last executing test programs: 4.330384183s ago: executing program 2 (id=1101): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f00000003c0), &(0x7f0000000200)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 4.135507733s ago: executing program 2 (id=1103): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="b183256f5beff155f5484e4258f107b7c94551cd1ca55cc596ad3f448662f0", 0x1f}, {&(0x7f0000000480)="427f04f6a564696a2ecaaf03cb0b556e142d58985c13b3ecc9de76d4bd3531f258c404af95e7fe5436e340b2ed13219208d44ff552b53ae9592558dead42e0d1b9fdb86b9c63d79c6e469f220b5a515f0f838f8347df4793c676e2267469c864e8a71daa335c2e0749c48bd15027d546c32b4531c44f3d045ea83769afdb", 0x7e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)="a7c090721a9a9ac556afd9771af71255ea4d981df735416e9b367d9a9299a5b9d2c1b4d054e6c5d7bb78d3b8973780bf7fdd62", 0x33}, {&(0x7f0000000840)="fbced221586e938ddb2056e8980becd8375b115ab2174fc20483ffdb2dc2", 0x1e}], 0x2}}], 0x4, 0x0) 3.42207631s ago: executing program 1 (id=1110): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0xa, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="1100"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000040)="af7c78877a29d44ef2a5b6c56e6d62eadb") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x4}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3.194123183s ago: executing program 2 (id=1113): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f", 0x4e}, {&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42", 0x118}, {&(0x7f0000000f00)="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", 0x176}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e0", 0xc4}], 0x1}}], 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa8ade9ea3f675c1000c010000407cb3c5899e4ef5b501020000"], 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.254999997s ago: executing program 2 (id=1122): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "ddd060ce18a55e81e500f4c800655b9f39771fbac2eed77acba78a548820c4b11b739556fa96247659a4671414c56cac128a4fb9b45f967bb56f8a3383f7fcd57a110f0a9ab278e6e91a9a2bd582cd9c3fdaa805ec7bf705feaf3774d15a161315f2d92ab02ea7bb284583645ac81c1ba9e3f2b4d4271a09f4dc02c150a0d708b9caac85ed515c9345a5485336937d391fbd698425458ca61726e03ff8251eed7a175e27ac644ea79b4da615684abf08d6ff10148c9739a160dd299e4349203611ef8473798dcd2afd756d3e407aed0f79777b61d16ffbccabd721a1c863e6dc2f7a3a9dd097f54fe3b09d8de369bdef6500"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x60}}]}}]}, 0x14c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = socket(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r7, &(0x7f0000000180), &(0x7f0000000200)=@tcp6=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x48, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000e20000000000cc2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_remap\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0x42400) write$cgroup_subtree(r10, 0x0, 0x32600) 1.063480379s ago: executing program 4 (id=1123): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="b183256f5beff155f5484e4258f107b7c94551cd1ca55cc596ad3f448662f0", 0x1f}, {&(0x7f0000000480)="427f04f6a564696a2ecaaf03cb0b556e142d58985c13b3ecc9de76d4bd3531f258c404af95e7fe5436e340b2ed13219208d44ff552b53ae9592558dead42e0d1b9fdb86b9c63d79c6e469f220b5a515f0f838f8347df4793c676e2267469c864e8a71daa335c2e0749c48bd15027d546c32b4531c44f3d045ea83769afdb", 0x7e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)="a7c090721a9a9ac556afd9771af71255ea4d981df735416e9b367d9a9299a5b9d2c1b4d054e6c5d7bb78d3b8973780bf7fdd62", 0x33}, {&(0x7f0000000840)="fbced221586e938ddb2056e8980becd8375b115ab2174fc20483ffdb2dc2", 0x1e}], 0x2}}], 0x4, 0x0) 1.030894321s ago: executing program 1 (id=1125): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_PRIORITY={0x8, 0x6, 0x800}]}, 0x24}}, 0x0) 1.029573203s ago: executing program 2 (id=1126): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x13c, 0x0, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x113, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @random="90e488f9971a", {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x6, "2d5014b2109a"}, {0xdd, 0x48, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602f"}, {0xdd, 0x6, "4f2a899e94bc"}, {0xdd, 0x65, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642c"}, {0xdd, 0x6, "83534cd40fda"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x13c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2645], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 922.619781ms ago: executing program 0 (id=1128): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000302"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4900030007"], 0xd) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 921.549838ms ago: executing program 4 (id=1129): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611074000000000004000000000000049500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$inet6(0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={0x0, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 909.427992ms ago: executing program 1 (id=1130): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000}, 0x48) 856.647437ms ago: executing program 2 (id=1131): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 823.637782ms ago: executing program 3 (id=1132): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f", 0x4e}, {&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42", 0x118}, {&(0x7f0000000f00)="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", 0x176}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e0", 0xc4}], 0x1}}], 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa8ade9ea3f675c1000c010000407cb3c5899e4ef5b501020000"], 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 700.404687ms ago: executing program 4 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 646.635269ms ago: executing program 0 (id=1134): unshare(0xc040480) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180)=0x2000000, 0x4) 634.555534ms ago: executing program 3 (id=1135): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x7c, &(0x7f0000000080)=ANY=[@ANYBLOB="0503fe3d91b500100002000086dd60aac4e000462f00fe800000000000000000000000000000fe8000000000000000000000000000aa0420655800000000000008000000000086dd080088be0000000010"], 0x0) 545.844736ms ago: executing program 0 (id=1136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}, @printk={@lld}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000400)={0xff, {{0xa, 0x4e20, 0x3, @remote, 0x81}}, {{0xa, 0x4e24, 0x9, @loopback, 0x437}}}, 0x108) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x89b1, &(0x7f0000002540)={'batadv_slave_0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x2800}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @remote}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c37000000000000095000000000000000640489457649456518c6b6dc56974780ffa84c5d513278e9c9248dbfb82ccf54512255a0d8755ce8d5df963adb6126a8e4785888986964a87ad39282d0d778c9e2734fe3934845a7cb1625353f8434032d8ccf0771dc95908fa127200b22dbb7fa5e5637ced0c7cf6454f15c8b3e767ca732326201d58345b7bc3c0"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xb, &(0x7f0000000100)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = socket$inet(0xa, 0x0, 0x0) connect$inet(r12, 0x0, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 369.616762ms ago: executing program 1 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000001c0), 0x4) bind$inet(r2, 0x0, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0x8b0d, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x44, r4, 0x81d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {}, @device_b, @device_a, @random="b27bcb305b01"}, 0x0, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4400}]}, 0x44}}, 0x0) 365.501137ms ago: executing program 3 (id=1138): syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x300, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x33}, @in=@broadcast}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}}, 0x0) 364.144309ms ago: executing program 4 (id=1139): r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005b40)={0x58, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x58}}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="4dcdc7d96a760000000100050000", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = epoll_create1(0x0) r7 = socket$unix(0x1, 0x5, 0x0) close(r7) socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x7f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0xa0028000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) 