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 124.730544][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 125.830407][ T7010] lo speed is unknown, defaulting to 1000 [ 125.871383][ T7010] lo speed is unknown, defaulting to 1000 [ 126.081877][ T7021] netlink: 'syz.3.228': attribute type 8 has an invalid length. [ 126.431427][ T7025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.565614][ T7030] lo speed is unknown, defaulting to 1000 [ 126.601280][ T7030] lo speed is unknown, defaulting to 1000 [ 127.219586][ T7052] __nla_validate_parse: 1 callbacks suppressed [ 127.219607][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 127.239269][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 127.270934][ T7052] tipc: Started in network mode [ 127.275871][ T7052] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 127.299014][ T7052] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 127.312587][ T7052] tipc: Enabled bearer , priority 10 [ 127.656830][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 127.901141][ T7074] lo speed is unknown, defaulting to 1000 [ 127.909376][ T7074] lo speed is unknown, defaulting to 1000 [ 127.915691][ T7074] lo speed is unknown, defaulting to 1000 [ 128.114647][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 128.355196][ T7081] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 128.428861][ T6461] tipc: Node number set to 1 [ 128.495280][ T7082] syzkaller0: create flow: hash 1220884709 index 1 [ 128.650877][ T7074] infiniband syz0: set down [ 128.657689][ T7074] infiniband syz0: added lo [ 128.772444][ T7074] RDS/IB: syz0: added [ 128.818421][ T7074] smc: adding ib device syz0 with port count 1 [ 128.825702][ T7074] smc: ib device syz0 port 1 has pnetid [ 129.073850][ T5846] lo speed is unknown, defaulting to 1000 [ 129.080682][ T35] syzkaller0: tun_net_xmit 76 [ 129.096307][ T35] syzkaller0: tun_net_xmit 48 [ 129.103706][ T6461] lo speed is unknown, defaulting to 1000 [ 129.122000][ T7080] syzkaller0: delete flow: hash 1220884709 index 1 [ 129.459208][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 131.032014][ T7074] lo speed is unknown, defaulting to 1000 [ 131.308505][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 131.436683][ T7074] lo speed is unknown, defaulting to 1000 [ 131.704193][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 131.725642][ T7139] xt_nfacct: accounting object `syz1' does not exists [ 131.857349][ T7074] lo speed is unknown, defaulting to 1000 [ 131.866190][ T7145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.210894][ T7074] lo speed is unknown, defaulting to 1000 [ 132.546076][ T7074] lo speed is unknown, defaulting to 1000 [ 132.668154][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.277'. [ 132.696686][ T7164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.277'. [ 132.802316][ T7074] lo speed is unknown, defaulting to 1000 [ 132.889936][ T7175] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 132.898346][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 133.045291][ T7181] bridge0: port 2(gretap0) entered blocking state [ 133.052464][ T7181] bridge0: port 2(gretap0) entered disabled state [ 133.063256][ T7181] gretap0: entered allmulticast mode [ 133.079619][ T7181] gretap0: entered promiscuous mode [ 133.092815][ T7181] gretap0: left allmulticast mode [ 133.115676][ T7181] gretap0: left promiscuous mode [ 133.143341][ T7181] bridge0: port 2(gretap0) entered disabled state [ 133.160339][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.166883][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.616820][ T7198] bridge_slave_0: left allmulticast mode [ 133.627365][ T7198] bridge_slave_0: left promiscuous mode [ 133.636001][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.658855][ T7198] bridge_slave_1: left allmulticast mode [ 133.665009][ T7198] bridge_slave_1: left promiscuous mode [ 133.673293][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.690793][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 133.709620][ T7198] bond0: (slave bond_slave_0): Releasing backup interface [ 133.727988][ T7198] bond0: (slave bond_slave_1): Releasing backup interface [ 133.745249][ T7198] team0: Port device team_slave_0 removed [ 133.755472][ T7198] team0: Port device team_slave_1 removed [ 133.762459][ T7198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.772975][ T7198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.811439][ T7207] lo speed is unknown, defaulting to 1000 [ 133.892175][ T7209] syzkaller1: entered promiscuous mode [ 133.969085][ T7209] syzkaller1: entered allmulticast mode [ 133.976677][ T7207] lo speed is unknown, defaulting to 1000 [ 134.048947][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.299'. [ 134.741599][ T7214] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.762289][ T7214] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.788657][ T7214] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.818697][ T7214] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.980451][ T7207] lo speed is unknown, defaulting to 1000 [ 135.344406][ T7236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.432249][ T7240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'. [ 137.552213][ T7291] lo speed is unknown, defaulting to 1000 [ 137.576885][ T7291] lo speed is unknown, defaulting to 1000 [ 