last executing test programs: 1m27.22313112s ago: executing program 0 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@ifindex, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f00)={0x1b4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x197, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xae, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x4b, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002b00)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000009c0), 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="e23485361d48", 'dvmrp1\x00'}}, 0x1e) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 1m13.912830017s ago: executing program 0 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@ifindex, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f00)={0x1b4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x197, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xae, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x4b, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002b00)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000009c0), 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="e23485361d48", 'dvmrp1\x00'}}, 0x1e) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 59.776537337s ago: executing program 0 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@ifindex, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f00)={0x1b4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x197, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xae, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x4b, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002b00)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000009c0), 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="e23485361d48", 'dvmrp1\x00'}}, 0x1e) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 44.705327648s ago: executing program 0 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@ifindex, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f00)={0x1b4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x197, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xae, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x4b, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002b00)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000009c0), 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="e23485361d48", 'dvmrp1\x00'}}, 0x1e) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 31.14771622s ago: executing program 0 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@ifindex, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f00)={0x1b4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x197, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xae, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x4b, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002b00)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000009c0), 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="e23485361d48", 'dvmrp1\x00'}}, 0x1e) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 13.030248755s ago: executing program 4 (id=1022): socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7000d6e6e4f6e976a6240000000000000200000044000480400001800c00010062697477697365003000028008000340000000040800014000000016080006400000000208000240000000130c00078005000200a70000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000016c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delsa={0x28, 0x11, 0x421, 0x0, 0x0, {@in=@local}}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) write$binfmt_misc(r8, &(0x7f0000001880)=ANY=[@ANYBLOB="73797a31632b2cd7ad2b6973b93b8c8becea187f294fc05f71d084c5f5c314d041dad9e27571c3e469a9d8bc847679f0742a0fd739da4f7dd55e41a0521883f982e3d59959027e42e5a0987f1702124fdc0580b4648b38bfad4b28afe4382550e312a75d40d5e35089d9bd1881adbda6e3c609ecae164a54cd6763e58b63900000000000000000"], 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000001e00)={0xe0c, 0x0, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0xffc}, 0xfd, 0x0, 0xd, 0x2704, 0x1, 'syz0\x00', "a26042af85d888da7e4243a87c45dfefa9d95e78ab173bc6657ddfbf16e19551", "241e7726be3df049129118d852142a5647dcebee3286c0a114d1032acc47a54b", [{0x79c, 0x80f, {0x3, 0x8001}}, {0x5, 0xf9c, {0x2, 0x1}}, {0x6, 0x5, {0x0, 0x9}}, {0xfc01, 0x3, {0x2, 0x8}}, {0x1, 0xb, {0x1, 0x7}}, {0x3, 0x2, {0x0, 0x21e}}, {0x0, 0xb5, {0x0, 0x3}}, {0x8, 0x2c, {0x1, 0x1}}, {0xd, 0x6, {0x1, 0x2}}, {0xbe4, 0x6, {0x1, 0x494e}}, {0x8001, 0xb, {0x3, 0xa8}}, {0x4, 0x1a, {0x2, 0x6}}, {0xff, 0x2, {0x1, 0x1}}, {0x7fff, 0x3, {0x0, 0x4}}, {0xe51, 0x95, {0x1, 0x1}}, {0x0, 0x1000, {0x2, 0x1}}, {0x3, 0x1, {0x2, 0x2}}, {0x3, 0x9, {0x0, 0x4}}, {0x6, 0x0, {0x0, 0x12c}}, {0x0, 0x7fff, {0x2, 0x4}}, {0xfffa, 0xfff, {0x0, 0x40}}, {0x80, 0x2, {0x1, 0x5}}, {0x3ff, 0xb85d, {0x0, 0x6e}}, {0x5, 0x9, {0x0, 0x8}}, {0x1, 0x0, {0x3, 0x7}}, {0x9, 0x19, {0x0, 0x10001}}, {0x80, 0x80, {0x2, 0x7f}}, {0x8001, 0x9, {0x0, 0x83}}, {0x4, 0x0, {0x2, 0x9}}, {0x7, 0x1, {0x0, 0xffff89ee}}, {0x2, 0x9, {0x1, 0xfffffff7}}, {0x9, 0x2, {0x3, 0x9}}, {0xbaaa, 0x2, {0x2, 0xb43}}, {0x7, 0xc4, {0x2, 0x6}}, {0x998e, 0x497, {0x3, 0x37f5af22}}, {0x3ff, 0xa, {0x2, 0xf8}}, {0x40, 0x8, {0x0, 0xe3bc}}, {0x3, 0x9, {0x2, 0x8}}, {0x8000, 0xac, {0x0, 0xfffffffe}}, {0x6, 0x2, {0x2, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffffb}, 0xf7, 0x74, 0x1, 0x40, 0x22, 'syz1\x00', "2c9ccf2b54664504a8d385ca10232857301b50714beac4519e5935671eae9097", "94dcd69baa93b288e77e62287d4d2ffef4b1fe01103ea8bb4faff1e7fd38f25c", [{0x5, 0x8, {0x1, 0xf100}}, {0xfe00, 0x200, {0x2, 0x2a}}, {0x6, 0xd, {0x2, 0xac59}}, {0x2, 0xc2, {0x2, 0x8}}, {0x6, 0x8, {0x1, 0xe8}}, {0x1, 0x91, {0x3, 0xffff}}, {0x3, 0xf2, {0x0, 0x5}}, {0x0, 0x401, {0x3, 0x1}}, {0xfff, 0x9, {0x1, 0x5}}, {0x5, 0xd8, {0x1, 0x10000}}, {0x7fff, 0x1, {0x0, 0x8}}, {0x1000, 0x9, {0x1, 0x2}}, {0x60b, 0x3, {0x3, 0xfffffffe}}, {0x2, 0x401, {0x1, 0xb}}, {0x9}, {0x9, 0x4, {0x1, 0xb26d}}, {0x7, 0xc138, {0x1, 0x1ff}}, {0x2, 0x97, {0x0, 0x9}}, {0x8, 0x1, {0x3, 0x82}}, {0x4, 0x1, {0x2, 0x4}}, {0x7, 0x2, {0x2, 0x8}}, {0x3, 0x8, {0x0, 0xb10}}, {0x7ff, 0x9, {0x3, 0x200}}, {0x1, 0x7, {0x1, 0x1}}, {0x1, 0x4, {0x0, 0x8}}, {0x1, 0x8, {0x1, 0x4}}, {0x8000, 0x4, {0x0, 0x8}}, {0x5, 0x81, {0x0, 0x6}}, {0x7f, 0xd, {0x2616a77b806c2f10, 0x7}}, {0x2c, 0xf}, {0x8001, 0x101, {0x2, 0xc}}, {0x354a, 0x2, {0x0, 0x100}}, {0xa2c, 0x2, {0x3, 0x2}}, {0x3, 0x5, {0x3, 0x3}}, {0x0, 0x3b2a, {0x1, 0x101}}, {0x7, 0x762, {0x3, 0x4}}, {0x9d95, 0xd8, {0x1, 0x4}}, {0x5, 0x5, {0x2}}, {0x9, 0x4, {0x1, 0x7ae}}, {0xb, 0x1, {0x0, 0xfffffff9}}]}}}, {{0xfffffffffffffd03, 0x1, {{0x3, 0x6}, 0xbe, 0x2, 0xebb, 0x4, 0x18, 'syz0\x00', "557f16f2a2ce00075f6320dd07e599898eecb361773b3d9190c2b0b9e9535177", "807c9f010fa06897173f6c3c667fbcde04d80bfe96790697f895aaf8b3d0fa60", [{0x1, 0xba6a, {0x3, 0x62}}, {0x9, 0x1, {0x1, 0x9}}, {0x1, 0x1, {0x3, 0x3}}, {0x1, 0x8, {0x5deb8a5cfa50ae19, 0xa0000000}}, {0x7, 0x6, {0x0, 0x80d}}, {0x3, 0x30, {0x0, 0x1}}, {0xfff8, 0x401, {0x1, 0x8}}, {0x5, 0x40, {0x878b503c4e3bd4f1, 0x16c}}, {0x2, 0x2, {0x2, 0x2}}, {0x5, 0x9, {0x2, 0x3}}, {0x9, 0x3, {0x2, 0x80000000}}, {0x3, 0x800, {0x0, 0xb6}}, {0x60, 0x4a14, {0x0, 0x1}}, {0x4, 0x6, {0x3, 0x8}}, {0x2, 0x7, {0x2, 0x4}}, {0xd99, 0x4, {0x2, 0xd9a}}, {0x5, 0x1, {0x0, 0x9}}, {0xcc7, 0x5, {0x3, 0x4}}, {0x6c9, 0x3, {0x3, 0x1}}, {0x9, 0x1, {0x3, 0x2}}, {0xb23e, 0x9, {0x3, 0x10}}, {0xd702, 0x0, {0x0, 0x9}}, {0x3ff, 0x6, {0x0, 0xd8}}, {0x7f, 0x200, {0x2, 0x3}}, {0x9, 0x2, {0x7, 0xfffffff7}}, {0x7, 0xfb44, {0x1, 0x71f1}}, {0xc, 0x1, {0x1, 0x6}}, {0x800, 0xfffe, {0x0, 0x7}}, {0x5b, 0x4, {0x3, 0xf}}, {0x5800, 0x7, {0x0, 0x2}}, {0x5, 0x1, {0x0, 0x80000001}}, {0x6, 0x8001, {0x3, 0x8}}, {0x1dd1, 0xc, {0x1, 0x3}}, {0x10, 0x8001, {0x0, 0x7f}}, {0x5, 0x79, {0x2}}, {0x8, 0x3, {0x3, 0x5}}, {0x7ff, 0xce7, {0x0, 0x7}}, {0x1, 0xfff0, {0x0, 0xcb}}, {0x0, 0x6, {0x1, 0xef}}, {0x30a, 0x101, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x51, 0x1, 0x7ff, 0xb, 0x10, 'syz1\x00', "ec82a31f2ef2a43f5df7b0493ab4690ed6565c0bcdba7c7abd3808c1f71451b4", "8d3908a79cb5a12b1924df568d4b5e1e48ed67ef5f001e51cd8ff1733cc7ace0", [{0x2, 0xf800, {0x2, 0xffffff82}}, {0x3, 0x5b5, {0x9a5b94bf9eb696b0, 0x8}}, {0x3, 0x7, {0x2, 0x4}}, {0xfff, 0x6, {0x0, 0x2}}, {0x5, 0x5, {0x1, 0x80}}, {0x7f, 0xdc4f, {0x6, 0x154}}, {0x7, 0x4, {0x2, 0x4}}, {0x2, 0x8, {0x3, 0x65f4}}, {0x40, 0x1e, {0x0, 0x9}}, {0x4, 0x1, {0x0, 0x7}}, {0x2, 0x8, {0x2, 0xb0}}, {0x7, 0x3066, {0x0, 0x10}}, {0x4, 0x3, {0x2, 0x816}}, {0xe0d, 0x2, {0x0, 0x7ff}}, {0xff, 0x1ff, {0x1, 0x10}}, {0xf, 0x84, {0x2, 0x10000}}, {0x8dd1, 0x6, {0x3, 0x3}}, {0x1, 0x8, {0x2, 0x3}}, {0xffff, 0x2000, {0x2}}, {0x920, 0x2, {0x1, 0x8}}, {0x1, 0x7, {0x3, 0x4}}, {0x0, 0xf461, {0xa196ec109ffe47c1, 0x6}}, {0x6, 0x9, {0x1, 0x5}}, {0x8000, 0x2, {0x3, 0xd0a7}}, {0x7, 0x6, {0x3, 0x5}}, {0x0, 0x6, {0x0, 0x5}}, {0x3ff, 0x2, {0x2, 0x7}}, {0x9, 0x6, {0x2, 0x4}}, {0x3, 0x8, {0x1, 0x7fff}}, {0x7fff, 0x8, {0x3, 0x401}}, {0x4, 0x4, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0xfffffff9}}, {0xfffa, 0x8000, {0x1, 0x5}}, {0x2, 0xff80, {0x2, 0x7fffffff}}, {0xb6a9, 0x7, {0x0, 0x400}}, {0xe, 0x4, {0x3, 0x8c1a}}, {0x4, 0x84d, {0x1, 0x6}}, {0x43, 0x0, {0x1, 0x2}}, {0x5, 0xa361, {0x3, 0x3}}, {0x8, 0xfff8, {0x2, 0xa}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0xfd, 0x0, 0xa07, 0x3, 0x1f, 'syz0\x00', "d19343b703c1777814d673b92eb5063ff25585e9a2df23bff3524b98fce90b58", "6d489dbf1ce877a40eb74326b272b20d2e1592e231693c638fc034227da489d0", [{0xf000, 0xffff, {0x0, 0xe27e}}, {0x2, 0x2, {0x1, 0xaa6}}, {0x9, 0x5, {0x2, 0x9}}, {0x0, 0xa0fe, {0x2, 0x101}}, {0x3, 0x0, {0x0, 0x5}}, {0x100, 0xff81, {0x1, 0xffffffff}}, {0x400, 0x9, {0x3, 0xff}}, {0x3, 0x6, {0x0, 0x1000}}, {0x9, 0xfff9, {0x2, 0x3}}, {0x2, 0x7, {0x1, 0x6}}, {0x8, 0x5, {0x2, 0xfe8}}, {0x80, 0x80, {0x0, 0x3}}, {0x2, 0x200, {0x1, 0x6}}, {0x6, 0x1ff, {0x2, 0x16}}, {0x4, 0x7fff, {0x3, 0x9}}, {0xffff, 0x5, {0x1, 0xe9a}}, {0x5, 0xffff, {0x2, 0x8}}, {0x1, 0x3, {0x0, 0x5}}, {0x3, 0x4, {0x1, 0x7}}, {0x40, 0x10, {0x1, 0xfc}}, {0x1, 0x5, {0x1, 0xd}}, {0x8000, 0x7fff, {0x0, 0x8}}, {0xa32, 0x6, {0x0, 0x3ff}}, {0x1, 0x0, {0x3, 0x7245}}, {0x2, 0x0, {0x3, 0x34a}}, {0x3, 0x4, {0x0, 0x80000000}}, {0xfff8, 0x8, {0x3, 0xffff}}, {0xe4, 0x7fff, {0x3, 0x2}}, {0x3, 0xc, {0x3, 0x6}}, {0x8, 0x6, {0x0, 0x4}}, {0x0, 0x1, {0x2, 0x1}}, {0x800, 0x8, {0x2, 0x6c}}, {0x6, 0x4, {0x1, 0x7b}}, {0x3a97, 0xcd7c, {0x0, 0x100000}}, {0xf3, 0x7a, {0x0, 0xde1}}, {0x3, 0x2, {0x1, 0x4}}, {0x4, 0xfffd, {0x1, 0x9}}, {0xeb, 0x2, {0x1, 0x6}}, {0xb26f, 0xf3, {0x2, 0x4}}, {0x5, 0x5, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x2, 0x1dca}, 0xeb, 0x7, 0x52e7, 0xf, 0x8, 'syz0\x00', "757206ebfc3bffc7fd1f5e9d573aa053321d763333277f1266e804161195095e", "93f7a6bc6c99d30152de7a41622ce7209a86514f4fed9fa64f62b7db5d564df7", [{0x7, 0xb1, {0x1, 0x1}}, {0x8000, 0x4, {0x2, 0x2}}, {0x0, 0x8, {0x3, 0x9}}, {0x101, 0x8001, {0x3, 0x9}}, {0x9, 0x5, {0x0, 0xa}}, {0x1f46, 0x9, {0x2}}, {0xf, 0x9, {0x0, 0x8}}, {0x4, 0x4c, {0x2, 0xffffff6c}}, {0x4, 0x6, {0x2, 0xfffffc00}}, {0xf6, 0x0, {0x2, 0x32d620d4}}, {0x9, 0xb, {0x0, 0x80000001}}, {0x81, 0x5a, {0x3, 0x2}}, {0x7, 0x204, {0x1, 0x8}}, {0x1, 0x39, {0x1, 0x3}}, {0x5, 0x5, {0x3, 0x4}}, {0x2685, 0x1, {0x6, 0x4}}, {0x80, 0x8, {0x0, 0x1}}, {0x1b, 0x2, {0x2, 0x961a}}, {0x7, 0x300, {0x3, 0x2}}, {0x8, 0x1, {0x1, 0x9f}}, {0x9, 0x6, {0x3, 0x6}}, {0x6, 0x5, {0x2, 0xffffffff}}, {0x200, 0x5, {0x3, 0x2}}, {0x3, 0x100}, {0x8c4d, 0x0, {0x1, 0xffff}}, {0x8, 0x3, {0x2, 0x7d8}}, {0x8, 0x1, {0x0, 0x6}}, {0xfff, 0x6, {0x3, 0xe763}}, {0xb, 0x7, {0x3, 0x1}}, {0x10, 0xf687, {0x2, 0x1800000}}, {0x3ff, 0x7, {0x3, 0xffffffff}}, {0x80, 0x7, {0x0, 0x5}}, {0x0, 0x4, {0x1, 0x9}}, {0x40, 0x4, {0x3, 0x242}}, {0x6, 0x8000, {0x1, 0x4}}, {0x4, 0x4, {0x3, 0x9}}, {0x40, 0x6, {0x3, 0xfffffffd}}, {0x0, 0x8, {0x3, 0xfffffff9}}, {0x1ff, 0x401, {0x2, 0x7}}, {0x3, 0x0, {0x2, 0x5}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x7fff, 0x2c7dc00000000, 0x5, 0x0, 0x6941, 0x3, 0x100, 0x1, 0x0, 0x0, 0x0, 0x5, 0x3, 0x4087}}) 12.938280059s ago: executing program 0 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@ifindex, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f00)={0x1b4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x197, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xae, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x4b, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed"}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002b00)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000009c0), 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="e23485361d48", 'dvmrp1\x00'}}, 0x1e) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 11.805795043s ago: executing program 4 (id=1027): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @empty}}, 0x24) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 11.272294191s ago: executing program 4 (id=1029): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c}}, 0x40080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000101010300000000e3ffffff090000000c001980080002000f04bc30675001f600003c0002802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c000280050001000000000004b34a8757c60916667a4bdcacf3b69855a3660d85e4ba3067d8a1f50bd8e5f5736e5026803906373741bd7cbaef110e910dea855f3820f42aa3b410ecfc37f5aa2b1ee907e8259f6ad756cabd39c5b373c48ea92cd2940154b1e4d26d4b"], 0x5c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000000c0), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40004, 0x0, r2, 0x677e, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x6) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x1000, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbef9}) 6.840018207s ago: executing program 4 (id=1041): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="006af1445d20867d767e4822dff81ffebe0f534de6375b133bdd0b32dfe3c1e9f995707f6c063b7cbf78a7bf148fef5ce53b58538b8f88475d69c83c92dcadef7c29ff6ac20fa4771058fb3b1490ff064cbdacc3eac9bbc2e64f6a7dc066ddfc58a304ca4956512e14e44c0397f0ebe750739b2c89c70d6f21ea15f2231f50de1bfb846a4bc282d5c2af9bea80f2c41229de4fa92a040f5159ccc89312ff267dddee"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x40}]}}}]}, 0x3c}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2}, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r9, &(0x7f0000003780)=""/4096, 0x1000) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="ba"], 0x44}}, 0x0) 6.402054351s ago: executing program 4 (id=1043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r0], 0x8c}}, 0xc0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c1880", 0x28}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x89}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket(0x28, 0x6, 0x9861) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="3a00030007"], 0xd) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001a25b0068737200140002800800", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB], 0x40}}, 0x0) bind$packet(r6, &(0x7f0000000280)={0x11, 0x5, r9, 0x1, 0xb}, 0x14) 5.758638819s ago: executing program 4 (id=1048): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000"], 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000001280)=ANY=[], 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0'}, 0xb) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5061100ffffff9703", 0xc}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="080100001000210400000000fcdbdf2500000000", @ANYBLOB="59796ae1b167aa03772a02f5d564239c24bdb3355ab65d48899745ecc838113dc02c427a791aa70eb85943fb1adc0129648ab7d6c92eb36acf83087f6f57f3e262146c516d48a40a54bde8c30db126997805ab52ec504d78168660fd56bd9363390969325eed3184469de44194c3f20a84dbfcc6c2ded6ae1ad25339c18682ca019b3c4ef27b2ff152f4b0da3eedefb822a74834be36f27b819f81fa5fef8e4a59c04730984a5c09c589229fa8ac29a6fdb84aecaf35bd2d0df3eea5dba7fe43b8e78047f05034aaaac0b5c3390effec129fb17c418f7f901491587d6d00aef9c8e1472fb6d337cf", @ANYBLOB="0000000061000000580012800b0001006272696467650000480002800800030017000000050017000000000005002a00000000000c001f00d1bf0000000000000a0014000180c200000000000c002e000100000002000000080001000300", @ANYRES32=0x0, @ANYBLOB="7c001880100001800c0002006e6c3830323131006800018008000100e900000008000100050000000500060000000000060002005c0000000d000200962f3a2f2a28f229000000000800020047504c000500060002000000080001000900000005"], 0x108}}, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e", 0x23}], 0x1}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 3.436554989s ago: executing program 2 (id=1057): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1006}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003f0000000000000008000f0001000000", 0x24) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/53, 0x35}], 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="b722073c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001200000000000800110000000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000007b2c23f3a1df4", @ANYRES32=r6, @ANYBLOB="000000000015000064001a8060000a80050008006600000014000700fe8000000000000000000000000000aa05000800050000000500080008000000050008007f00000014000700200100000000000000000000000000011400070000000000000000000000ffffffffffff"], 0x84}}, 0x4004000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "7c4433d7e48ee607cd7d03463d6d454c"}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x2}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ffffffffffffffff00000018110000e0000b85136248146de3f5f3524b82e244d102e11dd38b17113fe06b2b670be7b863f0e5f1d5", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300102b0000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) r14 = accept4(r13, 0x0, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r14, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) 2.864891727s ago: executing program 2 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000100000000000000000006000000", @ANYRES32, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c000280060011"], 0x50}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x278, 0x111, 0x4b4, 0x278, 0xd4feffff, 0x3b0, 0x20a, 0x278, 0x3b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x238, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private0, [], @ipv4=@multicast1}, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [], @ipv6=@private2}, {@ipv4=@private, [], @ipv4=@empty}, {@ipv4=@dev, [], @ipv4=@broadcast}], 0xf}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x14b2f, 0x0, 0x0, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bab250709f46abd5bde532173c6746623ee609e386a0905c3ef0f3051738"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000600)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000240)=0x9) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r9, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r11, r10}}}], 0x38, 0x20008880}}], 0x2, 0x4c054) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xfc, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xfffffffffffffed2, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r13, 0x3) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0500000000000000d7c166bcf50ada970300", @ANYRES32=r4, @ANYBLOB="0a003400020202020202000004004900"], 0x2c}}, 0x0) 