265.62011ms ago: executing program 0 (id=1140): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="b183256f5beff155f5484e4258f107b7c94551cd1ca55cc596ad3f448662f0", 0x1f}, {&(0x7f0000000480)="427f04f6a564696a2ecaaf03cb0b556e142d58985c13b3ecc9de76d4bd3531f258c404af95e7fe5436e340b2ed13219208d44ff552b53ae9592558dead42e0d1b9fdb86b9c63d79c6e469f220b5a515f0f838f8347df4793c676e2267469c864e8a71daa335c2e0749c48bd15027d546c32b4531c44f3d045ea83769afdb", 0x7e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)="a7c090721a9a9ac556afd9771af71255ea4d981df735416e9b367d9a9299a5b9d2c1b4d054e6c5d7bb78d3b8973780bf7fdd62", 0x33}, {&(0x7f0000000840)="fbced221586e938ddb2056e8980becd8375b115ab2174fc20483ffdb2dc2", 0x1e}], 0x2}}], 0x4, 0x0) 256.698139ms ago: executing program 3 (id=1141): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_PRIORITY={0x8, 0x6, 0x800}]}, 0x24}}, 0x0) 203.631882ms ago: executing program 1 (id=1142): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x38, 0x9, [0x6, 0x4, 0x3, 0x10001, 0x6, 0x4, 0xffffff72, 0x3ff, 0x1fd]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078008000606000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x401, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) 166.8752ms ago: executing program 4 (id=1143): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xff6a, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) 134.256014ms ago: executing program 3 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 100.929207ms ago: executing program 0 (id=1145): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x0, 0x0) syz_emit_ethernet(0x307, &(0x7f0000003800)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[{}], @ipv6=@gre_packet={0xb, 0x6, "467fd2", 0x2cd, 0x2f, 0x1, @empty, @private2, {[@routing={0x6e, 0xa, 0x0, 0x2, 0x0, [@mcast2, @empty, @rand_addr=' \x01\x00', @empty, @local]}, @srh={0x0, 0xa, 0x4, 0x5, 0x81, 0x50, 0x97bc, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @loopback, @private0, @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3, [0xf800, 0x0]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1, 0x3, 0x7], "e4e4db27660a7fdd2ce1ffc6aeea0fb3d0aa0a54cd2e72e0f57e44ff9617d8897c1bc9802958f06c2bb79006a4dc200bb269f766c7f5591f1666a60738479295a99865009d01c5ed1746aceedb07ff98083b4b9c4f5e3203b6e5f0a864b58f13a94e0b0834521a9bc4245cccc3353bf9f2b102658c6a18d8d7fbbc6826c8332e813fd3b9e90040d19ed302f40cc1098a6cb15b123af326e097738fc5607049aa07"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x7ff, 0xa7, 0xffff], "6a59c2fb83c1dad66fd1f6a12f02f4e2ec31b0b881fc7ba515e277f4197ab45e14b5ec5e05aac1298434a952baca0fa87267c05c5af24be4b9a541a5127054812adffbb5f70e2e3faf20596f88d983872d230b7068796f9a3aa879f39b"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0x3e, 0x1, 0x0, 0x2, 0x2}, 0x1, {0xffffff9f}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40}, 0x2, {0x8, 0x0, 0x0, 0x14, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "534eb15e3b986bbc3864dfe997a792418a080669b93edc7aac00d89bc98406520592aa1260c9834ddfd260f66ed25e0236c0d99a2c60a3e44b17de57c393c0a876f7f754c78655b3c04bb4a6bd64a13f952781c01eee701cf7f1cbb4af59a8a5e17b83cb30b6bbfc5d4c40e7e7913d887258903ec31f5c9474c645c01b8a64fe4debcd810e75fcbdc537149b82b08b590796201a5e1883b8b537991ebf5d99d9ee50c37f6fd918edfb915f69e9c269e3d4bbe7aa6bddf97a012a49a27894877ac46e85d03a683ca99f3994"}}}}}}}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)={0x10c, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x69b8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x50}, {&(0x7f0000000400)=""/106, 0x32c}, {&(0x7f0000000740)=""/73, 0x22c}, {&(0x7f0000000200)=""/77, 0x63c}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x1e0}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 48.829462ms ago: executing program 3 (id=1146): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async, rerun: 32) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xff}, {0x6}]}) (async, rerun: 32) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) (async) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x8, [@const={0x3, 0x0, 0x0, 0xa, 0x4}, @datasec={0xb, 0x9, 0x0, 0xf, 0x1, [{0x2, 0x81, 0x4}, {0x1, 0x55, 0x400}, {0x2, 0x2, 0x8}, {0x2, 0x0, 0x101}, {0x4, 0x1, 0x1}, {0x2, 0xfff, 0x8}, {0x2, 0x1, 0x3}, {0x4, 0xfd, 0x5}, {0x2, 0x2f9, 0x3}], "81"}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000080)=""/60, 0xa8, 0x3c, 0x1, 0x3f}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffffc, 0x0, 0x8000, 0x2020, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x5}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028008000440000000040600034093"], 0xc4}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000ebff850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x1c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.188344ms ago: executing program 4 (id=1147): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000}, 0x48) 19.949765ms ago: executing program 0 (id=1148): r0 = socket$inet(0x2b, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x800078, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e2b, @private=0xa010101}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000006efa2df15d000a01010000000000000008010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f5c0000000c0a01080000000000000000010000000900020073797a3200000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c00028008000440000000090900010073797a3000000000140000001000010000000000000000000000000a"], 0xe0}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='ip6erspan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) r5 = accept4(r3, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x80, 0x80000) bind$bt_sco(r5, &(0x7f0000000280), 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 1 (id=1149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0xb, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4e, 0x1, 0x0, 0x0, {0x0, 0x64}}, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x3ff, 0x1, 0x78, 0xffff, 0x8, 0x3, 0x6, 0x3ca1, 0x7f, 0x9b, 0x4, 0x3, 0x1, 0x6, 0xfff, 0x0, 0xffffffff, 0x8, 0x1f, 0x9e66, 0x6, 0x80000001, 0x100, 0x79200000, 0x20, 0x10000, 0x2, 0x7, 0x10000, 0xa13, 0x2, 0x2, 0x5, 0x20, 0x3, 0x3, 0x8, 0x5, 0x80000001, 0x7e, 0x7, 0x3, 0xa0e, 0x1, 0x2, 0x0, 0x20, 0x1ed5e910, 0xfffffffe, 0x200, 0x7, 0x0, 0x4, 0x7, 0x20, 0xff7c, 0x81, 0xf64, 0xfffffffa, 0x2, 0x9, 0x2, 0x101, 0x81, 0x1, 0x3, 0x401, 0x2, 0x2, 0x68e, 0x641, 0x7, 0x5, 0x2, 0x3ff, 0x3, 0x101, 0x7a, 0x4, 0xd84, 0xffffff80, 0x6c, 0x5, 0x101, 0x5, 0x443d, 0xe18, 0x807, 0x5, 0x1, 0x1, 0x1, 0x3, 0x1, 0x6, 0x5, 0x1, 0x1, 0x939, 0x8, 0xff, 0x8, 0x4, 0x80000001, 0x6, 0xc0, 0x100, 0x80, 0x7fffffff, 0x80000001, 0x5b73, 0x3, 0x3f1, 0x7, 0x6, 0x81, 0x1, 0x1, 0x80, 0x8, 0x51c, 0x1f, 0xfffffffb, 0x7, 0x3, 0x3ff, 0x8000], "2c345ea0ff94d73bb672be81581860c04318ba8fe2038898c24b77df0c8ccbf69f2b5ed619ee93236123f507a22de88752e56d1d6f0b49375d0f27ce454517f1e9074f02bf8bbd40e29f9e66c3dcf6b1a2a5d987e73d08ec95d318fc56fca24446423fc50b1386bb8ecd74e045d6f659ea37136b1f669bca967a91094eb9eccc8d1ad461a0d4feff885b637edc0ff9bfbb4fa41eead7ceb421a42e484c01b015fe995ce55065a656389ceb8fe8bf892e66ae794ee302ab70eed2487b9152e85c1e87f9292c5773a2ade0cfdd1a4a546107966809f1d38c05c0deb84c15ecaf08f5445482cf"}}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r7], 0x20}}, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffff1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbb1fbbbb0800450000280000000000069078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1b000090780000"], 0x0) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): 50.781075][ T5079] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.161947][ T5079] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.840013][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.855800][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.864095][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.871744][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.882317][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.891314][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.891360][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.898864][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.906913][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.913536][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.927656][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.928954][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.936357][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.944183][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.949675][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.957223][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.964710][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.970154][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.977533][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.991163][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.993017][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.006509][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.014007][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.021720][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.029383][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.037816][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.045489][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.053493][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.061030][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.069702][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.500171][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 53.638685][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 53.684627][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 53.720014][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.728199][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.735724][ T5088] bridge_slave_0: entered allmulticast mode [ 53.743111][ T5088] bridge_slave_0: entered promiscuous mode [ 53.806208][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.813615][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.820743][ T5088] bridge_slave_1: entered allmulticast mode [ 53.827949][ T5088] bridge_slave_1: entered promiscuous mode [ 53.907194][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 53.939293][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.967239][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.976830][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.984464][ T5091] bridge_slave_0: entered allmulticast mode [ 53.991179][ T5091] bridge_slave_0: entered promiscuous mode [ 53.999790][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.006998][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.014236][ T5091] bridge_slave_1: entered allmulticast mode [ 54.020925][ T5091] bridge_slave_1: entered promiscuous mode [ 54.030249][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.107754][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.115055][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.122204][ T5090] bridge_slave_0: entered allmulticast mode [ 54.129581][ T5090] bridge_slave_0: entered promiscuous mode [ 54.139348][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 54.165110][ T5088] team0: Port device team_slave_0 added [ 54.171373][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.179230][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.187006][ T5090] bridge_slave_1: entered allmulticast mode [ 54.194520][ T5090] bridge_slave_1: entered promiscuous mode [ 54.211764][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.225115][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.237842][ T5088] team0: Port device team_slave_1 added [ 54.301137][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.337283][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.344632][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.352100][ T5101] bridge_slave_0: entered allmulticast mode [ 54.359382][ T5101] bridge_slave_0: entered promiscuous mode [ 54.380974][ T5091] team0: Port device team_slave_0 added [ 54.400141][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.424956][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.432127][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.439713][ T5101] bridge_slave_1: entered allmulticast mode [ 54.447210][ T5101] bridge_slave_1: entered promiscuous mode [ 54.455726][ T5091] team0: Port device team_slave_1 added [ 54.475115][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.482085][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.508454][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.575398][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.582356][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.608492][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.625712][ T5090] team0: Port device team_slave_0 added [ 54.635012][ T5090] team0: Port device team_slave_1 added [ 54.668009][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.675124][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.701396][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.714960][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.728724][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.765900][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.773003][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.781121][ T5093] bridge_slave_0: entered allmulticast mode [ 54.788287][ T5093] bridge_slave_0: entered promiscuous mode [ 54.797820][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.805354][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.831494][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.861993][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.869020][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.895027][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.908028][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.915452][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.941465][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.952759][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.960360][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.968254][ T5093] bridge_slave_1: entered allmulticast mode [ 54.975282][ T5093] bridge_slave_1: entered promiscuous mode [ 55.001919][ T5101] team0: Port device team_slave_0 added [ 55.011127][ T5101] team0: Port device team_slave_1 added [ 55.044187][ T5092] Bluetooth: hci0: command tx timeout [ 55.057952][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.071710][ T5088] hsr_slave_0: entered promiscuous mode [ 55.079071][ T5088] hsr_slave_1: entered promiscuous mode [ 55.109534][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.116994][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.123443][ T5097] Bluetooth: hci4: command tx timeout [ 55.143693][ T53] Bluetooth: hci3: command tx timeout [ 55.148674][ T5099] Bluetooth: hci1: command tx timeout [ 55.154650][ T5092] Bluetooth: hci2: command tx timeout [ 55.160783][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.199191][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.230513][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.240896][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.267593][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.281548][ T5091] hsr_slave_0: entered promiscuous mode [ 55.288254][ T5091] hsr_slave_1: entered promiscuous mode [ 55.294782][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.302500][ T5091] Cannot create hsr debugfs directory [ 55.335865][ T5090] hsr_slave_0: entered promiscuous mode [ 55.342135][ T5090] hsr_slave_1: entered promiscuous mode [ 55.348383][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.356282][ T5090] Cannot create hsr debugfs directory [ 55.373008][ T5093] team0: Port device team_slave_0 added [ 55.404374][ T5093] team0: Port device team_slave_1 added [ 55.435238][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.442198][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.468560][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.517483][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.525274][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.551278][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.588679][ T5101] hsr_slave_0: entered promiscuous mode [ 55.595341][ T5101] hsr_slave_1: entered promiscuous mode [ 55.601493][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.609467][ T5101] Cannot create hsr debugfs directory [ 55.788207][ T5093] hsr_slave_0: entered promiscuous mode [ 55.796358][ T5093] hsr_slave_1: entered promiscuous mode [ 55.802401][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.810062][ T5093] Cannot create hsr debugfs directory [ 56.024210][ T5088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.038389][ T5088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.065821][ T5088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.080131][ T5088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.179937][ T5091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.190999][ T5091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.200879][ T5091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.239208][ T5091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.288520][ T5090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.316885][ T5090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.343848][ T5090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.355028][ T5090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.420848][ T5101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.431931][ T5101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.447264][ T5101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.462424][ T5101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.589864][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.602122][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.631334][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.641896][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.691282][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.765919][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.779863][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.827753][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.835125][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.847322][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.854616][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.865991][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.901467][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.921571][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.950370][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.957507][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.990538][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.005991][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.013167][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.058917][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.066048][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.101039][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.112576][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.119778][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.127454][ T5092] Bluetooth: hci0: command tx timeout [ 57.204171][ T5092] Bluetooth: hci2: command tx timeout [ 57.209627][ T5092] Bluetooth: hci1: command tx timeout [ 57.213152][ T53] Bluetooth: hci3: command tx timeout [ 57.216635][ T5092] Bluetooth: hci4: command tx timeout [ 57.248402][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.255531][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.266616][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.273785][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.312044][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.342616][ T5090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.358684][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.382479][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.469324][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.499240][ T5101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.544740][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.552002][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.565558][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.572720][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.585675][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.795516][ T5088] veth0_vlan: entered promiscuous mode [ 57.840968][ T5088] veth1_vlan: entered promiscuous mode [ 57.926891][ T5088] veth0_macvtap: entered promiscuous mode [ 57.951186][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.972094][ T5088] veth1_macvtap: entered promiscuous mode [ 58.007789][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.046128][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.088065][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.124554][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.156363][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.167989][ T5088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.177407][ T5088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.187311][ T5088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.199049][ T5088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.232784][ T5091] veth0_vlan: entered promiscuous mode [ 58.311359][ T5091] veth1_vlan: entered promiscuous mode [ 58.340469][ T5093] veth0_vlan: entered promiscuous mode [ 58.378807][ T5101] veth0_vlan: entered promiscuous mode [ 58.431664][ T5101] veth1_vlan: entered promiscuous mode [ 58.440231][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.450058][ T5093] veth1_vlan: entered promiscuous mode [ 58.456389][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.508543][ T5090] veth0_vlan: entered promiscuous mode [ 58.550324][ T5093] veth0_macvtap: entered promiscuous mode [ 58.573926][ T5093] veth1_macvtap: entered promiscuous mode [ 58.594196][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.596337][ T5090] veth1_vlan: entered promiscuous mode [ 58.602074][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.656413][ T5101] veth0_macvtap: entered promiscuous mode [ 58.668552][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.682833][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.694672][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.702696][ T5091] veth0_macvtap: entered promiscuous mode [ 58.730494][ T5101] veth1_macvtap: entered promiscuous mode [ 58.747527][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.765151][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.780734][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.814097][ T5091] veth1_macvtap: entered promiscuous mode [ 58.836316][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.848192][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.862484][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.871366][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.902523][ T5090] veth0_macvtap: entered promiscuous mode [ 58.939315][ T5090] veth1_macvtap: entered promiscuous mode [ 58.984574][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.997921][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.008787][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.019463][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.031581][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.102070][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.113875][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.125286][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.135811][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.147160][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.157958][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.170160][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.180780][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.191484][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.203213][ T5092] Bluetooth: hci0: command tx timeout [ 59.209292][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.220472][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.232845][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.256637][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.268165][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.280047][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.283269][ T5092] Bluetooth: hci4: command tx timeout [ 59.294196][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.296021][ T5099] Bluetooth: hci3: command tx timeout [ 59.305945][ T53] Bluetooth: hci1: command tx timeout [ 59.305986][ T53] Bluetooth: hci2: command tx timeout [ 59.312263][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.332990][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.343570][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.354859][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.367347][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.384412][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.395015][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.405735][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.416645][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.427412][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.438037][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.449195][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.460850][ T5090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.469795][ T5090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.478753][ T5090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.488756][ T5090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510952][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.515669][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.529519][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.532636][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.540945][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.558416][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.569856][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.580500][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.590355][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.600984][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.613439][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.634173][ T5091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.643387][ T5091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.652135][ T5091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.662062][ T5091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.681187][ T5101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.691876][ T5101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.701110][ T5101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711382][ T5101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.808187][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.817952][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.878020][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.898819][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.991544][ T2398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.012927][ T2398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.094491][ T5185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.096076][ T2398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.129116][ T2398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.255348][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.298659][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.399033][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.427563][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.467950][ T2398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.475262][ T5193] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.488476][ T2398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.540210][ T5193] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.897795][ T5215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.283186][ T5099] Bluetooth: hci0: command tx timeout [ 61.363575][ T5092] Bluetooth: hci1: command tx timeout [ 61.369147][ T53] Bluetooth: hci3: command tx timeout [ 61.369150][ T5097] Bluetooth: hci4: command tx timeout [ 61.380592][ T5099] Bluetooth: hci2: command tx timeout [ 61.467680][ T5237] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 61.802784][ T5248] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 61.821753][ T5248] macsec1: entered promiscuous mode [ 61.842966][ T5248] macsec1: entered allmulticast mode [ 61.851167][ T5248] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 61.871553][ T5248] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 61.883174][ T5248] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 61.993772][ T5249] netlink: 766 bytes leftover after parsing attributes in process `syz.3.26'. [ 62.024091][ T5252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 62.874549][ T5288] netlink: 56 bytes leftover after parsing attributes in process `syz.2.38'. [ 62.887371][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 63.019807][ T5298] team0: entered promiscuous mode [ 63.039192][ T5298] team_slave_0: entered promiscuous mode [ 63.071018][ T5298] team_slave_1: entered promiscuous mode [ 63.142544][ T5293] team_slave_0: entered allmulticast mode [ 63.199063][ T5293] team0: Port device team_slave_0 removed [ 63.311261][ T5292] team0: left promiscuous mode [ 63.343108][ T5292] team_slave_1: left promiscuous mode [ 64.169269][ T5329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'. [ 64.721708][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 64.775615][ T5355] team0: entered promiscuous mode [ 64.788587][ T5355] team_slave_1: entered promiscuous mode [ 64.826862][ T5353] team0: left promiscuous mode [ 64.849023][ T5353] team_slave_1: left promiscuous mode [ 65.468694][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 65.549411][ T5387] team0: entered promiscuous mode [ 65.583336][ T5387] team_slave_0: entered promiscuous mode [ 65.623363][ T5387] team_slave_1: entered promiscuous mode [ 65.648670][ T5387] team_slave_0: entered allmulticast mode [ 65.714413][ T5387] team0: Port device team_slave_0 removed [ 65.729620][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 65.746926][ T5386] team0: left promiscuous mode [ 65.753433][ T5386] team_slave_1: left promiscuous mode [ 66.129309][ T5408] netlink: 84 bytes leftover after parsing attributes in process `syz.3.77'. [ 66.224355][ T5411] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 66.253472][ T5411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.78'. [ 66.270684][ T5411] bridge0: port 3(batadv0) entered blocking state [ 66.278241][ T5411] bridge0: port 3(batadv0) entered disabled state [ 66.291367][ T5411] batadv0: entered allmulticast mode [ 66.299079][ T5411] batadv0: entered promiscuous mode [ 66.313260][ T5411] bridge0: port 3(batadv0) entered blocking state [ 66.320643][ T5411] bridge0: port 3(batadv0) entered forwarding state [ 66.383321][ T5416] team0: entered promiscuous mode [ 66.395864][ T5416] team_slave_1: entered promiscuous mode [ 66.437660][ T5415] team0: left promiscuous mode [ 66.453172][ T5415] team_slave_1: left promiscuous mode [ 66.672015][ T5427] team0: entered promiscuous mode [ 66.692259][ T5427] team_slave_1: entered promiscuous mode [ 66.716387][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 66.726529][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 66.744829][ T5426] team0: left promiscuous mode [ 66.757893][ T5426] team_slave_1: left promiscuous mode [ 67.111561][ T5446] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 67.130447][ T5446] __nla_validate_parse: 5 callbacks suppressed [ 67.130465][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 67.252783][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 67.282355][ T5451] team0: entered promiscuous mode [ 67.302329][ T5451] team_slave_0: entered promiscuous mode [ 67.317375][ T5451] team_slave_1: entered promiscuous mode [ 67.339724][ T5451] team_slave_0: entered allmulticast mode [ 67.371715][ T5451] team0: Port device team_slave_0 removed [ 67.520352][ T5450] team0: left promiscuous mode [ 67.548507][ T5450] team_slave_1: left promiscuous mode [ 67.886275][ T5480] Cannot find set identified by id 0 to match [ 67.948342][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 68.064595][ T5475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'. [ 68.086648][ T5490] netlink: 'syz.2.108': attribute type 2 has an invalid length. [ 68.143346][ T5490] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 68.354018][ T5497] syz.4.111 uses obsolete (PF_INET,SOCK_PACKET) [ 68.499498][ T5501] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 68.513751][ T5501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.113'. [ 68.525701][ T5501] bridge0: port 3(batadv0) entered blocking state [ 68.532347][ T5501] bridge0: port 3(batadv0) entered disabled state [ 68.539123][ T5501] batadv0: entered allmulticast mode [ 68.556853][ T5501] batadv0: entered promiscuous mode [ 68.569460][ T5501] bridge0: port 3(batadv0) entered blocking state [ 68.576103][ T5501] bridge0: port 3(batadv0) entered forwarding state [ 68.660092][ T5507] Zero length message leads to an empty skb [ 68.766867][ T2869] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 68.776625][ T2869] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 69.078541][ T5526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'. [ 69.175224][ T5519] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 69.274133][ T5519] Bluetooth: MGMT ver 1.22 [ 69.491204][ T5542] team0: entered promiscuous mode [ 69.501309][ T5542] team_slave_1: entered promiscuous mode [ 69.516537][ T5533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 69.724040][ T5541] team0: left promiscuous mode [ 69.729321][ T5541] team_slave_1: left promiscuous mode [ 70.195941][ T5091] syz-executor (5091) used greatest stack depth: 17688 bytes left [ 70.266485][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.385119][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.481923][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.541244][ T5570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 70.571832][ T5575] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 70.628530][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.709771][ T5573] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 70.757732][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 70.772474][ T5584] netlink: 'syz.4.144': attribute type 8 has an invalid length. [ 70.802681][ T5584] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 70.849630][ T5589] team0: entered promiscuous mode [ 70.860481][ T5589] team_slave_0: entered promiscuous mode [ 70.887467][ T5589] team_slave_1: entered promiscuous mode [ 70.919709][ T5582] team_slave_0: entered allmulticast mode [ 71.012369][ T5582] team0: Port device team_slave_0 removed [ 71.103968][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.116007][ T5580] team0: left promiscuous mode [ 71.120889][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.130170][ T5580] team_slave_1: left promiscuous mode [ 71.135810][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.160930][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.174897][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.200844][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.300642][ T35] batadv0: left allmulticast mode [ 71.343272][ T35] batadv0: left promiscuous mode [ 71.363402][ T5097] Bluetooth: hci0: command 0x0401 tx timeout [ 71.365195][ T5099] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 71.385576][ T35] bridge0: port 3(batadv0) entered disabled state [ 71.469989][ T5602] netlink: 'syz.2.148': attribute type 11 has an invalid length. [ 71.483460][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 71.504745][ T35] bridge_slave_1: left allmulticast mode [ 71.519814][ T35] bridge_slave_1: left promiscuous mode [ 71.543604][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.575599][ T35] bridge_slave_0: left allmulticast mode [ 71.584686][ T35] bridge_slave_0: left promiscuous mode [ 71.599374][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.697206][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.714201][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.209007][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.231487][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.251656][ T35] bond0 (unregistering): Released all slaves [ 72.292913][ T5614] ip6gretap0: entered promiscuous mode [ 72.305843][ T5614] vlan2: entered promiscuous mode [ 72.334705][ T5614] vlan2: entered allmulticast mode [ 72.346571][ T5614] ip6gretap0: entered allmulticast mode [ 72.362784][ T5614] ip6gretap0: left allmulticast mode [ 72.372315][ T5614] ip6gretap0: left promiscuous mode [ 73.283219][ T5099] Bluetooth: hci3: command tx timeout [ 73.306810][ T5652] netlink: 'syz.2.160': attribute type 2 has an invalid length. [ 73.334129][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 73.427529][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.440827][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.451311][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.492601][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.503559][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.511745][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.643285][ T35] hsr_slave_0: left promiscuous mode [ 73.660921][ T35] hsr_slave_1: left promiscuous mode [ 73.667371][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.684693][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.703707][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.718110][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.792351][ T35] veth1_macvtap: left promiscuous mode [ 73.809181][ T35] veth0_macvtap: left promiscuous mode [ 73.820101][ T35] veth1_vlan: left promiscuous mode [ 73.831553][ T35] veth0_vlan: left promiscuous mode [ 74.456166][ T5691] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 74.576343][ T35] team0 (unregistering): Port device team_slave_1 removed [ 74.966556][ T5672] macvlan2: entered promiscuous mode [ 74.973554][ T5672] veth1_to_bond: entered promiscuous mode [ 74.987850][ T5672] team0: Port device macvlan2 added [ 75.299507][ T5713] netlink: set zone limit has 8 unknown bytes [ 75.363149][ T5097] Bluetooth: hci3: command tx timeout [ 75.470707][ T5595] chnl_net:caif_netlink_parms(): no params data found [ 75.603749][ T5097] Bluetooth: hci0: command tx timeout [ 75.670410][ T5725] netlink: 76 bytes leftover after parsing attributes in process `syz.1.180'. [ 76.081244][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.103760][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.133563][ T5595] bridge_slave_0: entered allmulticast mode [ 76.140867][ T5595] bridge_slave_0: entered promiscuous mode [ 76.211141][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.225830][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.240148][ T5595] bridge_slave_1: entered allmulticast mode [ 76.265147][ T5595] bridge_slave_1: entered promiscuous mode [ 76.471584][ T5667] chnl_net:caif_netlink_parms(): no params data found [ 76.577903][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.589960][ T5762] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 76.659536][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.701876][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.815493][ T932] cfg80211: failed to load regulatory.db [ 76.838865][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.894471][ T5770] xt_TCPMSS: Only works on TCP SYN packets [ 76.914840][ T5762] netlink: 96 bytes leftover after parsing attributes in process `syz.1.186'. [ 76.920580][ T5770] rdma_op ffff888011c611f0 conn xmit_rdma 0000000000000000 [ 77.010605][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.077156][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 77.107155][ T5595] team0: Port device team_slave_0 added [ 77.122786][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 77.189229][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.227368][ T5595] team0: Port device team_slave_1 added [ 77.318706][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 77.333355][ T5774] netlink: 'syz.2.191': attribute type 25 has an invalid length. [ 77.428370][ T5774] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.437769][ T5774] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.447119][ T5774] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.455878][ T5774] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.472964][ T5097] Bluetooth: hci3: command tx timeout [ 77.684083][ T5097] Bluetooth: hci0: command tx timeout [ 77.709238][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.745661][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.840011][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.874770][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.882188][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.910163][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.925182][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.934159][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.942142][ T5667] bridge_slave_0: entered allmulticast mode [ 77.950670][ T5667] bridge_slave_0: entered promiscuous mode [ 77.965561][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.988441][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.997225][ T5667] bridge_slave_1: entered allmulticast mode [ 78.006551][ T5667] bridge_slave_1: entered promiscuous mode [ 78.478916][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.507791][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.810103][ T5595] hsr_slave_0: entered promiscuous mode [ 78.817381][ T5595] hsr_slave_1: entered promiscuous mode [ 78.843675][ T5595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.851279][ T5595] Cannot create hsr debugfs directory [ 78.858376][ T35] bridge_slave_1: left allmulticast mode [ 78.876268][ T35] bridge_slave_1: left promiscuous mode [ 78.882060][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.967197][ T35] bridge_slave_0: left allmulticast mode [ 78.972895][ T35] bridge_slave_0: left promiscuous mode [ 78.980420][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.992820][ T5846] netlink: 