137.584122][ T7291] lo speed is unknown, defaulting to 1000 [ 137.981754][ T7296] team0: Mode "broadcas" not found [ 138.188547][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.325'. [ 138.343069][ T7308] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 138.382732][ T7308] syzkaller0: create flow: hash 1220884709 index 1 [ 138.467994][ T7310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.335'. [ 138.769230][ T7307] syzkaller0: delete flow: hash 1220884709 index 1 [ 139.131888][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 141.245090][ T7339] team0: left allmulticast mode [ 141.265726][ T7339] bridge0: port 1(team0) entered disabled state [ 141.403374][ T7338] team0: Mode "broadcas" not found [ 141.411205][ T7341] netlink: 'syz.4.343': attribute type 10 has an invalid length. [ 141.443419][ T7341] netlink: 2 bytes leftover after parsing attributes in process `syz.4.343'. [ 141.465170][ T7345] lo speed is unknown, defaulting to 1000 [ 141.475507][ T7341] team0: entered promiscuous mode [ 141.519438][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.546574][ T7341] bridge0: port 1(team0) entered blocking state [ 141.616201][ T7341] bridge0: port 1(team0) entered disabled state [ 141.653961][ T7341] team0: entered allmulticast mode [ 141.690299][ T7348] syzkaller1: entered promiscuous mode [ 141.698271][ T7348] syzkaller1: entered allmulticast mode [ 141.710732][ T7345] lo speed is unknown, defaulting to 1000 [ 141.721189][ T7345] lo speed is unknown, defaulting to 1000 [ 141.789944][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 142.055548][ T7368] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 142.092170][ T11] syzkaller0: tun_net_xmit 76 [ 142.097068][ T7368] syzkaller0: create flow: hash 1220884709 index 1 [ 142.117518][ T5846] syzkaller0: tun_net_xmit 76 [ 142.123430][ T11] syzkaller0: tun_net_xmit 48 [ 142.189171][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 142.478268][ T5846] syzkaller0: tun_net_xmit 76 [ 142.526132][ T7366] syzkaller0: delete flow: hash 1220884709 index 1 [ 142.578622][ T7392] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 142.776486][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 144.203419][ T7378] lo speed is unknown, defaulting to 1000 [ 144.204985][ T7386] team0: left allmulticast mode [ 144.224559][ T7386] team0: left promiscuous mode [ 144.232459][ T7386] bridge0: port 1(team0) entered disabled state [ 144.252286][ T7386] bond0: (slave wlan1): Releasing backup interface [ 144.270411][ T7381] syzkaller1: entered promiscuous mode [ 144.276498][ T7381] syzkaller1: entered allmulticast mode [ 144.292917][ T7392] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.340383][ T7378] lo speed is unknown, defaulting to 1000 [ 144.346239][ T7384] lo speed is unknown, defaulting to 1000 [ 144.355106][ T7378] lo speed is unknown, defaulting to 1000 [ 144.622718][ T7384] lo speed is unknown, defaulting to 1000 [ 144.652179][ T7384] lo speed is unknown, defaulting to 1000 [ 144.706502][ T7416] lo speed is unknown, defaulting to 1000 [ 144.753524][ T7416] lo speed is unknown, defaulting to 1000 [ 144.908282][ T7417] syzkaller1: entered promiscuous mode [ 144.913814][ T7417] syzkaller1: entered allmulticast mode [ 145.108510][ T7416] lo speed is unknown, defaulting to 1000 [ 145.861484][ T7451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.379'. [ 145.873734][ T7448] netlink: 'syz.4.378': attribute type 10 has an invalid length. [ 145.878240][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 146.042045][ T7457] netlink: 52 bytes leftover after parsing attributes in process `syz.4.382'. [ 146.223857][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 146.785697][ T7475] bond0: (slave wlan1): Releasing backup interface [ 147.009063][ T7485] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 147.030030][ T7485] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.188126][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 147.317154][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 147.378404][ T7499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.400'. [ 147.555258][ T7503] lo speed is unknown, defaulting to 1000 [ 147.581452][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 147.605340][ T7503] lo speed is unknown, defaulting to 1000 [ 147.615724][ T7503] lo speed is unknown, defaulting to 1000 [ 147.721558][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'. [ 147.880699][ T7518] macvlan2: entered promiscuous mode [ 147.886066][ T7518] bridge0: entered promiscuous mode [ 147.986621][ T7520] macvlan3: entered promiscuous mode [ 148.229961][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 148.479816][ T7537] netlink: 'syz.3.412': attribute type 21 has an invalid length. [ 148.527110][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 148.896917][ T7545] team0: left allmulticast mode [ 148.937498][ T7545] bridge0: port 1(team0) entered disabled state [ 148.967853][ T7547] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 149.011303][ T7545] bond0: (slave wlan1): Releasing backup interface [ 149.050293][ T7547] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.800406][ T7571] netlink: 'syz.4.422': attribute type 21 has an invalid length. [ 149.817320][ T7570] netlink: 'syz.3.418': attribute type 11 has an invalid length. [ 150.021913][ T7577] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 150.920529][ T7593] netlink: 'syz.0.429': attribute type 21 has an invalid length. [ 150.923694][ T7592] __nla_validate_parse: 5 callbacks suppressed [ 150.923710][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 150.939461][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 151.370501][ T7610] netlink: 'syz.4.434': attribute type 21 has an invalid length. [ 151.384215][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.434'. [ 151.555916][ T7616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.609153][ T7618] netlink: 'syz.2.437': attribute type 11 has an invalid length. [ 152.451923][ T7631] batadv_slave_1: entered promiscuous mode [ 152.763669][ T7639] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 152.772220][ T7630] batadv_slave_1: left promiscuous mode [ 152.781988][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 152.884765][ T7642] syzkaller0: create flow: hash 1220884709 index 1 [ 152.964318][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 153.124843][ T7636] syzkaller0: delete flow: hash 1220884709 index 1 [ 153.286710][ T7653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.823594][ T7669] netlink: 'syz.1.452': attribute type 21 has an invalid length. [ 154.844930][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'. [ 154.849652][ T7667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 155.137664][ T7679] netlink: 'syz.0.454': attribute type 11 has an invalid length. [ 156.029637][ T7692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.140219][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 156.316786][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 156.854190][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 157.253219][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 157.277744][ T7741] netlink: 'syz.0.471': attribute type 11 has an invalid length. [ 157.605487][ T7747] lo speed is unknown, defaulting to 1000 [ 157.652164][ T7747] lo speed is unknown, defaulting to 1000 [ 157.803521][ T7747] lo speed is unknown, defaulting to 1000 [ 158.157654][ T7754] netlink: 'syz.1.480': attribute type 21 has an invalid length. [ 158.165628][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 158.433870][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 158.673068][ T7764] lo speed is unknown, defaulting to 1000 [ 158.689716][ T7764] lo speed is unknown, defaulting to 1000 [ 158.806889][ T7764] lo speed is unknown, defaulting to 1000 [ 159.049662][ T7774] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 159.234765][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 159.327349][ T7786] netlink: 'syz.1.486': attribute type 11 has an invalid length. [ 159.415160][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 159.570094][ T7785] syzkaller0: entered promiscuous mode [ 159.606552][ T7785] syzkaller0: entered allmulticast mode [ 159.689723][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.489'. [ 159.761236][ T7791] lo speed is unknown, defaulting to 1000 [ 159.795455][ T7791] lo speed is unknown, defaulting to 1000 [ 160.140911][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 160.345201][ T7806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.895222][ T7799] syzkaller1: entered promiscuous mode [ 161.900887][ T7799] syzkaller1: entered allmulticast mode [ 161.914364][ T7791] lo speed is unknown, defaulting to 1000 [ 162.250467][ T7821] netlink: 'syz.1.496': attribute type 21 has an invalid length. [ 162.287159][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.496'. [ 162.502460][ T7823] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 162.856346][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.494'. [ 162.966454][ T7833] netlink: 'syz.2.499': attribute type 21 has an invalid length. [ 162.974421][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 163.376198][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 163.525679][ T7850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.550691][ T7851] netlink: 'syz.3.502': attribute type 11 has an invalid length. [ 163.600992][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 163.612194][ T7853] lo speed is unknown, defaulting to 1000 [ 163.629245][ T7853] lo speed is unknown, defaulting to 1000 [ 163.646398][ T7853] lo speed is unknown, defaulting to 1000 [ 163.722839][ T7860] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 164.044527][ T7870] netlink: 'syz.1.511': attribute type 21 has an invalid length. [ 164.052697][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.511'. [ 164.722668][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 164.956802][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 165.070871][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 165.654039][ T7908] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 165.726952][ T7912] bridge0: port 1(gretap0) entered blocking state [ 165.746474][ T7912] bridge0: port 1(gretap0) entered disabled state [ 165.754015][ T7912] gretap0: entered allmulticast mode [ 165.781939][ T7912] gretap0: entered promiscuous mode [ 165.821887][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 165.850821][ T7914] gretap0: left allmulticast mode [ 165.860049][ T7914] gretap0: left promiscuous mode [ 165.866795][ T7914] bridge0: port 1(gretap0) entered disabled state [ 166.072122][ T7924] netlink: 