2.427802817s ago: executing program 2 (id=1063): socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x40) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000100000044000000090a110400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a3200000000180003801400008004000180080003400000000104000b800900010073797a30000000001400000010000100"/194], 0xc4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x6) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff854, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}], [@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2.379667827s ago: executing program 1 (id=1064): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r1}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote}}, 0xe8) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r4, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.339037121s ago: executing program 3 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44010000060a0b040000000000000000020000002c0004802800018008000100647570001c000280080002400000000e080001400000001808000240000000100900010073797a30000000000900020073797a32"], 0x1c8}}, 0x8010) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100039040000000000000000000003e4", @ANYRES32=r5, @ANYBLOB="00000000000000002800128008000100736974001c00028008000100", @ANYRES32, @ANYBLOB="08000f00fd"], 0x48}}, 0x0) 2.177697313s ago: executing program 2 (id=1066): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c}}, 0x40080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000101010300000000e3ffffff090000000c001980080002000f04bc30675001f600003c0002802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c000280050001000000000004b34a8757c60916667a4bdcacf3b69855a3660d85e4ba3067d8a1f50bd8e5f5736e5026803906373741bd7cbaef110e910dea855f3820f42aa3b410ecfc37f5aa2b1ee907e8259f6ad756cabd39c5b373c48ea92cd2940154b1e4d26d4b"], 0x5c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000000c0), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40004, 0x0, r2, 0x677e, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x6) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x1000, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbef9}) 1.980539347s ago: executing program 1 (id=1067): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) epoll_create1(0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x6, 0x6, 0x0, 0x0, 0x3, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="6e20000c00140001000000000000000000021fd796", @ANYBLOB="08000200ac1414"], 0x20}}, 0x20048084) r9 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=@getae={0x1b4, 0x1f, 0xd00, 0x70bd2c, 0x25dfdbfb, {{@in=@local, 0x4d2, 0x2, 0x6c}, @in=@loopback, 0x5, 0x3503}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x0, @in6=@local}}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@multicast2, 0x0, 0x2}}, @algo_crypt={0x7d, 0x2, {{'xts-aes-neon\x00'}, 0x1a8, "e7a90e0d9afd6e3998904cd24dc1c4f07cc6ccb428e8556d7c0f3097e1f000a7dbeef38522fded5dc01300df516922102c30dc4c2b"}}, @policy={0xac, 0x7, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x6, 0x4e24, 0x10, 0xa, 0x20, 0xa0, 0x5c, r2}, {0x5, 0xc, 0x4, 0x8a, 0x100000001, 0x4, 0x7, 0xffffffff}, {0x2f1, 0x10000, 0x6, 0x9}, 0x36d2, 0x0, 0x0, 0x1, 0x0, 0x1}}]}, 0x1b4}}, 0x448c5) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRESHEX=r11, @ANYRESHEX=r2], 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) r13 = openat$cgroup_int(r12, 0x0, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:0/', @ANYRESOCT=r13], 0x31) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@delchain={0x3c, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9, 0x8c}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}}, 0x0) 1.611907246s ago: executing program 3 (id=1068): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000007c0), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ac214e9722e47b", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000075647000"/98], 0x68}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xbf, "0ff3560198cd62d0a4f1a6db44faa0d8dd76e86e9733fbd1891de6c10e7bbe48e65152ead6bc3bd548c8d8335a2840e742dff421fe89879d285b4fa8141b6ffdada4104426d19e429cfb7904c5cf45016133abfc47f552bab267f71aa636a7b65afb4f643ec735639eb367bc315ea57bd0ff4b5fe5e537859638fbd8f00e843ef9c771bdd693af78d87a541ce08136a088c3be8a838647de4e3020b183356cf3e3f36d5583c7a618e26899ebe18d9a1b64358de463f8e26dd5928e4eb616b5"}, &(0x7f0000000080)=0xc7) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000480)={r6, 0x7, 0x40, 0x3a9, 0x6fc, 0x1, 0x0, 0x0, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xd7c7, 0x200, 0x101, 0x5, 0x7f}}, &(0x7f0000000380)=0xb0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x290002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @dev, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x3b, 0x3, 0x6, [{@local, 0x14ff}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0x0, [@local, @loopback, @loopback]}, @ssrr={0x89, 0x1b, 0x0, [@empty, @loopback, @rand_addr, @loopback, @multicast1, @dev]}, @rr={0x7, 0x1f, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @dev, @broadcast, @empty, @local]}, @timestamp={0x44, 0x4}]}}}}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 1.28570176s ago: executing program 1 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xe5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000800) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0600280000000000d4b1b692ad1cbfc5"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x420, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x400008c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) 1.200345737s ago: executing program 3 (id=1070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 1.114191969s ago: executing program 1 (id=1071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'dummy0\x00', {'virt_wifi0\x00'}, 0x9}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002003000"/46], 0x34}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000840)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0xa, 0x0]}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000400)) r8 = epoll_create1(0x80000) ioctl$FITHAW(r8, 0xc0045878) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40000000002010400000000000000000a0000003c0003800c0002800500010000000300fe8000000000000000000000000000bb1400040000000000000000000000007f1e44c2003c0002802c00018028000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c0002800500010000000000180001801400018008000100ac1e000108000200000000000000000000000000a62dd17f64f3a1f2bf1a1b336e24227eb70b4218afa2aa1242a4025d622dee328253d9882df0edd42b42cf104471fa0f6aa3"], 0xa4}}, 0x0) 993.085973ms ago: executing program 3 (id=1072): r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000400000611302000000000095000014430c0600"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc8, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="580000080000000600000000000000000a00fffc000c00028005000100000000002c00018014000300200100000000000114000400fc010000000000000000000000000001c41b3c4980237a104a5352fccc292dad00b18beb34988f8ebae7346bd500"/109], 0x58}}, 0x20008080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x5}]}, 0x18}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x34}}, 0x0) r6 = socket(0x11, 0x803, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x10043, &(0x7f0000003700)={0x77359400}) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, 0x0, 0x0) 654.720854ms ago: executing program 1 (id=1073): r0 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) unshare(0x20000400) socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 420.200436ms ago: executing program 3 (id=1074): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000018010000202070250000000000202020"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}, {0x18, 0x110, 0xd, "dc"}], 0x28}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_TXQLEN={0x8}]}, 0x44}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x3, {0xa, 0x4e22, 0xd6, @mcast2, 0xfff6}}}, 0x3a) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x80, 0x7, 0x4, 0x1, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x9f, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x7}, {@remote, 0x2}, {@rand_addr=0x64010102, 0x7}]}, @cipso={0x86, 0xd, 0x3, [{0x1, 0x7, "32c23f08ae"}]}, @timestamp_prespec={0x44, 0x4c, 0x99, 0x3, 0x4, [{@multicast2, 0x100}, {@rand_addr=0x64010100, 0x1ff}, {@private=0xa010102, 0x81}, {@local, 0x9}, {@remote, 0x1dc5c9db}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0x4}, {@loopback, 0x5}, {@multicast1, 0x6}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYRES64=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0xea, &(0x7f0000000500)=""/234, 0x0, 0x0, '\x00', r8}, 0x90) 388.768012ms ago: executing program 2 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r3, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x40) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff854, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}], [@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 146.579278ms ago: executing program 1 (id=1076): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0x8, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x5411, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1}, 0xc) writev(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="04010000160011040000000000000000ffffffff000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000019000000aa0000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000ffffff0c000884a4"], 0x104}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x0) 84.626183ms ago: executing program 3 (id=1077): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffeb7, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) recvmmsg(r1, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x3d}}], 0x2, 0x2003, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x65698502c9695697, &(0x7f0000000380)="ab0d248e65b7e4cf4f4cf53383981dfd32c5ee42d4cef229abcde165fb9e8e82e9594631477b8ba939b6e30100fa2dd256d08aceda509ad5606d44d40d4874be6f6fcd11c364042a209febc0623de90f060ad50ac5f5d73290322190843d4f436da883e4ac9073dd7678ebbed335e5835d0600a349997ebcff09ee85f0d4a41fd1b04a17db9488f74ec0b1188521286b100bed4a3ed3795a55ccf68944a993410ff908317ef0c920d3e1fb88a2c608371eee2712f60dcb6376d00d2b22990540f666c33555fc61204bf59a78ef46f37b909bdb730af38bc150e53b8196cb97f6a0", 0xe1) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)='veth1\x00', 0x8000000000000001, 0x2f5, 0xf000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0xffffffffffffff4f) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000120001000000000000000000e00000020000000000000000000000000000000014000d00"/72], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10001}}, 0x0, 0xfe00}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.sectors\x00', 0x26e1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x20008048) 0s ago: executing program 2 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000afffffffffffafc33bee85b1a105", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010067656e6576650000200002801400070082"], 0x50}, 0x1, 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000b9d28648841f67f18bff8f711b10bc00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="a40200002b0001"], 0x2a4}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r4, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r5, 0x10d, 0x8c, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000174614"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000e50208e8ffffff000000000000000000000900010073797a31000000001c00048000000140000000000900054008"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) shutdown(0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x17, 0x0, 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) kernel console output (not intermixed with test programs): kaller1: entered allmulticast mode [ 111.317115][ T6184] lo speed is unknown, defaulting to 1000 [ 111.320587][ T6188] netlink: 'syz.0.254': attribute type 11 has an invalid length. [ 111.585088][ T5250] block nbd10: Receive control failed (result -107) [ 111.625537][ T6195] nbd10: detected capacity change from 0 to 256 [ 111.978573][ T6210] FAULT_INJECTION: forcing a failure. [ 111.978573][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 111.998426][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.4.262 Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 112.009105][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.019209][ T6210] Call Trace: [ 112.022532][ T6210] [ 112.025509][ T6210] dump_stack_lvl+0x241/0x360 [ 112.030248][ T6210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.035613][ T6210] ? __pfx__printk+0x10/0x10 [ 112.040288][ T6210] ? __kmalloc_noprof+0xb0/0x400 [ 112.045290][ T6210] ? __pfx___might_resched+0x10/0x10 [ 112.050653][ T6210] should_fail_ex+0x3b0/0x4e0 [ 112.055403][ T6210] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 112.061719][ T6210] should_failslab+0xac/0x100 [ 112.066478][ T6210] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 112.072784][ T6210] __kmalloc_noprof+0xd8/0x400 [ 112.077705][ T6210] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 112.083848][ T6210] genl_rcv_msg+0x802/0xec0 [ 112.088414][ T6210] ? mark_lock+0x9a/0x350 [ 112.092810][ T6210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.097919][ T6210] ? __pfx_lock_acquire+0x10/0x10 [ 112.102998][ T6210] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 112.109468][ T6210] ? __pfx___might_resched+0x10/0x10 [ 112.114826][ T6210] netlink_rcv_skb+0x1e3/0x430 [ 112.119644][ T6210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.124734][ T6210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.130095][ T6210] ? __netlink_deliver_tap+0x77e/0x7c0 [ 112.135627][ T6210] genl_rcv+0x28/0x40 [ 112.139670][ T6210] netlink_unicast+0x7f0/0x990 [ 112.144510][ T6210] ? __pfx_netlink_unicast+0x10/0x10 [ 112.149856][ T6210] ? __virt_addr_valid+0x183/0x530 [ 112.155121][ T6210] ? __check_object_size+0x49c/0x900 [ 112.160455][ T6210] ? bpf_lsm_netlink_send+0x9/0x10 [ 112.165624][ T6210] netlink_sendmsg+0x8e4/0xcb0 [ 112.170472][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.175849][ T6210] ? __import_iovec+0x536/0x820 [ 112.180766][ T6210] ? aa_sock_msg_perm+0x91/0x160 [ 112.186030][ T6210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 112.191373][ T6210] ? security_socket_sendmsg+0x87/0xb0 [ 112.196920][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.202283][ T6210] __sock_sendmsg+0x221/0x270 [ 112.207039][ T6210] ____sys_sendmsg+0x525/0x7d0 [ 112.211871][ T6210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.217227][ T6210] __sys_sendmsg+0x2b0/0x3a0 [ 112.221871][ T6210] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.227039][ T6210] ? vfs_write+0x7c4/0xc90 [ 112.231668][ T6210] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.238069][ T6210] ? do_syscall_64+0x100/0x230 [ 112.242888][ T6210] ? do_syscall_64+0xb6/0x230 [ 112.247621][ T6210] do_syscall_64+0xf3/0x230 [ 112.252187][ T6210] ? clear_bhb_loop+0x35/0x90 [ 112.256933][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.262885][ T6210] RIP: 0033:0x7fdf275799b9 [ 112.267363][ T6210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.287018][ T6210] RSP: 002b:00007fdf28434038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.295581][ T6210] RAX: ffffffffffffffda RBX: 00007fdf27715f80 RCX: 00007fdf275799b9 [ 112.303612][ T6210] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 112.311640][ T6210] RBP: 00007fdf28434090 R08: 0000000000000000 R09: 0000000000000000 [ 112.319785][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.327895][ T6210] R13: 0000000000000000 R14: 00007fdf27715f80 R15: 00007fff90b19f68 [ 112.335945][ T6210] [ 112.836791][ T6232] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 112.857547][ T6232] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 113.134681][ T6246] __nla_validate_parse: 6 callbacks suppressed [ 113.134706][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 113.135454][ T6244] lo speed is unknown, defaulting to 1000 [ 113.214243][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 113.308862][ T5250] block nbd11: Receive control failed (result -107) [ 113.364130][ T6246] nbd11: detected capacity change from 0 to 256 [ 113.391606][ T6252] netlink: 'syz.2.276': attribute type 4 has an invalid length. [ 114.314583][ T6270] team_slave_0: entered allmulticast mode [ 114.380653][ T6273] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 114.414260][ T6273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.283'. [ 114.685369][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 114.859727][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 114.948374][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.288'. [ 114.963577][ T6295] netlink: 84 bytes leftover after parsing attributes in process `syz.1.289'. [ 115.213678][ T6306] vlan2: entered promiscuous mode [ 115.223371][ T6306] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 115.246501][ T6306] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 115.333532][ T6309] lo speed is unknown, defaulting to 1000 [ 115.703747][ T6317] sctp: [Deprecated]: syz.2.295 (pid 6317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.703747][ T6317] Use struct sctp_sack_info instead [ 116.187318][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 117.005704][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 117.989880][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 119.893313][ T6383] lo speed is unknown, defaulting to 1000 [ 120.206532][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 120.241403][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 120.394021][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 120.411231][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 120.541467][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 120.554173][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 120.771733][ T6427] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 120.799945][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 121.104907][ T6433] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 121.530773][ T6464] netlink: 32 bytes leftover after parsing attributes in process `syz.3.341'. [ 121.785415][ T6475] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 121.845934][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 121.950207][ T6474] sctp: [Deprecated]: syz.4.342 (pid 6474) Use of int in max_burst socket option deprecated. [ 121.950207][ T6474] Use struct sctp_assoc_value instead [ 121.960380][ T6484] lo speed is unknown, defaulting to 1000 [ 122.635022][ T6500] wg2: entered promiscuous mode [ 122.660399][ T6500] wg2: entered allmulticast mode [ 122.713340][ T6502] lo speed is unknown, defaulting to 1000 [ 123.051751][ T6522] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.354'. [ 123.142052][ T6525] nbd: socks must be embedded in a SOCK_ITEM attr [ 123.451905][ T6531] sctp: [Deprecated]: syz.3.357 (pid 6531) Use of int in max_burst socket