'syz.2.204': attribute type 19 has an invalid length. [ 79.360653][ T5860] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 79.530111][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.537896][ T5097] Bluetooth: hci3: command tx timeout [ 79.548747][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.559963][ T35] bond0 (unregistering): Released all slaves [ 79.591113][ T5667] team0: Port device team_slave_0 added [ 79.605492][ T5667] team0: Port device team_slave_1 added [ 79.763189][ T5097] Bluetooth: hci0: command tx timeout [ 79.850565][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 79.867047][ T5864] netlink: 'syz.4.210': attribute type 25 has an invalid length. [ 79.879130][ T5864] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.888568][ T5864] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.897953][ T5864] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.906849][ T5864] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.932215][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.945465][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.972467][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.027744][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.042289][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.069111][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.306924][ T5667] hsr_slave_0: entered promiscuous mode [ 80.324954][ T5667] hsr_slave_1: entered promiscuous mode [ 80.337581][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.346947][ T5667] Cannot create hsr debugfs directory [ 80.399710][ T5876] team_slave_1: entered promiscuous mode [ 80.407309][ T5876] vlan2: entered promiscuous mode [ 80.412705][ T5876] team0: entered promiscuous mode [ 80.419834][ T5876] vlan2: entered allmulticast mode [ 80.425624][ T5876] team0: entered allmulticast mode [ 80.431142][ T5876] team_slave_1: entered allmulticast mode [ 80.516280][ T35] hsr_slave_0: left promiscuous mode [ 80.532257][ T35] hsr_slave_1: left promiscuous mode [ 80.628088][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.644155][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.666059][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.683780][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.764629][ T35] veth1_macvtap: left promiscuous mode [ 80.770206][ T35] veth0_macvtap: left promiscuous mode [ 80.792996][ T5896] netlink: 56 bytes leftover after parsing attributes in process `syz.1.216'. [ 80.793792][ T35] veth1_vlan: left promiscuous mode [ 80.830000][ T35] veth0_vlan: left promiscuous mode [ 80.831645][ T5898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.931621][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.024957][ T5898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.134101][ T5904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.218'. [ 81.844469][ T5099] Bluetooth: hci0: command tx timeout [ 81.961058][ T35] team0 (unregistering): Port device team_slave_1 removed [ 82.360848][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 82.398717][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.225'. [ 82.592988][ T5935] netlink: 56 bytes leftover after parsing attributes in process `syz.1.227'. [ 83.628897][ T5972] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 83.637006][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 83.942639][ T5977] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 84.350526][ T6001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'. [ 85.677314][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.706719][ T6011] netlink: 'syz.4.248': attribute type 2 has an invalid length. [ 85.726005][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 85.737872][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.804918][ T6015] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.883298][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.995766][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.356790][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 86.382329][ T5667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.510871][ T5667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.523979][ T5667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.682980][ T5667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.724778][ T6058] netlink: 'syz.4.262': attribute type 2 has an invalid length. [ 86.738870][ T6058] netlink: 'syz.4.262': attribute type 3 has an invalid length. [ 86.741281][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.126420][ T6080] netlink: 'syz.2.264': attribute type 21 has an invalid length. [ 88.200664][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.267746][ T6086] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 88.303889][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 88.346941][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.354133][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.436867][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444061][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.582971][ T6102] Cannot find add_set index 0 as target [ 88.618237][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.674653][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.752315][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.798334][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.805642][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.875962][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.883152][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.175462][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.310354][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.273'. [ 89.461708][ T5595] veth0_vlan: entered promiscuous mode [ 89.688124][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.739332][ T5595] veth1_vlan: entered promiscuous mode [ 89.925203][ T5595] veth0_macvtap: entered promiscuous mode [ 89.944158][ T6119] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 90.022615][ T5595] veth1_macvtap: entered promiscuous mode [ 90.067072][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 90.149141][ T5667] veth0_vlan: entered promiscuous mode [ 90.184258][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.229420][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.273388][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.302798][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.334759][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.370118][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.415167][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.565748][ T5667] veth1_vlan: entered promiscuous mode [ 90.618398][ T6192] netlink: 56 bytes leftover after parsing attributes in process `syz.2.283'. [ 90.621782][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.670345][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.699227][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.730242][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.758402][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.779225][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.820600][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.851416][ T5595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893278][ T5595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.918168][ T5595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.944928][ T5595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.999295][ T6204] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 91.144972][ T29] audit: type=1800 audit(1719354005.766:2): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.286" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 91.308799][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 91.331241][ T5667] veth0_macvtap: entered promiscuous mode [ 91.415047][ T6226] team0: entered promiscuous mode [ 91.421513][ T6226] team_slave_1: entered promiscuous mode [ 91.445950][ T6228] @ÿ: renamed from veth0_vlan (while UP) [ 91.494961][ T5667] veth1_macvtap: entered promiscuous mode [ 91.531939][ T6224] team0: left promiscuous mode [ 91.533298][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.543599][ T6224] team_slave_1: left promiscuous mode [ 