'syz.4.524': attribute type 11 has an invalid length. [ 166.587381][ T7939] lo speed is unknown, defaulting to 1000 [ 166.700955][ T7942] syzkaller0: entered promiscuous mode [ 166.729165][ T7942] syzkaller0: entered allmulticast mode [ 166.772543][ T7939] lo speed is unknown, defaulting to 1000 [ 167.498109][ T7946] __nla_validate_parse: 3 callbacks suppressed [ 167.498125][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 168.879553][ T7939] lo speed is unknown, defaulting to 1000 [ 169.131701][ T7989] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 169.175665][ T7989] bond0: (slave wlan1): refused to change device type [ 169.291308][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 169.509581][ T8006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.520859][ T8003] team0: left promiscuous mode [ 169.636120][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 169.685882][ T8013] netlink: 'syz.1.545': attribute type 11 has an invalid length. [ 169.702303][ T8003] bridge0: port 1(gretap0) entered blocking state [ 169.722333][ T8003] bridge0: port 1(gretap0) entered disabled state [ 169.737461][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 169.747479][ T8003] gretap0: entered allmulticast mode [ 169.754501][ T8003] gretap0: entered promiscuous mode [ 171.538443][ T8010] gretap0: left allmulticast mode [ 171.543533][ T8010] gretap0: left promiscuous mode [ 171.548788][ T8010] bridge0: port 1(gretap0) entered disabled state [ 171.679388][ T8029] netlink: 76 bytes leftover after parsing attributes in process `syz.0.551'. [ 171.803716][ T8031] syzkaller0: entered promiscuous mode [ 171.809424][ T8031] syzkaller0: entered allmulticast mode [ 171.867908][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.552'. [ 172.343052][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.382800][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 172.427627][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 172.522805][ T8066] netlink: 'syz.0.560': attribute type 11 has an invalid length. [ 172.544349][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 174.303999][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 174.793268][ T8081] lo speed is unknown, defaulting to 1000 [ 174.802826][ T8081] lo speed is unknown, defaulting to 1000 [ 174.813202][ T8081] lo speed is unknown, defaulting to 1000 [ 174.944519][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.986280][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.184525][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 175.428122][ T8104] netlink: 4316 bytes leftover after parsing attributes in process `syz.4.573'. [ 175.675906][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 175.761888][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 176.046685][ T8118] netlink: 'syz.4.575': attribute type 11 has an invalid length. [ 176.097596][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 176.401545][ T8129] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 176.530783][ T8132] netlink: 'syz.1.581': attribute type 21 has an invalid length. [ 176.547123][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.581'. [ 177.041741][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 177.192001][ T8143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.284786][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 177.642034][ T8157] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 178.203459][ T8179] __nla_validate_parse: 2 callbacks suppressed [ 178.203479][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 178.316526][ T8183] lo speed is unknown, defaulting to 1000 [ 178.395861][ T8183] lo speed is unknown, defaulting to 1000 [ 178.433804][ T8194] netlink: 'syz.4.593': attribute type 11 has an invalid length. [ 178.457835][ T8183] lo speed is unknown, defaulting to 1000 [ 178.492472][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 178.632076][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 179.259362][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 179.439775][ T8242] netlink: 236 bytes leftover after parsing attributes in process `syz.0.602'. [ 179.583441][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.608054][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 180.006479][ T8266] netlink: 'syz.1.606': attribute type 11 has an invalid length. [ 180.277269][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 180.923386][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 180.973169][ T8300] netlink: 'syz.2.611': attribute type 11 has an invalid length. [ 181.016186][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 181.284401][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 181.306746][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'. [ 181.408982][ T8315] netlink: 'syz.3.616': attribute type 9 has an invalid length. [ 181.416936][ T8315] openvswitch: netlink: Message has 6 unknown bytes. [ 181.445002][ T8317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.489306][ T8319] team0: Mode changed to "loadbalance" [ 181.784890][ T8330] lo speed is unknown, defaulting to 1000 [ 181.798250][ T8330] lo speed is unknown, defaulting to 1000 [ 181.805041][ T8330] lo speed is unknown, defaulting to 1000 [ 182.762367][ T8365] netlink: 'syz.1.625': attribute type 11 has an invalid length. [ 182.829124][ T8372] syzkaller1: entered promiscuous