option deprecated. [ 123.451905][ T6531] Use struct sctp_assoc_value instead [ 123.741928][ T5250] block nbd13: Receive control failed (result -107) [ 123.794205][ T6547] nbd13: detected capacity change from 0 to 256 [ 123.988919][ T6563] lo speed is unknown, defaulting to 1000 [ 125.211373][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.215144][ T6608] __nla_validate_parse: 7 callbacks suppressed [ 125.215171][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 125.284269][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 125.326124][ T5250] block nbd14: Receive control failed (result -107) [ 125.365252][ T6608] nbd14: detected capacity change from 0 to 256 [ 125.373206][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.437001][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 125.872652][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.4.387'. [ 126.014445][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 126.138961][ T6644] netlink: 'syz.3.391': attribute type 2 has an invalid length. [ 126.235528][ T6642] lo speed is unknown, defaulting to 1000 [ 126.736685][ T6668] erspan0: entered promiscuous mode [ 126.747582][ T6668] macsec1: entered promiscuous mode [ 126.753066][ T6668] macsec1: entered allmulticast mode [ 126.759125][ T6668] erspan0: entered allmulticast mode [ 126.805381][ T6668] erspan0: left allmulticast mode [ 126.811115][ T6668] erspan0: left promiscuous mode [ 126.990291][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.401'. [ 127.292185][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 127.651156][ T6698] lo speed is unknown, defaulting to 1000 [ 128.131308][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.4.414'. [ 128.230666][ T6723] lo speed is unknown, defaulting to 1000 [ 128.436626][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.450533][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.465385][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.505687][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.523279][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.531613][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.652907][ T6730] lo speed is unknown, defaulting to 1000 [ 128.862507][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 128.942075][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 129.037206][ T5250] block nbd15: Receive control failed (result -107) [ 129.072688][ T6750] nbd15: detected capacity change from 0 to 256 [ 129.337396][ T6730] chnl_net:caif_netlink_parms(): no params data found [ 129.624057][ T6780] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 129.665258][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.672478][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.697826][ T6730] bridge_slave_0: entered allmulticast mode [ 129.716785][ T6730] bridge_slave_0: entered promiscuous mode [ 129.735048][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.742531][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.767372][ T6730] bridge_slave_1: entered allmulticast mode [ 129.793245][ T6730] bridge_slave_1: entered promiscuous mode [ 129.814848][ T6783] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.933172][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.001950][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.168627][ T6730] team0: Port device team_slave_0 added [ 130.191858][ T6730] team0: Port device team_slave_1 added [ 130.220090][ T6795] xt_hashlimit: overflow, rate too high: 0 [ 130.229807][ T6795] netlink: 312 bytes leftover after parsing attributes in process `syz.2.435'. [ 130.414334][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.421367][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.459549][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.492700][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.509046][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.587459][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.597515][ T5250] Bluetooth: hci1: command tx timeout [ 130.627015][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 130.815056][ T6797] lo speed is unknown, defaulting to 1000 [ 130.841792][ T6809] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 130.865432][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 130.876699][ T6809] team0: Device ipvlan1 failed to register rx_handler [ 130.931744][ T6730] hsr_slave_0: entered promiscuous mode [ 130.939946][ T5250] block nbd12: Receive control failed (result -107) [ 130.949013][ T6730] hsr_slave_1: entered promiscuous mode [ 130.961151][ T6730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.968967][ T6730] Cannot create hsr debugfs directory [ 130.974783][ T6806] nbd12: detected capacity change from 0 to 256 [ 130.994490][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.078186][ T6822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.106996][ T6819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.264635][ T6730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.377831][ T6730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.512977][ T6730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.618643][ T6829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.836117][ T6730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.859461][ T6730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.888104][ T6730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.907942][ T6730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.110813][ T6730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.145532][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.168579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.175918][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.201970][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.209382][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.675134][ T5250] Bluetooth: hci1: command tx timeout [ 132.755546][ T6730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.857287][ T6730] veth0_vlan: entered promiscuous mode [ 132.908277][ T6730] veth1_vlan: entered promiscuous mode [ 133.091481][ T6730] veth0_macvtap: entered promiscuous mode [ 133.148234][ T6730] veth1_macvtap: entered promiscuous mode [ 133.246255][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.276852][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.303977][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.320666][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.342234][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.352528][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.363246][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.373997][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.387334][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.403833][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.422549][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.437545][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.490931][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.511638][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.522335][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.533049][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.543331][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.567998][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.585403][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.596305][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.607619][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.618759][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.631673][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.675453][ T6730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.704194][ T6730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.714196][ T6730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.741326][ T6730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.975340][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.992382][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.036643][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.059490][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.138038][ T6878] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 134.309846][ T6885] syz.3.460[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.310018][ T6885] syz.3.460[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.418188][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 134.878049][ T6896] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 135.306732][ T6905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.486650][ T6912] syz.3.471[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.486819][ T6912] syz.3.471[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.590083][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 136.747750][ T6938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.779730][ T6939] raw_sendmsg: syz.4.480 forgot to set AF_INET. Fix it! [ 136.977964][ T6946] netlink: 'syz.4.484': attribute type 11 has an invalid length. [ 137.123378][ T2943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.170289][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 137.615264][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 137.835519][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.847200][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.860501][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.873532][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.892974][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.902399][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.965904][ T6967] lo speed is unknown, defaulting to 1000 [ 138.001954][ T6974] netlink: 'syz.3.495': attribute type 11 has an invalid length. [ 138.049196][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 138.061399][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.070362][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.081810][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.091109][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.107938][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.124969][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.145081][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.153646][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.182685][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.197404][ T6977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.237645][ T6980] hsr0: entered promiscuous mode [ 138.243300][ T6980] macvlan2: entered allmulticast mode [ 138.250424][ T6980] hsr0: entered allmulticast mode [ 138.256003][ T6980] hsr_slave_0: entered allmulticast mode [ 138.261691][ T6980] hsr_slave_1: entered allmulticast mode [ 138.270942][ T6980] hsr0: left allmulticast mode [ 138.290076][ T6980] hsr_slave_0: left allmulticast mode [ 138.295705][ T6980] hsr_slave_1: left allmulticast mode [ 138.380026][ T2943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.400226][ T2531] hsr0: left promiscuous mode [ 138.501355][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 138.603105][ T2943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.768425][ T2943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.801449][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 138.874376][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 138.932975][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.947345][ T54] block nbd16: Receive control failed (result -107) [ 138.957804][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.970400][ T6967] bridge_slave_0: entered allmulticast mode [ 138.976822][ T7001] nbd16: detected capacity change from 0 to 256 [ 138.985536][ T6967] bridge_slave_0: entered promiscuous mode [ 139.002136][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.017925][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.025585][ T6967] bridge_slave_1: entered allmulticast mode [ 139.033464][ T6967] bridge_slave_1: entered promiscuous mode [ 139.088965][ T7012] gretap0: entered promiscuous mode [ 139.103765][ T7012] gretap0: left promiscuous mode [ 139.114159][ T7013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.504'. [ 139.186082][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.206575][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.220289][ T2943] bridge_slave_1: left allmulticast mode [ 139.228465][ T2943] bridge_slave_1: left promiscuous mode [ 139.236169][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.258779][ T2943] bridge_slave_0: left allmulticast mode [ 139.269083][ T2943] bridge_slave_0: left promiscuous mode [ 139.276150][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.559975][ T7020] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 139.956462][ T54] Bluetooth: hci1: command tx timeout [ 139.981391][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.999994][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.012388][ T2943] bond0 (unregistering): Released all slaves [ 140.228772][ T6967] team0: Port device team_slave_0 added [ 140.257654][ T6967] team0: Port device team_slave_1 added [ 140.447409][ T7042] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 140.458920][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.474200][ T7042] netlink: 9364 bytes leftover after parsing attributes in process `syz.2.513'. [ 140.483499][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.524385][ T7042] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 140.550702][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.574787][ T7045] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 140.646216][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.691565][ T7045] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.735036][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.742608][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.824247][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.882549][ T2943] hsr_slave_0: left promiscuous mode [ 140.920760][ T2943] hsr_slave_1: left promiscuous mode [ 140.940811][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.962970][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.036762][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.054797][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.079192][ T5250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.090193][ T5250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.104161][ T5250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.112622][ T5250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.121682][ T5250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.129428][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.181591][ T2943] veth1_macvtap: left promiscuous mode [ 141.200358][ T2943] veth0_macvtap: left promiscuous mode [ 141.233449][ T2943] veth1_vlan: left promiscuous mode [ 141.257907][ T2943] veth0_vlan: left promiscuous mode [ 142.045088][ T54] Bluetooth: hci1: command tx timeout [ 142.221122][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 142.311728][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 142.363634][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 142.377302][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 142.440730][ T54] block nbd17: Receive control failed (result -107) [ 142.455393][ T7065] nbd17: detected capacity change from 0 to 256 [ 142.892312][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 142.909932][ T7047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.989294][ T7058] lo speed is unknown, defaulting to 1000 [ 143.025347][ T6967] hsr_slave_0: entered promiscuous mode [ 143.052126][ T6967] hsr_slave_1: entered promiscuous mode [ 143.071561][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.086524][ T6967] Cannot create hsr debugfs directory [ 143.160356][ T54] Bluetooth: hci5: command tx timeout [ 143.305245][ T7078] netlink: 76 bytes leftover after parsing attributes in process `syz.3.520'. [ 143.333411][ T7078] SET target dimension over the limit! [ 143.433707][ T7061] lo speed is unknown, defaulting to 1000 [ 143.921185][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 144.111757][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 144.125683][ T54] Bluetooth: hci1: command tx timeout [ 144.137861][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.149206][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.173620][ T7061] bridge_slave_0: entered allmulticast mode [ 144.190353][ T7061] bridge_slave_0: entered promiscuous mode [ 144.202698][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.210314][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.217723][ T7061] bridge_slave_1: entered allmulticast mode [ 144.224614][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 144.227086][ T7061] bridge_slave_1: entered promiscuous mode [ 144.298724][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.316456][ T7103] nbd18: detected capacity change from 0 to 256 [ 144.341647][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.423037][ T6967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.454625][ T7061] team0: Port device team_slave_0 added [ 144.461998][ T6967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.475071][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 144.488759][ T7061] team0: Port device team_slave_1 added [ 144.499394][ T6967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.559112][ T6967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.584541][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 144.601108][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.608695][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.640682][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.654005][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.661092][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.687465][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.698397][ T7112] nbd19: detected capacity change from 0 to 256 [ 144.797528][ T7061] hsr_slave_0: entered promiscuous mode [ 144.807457][ T7061] hsr_slave_1: entered promiscuous mode [ 144.814623][ T7061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.823636][ T7061] Cannot create hsr debugfs directory [ 145.052336][ T7124] netlink: 'syz.4.533': attribute type 309 has an invalid length. [ 145.200573][ T7061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.230612][ T7124] macsec0: entered promiscuous mode [ 145.237350][ T5234] Bluetooth: hci5: command tx timeout [ 145.245070][ T7124] macsec1: entered promiscuous mode [ 145.302195][ T7128] netlink: 144 bytes leftover after parsing attributes in process `syz.2.535'. [ 145.417169][ T7061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.459237][ T7136] netlink: 'syz.3.538': attribute type 9 has an invalid length. [ 145.478127][ T7136] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.538'. [ 145.607441][ T7061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.669998][ T7138] netlink: 'syz.3.538': attribute type 9 has an invalid length. [ 145.755205][ T7061] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.807109][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.862068][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.917506][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.925335][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.037141][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.044396][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.162018][ T7061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.188981][ T7061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.196094][ T5234] Bluetooth: hci1: command tx timeout [ 146.231610][ T7061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.257071][ T7061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.546914][ T7160] netlink: 'syz.3.546': attribute type 3 has an invalid length. [ 146.581876][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.626188][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.658579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.665821][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.696498][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.705366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.716575][ T5234] block nbd20: Receive control failed (result -107) [ 146.774225][ T7158] nbd20: detected capacity change from 0 to 256 [ 146.881842][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.068984][ T6967] veth0_vlan: entered promiscuous mode [ 147.108417][ T6967] veth1_vlan: entered promiscuous mode [ 147.238693][ T6967] veth0_macvtap: entered promiscuous mode [ 147.260239][ T6967] veth1_macvtap: entered promiscuous mode [ 147.279935][ T7180] __nla_validate_parse: 3 callbacks suppressed [ 147.279971][ T7180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'. [ 147.307862][ T7183] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.549'. [ 147.320985][ T5234] Bluetooth: hci5: command tx timeout [ 147.413421][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.426539][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.440372][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.453519][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.470295][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.487174][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.497682][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.509952][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.520694][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.531803][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.547809][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.618689][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.646179][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.666812][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.677673][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.687595][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.714561][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.728325][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.748932][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.769722][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.782901][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.796046][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.813369][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.823349][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 147.872614][ T6967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.883238][ T6967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.901061][ T6967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.911744][ T6967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.942561][ T7200] netlink: 'syz.2.553': attribute type 4 has an invalid length. [ 148.110418][ T7198] lo speed is unknown, defaulting to 1000 [ 148.353390][ T7061] veth0_vlan: entered promiscuous mode [ 148.432106][ T2531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.452094][ T2531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.490485][ T7061] veth1_vlan: entered promiscuous mode [ 148.508504][ T7209] lo speed is unknown, defaulting to 1000 [ 148.824426][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.862507][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.950998][ T7061] veth0_macvtap: entered promiscuous mode [ 149.026390][ T7061] veth1_macvtap: entered promiscuous mode [ 149.159342][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.206626][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.246016][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.274230][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.294805][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.328734][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.374212][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.391139][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.408742][ T5234] Bluetooth: hci5: command tx timeout [ 149.415398][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.427356][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.437450][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.450315][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.484842][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.694520][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.726686][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.742541][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.763191][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.774431][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.785853][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.812560][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.825189][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.836852][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 149.843930][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.872444][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.901477][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.912359][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.925514][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.945174][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 149.957648][ T7061] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.973222][ T7061] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.992612][ T7061] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.005192][ T7061] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.036087][ T5234] block nbd21: Receive control failed (result -107) [ 150.065514][ T7226] nbd21: detected capacity change from 0 to 256 [ 150.346614][ T2531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.361455][ T2531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.448550][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.465784][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.647463][ T7239] sctp: [Deprecated]: syz.3.566 (pid 7239) Use of int in max_burst socket option. [ 150.647463][ T7239] Use struct sctp_assoc_value instead [ 150.813802][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.091667][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.237855][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.251350][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.260558][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.269267][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.277585][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.288859][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.382193][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.569710][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.645066][ T7263] lo speed is unknown, defaulting to 1000 [ 152.030614][ T7289] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.114674][ T12] bridge_slave_1: left allmulticast mode [ 152.129060][ T12] bridge_slave_1: left promiscuous mode [ 152.135319][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.148050][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 152.159819][ T12] bridge_slave_0: left allmulticast mode [ 152.167064][ T12] bridge_slave_0: left promiscuous mode [ 152.172933][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.254126][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 152.315681][ T7293] nbd22: detected capacity change from 0 to 256 [ 152.773103][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.788521][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.801899][ T12] bond0 (unregistering): Released all slaves [ 152.848491][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 152.902334][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 153.295473][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 153.394133][ T5245] Bluetooth: hci1: command tx timeout [ 153.507177][ T7263] chnl_net:caif_netlink_parms(): no params data found [ 153.646806][ T7344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 153.701445][ T12] hsr_slave_0: left promiscuous mode [ 153.735086][ T12] hsr_slave_1: left promiscuous mode [ 153.751533][ T7349] sctp: [Deprecated]: syz.2.591 (pid 7349) Use of int in max_burst socket option deprecated. [ 153.751533][ T7349] Use struct sctp_assoc_value instead [ 153.756094][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.792738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.814060][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.821568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.899106][ T12] veth1_macvtap: left promiscuous mode [ 153.923557][ T12] veth0_macvtap: left promiscuous mode [ 153.934397][ T12] veth1_vlan: left promiscuous mode [ 153.939837][ T12] veth0_vlan: left promiscuous mode [ 154.012353][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 154.086351][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 154.136039][ T5245] block nbd23: Receive control failed (result -107) [ 154.184001][ T7362] nbd23: detected capacity change from 0 to 256 [ 154.693544][ T12] team0 (unregistering): Port device team_slave_1 removed [ 154.745141][ T12] team0 (unregistering): Port device team_slave_0 removed [ 154.942101][ T941] IPVS: starting estimator thread 0... [ 155.013020][ T7369] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 155.039606][ T7368] IPVS: using max 18 ests per chain, 43200 per kthread [ 155.352804][ T7344] veth0_to_bridge: entered promiscuous mode [ 155.372526][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 155.411261][ T7352] veth0_to_bridge: left promiscuous mode [ 155.474495][ T5245] Bluetooth: hci1: command tx timeout [ 155.620071][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.628456][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.651200][ T7263] bridge_slave_0: entered allmulticast mode [ 155.667084][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 155.688161][ T7263] bridge_slave_0: entered promiscuous mode [ 155.749921][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.781159][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.824375][ T7263] bridge_slave_1: entered allmulticast mode [ 155.837252][ T7263] bridge_slave_1: entered promiscuous mode [ 155.890806][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 156.030681][ T7263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.087436][ T7263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.277686][ T7263] team0: Port device team_slave_0 added [ 156.326904][ T7263] team0: Port device team_slave_1 added [ 156.443310][ T7410] syzkaller1: entered promiscuous mode [ 156.455757][ T7410] syzkaller1: entered allmulticast mode [ 156.508651][ T7401] netlink: 76 bytes leftover after parsing attributes in process `syz.2.605'. [ 156.527009][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.548640][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.581808][ T7263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.592298][ T7412] sctp: [Deprecated]: syz.4.606 (pid 7412) Use of int in max_burst socket option deprecated. [ 156.592298][ T7412] Use struct sctp_assoc_value instead [ 156.671437][ T7401] ΚόπG: entered promiscuous mode [ 156.678952][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.688536][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.718184][ T7263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.731046][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 156.920953][ T7263] hsr_slave_0: entered promiscuous mode [ 156.929189][ T7263] hsr_slave_1: entered promiscuous mode [ 156.940073][ T7263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.947815][ T7263] Cannot create hsr debugfs directory [ 157.158395][ T7426] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 157.555476][ T5245] Bluetooth: hci1: command tx timeout [ 157.793420][ T7263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.826808][ T7450] Κό: entered promiscuous mode [ 157.833820][ T7263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.858153][ T7263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.879750][ T7263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.963090][ T7454] sctp: [Deprecated]: syz.2.619 (pid 7454) Use of int in max_burst socket option deprecated. [ 157.963090][ T7454] Use struct sctp_assoc_value instead [ 158.030922][ T7452] __nla_validate_parse: 5 callbacks suppressed [ 158.030946][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 158.307576][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.385496][ T7263] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.413045][ T7466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.623'. [ 158.425434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.432931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.458343][ T7466] netlink: 43 bytes leftover after parsing attributes in process `syz.2.623'. [ 158.471485][ T7466] netlink: 'syz.2.623': attribute type 5 has an invalid length. [ 158.488832][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 158.505190][ T7466] netlink: 43 bytes leftover after parsing attributes in process `syz.2.623'. [ 158.509427][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.521450][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.649605][ T7473] ip6gre1: entered promiscuous mode [ 158.672043][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.626'. [ 158.701241][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.626'. [ 159.185760][ T7263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.300298][ T7263] veth0_vlan: entered promiscuous mode [ 159.310558][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'. [ 159.339516][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 159.371468][ T7263] veth1_vlan: entered promiscuous mode [ 159.383644][ T7505] sctp: [Deprecated]: syz.3.634 (pid 7505) Use of int in max_burst socket option deprecated. [ 159.383644][ T7505] Use struct sctp_assoc_value instead [ 159.486745][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.634'. [ 159.525627][ T7263] veth0_macvtap: entered promiscuous mode [ 159.547335][ T7263] veth1_macvtap: entered promiscuous mode [ 159.628235][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.634306][ T5245] Bluetooth: hci1: command tx timeout [ 159.644575][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.644600][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.644621][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.644637][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.644653][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.644665][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.644681][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.644697][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.644713][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.644741][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.644757][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.647910][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.778826][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.807468][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.829140][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.843289][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.863057][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.873426][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.924063][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.940793][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.962672][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.983151][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.996789][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.014064][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.037259][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.054836][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.088467][ T7263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.110536][ T5245] block nbd24: Receive control failed (result -107) [ 160.113973][ T7263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.134034][ T7263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.142961][ T7263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.184360][ T7519] nbd24: detected capacity change from 0 to 256 [ 160.209564][ T7522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.235398][ T7525] netlink: 'syz.1.640': attribute type 21 has an invalid length. [ 160.243327][ T7525] netlink: 'syz.1.640': attribute type 4 has an invalid length. [ 160.263423][ T7525] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 160.314897][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.404935][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.412837][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.490030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.507872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.805392][ T7552] sctp: [Deprecated]: syz.2.648 (pid 7552) Use of int in max_burst socket option deprecated. [ 160.805392][ T7552] Use struct sctp_assoc_value instead [ 160.898325][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.182963][ T7567] xt_HMARK: proto mask must be zero with L3 mode [ 161.566745][ T7575] netlink: 'syz.1.656': attribute type 3 has an invalid length. [ 161.699702][ T7577] tipc: Started in network mode [ 161.706894][ T7577] tipc: Node identity ac14140f, cluster identity 4711 [ 161.715157][ T7577] tipc: New replicast peer: 255.255.255.255 [ 161.723199][ T7577] tipc: Enabled bearer , priority 0 [ 162.302143][ T7596] sctp: [Deprecated]: syz.4.662 (pid 7596) Use of int in max_burst socket option deprecated. [ 162.302143][ T7596] Use struct sctp_assoc_value instead [ 162.836058][ T5287] tipc: Node number set to 2886997007 [ 162.987651][ T7620] IPVS: persistence engine module ip_vs_pe_@ not found [ 163.153235][ T7628] __nla_validate_parse: 14 callbacks suppressed [ 163.153258][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 163.183396][ T7628] veth0_macvtap: left promiscuous mode [ 163.287839][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 163.323612][ T7628] netlink: 176 bytes leftover after parsing attributes in process `syz.2.671'. [ 163.343799][ T7628] netlink: 176 bytes leftover after parsing attributes