mode [ 182.849976][ T8372] syzkaller1: entered allmulticast mode [ 183.438955][ T8392] netlink: 'syz.4.630': attribute type 11 has an invalid length. [ 183.518093][ T8392] __nla_validate_parse: 4 callbacks suppressed [ 183.518112][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 183.872153][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.005505][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 184.372489][ T8416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.518373][ T8421] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 184.600089][ T8421] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 184.616643][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.2.642 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 184.616670][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.616682][ T8421] Call Trace: [ 184.616689][ T8421] [ 184.616698][ T8421] dump_stack_lvl+0x241/0x360 [ 184.616748][ T8421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.616771][ T8421] ? __pfx__printk+0x10/0x10 [ 184.616797][ T8421] ? __kmalloc_cache_noprof+0x243/0x390 [ 184.616843][ T8421] ? sysfs_warn_dup+0x51/0xa0 [ 184.616893][ T8421] sysfs_warn_dup+0x8e/0xa0 [ 184.616918][ T8421] sysfs_do_create_link_sd+0xbe/0x110 [ 184.616948][ T8421] device_add_class_symlinks+0x1c5/0x250 [ 184.616985][ T8421] device_add+0x553/0xbf0 [ 184.617026][ T8421] wiphy_register+0x1922/0x2650 [ 184.617065][ T8421] ? __pfx_wiphy_register+0x10/0x10 [ 184.617085][ T8421] ? minstrel_ht_alloc+0x84b/0x940 [ 184.617117][ T8421] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 184.617148][ T8421] ieee80211_register_hw+0x35d9/0x42e0 [ 184.617192][ T8421] ? ieee80211_register_hw+0x15f1/0x42e0 [ 184.617227][ T8421] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 184.617268][ T8421] ? __asan_memset+0x23/0x50 [ 184.617288][ T8421] ? __hrtimer_init+0x170/0x250 [ 184.617316][ T8421] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 184.617379][ T8421] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 184.617403][ T8421] ? trace_kmalloc+0x1f/0xd0 [ 184.617429][ T8421] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 184.617459][ T8421] ? kstrndup+0xbb/0x150 [ 184.617502][ T8421] hwsim_new_radio_nl+0xece/0x2290 [ 184.617541][ T8421] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.617569][ T8421] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.617631][ T8421] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 184.617675][ T8421] genl_rcv_msg+0xb1f/0xec0 [ 184.617717][ T8421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.617792][ T8421] ? __pfx_lock_acquire+0x10/0x10 [ 184.617824][ T8421] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.617850][ T8421] ? __pfx___might_resched+0x10/0x10 [ 184.617892][ T8421] netlink_rcv_skb+0x206/0x480 [ 184.617917][ T8421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.617950][ T8421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.617997][ T8421] ? __pfx_genl_rcv+0x10/0x10 [ 184.618027][ T8421] ? genl_rcv+0xd/0x40 [ 184.618064][ T8421] genl_rcv+0x28/0x40 [ 184.618103][ T8421] netlink_unicast+0x7f6/0x990 [ 184.618135][ T8421] ? __pfx_netlink_unicast+0x10/0x10 [ 184.618153][ T8421] ? __virt_addr_valid+0x45f/0x530 [ 184.618174][ T8421] ? __phys_addr_symbol+0x2f/0x70 [ 184.618205][ T8421] ? __check_object_size+0x47a/0x730 [ 184.618238][ T8421] netlink_sendmsg+0x8de/0xcb0 [ 184.618277][ T8421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.618308][ T8421] ? aa_sock_msg_perm+0x91/0x160 [ 184.618357][ T8421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.618377][ T8421] __sock_sendmsg+0x221/0x270 [ 184.618404][ T8421] ____sys_sendmsg+0x53a/0x860 [ 184.618444][ T8421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.618471][ T8421] ? __fget_files+0x2a/0x410 [ 184.618502][ T8421] ? __fget_files+0x2a/0x410 [ 184.618539][ T8421] __sys_sendmsg+0x269/0x350 [ 184.618575][ T8421] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.618652][ T8421] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.618683][ T8421] ? do_syscall_64+0x100/0x230 [ 184.618716][ T8421] ? do_syscall_64+0xb6/0x230 [ 184.618756][ T8421] do_syscall_64+0xf3/0x230 [ 184.618785][ T8421] ? clear_bhb_loop+0x35/0x90 [ 184.618817][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.618842][ T8421] RIP: 0033:0x7f490678d169 [ 184.618867][ T8421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.618883][ T8421] RSP: 002b:00007f490750d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.618911][ T8421] RAX: ffffffffffffffda RBX: 00007f49069a5fa0 RCX: 00007f490678d169 [ 184.618926][ T8421] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 000000000000000a [ 184.618939][ T8421] RBP: 00007f490680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.618950][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.618961][ T8421] R13: 0000000000000000 R14: 00007f49069a5fa0 R15: 00007ffda58c33b8 [ 184.618992][ T8421] [ 185.293189][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 185.306967][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 185.610929][ T8449] netlink: 'syz.1.645': attribute type 11 has an invalid length. [ 185.613500][ T8446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.795003][ T8455] netlink: 'syz.4.649': attribute type 11 has an invalid length. [ 185.841846][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 