in process `syz.2.671'. [ 163.363032][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 163.396601][ T7635] bridge_slave_1: left allmulticast mode [ 163.402333][ T7635] bridge_slave_1: left promiscuous mode [ 163.437068][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.494660][ T7641] syz.1.674[7641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.494842][ T7641] syz.1.674[7641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.510144][ T7635] bridge_slave_0: left allmulticast mode [ 163.542251][ T7635] bridge_slave_0: left promiscuous mode [ 163.550272][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.777408][ T3002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.802868][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 164.288752][ T7651] netlink: 'syz.1.677': attribute type 11 has an invalid length. [ 164.302776][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 164.357375][ T3002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.372313][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 164.418645][ T7659] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 164.429128][ T5243] block nbd25: Receive control failed (result -107) [ 164.484137][ T3002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.502934][ T7654] nbd25: detected capacity change from 0 to 256 [ 164.657356][ T3002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.825967][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.836811][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.847752][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.879593][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.890551][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.899924][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.976442][ T3002] bridge_slave_1: left allmulticast mode [ 164.996488][ T3002] bridge_slave_1: left promiscuous mode [ 165.015681][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.039023][ T3002] bridge_slave_0: left allmulticast mode [ 165.046297][ T3002] bridge_slave_0: left promiscuous mode [ 165.057569][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.726616][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 165.738695][ T7688] syz.2.687[7688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.738959][ T7688] syz.2.687[7688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.085988][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.117225][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.135540][ T3002] bond0 (unregistering): Released all slaves [ 166.151621][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 166.169978][ T7672] netlink: 'syz.3.683': attribute type 15 has an invalid length. [ 166.230923][ T7701] netlink: 'syz.2.692': attribute type 11 has an invalid length. [ 166.293048][ T7665] lo speed is unknown, defaulting to 1000 [ 166.796836][ T3002] hsr_slave_0: left promiscuous mode [ 166.813529][ T3002] hsr_slave_1: left promiscuous mode [ 166.827734][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.838769][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.847526][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.856712][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.910911][ T3002] veth1_macvtap: left promiscuous mode [ 166.923293][ T3002] veth0_macvtap: left promiscuous mode [ 166.924868][ T5245] Bluetooth: hci1: command tx timeout [ 166.945247][ T3002] veth1_vlan: left promiscuous mode [ 166.950706][ T3002] veth0_vlan: left promiscuous mode [ 167.287871][ T7726] syz.4.700[7726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.288050][ T7726] syz.4.700[7726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.933388][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 168.002382][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 168.608607][ T7723] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 168.618511][ T7733] netlink: 'syz.4.701': attribute type 8 has an invalid length. [ 168.627846][ T7739] __nla_validate_parse: 2 callbacks suppressed [ 168.627872][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 168.902510][ T7744] netlink: 'syz.4.705': attribute type 29 has an invalid length. [ 168.948238][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 168.982807][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 168.986569][ T7751] netlink: 'syz.1.707': attribute type 11 has an invalid length. [ 168.998612][ T5245] Bluetooth: hci1: command tx timeout [ 169.356957][ T7770] syz.3.712[7770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.357140][ T7770] syz.3.712[7770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.449026][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.477199][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.488282][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.496818][ T7665] bridge_slave_0: entered allmulticast mode [ 169.506504][ T7665] bridge_slave_0: entered promiscuous mode [ 169.521730][ T7765] netlink: 176 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.533076][ T7765] netlink: 176 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.545821][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.562387][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.578097][ T7665] bridge_slave_1: entered allmulticast mode [ 169.599375][ T7665] bridge_slave_1: entered promiscuous mode [ 169.701573][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.705228][ T7781] netlink: 248 bytes leftover after parsing attributes in process `syz.3.715'. [ 169.742347][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.856011][ T7665] team0: Port device team_slave_0 added [ 169.881677][ T7665] team0: Port device team_slave_1 added [ 169.962598][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.972535][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.010967][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.057444][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.076863][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.130638][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.241164][ T7665] hsr_slave_0: entered promiscuous mode [ 170.253043][ T7665] hsr_slave_1: entered promiscuous mode [ 170.269134][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.278832][ T7665] Cannot create hsr debugfs directory [ 170.320964][ T7796] netlink: 'syz.2.720': attribute type 11 has an invalid length. [ 170.414955][ T7801] syz.1.723[7801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.415138][ T7801] syz.1.723[7801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.548410][ T7809] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.726'. [ 170.582488][ T7809] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 170.955753][ T7825] netlink: 80 bytes leftover after parsing attributes in process `syz.4.731'. [ 170.973483][ T7823] lo speed is unknown, defaulting to 1000 [ 171.053715][ T7825] netlink: 64 bytes leftover after parsing attributes in process `syz.4.731'. [ 171.085246][ T5245] Bluetooth: hci1: command tx timeout [ 171.123376][ T7826] bond0: entered promiscuous mode [ 171.132696][ T7826] bond_slave_0: entered promiscuous mode [ 171.140082][ T7826] bond_slave_1: entered promiscuous mode [ 171.152823][ T7826] team0: entered promiscuous mode [ 171.158265][ T7826] team_slave_0: entered promiscuous mode [ 171.164845][ T7826] team_slave_1: entered promiscuous mode [ 171.339811][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 171.403741][ T7837] netlink: 'syz.2.734': attribute type 11 has an invalid length. [ 171.936400][ T7665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.967728][ T7665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.073991][ T7665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.110487][ T7665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.357950][ T7863] netlink: 'syz.2.743': attribute type 28 has an invalid length. [ 172.392873][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.517784][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.559073][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.566327][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.621052][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.628351][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.160448][ T5245] Bluetooth: hci1: command tx timeout [ 173.298032][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.305323][ T7885] netlink: 'syz.4.748': attribute type 11 has an invalid length. [ 173.441408][ T7665] veth0_vlan: entered promiscuous mode [ 173.476478][ T7665] veth1_vlan: entered promiscuous mode [ 173.528093][ T7888] netlink: 'syz.4.749': attribute type 4 has an invalid length. [ 173.619824][ T7889] netlink: 'syz.4.749': attribute type 4 has an invalid length. [ 173.641694][ T5289] lo speed is unknown, defaulting to 1000 [ 173.665657][ T5287] lo speed is unknown, defaulting to 1000 [ 173.778012][ T7665] veth0_macvtap: entered promiscuous mode [ 173.805516][ T7665] veth1_macvtap: entered promiscuous mode [ 173.892123][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.924676][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.953647][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.004084][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.020795][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.054109][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.082004][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.121746][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.144226][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.163796][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.185820][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.214452][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.255340][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.350887][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.384812][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.403500][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.431170][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.447212][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.469298][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.516426][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.531951][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.555232][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.578407][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.590511][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.620690][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.645856][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.658234][ T7912] __nla_validate_parse: 6 callbacks suppressed [ 174.658258][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.757'. [ 174.799538][ T7665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.844092][ T7665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.871717][ T7665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.886849][ T7665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.168997][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.210005][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.288847][ T2531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.304016][ T2531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.458442][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 175.543991][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 175.606826][ T5245] block nbd26: Receive control failed (result -107) [ 175.644108][ T7930] nbd26: detected capacity change from 0 to 256 [ 176.014500][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.269471][ T7944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.768'. [ 176.765996][ T7952] netlink: 'syz.1.771': attribute type 6 has an invalid length. [ 176.794115][ T7952] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.771'. [ 176.934962][ T7956] syzkaller0: entered allmulticast mode [ 177.224467][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 177.291746][ T7963] veth0_macvtap: left promiscuous mode [ 177.592848][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 177.714133][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 177.785775][ T5245] block nbd27: Receive control failed (result -107) [ 177.804563][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.819248][ T7972] nbd27: detected capacity change from 0 to 256 [ 177.972360][ T7976] batadv0: entered promiscuous mode [ 178.269643][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.387962][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.492468][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.702085][ T12] bridge_slave_1: left allmulticast mode [ 178.718713][ T12] bridge_slave_1: left promiscuous mode [ 178.742068][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.773022][ T12] bridge_slave_0: left allmulticast mode [ 178.790767][ T12] bridge_slave_0: left promiscuous mode [ 178.809011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.838437][ T7993] netlink: 'syz.2.783': attribute type 11 has an invalid length. [ 179.442232][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.454398][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.465447][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.490504][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.500617][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.516731][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.988124][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.014703][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.058202][ T12] bond0 (unregistering): Released all slaves [ 180.093011][ T7992] netlink: 232 bytes leftover after parsing attributes in process `syz.4.784'. [ 180.255104][ T8001] lo speed is unknown, defaulting to 1000 [ 180.667304][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 180.844914][ T12] hsr_slave_0: left promiscuous mode [ 180.857098][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 180.877843][ T12] hsr_slave_1: left promiscuous mode [ 180.895870][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.913715][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.928339][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.937973][ T5243] block nbd28: Receive control failed (result -107) [ 180.958737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.984250][ T8018] nbd28: detected capacity change from 0 to 256 [ 181.072433][ T12] veth1_macvtap: left promiscuous mode [ 181.097557][ T12] veth0_macvtap: left promiscuous mode [ 181.108935][ T12] veth1_vlan: left promiscuous mode [ 181.119339][ T12] veth0_vlan: left promiscuous mode [ 181.644693][ T5243] Bluetooth: hci1: command tx timeout [ 182.427911][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.514809][ T12] team0 (unregistering): Port device team_slave_0 removed [ 183.361140][ T8025] batadv0: entered promiscuous mode [ 183.388843][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.798'. [ 183.543314][ T8042] lo speed is unknown, defaulting to 1000 [ 183.724440][ T5243] Bluetooth: hci1: command tx timeout [ 183.733598][ T8049] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 183.761222][ T8051] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 183.966481][ T8001] chnl_net:caif_netlink_parms(): no params data found [ 184.428949][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.436305][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 184.448570][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.464369][ T8001] bridge_slave_0: entered allmulticast mode [ 184.482396][ T8001] bridge_slave_0: entered promiscuous mode [ 184.501921][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.517638][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.525308][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 184.534834][ T8001] bridge_slave_1: entered allmulticast mode [ 184.545762][ T8001] bridge_slave_1: entered promiscuous mode [ 184.605459][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.615281][ T8085] nbd29: detected capacity change from 0 to 256 [ 184.627452][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.780952][ T8001] team0: Port device team_slave_0 added [ 184.800380][ T8001] team0: Port device team_slave_1 added [ 184.931550][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.940152][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.973997][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.014872][ T8094] netlink: 232 bytes leftover after parsing attributes in process `syz.4.809'. [ 185.053639][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.061362][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.105813][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.241424][ T8001] hsr_slave_0: entered promiscuous mode [ 185.248735][ T8001] hsr_slave_1: entered promiscuous mode [ 185.268005][ T8001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.288288][ T8001] Cannot create hsr debugfs directory [ 185.668166][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 185.704505][ T8104] bond0: option arp_all_targets: invalid value (48896) [ 185.779576][ T8108] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 185.796285][ T5245] Bluetooth: hci1: command tx timeout [ 185.819610][ T8108] netlink: 240 bytes leftover after parsing attributes in process `syz.3.815'. [ 186.221703][ T8117] lo speed is unknown, defaulting to 1000 [ 186.280973][ T8125] xt_hashlimit: overflow, rate too high: 0 [ 186.801331][ T8001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.830334][ T8001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.856023][ T8001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.887019][ T8001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.337365][ T8141] batadv0: entered promiscuous mode [ 187.747036][ T8141] syz.1.823 (8141) used greatest stack depth: 18544 bytes left [ 187.874491][ T5245] Bluetooth: hci1: command tx timeout [ 187.902354][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.989037][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 188.051824][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.081243][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.088548][ T2531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.134999][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.142273][ T2531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.154328][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 188.224564][ T8180] nbd30: detected capacity change from 0 to 256 [ 188.558593][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.671286][ T8001] veth0_vlan: entered promiscuous mode [ 188.705471][ T8001] veth1_vlan: entered promiscuous mode [ 188.791841][ T8001] veth0_macvtap: entered promiscuous mode [ 188.822853][ T8001] veth1_macvtap: entered promiscuous mode [ 