186.791063][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 186.841191][ T8476] vlan2: entered allmulticast mode [ 186.846378][ T8476] team0: entered allmulticast mode [ 186.854261][ T8476] team0: left allmulticast mode [ 186.883525][ T8474] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 187.283009][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 187.318384][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'. [ 187.349614][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 187.386190][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 188.356477][ T8218] syzkaller0: tun_net_xmit 76 [ 188.372433][ T8520] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 188.377436][ T8218] syzkaller0: tun_net_xmit 48 [ 188.476066][ T8524] netlink: 'syz.4.678': attribute type 21 has an invalid length. [ 189.709535][ T8540] netlink: 'syz.2.683': attribute type 39 has an invalid length. [ 190.674789][ T8520] team0: entered promiscuous mode [ 190.682208][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.693630][ T8520] bridge0: port 1(team0) entered blocking state [ 190.701689][ T8520] bridge0: port 1(team0) entered disabled state [ 190.712062][ T8520] team0: entered allmulticast mode [ 190.761473][ T8542] netlink: 'syz.3.684': attribute type 13 has an invalid length. [ 190.787704][ T8544] bond0: (slave wlan1): Releasing backup interface [ 190.829865][ T8544] debugfs: Directory 'netdev:phy11-monitor' with parent 'phy11' already present! [ 190.858836][ T8545] vlan2: entered allmulticast mode [ 191.685039][ T8573] netlink: 'syz.4.691': attribute type 21 has an invalid length. [ 191.711488][ T8573] __nla_validate_parse: 2 callbacks suppressed [ 191.711509][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.691'. [ 193.390228][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 193.406890][ T8586] netlink: 'syz.1.697': attribute type 10 has an invalid length. [ 193.414928][ T8586] netlink: 2 bytes leftover after parsing attributes in process `syz.1.697'. [ 193.424428][ T8586] team0: entered promiscuous mode [ 193.425300][ T8590] netlink: 56 bytes leftover after parsing attributes in process `syz.4.696'. [ 193.435339][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.447494][ T8586] bridge0: port 1(team0) entered blocking state [ 193.449372][ T8594] netlink: 'syz.3.695': attribute type 21 has an invalid length. [ 193.453849][ T8586] bridge0: port 1(team0) entered disabled state [ 193.471458][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 193.518684][ T8586] team0: entered allmulticast mode [ 193.850911][ T8605] lo speed is unknown, defaulting to 1000 [ 193.859255][ T8605] lo speed is unknown, defaulting to 1000 [ 193.866124][ T8605] lo speed is unknown, defaulting to 1000 [ 194.001763][ T8609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.364311][ T8618] syzkaller0: entered promiscuous mode [ 194.380410][ T8618] syzkaller0: entered allmulticast mode [ 194.416665][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 194.418194][ T8623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.539224][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 194.609523][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.635853][ T8632] netlink: 'syz.1.706': attribute type 11 has an invalid length. [ 195.871999][ T8657] tipc: Can't bind to reserved service type 1 [ 196.007334][ T8659] netlink: 'syz.1.711': attribute type 11 has an invalid length. [ 196.015305][ T8659] [ 196.017664][ T8659] ===================================== [ 196.023227][ T8659] WARNING: bad unlock balance detected! [ 196.028785][ T8659] 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 Not tainted [ 196.035905][ T8659] ------------------------------------- [ 196.041452][ T8659] syz.1.711/8659 is trying to release lock (rtnl_mutex) at: [ 196.048767][ T8659] [] __rtnl_unlock+0x6c/0xf0 [ 196.054963][ T8659] but there are no more locks to release! [ 196.060674][ T8659] [ 196.060674][ T8659] other info that might help us debug this: [ 196.068728][ T8659] no locks held by syz.1.711/8659. [ 196.073830][ T8659] [ 196.073830][ T8659] stack backtrace: [ 196.079713][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.1.711 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 196.079731][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.079740][ T8659] Call Trace: [ 196.079747][ T8659] [ 196.079754][ T8659] dump_stack_lvl+0x241/0x360 [ 196.079775][ T8659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.079791][ T8659] ? __pfx__printk+0x10/0x10 [ 196.079808][ T8659] ? __rtnl_unlock+0x6c/0xf0 [ 196.079830][ T8659] print_unlock_imbalance_bug+0x25b/0x2d0 [ 196.079849][ T8659] ? __pfx_print_unlock_imbalance_bug+0x10/0x10 [ 196.079866][ T8659] ? preempt_schedule+0xe1/0xf0 [ 196.079902][ T8659] ? _printk+0xd5/0x120 [ 196.079917][ T8659] lock_release+0x47e/0xa30 [ 196.079940][ T8659] ? __lock_acquire+0x1397/0x2100 [ 196.079963][ T8659] ? __rtnl_unlock+0x6c/0xf0 [ 196.079984][ T8659] ? __pfx_lock_release+0x10/0x10 [ 196.080010][ T8659] ? __rtnl_unlock+0x6c/0xf0 [ 196.080031][ T8659] __mutex_unlock_slowpath+0xec/0x800 [ 196.080057][ T8659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.080080][ T8659] ? __pfx_lock_release+0x10/0x10 [ 196.080100][ T8659] ? validate_chain+0x11e/0x5920 [ 196.080120][ T8659] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 196.080141][ T8659] __rtnl_unlock+0x6c/0xf0 [ 196.080162][ T8659] lwtunnel_valid_encap_type+0x38a/0x5f0 [ 196.080186][ T8659] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 196.080219][ T8659] lwtunnel_valid_encap_type_attr+0x113/0x270 [ 196.080254][ T8659] rtm_to_fib_config+0x949/0x14e0 [ 196.080291][ T8659] inet_rtm_newroute+0xf6/0x2a0 [ 196.080313][ T8659] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 196.080342][ T8659] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 196.080371][ T8659] rtnetlink_rcv_msg+0x791/0xcf0 [ 196.080388][ T8659] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 196.080405][ T8659] ? __lock_acquire+0x1397/0x2100 [ 196.080427][ T8659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.080450][ T8659] netlink_rcv_skb+0x206/0x480 [ 196.080467][ T8659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.080485][ T8659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.080509][ T8659] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.080527][ T8659] netlink_unicast+0x7f6/0x990 [ 196.080544][ T8659] ? __pfx_netlink_unicast+0x10/0x10 [ 196.080558][ T8659] ? __virt_addr_valid+0x45f/0x530 [ 196.080572][ T8659] ? __phys_addr_symbol+0x2f/0x70 [ 196.080607][ T8659] ? __check_object_size+0x47a/0x730 [ 196.080629][ T8659] netlink_sendmsg+0x8de/0xcb0 [ 196.080650][ T8659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.080668][ T8659] ? aa_sock_msg_perm+0x91/0x160 [ 196.080691][ T8659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.080707][ T8659] __sock_sendmsg+0x221/0x270 [ 196.080726][ T8659] ____sys_sendmsg+0x53a/0x860 [ 196.080750][ T8659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.080772][ T8659] ? __fget_files+0x2a/0x410 [ 196.080793][ T8659] ? __fget_files+0x2a/0x410 [ 196.080815][ T8659] __sys_sendmsg+0x269/0x350 [ 196.080836][ T8659] ? vma_end_read+0x18/0x170 [ 196.080855][ T8659] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.080887][ T8659] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.080911][ T8659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.080933][ T8659] ? exc_page_fault+0x590/0x8b0 [ 196.080953][ T8659] ? do_syscall_64+0xb6/0x230 [ 196.080975][ T8659] do_syscall_64+0xf3/0x230 [ 196.080997][ T8659] ? clear_bhb_loop+0x35/0x90 [ 196.081018][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.081039][ T8659] RIP: 0033:0x7f160798d169 [ 196.081052][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.081064][ T8659] RSP: 002b:00007f16087db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.081080][ T8659] RAX: ffffffffffffffda RBX: 00007f1607ba6160 RCX: 00007f160798d169 [ 196.081090][ T8659] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007 [ 196.081117][ T8659] RBP: 00007f1607a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.081126][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.081135][ T8659] R13: 0000000000000001 R14: 00007f1607ba6160 R15: 00007ffdcbbad2b8 [ 196.081150][ T8659] [ 196.478880][ T8617] ------------[ cut here ]------------ [ 196.484418][ T8617] RTNL: assertion failed at net/sched/sch_api.c (294) [ 196.503261][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 196.508356][ T8617] WARNING: CPU: 0 PID: 8617 at net/sched/sch_api.c:294 qdisc_hash_del+0x19d/0x1e0 [ 196.521407][ T8617] Modules linked in: [ 196.525325][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.0.705 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 196.536174][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.546390][ T8617] RIP: 0010:qdisc_hash_del+0x19d/0x1e0 [ 196.552110][ T8617] Code: 75 ce eb d4 e8 54 5f d4 f7 c6 05 2e ba 39 06 01 90 48 c7 c7 60 45 31 8d 48 c7 c6 00 45 31 8d ba 26 01 00 00 e8 94 1b 94 f7 90 <0f> 0b 90 90 e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 [ 196.572004][ T8617] RSP: 0018:ffffc9000c8cf930 EFLAGS: 00010246 [ 196.578308][ T8617] RAX: 606d8c8bf4fef600 RBX: 0000000000000000 RCX: ffff88802691bc00 [ 196.586314][ T8617] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 196.594489][ T8617] RBP: 0000000000000067 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 196.602849][ T8617] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff888074a18000 [ 196.611114][ T8617] R13: dffffc0000000000 R14: ffff888074a18000 R15: ffffffff903d7bc0 [ 196.619329][ T8617] FS: 00005555867cf500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 196.628499][ T8617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.635345][ T8617] CR2: 00007f16087b9f98 CR3: 00000000337f2000 CR4: 00000000003526f0 [ 196.643547][ T8617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.651892][ T8617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.660070][ T8617] Call Trace: [ 196.663367][ T8617] [ 196.666315][ T8617] ? __warn+0x165/0x4d0 [ 196.670525][ T8617] ? qdisc_hash_del+0x19d/0x1e0 [ 196.675401][ T8617] ? report_bug+0x2b3/0x500 [ 196.680077][ T8617] ? qdisc_hash_del+0x19d/0x1e0 [ 196.684964][ T8617] ? handle_bug+0x60/0x90 [ 196.689350][ T8617] ? exc_invalid_op+0x1a/0x50 [ 196.694116][ T8617] ? asm_exc_invalid_op+0x1a/0x20 [ 196.699199][ T8617] ? __warn_printk+0x292/0x360 [ 196.703989][ T8617] ? qdisc_hash_del+0x19d/0x1e0 [ 196.708898][ T8617] __qdisc_destroy+0x75/0x410 [ 196.713598][ T8617] dev_shutdown+0x9b/0x450 [ 196.718072][ T8617] unregister_netdevice_many_notify+0xad0/0x2070 [ 196.724423][ T8617] ? __asan_memset+0x23/0x50 [ 196.729057][ T8617] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 