188.872804][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.898708][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.916671][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.943161][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.973237][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.997865][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.008096][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.018722][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.039436][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.050397][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.072162][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.099867][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.116211][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.172829][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.204501][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.234769][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.262450][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.284608][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.313751][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.353986][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.386277][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.429377][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.462270][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.486518][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.497244][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.520984][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.583755][ T8217] lo speed is unknown, defaulting to 1000 [ 189.599168][ T8001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.619656][ T8001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.639185][ T8001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.652190][ T8001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.191307][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.223977][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.538153][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.579839][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.973054][ T8236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.838'. [ 191.915570][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.847'. [ 192.061032][ T8293] lo speed is unknown, defaulting to 1000 [ 192.210642][ T8300] netlink: 232 bytes leftover after parsing attributes in process `syz.1.850'. [ 192.836600][ T2589] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.089600][ T2589] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.248168][ T2589] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.356358][ T2589] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.499939][ T2589] bridge_slave_1: left allmulticast mode [ 193.513063][ T2589] bridge_slave_1: left promiscuous mode [ 193.519050][ T2589] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.541259][ T2589] bridge_slave_0: left allmulticast mode [ 193.547385][ T2589] bridge_slave_0: left promiscuous mode [ 193.553201][ T2589] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.354355][ T8335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.631572][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.649470][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.658844][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.667585][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.686588][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.698146][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.699186][ T2589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.734480][ T2589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.759654][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.779012][ T2589] bond0 (unregistering): Released all slaves [ 195.049138][ T8345] lo speed is unknown, defaulting to 1000 [ 195.158750][ T8334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.404851][ T2589] hsr_slave_0: left promiscuous mode [ 195.411888][ T2589] hsr_slave_1: left promiscuous mode [ 195.428630][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.434439][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 195.440180][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.455657][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.471690][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.502344][ T2589] veth1_macvtap: left promiscuous mode [ 195.508176][ T2589] veth0_macvtap: left promiscuous mode [ 195.514262][ T2589] veth1_vlan: left promiscuous mode [ 195.519756][ T2589] veth0_vlan: left promiscuous mode [ 195.556661][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 195.637269][ T5251] block nbd31: Receive control failed (result -107) [ 195.724125][ T8354] nbd31: detected capacity change from 0 to 256 [ 195.888572][ T8362] sctp: [Deprecated]: syz.3.864 (pid 8362) Use of int in max_burst socket option deprecated. [ 195.888572][ T8362] Use struct sctp_assoc_value instead [ 196.754254][ T5251] Bluetooth: hci1: command tx timeout [ 196.807433][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 196.878136][ T2589] team0 (unregistering): Port device team_slave_1 removed [ 196.943018][ T2589] team0 (unregistering): Port device team_slave_0 removed [ 197.091773][ T8375] netlink: 148 bytes leftover after parsing attributes in process `syz.1.868'. [ 197.101939][ T8375] netlink: 'syz.1.868': attribute type 2 has an invalid length. [ 197.116833][ T8375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.868'. [ 197.507303][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.864'. [ 197.556700][ T8364] lo speed is unknown, defaulting to 1000 [ 197.979492][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 198.191156][ T8394] netlink: 'syz.2.875': attribute type 322 has an invalid length. [ 198.200849][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 198.350368][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.378697][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.398856][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.400502][ T8345] bridge_slave_0: entered allmulticast mode [ 198.440299][ T8345] bridge_slave_0: entered promiscuous mode [ 198.463666][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.492980][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.502414][ T8345] bridge_slave_1: entered allmulticast mode [ 198.514524][ T8345] bridge_slave_1: entered promiscuous mode [ 198.540175][ T8405] netlink: 232 bytes leftover after parsing attributes in process `syz.1.877'. [ 198.552644][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 198.657637][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.688290][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.823583][ T8345] team0: Port device team_slave_0 added [ 198.835892][ T5251] Bluetooth: hci1: command tx timeout [ 199.009928][ T8345] team0: Port device team_slave_1 added [ 199.224807][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.235640][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.277297][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.376346][ T8426] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 199.396307][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.403423][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.441637][ T8426] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 199.473216][ T8426] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.883'. [ 199.490697][ T8426] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 199.514266][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.785709][ T8345] hsr_slave_0: entered promiscuous mode [ 199.814596][ T8345] hsr_slave_1: entered promiscuous mode [ 199.837507][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.862063][ T8345] Cannot create hsr debugfs directory [ 200.279220][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 200.914824][ T8443] Bluetooth: hci1: command tx timeout [ 201.162264][ T8345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.205825][ T8345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.237749][ T8345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.268113][ T8345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.532452][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.587949][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.648771][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.656137][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.686802][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.694068][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.844872][ T8345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.957498][ T8443] Bluetooth: hci0: command 0x0406 tx timeout [ 201.960354][ T8442] Bluetooth: hci3: command 0x0406 tx timeout [ 201.969835][ T8442] Bluetooth: hci2: command 0x0406 tx timeout [ 201.971177][ T8443] Bluetooth: hci4: command 0x0406 tx timeout [ 202.571624][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.994193][ T5251] Bluetooth: hci1: command tx timeout [ 203.138417][ T8345] veth0_vlan: entered promiscuous mode [ 203.243059][ T8345] veth1_vlan: entered promiscuous mode [ 203.386094][ T8345] veth0_macvtap: entered promiscuous mode [ 203.418261][ T8345] veth1_macvtap: entered promiscuous mode [ 203.484624][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 203.573698][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.588210][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.608536][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.630692][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.643699][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.655707][ T8557] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 203.663222][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.683955][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.701901][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.722326][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.742579][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.753102][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.773626][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.797115][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.841549][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.872477][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.885820][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.903668][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.915652][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.936609][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.952602][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.967988][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.988052][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.011601][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.053962][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.074404][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.100903][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.150388][ T8345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.176678][ T8567] TCP: TCP_TX_DELAY enabled [ 204.181531][ T8345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.191001][ T8345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.204705][ T8345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.448081][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.474243][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.536555][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.571955][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.656196][ T8578] Cannot find add_set index 0 as target [ 204.693003][ T8577] delete_channel: no stack [ 204.729327][ T8582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.924'. [ 204.753672][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 204.772129][ T8582] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 204.982775][ T8589] nftables ruleset with unbound chain [ 205.377579][ T8605] netlink: 18 bytes leftover after parsing attributes in process `syz.1.932'. [ 205.391592][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.932'. [ 206.224499][ T8621] netlink: 232 bytes leftover after parsing attributes in process `syz.3.937'. [ 206.412136][ T2589] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.215940][ T2589] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.303738][ T2589] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.460715][ T2589] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.776028][ T2589] bridge_slave_1: left allmulticast mode [ 207.781768][ T2589] bridge_slave_1: left promiscuous mode [ 207.815421][ T2589] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.894287][ T2589] bridge_slave_0: left allmulticast mode [ 207.900021][ T2589] bridge_slave_0: left promiscuous mode [ 207.928797][ T2589] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.938066][ T8643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.056152][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.105492][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.134505][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.145802][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.155825][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.166464][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.678786][ T8659] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 208.696911][ T8659] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.950'. [ 208.715575][ T8659] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 208.728933][ T8659] netlink: 'syz.2.950': attribute type 2 has an invalid length. [ 208.746238][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 208.977727][ T2589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.999103][ T2589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.020445][ T2589] bond0 (unregistering): Released all slaves [ 209.069608][ T8653] vlan2: entered promiscuous mode [ 209.087816][ T8653] vlan2: entered allmulticast mode [ 209.344652][ T8664] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 209.421375][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 209.434259][ T8664] team0: Failed to send options change via netlink (err -105) [ 209.447686][ T8664] team0: Port device netdevsim0 added [ 209.504256][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 209.516786][ T8669] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 209.535739][ T8669] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 209.546659][ T5251] block nbd32: Receive control failed (result -107) [ 209.593438][ T8669] team0: Failed to send options change via netlink (err -105) [ 209.608989][ T8666] nbd32: detected capacity change from 0 to 256 [ 209.619420][ T8669] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 209.640656][ T8669] team0: Port device netdevsim0 removed [ 209.662178][ T8669] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 209.680060][ T8648] lo speed is unknown, defaulting to 1000 [ 209.680934][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 209.927962][ T2589] hsr_slave_0: left promiscuous mode [ 209.942499][ T2589] hsr_slave_1: left promiscuous mode [ 209.965520][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.994165][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.010499][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.026159][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.112561][ T2589] veth1_macvtap: left promiscuous mode [ 210.147837][ T2589] veth0_macvtap: left promiscuous mode [ 210.164379][ T2589] veth1_vlan: left promiscuous mode [ 210.192785][ T2589] veth0_vlan: left promiscuous mode [ 210.274391][ T5251] Bluetooth: hci1: command tx timeout [ 210.478706][ T8690] netlink: 'syz.1.957': attribute type 11 has an invalid length. [ 211.487914][ T2589] team0 (unregistering): Port device team_slave_1 removed [ 211.542196][ T2589] team0 (unregistering): Port device team_slave_0 removed [ 212.101621][ T8678] lo speed is unknown, defaulting to 1000 [ 212.338515][ T8705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.354673][ T5251] Bluetooth: hci1: command tx timeout [ 212.372637][ T8708] netlink: 'syz.2.961': attribute type 3 has an invalid length. [ 212.384985][ T8708] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.961'. [ 212.409487][ T8707] netlink: 'syz.1.962': attribute type 4 has an invalid length. [ 212.606639][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 212.772506][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.789187][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.799793][ T8648] bridge_slave_0: entered allmulticast mode [ 212.814625][ T8648] bridge_slave_0: entered promiscuous mode [ 212.829836][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.845364][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.853166][ T8648] bridge_slave_1: entered allmulticast mode [ 212.869861][ T8648] bridge_slave_1: entered promiscuous mode [ 212.958635][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.977614][ T8724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 212.990298][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.078237][ T8648] team0: Port device team_slave_0 added [ 213.098948][ T8648] team0: Port device team_slave_1 added [ 213.218855][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.229920][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.263272][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.280921][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.288297][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.328427][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.421102][ T8735] netlink: 232 bytes leftover after parsing attributes in process `syz.1.968'. [ 213.956794][ T8648] hsr_slave_0: entered promiscuous mode [ 213.964223][ T8648] hsr_slave_1: entered promiscuous mode [ 213.991234][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.000279][ T8648] Cannot create hsr debugfs directory [ 214.444921][ T5251] Bluetooth: hci1: command tx timeout [ 214.595068][ T8764] netlink: 64 bytes leftover after parsing attributes in process `syz.4.973'. [ 214.653051][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.973'. [ 216.518641][ T5251] Bluetooth: hci1: command tx timeout [ 217.162339][ T8771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.735994][ T8774] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 217.774291][ T8774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.976'. [ 217.990101][ T8781] Driver unsupported XDP return value 0 on prog (id 282) dev N/A, expect packet loss! [ 218.786010][ T8804] netlink: 232 bytes leftover after parsing attributes in process `syz.1.985'. [ 218.967907][ T8648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.983714][ T8807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.008192][ T8648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.036285][ T8648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.058438][ T8648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.100788][ T8810] xt_ct_set_helper: 23 callbacks suppressed [ 219.100808][ T8810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.170243][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 219.232550][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 219.380120][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.451600][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.511028][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.518281][ T2589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.572527][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.579808][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.804179][ T8824] lo speed is unknown, defaulting to 1000 [ 220.218553][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.427622][ T8648] veth0_vlan: entered promiscuous mode [ 220.478205][ T8648] veth1_vlan: entered promiscuous mode [ 220.535399][ T8840] netlink: 52 bytes leftover after parsing attributes in process `syz.3.996'. [ 220.574802][ T8648] veth0_macvtap: entered promiscuous mode [ 220.588746][ T8648] veth1_macvtap: entered promiscuous mode [ 220.647527][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.674842][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.694009][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.705090][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.724229][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.735082][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.747780][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.762786][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.772938][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.783614][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.793687][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.804554][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.817416][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.983500][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.997888][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.007999][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.018668][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.036320][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.051872][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.065831][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.089368][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.103170][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.124346][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.143003][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.187956][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.209191][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.250607][ T8648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.269644][ T8648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.280951][ T8648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.290061][ T8648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.659596][ T8854] netlink: 'syz.4.1000': attribute type 2 has an invalid length. [ 221.682661][ T8165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.709885][ T8165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.960042][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.974890][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.116770][ T8860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.699388][ T8865] syz.4.1004 (8865) used greatest stack depth: 18520 bytes left [ 223.021717][ T8876] lo speed is unknown, defaulting to 1000 [ 223.174911][ T8885] netlink: 'syz.2.1010': attribute type 11 has an invalid length. [ 223.745132][ T8896] syz.3.1015[8896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.745317][ T8896] syz.3.1015[8896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.846095][ T8900] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.070429][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 224.382005][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 224.474354][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 224.550620][ T5251] block nbd33: Receive control failed (result -107) [ 224.604990][ T8916] nbd33: detected capacity change from 0 to 256 [ 224.628893][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.192697][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.269397][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.343021][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.436596][ T144] bridge_slave_1: left allmulticast mode [ 225.442358][ T144] bridge_slave_1: left promiscuous mode [ 225.448355][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.458587][ T144] bridge_slave_0: left allmulticast mode [ 225.466407][ T144] bridge_slave_0: left promiscuous mode [ 225.472166][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.660507][ T8933] syz.3.1026[8933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.660679][ T8933] syz.3.1026[8933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.377813][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.403592][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.414063][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.449322][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.465823][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.473527][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.903778][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.934613][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.956314][ T144] bond0 (unregistering): Released all slaves [ 226.996907][ T8938] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1024'. [ 227.118998][ T8951] lo speed is unknown, defaulting to 1000 [ 227.408451][ T8954] lo speed is unknown, defaulting to 1000 [ 227.661748][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 227.682785][ T144] hsr_slave_0: left promiscuous mode [ 227.719958][ T144] hsr_slave_1: left promiscuous mode [ 227.735174][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.742923][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.751347][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.759541][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 227.768698][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.815477][ T144] veth1_macvtap: left promiscuous mode [ 227.822894][ T5251] block nbd34: Receive control failed (result -107) [ 227.838287][ T144] veth0_macvtap: left promiscuous mode [ 227.854123][ T8971] nbd34: detected capacity change from 0 to 256 [ 227.861204][ T144] veth1_vlan: left promiscuous mode [ 227.879348][ T144] veth0_vlan: left promiscuous mode [ 228.516781][ T5251] Bluetooth: hci1: command tx timeout [ 229.080694][ T144] team0 (unregistering): Port device team_slave_1 removed [ 229.170717][ T144] team0 (unregistering): Port device team_slave_0 removed [ 229.950335][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 229.960594][ T8991] sctp: [Deprecated]: syz.1.1038 (pid 8991) Use of int in max_burst socket option deprecated. [ 229.960594][ T8991] Use struct sctp_assoc_value instead [ 229.975071][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 229.993097][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 230.285590][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 230.491966][ T8954] chnl_net:caif_netlink_parms(): no params data found [ 230.545825][ T9001] netlink: 'syz.3.1040': attribute type 1 has an invalid length. [ 230.565064][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1040'. [ 230.597319][ T5251] Bluetooth: hci1: command tx timeout [ 230.631488][ T9003] pim6reg: entered allmulticast mode [ 230.782977][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.804851][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.816440][ T8954] bridge_slave_0: entered allmulticast mode [ 230.828456][ T8954] bridge_slave_0: entered promiscuous mode [ 230.848362][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.865848][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.873581][ T8954] bridge_slave_1: entered allmulticast mode [ 230.890323][ T9009] netlink: 'syz.1.1042': attribute type 7 has an invalid length. [ 230.890522][ T8954] bridge_slave_1: entered promiscuous mode [ 230.899772][ T9009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 230.920241][ T9003] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64) [ 230.997012][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.020560][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.227601][ T8954] team0: Port device team_slave_0 added [ 231.267818][ T8954] team0: Port device team_slave_1 added [ 231.389558][ T9024] Bluetooth: MGMT ver 1.23 [ 231.407286][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.413530][ T9024] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 231.424044][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.498888][ T8954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.529886][ T9012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'. [ 231.542702][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.558017][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.590176][ T8954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.740632][ T8954] hsr_slave_0: entered promiscuous mode [ 231.749346][ T8954] hsr_slave_1: entered promiscuous mode [ 231.765859][ T8954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.784151][ T8954] Cannot create hsr debugfs directory [ 232.453098][ T9046] lo speed is unknown, defaulting to 1000 [ 232.674208][ T5251] Bluetooth: hci1: command tx timeout [ 233.134315][ T9059] __nla_validate_parse: 2 callbacks suppressed [ 233.134341][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 233.294790][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 233.398566][ T5251] block nbd35: Receive control failed (result -107) [ 233.464139][ T9059] nbd35: detected capacity change from 0 to 256 [ 233.655951][ T8954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.728225][ T8954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.755851][ T8954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.792793][ T8954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.087795][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 234.222831][ T9085] netlink: 'syz.3.1060': attribute type 7 has an invalid length. [ 234.244261][ T9085] netlink: 'syz.3.1060': attribute type 8 has an invalid length. [ 234.252073][ T9085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1060'. [ 234.289906][ T9082] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1059'. [ 234.293150][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.349725][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 234.388322][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.430672][ T9083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.551554][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.558836][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.604679][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.611928][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.672951][ T9091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1061'. [ 234.708803][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 234.754192][ T5251] Bluetooth: hci1: command tx timeout [ 235.268654][ T9105] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1065'. [ 235.279453][ T9099] wg2: entered promiscuous mode [ 235.298487][ T9099] wg2: entered allmulticast mode [ 235.341663][ T9105] netlink: 'syz.3.1065': attribute type 15 has an invalid length. [ 235.374025][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 235.494416][ T9104] lo speed is unknown, defaulting to 1000 [ 235.527620][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.638111][ T9109] batman_adv: batadv1: Adding interface: netdevsim0 [ 235.684665][ T9109] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.745625][ T9109] batman_adv: batadv1: Interface activated: netdevsim0 [ 235.836190][ T9109] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 235.843345][ T9109] batman_adv: batadv1: Removing interface: netdevsim0 [ 235.941910][ T8954] veth0_vlan: entered promiscuous mode [ 235.979346][ T8954] veth1_vlan: entered promiscuous mode [ 236.170724][ T8954] veth0_macvtap: entered promiscuous mode [ 236.196267][ T8954] veth1_macvtap: entered promiscuous mode [ 236.318683][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.338853][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.403920][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.436345][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.462451][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.483706][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.510584][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.543956][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.564545][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.583877][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.596104][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.608865][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.625017][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.650582][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.670457][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.692831][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.712035][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.740533][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.754937][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.772516][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.783435][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.805815][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.848016][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.869598][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.889591][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.926708][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.137653][ T9131] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 237.214733][ T8954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.241701][ T8954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.258771][ T8954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.276189][ T8954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.551615][ T2589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.585368][ T2589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.622105][ T9147] netlink: 'syz.2.1078': attribute type 5 has an invalid length. [ 237.634511][ T30] INFO: task udevd:5285 blocked for more than 143 seconds. [ 237.641920][ T30] Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 237.663358][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.688247][ T30] task:udevd state:D stack:20536 pid:5285 tgid:5285 ppid:1 flags:0x00004002 [ 237.709711][ T30] Call Trace: [ 237.721813][ T30] [ 237.728467][ T30] __schedule+0x1800/0x4a60 [ 237.738965][ T30] ? __pfx___schedule+0x10/0x10 [ 237.753890][ T30] ? __blk_flush_plug+0x449/0x500 [ 237.765980][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.771128][ T30] ? __asan_memset+0x23/0x50 [ 237.783952][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 237.789859][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.796938][ T30] ? schedule+0x90/0x320 [ 237.801256][ T30] schedule+0x14b/0x320 [ 237.805605][ T30] schedule_timeout+0x1be/0x310 [ 237.810533][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 237.817212][ T30] ? __pfx_process_timeout+0x10/0x10 [ 237.822581][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 237.831225][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 237.838053][ T30] ? validate_chain+0x11e/0x5900 [ 237.843183][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 237.853060][ T30] ? __lock_acquire+0x137a/0x2040 [ 237.863710][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 237.880870][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 237.891678][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 237.898690][ T30] ? sbitmap_get+0x289/0x3f0 [ 237.903334][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 237.910185][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 237.917415][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 237.923981][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 237.930836][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 237.938127][ T30] ? __pfx___might_resched+0x10/0x10 [ 237.943486][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 237.949653][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 237.957772][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 237.962961][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 237.970882][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 237.979764][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 237.988017][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 237.993373][ T30] __blk_flush_plug+0x420/0x500 [ 237.998511][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 238.004118][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 238.009290][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 238.014760][ T30] __submit_bio+0x422/0x560 [ 238.020149][ T30] ? __pfx___submit_bio+0x10/0x10 [ 238.025320][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 238.031622][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 238.040361][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 238.048020][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 238.054181][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.059537][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 238.066073][ T30] block_read_full_folio+0x93b/0xcd0 [ 238.071469][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 238.077238][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 238.083105][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 238.088153][ T30] ? folio_add_lru+0x357/0xd70 [ 238.092977][ T30] ? folio_add_lru+0x58f/0xd70 [ 238.100034][ T30] filemap_read_folio+0x1a0/0x790 [ 238.105345][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 238.111296][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 238.117162][ T30] ? __filemap_get_folio+0x984/0xc10 [ 238.124318][ T30] do_read_cache_folio+0x134/0x820 [ 238.129704][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 238.135317][ T30] read_part_sector+0xb3/0x330 [ 238.140153][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 238.145373][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 238.150185][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 238.158060][ T30] ? snprintf+0xda/0x120 [ 238.162366][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 238.168147][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 238.172767][ T30] ? vsnprintf+0x184/0x1da0 [ 238.177468][ T30] ? __pfx_snprintf+0x10/0x10 [ 238.182220][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 238.187241][ T30] bdev_disk_changed+0x72c/0x13d0 [ 238.192315][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 238.199836][ T30] blkdev_get_whole+0x2d2/0x450 [ 238.206891][ T30] bdev_open+0x2d4/0xc60 [ 238.211308][ T30] blkdev_open+0x3e8/0x570 [ 238.216699][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 238.221683][ T30] do_dentry_open+0x970/0x1440 [ 238.228098][ T30] vfs_open+0x3e/0x330 [ 238.232212][ T30] path_openat+0x2b3e/0x3470 [ 238.240777][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 238.246368][ T30] ? __lock_acquire+0x137a/0x2040 [ 238.251438][ T30] ? __pfx_path_openat+0x10/0x10 [ 238.256647][ T30] do_filp_open+0x235/0x490 [ 238.261731][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 238.268341][ T30] ? _raw_spin_unlock+0x28/0x50 [ 238.273240][ T30] ? alloc_fd+0x5a1/0x640 [ 238.277982][ T30] do_sys_openat2+0x13e/0x1d0 [ 238.282726][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.288031][ T30] __x64_sys_openat+0x247/0x2a0 [ 238.292952][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.298429][ T30] ? do_syscall_64+0x100/0x230 [ 238.303260][ T30] ? do_syscall_64+0xb6/0x230 [ 238.308092][ T30] do_syscall_64+0xf3/0x230 [ 238.312633][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.319446][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.326750][ T30] RIP: 0033:0x7f3e3e1859a4 [ 238.331228][ T30] RSP: 002b:00007fffeb1de1d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.339891][ T30] RAX: ffffffffffffffda RBX: 0000555d490fb550 RCX: 00007f3e3e1859a4 [ 238.348056][ T30] RDX: 00000000000a0800 RSI: 0000555d490e8730 RDI: 00000000ffffff9c [ 238.356712][ T30] RBP: 0000555d490e8730 R08: 0000000000000001 R09: 0000000000000000 [ 238.364920][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 238.372935][ T30] R13: 0000555d490eb540 R14: 0000000000000001 R15: 0000555d490d6910 [ 238.382678][ T30] [ 238.385860][ T30] INFO: task udevd:5455 blocked for more than 144 seconds. [ 238.388413][ T2589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.394110][ T30] Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 238.410842][ T2589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.415299][ T9147] Κό: entered promiscuous mode [ 238.426482][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.463920][ T30] task:udevd state:D stack:21072 pid:5455 tgid:5455 ppid:1 flags:0x00004002 [ 238.486999][ T30] Call Trace: [ 238.490356][ T30] [ 238.493311][ T30] __schedule+0x1800/0x4a60 [ 238.499411][ T30] ? __pfx___schedule+0x10/0x10 [ 238.504393][ T30] ? __blk_flush_plug+0x449/0x500 [ 238.509480][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.515237][ T30] ? __asan_memset+0x23/0x50 [ 238.519905][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 238.525980][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.533496][ T30] ? schedule+0x90/0x320 [ 238.539557][ T30] schedule+0x14b/0x320 [ 238.543761][ T30] schedule_timeout+0x1be/0x310 [ 238.548877][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 238.554368][ T30] ? __pfx_process_timeout+0x10/0x10 [ 238.559800][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 238.565434][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 238.570073][ T30] ? __pfx_validate_chain+0x10/0x10 [ 238.578671][ T30] ? validate_chain+0x11e/0x5900 [ 238.583687][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 238.588791][ T30] ? __lock_acquire+0x137a/0x2040 [ 238.596165][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 238.602327][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 238.608095][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 238.613168][ T30] ? sbitmap_get+0x289/0x3f0 [ 238.617821][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 238.623926][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 238.629797][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 238.637592][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 238.645920][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 238.651251][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.656630][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 238.662665][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 238.668173][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 238.673313][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 238.679116][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 238.684888][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 238.690850][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 238.696413][ T30] __blk_flush_plug+0x420/0x500 [ 238.701345][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 238.708380][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 238.713546][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 238.718860][ T30] __submit_bio+0x422/0x560 [ 238.723420][ T30] ? __pfx___submit_bio+0x10/0x10 [ 238.729218][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 238.736633][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 238.743322][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 238.749070][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 238.762000][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.767621][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 238.773921][ T30] block_read_full_folio+0x93b/0xcd0 [ 238.779459][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 238.784958][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 238.790789][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 238.796021][ T30] ? folio_add_lru+0x357/0xd70 [ 238.800832][ T30] ? folio_add_lru+0x58f/0xd70 [ 238.805977][ T30] filemap_read_folio+0x1a0/0x790 [ 238.811083][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 238.818095][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 238.823684][ T30] ? __filemap_get_folio+0x984/0xc10 [ 238.829343][ T30] do_read_cache_folio+0x134/0x820 [ 238.834843][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 238.841515][ T30] read_part_sector+0xb3/0x330 [ 238.846601][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 238.851783][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 238.856841][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 238.862438][ T30] ? snprintf+0xda/0x120 [ 238.869294][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 238.875133][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 238.879778][ T30] ? vsnprintf+0x184/0x1da0 [ 238.884542][ T30] ? __pfx_snprintf+0x10/0x10 [ 238.889264][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 238.894147][ T30] bdev_disk_changed+0x72c/0x13d0 [ 238.899343][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 238.905075][ T30] blkdev_get_whole+0x2d2/0x450 [ 238.909958][ T30] bdev_open+0x2d4/0xc60 [ 238.914924][ T30] blkdev_open+0x3e8/0x570 [ 238.919401][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 238.926879][ T30] do_dentry_open+0x970/0x1440 [ 238.931843][ T30] vfs_open+0x3e/0x330 [ 238.935994][ T30] path_openat+0x2b3e/0x3470 [ 238.941601][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 238.947962][ T30] ? __lock_acquire+0x137a/0x2040 [ 238.953046][ T30] ? __pfx_path_openat+0x10/0x10 [ 238.958141][ T30] do_filp_open+0x235/0x490 [ 238.962808][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 238.968026][ T30] ? _raw_spin_unlock+0x28/0x50 [ 238.973008][ T30] ? alloc_fd+0x5a1/0x640 [ 238.979786][ T30] do_sys_openat2+0x13e/0x1d0 [ 238.984603][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.989893][ T30] __x64_sys_openat+0x247/0x2a0 [ 238.994858][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.000276][ T30] ? do_syscall_64+0x100/0x230 [ 239.005353][ T30] ? do_syscall_64+0xb6/0x230 [ 239.010066][ T30] do_syscall_64+0xf3/0x230 [ 239.014748][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.019468][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.025896][ T30] RIP: 0033:0x7f3e3e1859a4 [ 239.030351][ T30] RSP: 002b:00007fffeb1de1d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.040512][ T30] RAX: ffffffffffffffda RBX: 0000555d490fb550 RCX: 00007f3e3e1859a4 [ 239.049670][ T30] RDX: 00000000000a0800 RSI: 0000555d490f04a0 RDI: 00000000ffffff9c [ 239.057784][ T30] RBP: 0000555d490f04a0 R08: 0000000000000001 R09: 7fffffffffffffff [ 239.066049][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 239.074466][ T30] R13: 0000555d490ee3d0 R14: 0000000000000001 R15: 0000555d490d6910 [ 239.082493][ T30] [ 239.087987][ T30] [ 239.087987][ T30] Showing all locks held in the system: [ 239.097289][ T30] 1 lock held by khungtaskd/30: [ 239.102199][ T30] #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 239.112262][ T30] 2 locks held by kworker/u8:2/35: [ 239.118247][ T30] 2 locks held by kworker/u9:0/54: [ 239.123394][ T30] #0: ffff888062076948 ((wq_completion)nbd18-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.136029][ T30] #1: ffffc90000be7d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.151118][ T30] 3 locks held by kworker/0:2/945: [ 239.156390][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.167656][ T30] #1: ffffc90004027d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.180374][ T30] #2: ffff8880206b4240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 239.190563][ T30] 2 locks held by getty/4989: [ 239.197514][ T30] #0: ffff88802b18a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 239.207420][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 239.217623][ T30] 2 locks held by kworker/u9:2/5234: [ 239.222915][ T30] #0: ffff8880556ad948 ((wq_completion)nbd22-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.235192][ T30] #1: ffffc900038efd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.248079][ T30] 2 locks held by kworker/u9:3/5240: [ 239.253421][ T30] #0: ffff8880212bb148 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.267292][ T30] #1: ffffc9000394fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.279572][ T30] 2 locks held by kworker/u9:4/5243: [ 239.284919][ T30] #0: ffff88805fc4c148 ((wq_completion)nbd29-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.296456][ T30] #1: ffffc9000397fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.309924][ T30] 2 locks held by kworker/u9:5/5245: [ 239.316694][ T30] #0: ffff88802f1e6948 ((wq_completion)nbd30-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.328295][ T30] #1: ffffc9000399fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.340281][ T30] 2 locks held by kworker/u9:7/5250: [ 239.345653][ T30] #0: ffff8880123aa148 ((wq_completion)nbd19-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.358498][ T30] #1: ffffc900039dfd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.370411][ T30] 3 locks held by udevd/5284: [ 239.377214][ T30] #0: ffff88802107b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 239.386729][ T30] #1: ffff88801fecb810 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 239.397847][ T30] #2: ffff8880211c8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 239.407148][ T30] 3 locks held by udevd/5285: [ 239.412014][ T30] #0: ffff888020bc74c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 239.423312][ T30] #1: ffff88801fecb190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 239.433330][ T30] #2: ffff888021148180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 239.442393][ T30] 3 locks held by kworker/1:5/5287: [ 239.448047][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.460012][ T30] #1: ffffc90004147d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.471332][ T30] #2: ffffffff8e93d540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 239.482002][ T30] 2 locks held by kworker/1:7/5333: [ 239.489443][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 239.500555][ T30] #1: ffffc90004457d00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 239.511451][ T30] 3 locks held by udevd/5455: [ 239.516241][ T30] #0: ffff888020a5d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 239.527216][ T30] #1: ffff88801a7ae910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 239.536865][ T30] #2: ffff888021178180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 239.545988][ T30] 5 locks held by kworker/u8:15/8165: [ 239.551483][ T30] 2 locks held by kworker/u8:17/8169: [ 239.558548][ T30] 1 lock held by syz-executor/8954: [ 239.563942][ T30] #0: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 239.575278][ T30] 2 locks held by syz.1.1076/9143: [ 239.580428][ T30] #0: ffff888061e70808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 239.590831][ T30] #1: ffff8880649e4d18 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x54/0x2a0 [ 239.602174][ T30] [ 239.607465][ T30] ============================================= [ 239.607465][ T30] [ 239.637461][ T30] NMI backtrace for cpu 0 [ 239.641920][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 239.652464][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 239.662551][ T30] Call Trace: [ 239.665850][ T30] [ 239.668791][ T30] dump_stack_lvl+0x241/0x360 [ 239.673516][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.678858][ T30] ? __pfx__printk+0x10/0x10 [ 239.683483][ T30] ? vprintk_emit+0x631/0x770 [ 239.688177][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 239.693220][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 239.698182][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.703659][ T30] ? _printk+0xd5/0x120 [ 239.707834][ T30] ? __pfx__printk+0x10/0x10 [ 239.712443][ T30] ? __wake_up_klogd+0xcc/0x110 [ 239.717332][ T30] ? __pfx__printk+0x10/0x10 [ 239.722217][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 239.727279][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 239.733364][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 239.739363][ T30] watchdog+0xfee/0x1030 [ 239.743634][ T30] ? watchdog+0x1ea/0x1030 [ 239.748167][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.752870][ T30] kthread+0x2f0/0x390 [ 239.757052][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.761752][ T30] ? __pfx_kthread+0x10/0x10 [ 239.766383][ T30] ret_from_fork+0x4b/0x80 [ 239.770861][ T30] ? __pfx_kthread+0x10/0x10 [ 239.775483][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.780280][ T30] [ 239.784463][ T30] Sending NMI from CPU 0 to CPUs 1: [ 239.790417][ C1] NMI backtrace for cpu 1 [ 239.790432][ C1] CPU: 1 UID: 0 PID: 8165 Comm: kworker/u8:15 Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 239.790453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 239.790465][ C1] Workqueue: krdsd rds_connect_worker [ 239.790496][ C1] RIP: 0010:stack_trace_save+0xb7/0x1d0 [ 239.790521][ C1] Code: 80 3c 28 00 74 05 e8 88 a2 7b 00 48 c7 44 24 50 00 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 69 a2 7b 00 <4c> 89 64 24 40 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 [ 239.790537][ C1] RSP: 0018:ffffc90002fbf280 EFLAGS: 00000246 [ 239.790551][ C1] RAX: 1ffff920005f7e58 RBX: 0000000000000000 RCX: 0000000000000000 [ 239.790564][ C1] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc90002fbf2d0 [ 239.790576][ C1] RBP: ffffc90002fbf350 R08: ffff88802d194980 R09: 0000000000000000 [ 239.790589][ C1] R10: ffffc90002fbf360 R11: ffff888022441e00 R12: ffffc90002fbf360 [ 239.790602][ C1] R13: dffffc0000000000 R14: ffffc90002fbf2c0 R15: 1ffff920005f7e54 [ 239.790616][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 239.790631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.790643][ C1] CR2: 00007f61636e7ab8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 239.790659][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.790670][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.790681][ C1] Call Trace: [ 239.790688][ C1] [ 239.790695][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 239.790717][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 239.790743][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.790763][ C1] ? nmi_handle+0x2a/0x5a0 [ 239.790794][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 239.790817][ C1] ? nmi_handle+0x14f/0x5a0 [ 239.790833][ C1] ? nmi_handle+0x2a/0x5a0 [ 239.790851][ C1] ? stack_trace_save+0xb7/0x1d0 [ 239.790871][ C1] ? default_do_nmi+0x63/0x160 [ 239.790893][ C1] ? exc_nmi+0x123/0x1f0 [ 239.790912][ C1] ? end_repeat_nmi+0xf/0x53 [ 239.790941][ C1] ? stack_trace_save+0xb7/0x1d0 [ 239.790963][ C1] ? stack_trace_save+0xb7/0x1d0 [ 239.790985][ C1] ? stack_trace_save+0xb7/0x1d0 [ 239.791007][ C1] [ 239.791012][ C1] [ 239.791021][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 239.791046][ C1] ? stack_depot_save_flags+0x29/0x830 [ 239.791068][ C1] kasan_save_track+0x3f/0x80 [ 239.791124][ C1] __kasan_slab_alloc+0x66/0x80 [ 239.791148][ C1] ? inet_bind2_bucket_create+0x35/0x4a0 [ 239.791167][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 239.791189][ C1] inet_bind2_bucket_create+0x35/0x4a0 [ 239.791218][ C1] inet_csk_get_port+0xffe/0x1660 [ 239.791257][ C1] __inet_bind+0x613/0xbb0 [ 239.791285][ C1] inet_bind_sk+0x14d/0x260 [ 239.791309][ C1] ? __pfx_inet_bind_sk+0x10/0x10 [ 239.791331][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 239.791354][ C1] ? kernel_bind+0xb9/0x150 [ 239.791379][ C1] kernel_bind+0x102/0x150 [ 239.791403][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 239.791439][ C1] rds_tcp_conn_path_connect+0x5f1/0xbc0 [ 239.791467][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 239.791487][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 239.791514][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.791543][ C1] rds_connect_worker+0x1dd/0x2a0 [ 239.791569][ C1] ? process_scheduled_works+0x945/0x1830 [ 239.791591][ C1] process_scheduled_works+0xa2c/0x1830 [ 239.791631][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.791659][ C1] ? assign_work+0x364/0x3d0 [ 239.791684][ C1] worker_thread+0x86d/0xd40 [ 239.791716][ C1] ? __kthread_parkme+0x169/0x1d0 [ 239.791742][ C1] ? __pfx_worker_thread+0x10/0x10 [ 239.791766][ C1] kthread+0x2f0/0x390 [ 239.791792][ C1] ? __pfx_worker_thread+0x10/0x10 [ 239.791815][ C1] ? __pfx_kthread+0x10/0x10 [ 239.791841][ C1] ret_from_fork+0x4b/0x80 [ 239.791865][ C1] ? __pfx_kthread+0x10/0x10 [ 239.791890][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.791925][ C1] [ 239.814218][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 239.814242][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 239.814272][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 239.814286][ T30] Call Trace: [ 239.814297][ T30] [ 239.814308][ T30] dump_stack_lvl+0x241/0x360 [ 239.814355][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.814392][ T30] ? __pfx__printk+0x10/0x10 [ 239.814425][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.814467][ T30] ? vscnprintf+0x5d/0x90 [ 239.814497][ T30] panic+0x349/0x860 [ 239.814533][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 239.814563][ T30] ? __pfx_panic+0x10/0x10 [ 239.814593][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 239.814621][ T30] ? __irq_work_queue_local+0x137/0x410 [ 239.814656][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 239.814681][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 239.814709][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 239.814740][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 239.814772][ T30] watchdog+0x102d/0x1030 [ 239.814807][ T30] ? watchdog+0x1ea/0x1030 [ 239.814846][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.814879][ T30] kthread+0x2f0/0x390 [ 239.814914][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.814947][ T30] ? __pfx_kthread+0x10/0x10 [ 239.814992][ T30] ret_from_fork+0x4b/0x80 [ 239.815025][ T30] ? __pfx_kthread+0x10/0x10 [ 239.815061][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.815110][ T30] [ 239.819651][ T30] Kernel Offset: disabled [ 240.340542][ T30] Rebooting in 86400 seconds..