196.735844][ T8617] ? __asan_memset+0x23/0x50 [ 196.740498][ T8617] ? skb_queue_purge_reason+0x2de/0x500 [ 196.746081][ T8617] unregister_netdevice_queue+0x303/0x370 [ 196.751854][ T8617] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 196.758139][ T8617] ? netif_set_real_num_tx_queues+0xb1/0x8d0 [ 196.764140][ T8617] __tun_detach+0x6d9/0x15d0 [ 196.768794][ T8617] tun_chr_close+0x105/0x1b0 [ 196.773403][ T8617] ? __pfx_tun_chr_close+0x10/0x10 [ 196.778556][ T8617] __fput+0x3e9/0x9f0 [ 196.782596][ T8617] task_work_run+0x24f/0x310 [ 196.787249][ T8617] ? _raw_spin_unlock+0x28/0x50 [ 196.792173][ T8617] ? __pfx_task_work_run+0x10/0x10 [ 196.797410][ T8617] ? syscall_exit_to_user_mode+0xa3/0x340 [ 196.803158][ T8617] syscall_exit_to_user_mode+0x13f/0x340 [ 196.808845][ T8617] do_syscall_64+0x100/0x230 [ 196.813484][ T8617] ? clear_bhb_loop+0x35/0x90 [ 196.818230][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.824142][ T8617] RIP: 0033:0x7f1984d8d169 [ 196.828598][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.848356][ T8617] RSP: 002b:00007fff99a0ada8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 196.856795][ T8617] RAX: 0000000000000000 RBX: 00007f1984fa7ba0 RCX: 00007f1984d8d169 [ 196.864833][ T8617] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 196.872869][ T8617] RBP: 00007f1984fa7ba0 R08: 000000000000602c R09: 0000001e99a0b09f [ 196.880895][ T8617] R10: 00000000003f9db0 R11: 0000000000000246 R12: 000000000002f9c3 [ 196.888914][ T8617] R13: 00007f1984fa6160 R14: ffffffffffffffff R15: 00007fff99a0aec0 [ 196.896929][ T8617] [ 196.900124][ T8617] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.907430][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.0.705 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 196.918033][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.928101][ T8617] Call Trace: [ 196.931388][ T8617] [ 196.934338][ T8617] dump_stack_lvl+0x241/0x360 [ 196.939059][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.944259][ T8617] ? __pfx__printk+0x10/0x10 [ 196.948875][ T8617] ? vscnprintf+0x5d/0x90 [ 196.953213][ T8617] panic+0x349/0x880 [ 196.957112][ T8617] ? __warn+0x174/0x4d0 [ 196.961293][ T8617] ? __pfx_panic+0x10/0x10 [ 196.965711][ T8617] __warn+0x344/0x4d0 [ 196.969700][ T8617] ? qdisc_hash_del+0x19d/0x1e0 [ 196.974554][ T8617] report_bug+0x2b3/0x500 [ 196.978889][ T8617] ? qdisc_hash_del+0x19d/0x1e0 [ 196.983755][ T8617] handle_bug+0x60/0x90 [ 196.987940][ T8617] exc_invalid_op+0x1a/0x50 [ 196.992462][ T8617] asm_exc_invalid_op+0x1a/0x20 [ 196.997339][ T8617] RIP: 0010:qdisc_hash_del+0x19d/0x1e0 [ 197.002822][ T8617] Code: 75 ce eb d4 e8 54 5f d4 f7 c6 05 2e ba 39 06 01 90 48 c7 c7 60 45 31 8d 48 c7 c6 00 45 31 8d ba 26 01 00 00 e8 94 1b 94 f7 90 <0f> 0b 90 90 e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 [ 197.022434][ T8617] RSP: 0018:ffffc9000c8cf930 EFLAGS: 00010246 [ 197.028512][ T8617] RAX: 606d8c8bf4fef600 RBX: 0000000000000000 RCX: ffff88802691bc00 [ 197.036485][ T8617] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 197.044456][ T8617] RBP: 0000000000000067 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 197.052433][ T8617] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff888074a18000 [ 197.060410][ T8617] R13: dffffc0000000000 R14: ffff888074a18000 R15: ffffffff903d7bc0 [ 197.068389][ T8617] ? __warn_printk+0x292/0x360 [ 197.073171][ T8617] __qdisc_destroy+0x75/0x410 [ 197.077880][ T8617] dev_shutdown+0x9b/0x450 [ 197.082314][ T8617] unregister_netdevice_many_notify+0xad0/0x2070 [ 197.088651][ T8617] ? __asan_memset+0x23/0x50 [ 197.093262][ T8617] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 197.100047][ T8617] ? __asan_memset+0x23/0x50 [ 197.104661][ T8617] ? skb_queue_purge_reason+0x2de/0x500 [ 197.110229][ T8617] unregister_netdevice_queue+0x303/0x370 [ 197.115962][ T8617] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 197.122211][ T8617] ? netif_set_real_num_tx_queues+0xb1/0x8d0 [ 197.128227][ T8617] __tun_detach+0x6d9/0x15d0 [ 197.132850][ T8617] tun_chr_close+0x105/0x1b0 [ 197.137462][ T8617] ? __pfx_tun_chr_close+0x10/0x10 [ 197.142574][ T8617] __fput+0x3e9/0x9f0 [ 197.146606][ T8617] task_work_run+0x24f/0x310 [ 197.151200][ T8617] ? _raw_spin_unlock+0x28/0x50 [ 197.156060][ T8617] ? __pfx_task_work_run+0x10/0x10 [ 197.161181][ T8617] ? syscall_exit_to_user_mode+0xa3/0x340 [ 197.166909][ T8617] syscall_exit_to_user_mode+0x13f/0x340 [ 197.172547][ T8617] do_syscall_64+0x100/0x230 [ 197.177145][ T8617] ? clear_bhb_loop+0x35/0x90 [ 197.181864][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.187766][ T8617] RIP: 0033:0x7f1984d8d169 [ 197.192188][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.211794][ T8617] RSP: 002b:00007fff99a0ada8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 197.220213][ T8617] RAX: 0000000000000000 RBX: 00007f1984fa7ba0 RCX: 00007f1984d8d169 [ 197.228190][ T8617] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 197.236194][ T8617] RBP: 00007f1984fa7ba0 R08: 000000000000602c R09: 0000001e99a0b09f [ 197.244163][ T8617] R10: 00000000003f9db0 R11: 0000000000000246 R12: 000000000002f9c3 [ 197.252136][ T8617] R13: 00007f1984fa6160 R14: ffffffffffffffff R15: 00007fff99a0aec0 [ 197.260203][ T8617] [ 197.263583][ T8617] Kernel Offset: disabled [ 197.267905][ T8617] Rebooting in 86400 seconds..