91.558085][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.697701][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.737118][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.774437][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.808282][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.844714][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.873130][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.896817][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.915398][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.938897][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.979445][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.979818][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.997563][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.020234][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.042142][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.049851][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.072614][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.096339][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.117621][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.134051][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.154443][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.196655][ T5667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.253088][ T5667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.261826][ T5667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.329918][ T5667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.716721][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.747257][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 92.766829][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.865305][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 92.895432][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.912703][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.931021][ T6301] team0: entered promiscuous mode [ 92.957270][ T6301] team_slave_0: entered promiscuous mode [ 93.005906][ T6301] team_slave_1: entered promiscuous mode [ 93.040546][ T6303] team_slave_0: entered allmulticast mode [ 93.108684][ T6303] team0: Port device team_slave_0 removed [ 93.134651][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 93.194902][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 93.211336][ T6297] team0: left promiscuous mode [ 93.217805][ T6297] team_slave_1: left promiscuous mode [ 93.254207][ T6310] team_slave_0: entered promiscuous mode [ 93.270193][ T6310] team_slave_0: entered allmulticast mode [ 93.394487][ T6310] team0: Port device team_slave_0 removed [ 93.452796][ T6312] team0: entered promiscuous mode [ 93.463161][ T6312] team_slave_0: entered promiscuous mode [ 93.481384][ T6312] team_slave_1: entered promiscuous mode [ 93.554467][ T6317] team_slave_0: entered allmulticast mode [ 93.624788][ T6317] team0: Port device team_slave_0 removed [ 93.651117][ T6311] team0: left promiscuous mode [ 93.692429][ T6311] team_slave_1: left promiscuous mode [ 93.708029][ T6331] netlink: 56 bytes leftover after parsing attributes in process `syz.3.311'. [ 94.399831][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'. [ 94.560740][ T6369] ip6tnl0: entered promiscuous mode [ 94.597184][ T6369] ip6tnl0: entered allmulticast mode [ 94.768598][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 94.858599][ T6383] team0: entered promiscuous mode [ 94.889756][ T6383] team_slave_1: entered promiscuous mode [ 95.279706][ T6382] team0: left promiscuous mode [ 95.289839][ T6382] team_slave_1: left promiscuous mode [ 95.552746][ T6415] netlink: 'syz.1.333': attribute type 2 has an invalid length. [ 95.618765][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 96.081552][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 96.510832][ T5094] IPVS: starting estimator thread 0... [ 96.552901][ T29] audit: type=1804 audit(1719354011.196:3): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.344" name="/root/syzkaller.X63vAO/91/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 96.610970][ T29] audit: type=1800 audit(1719354011.256:4): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.344" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 96.633295][ T6459] IPVS: using max 19 ests per chain, 45600 per kthread [ 96.883863][ T6481] netlink: 'syz.3.351': attribute type 2 has an invalid length. [ 96.904415][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 97.397270][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 97.429219][ T6509] team0: entered promiscuous mode [ 97.441533][ T6509] team_slave_1: entered promiscuous mode [ 97.471597][ T6505] team0: left promiscuous mode [ 97.493145][ T6505] team_slave_1: left promiscuous mode [ 97.518234][ T6516] lo speed is unknown, defaulting to 1000 [ 97.555624][ T6518] netlink: 'syz.0.362': attribute type 7 has an invalid length. [ 97.561621][ T6516] lo speed is unknown, defaulting to 1000 [ 97.574498][ T6518] netlink: 'syz.0.362': attribute type 8 has an invalid length. [ 97.612264][ T6518] netlink: 224 bytes leftover after parsing attributes in process `syz.0.362'. [ 97.622256][ T6516] lo speed is unknown, defaulting to 1000 [ 97.735378][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.089431][ T6516] infiniband syz0: set active [ 98.098328][ T6516] infiniband syz0: added lo [ 98.102895][ T932] lo speed is unknown, defaulting to 1000 [ 98.167973][ T6516] RDS/IB: syz0: added [ 98.173822][ T6516] smc: adding ib device syz0 with port count 1 [ 98.180479][ T6516] smc: ib device syz0 port 1 has pnetid [ 98.192437][ T929] lo speed is unknown, defaulting to 1000 [ 98.230180][ T6516] lo speed is unknown, defaulting to 1000 [ 98.330654][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 98.730194][ T6516] lo speed is unknown, defaulting to 1000 [ 98.928452][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 98.970920][ T6556] team0: entered promiscuous mode [ 98.983522][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.992029][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.000217][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.011984][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.017345][ T6556] team_slave_1: entered promiscuous mode [ 99.034193][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.042726][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.101011][ T6554] team0: left promiscuous mode [ 99.118888][ T6554] team_slave_1: left promiscuous mode [ 99.177437][ T2869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.289674][ T2869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.306865][ T6516] lo speed is unknown, defaulting to 1000 [ 99.453696][ T2869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.482215][ T6570] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.491538][ T6570] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.500778][ T6570] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.509593][ T6570] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.548035][ T6571] netlink: 33 bytes leftover after parsing attributes in process `syz.4.377'. [ 99.638272][ T2869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.691058][ T6577] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 99.767536][ T6516] lo speed is unknown, defaulting to 1000 [ 99.995369][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 100.091106][ T2869] bridge_slave_1: left allmulticast mode [ 100.099709][ T2869] bridge_slave_1: left promiscuous mode [ 100.110030][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.114033][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 100.136425][ T2869] bridge_slave_0: left allmulticast mode [ 100.142230][ T2869] bridge_slave_0: left promiscuous mode [ 100.148855][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.509227][ T2869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.520610][ T2869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.535805][ T2869] bond0 (unregistering): Released all slaves [ 100.549818][ T6593] team0: entered promiscuous mode [ 100.557322][ T6593] team_slave_1: entered promiscuous mode [ 100.565249][ T6557] lo speed is unknown, defaulting to 1000 [ 100.578642][ T6591] team0: left promiscuous mode [ 100.596458][ T6591] team_slave_1: left promiscuous mode [ 100.690925][ T6597] team0: Device wlan1 is up. Set it down before adding it as a team port [ 101.053970][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 101.092259][ T6516] lo speed is unknown, defaulting to 1000 [ 101.134057][ T5099] Bluetooth: hci0: command tx timeout [ 101.632599][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 101.937186][ T6643] team0: entered promiscuous mode [ 101.951994][ T6643] team_slave_1: entered promiscuous mode [ 101.996328][ T6639] team0: left promiscuous mode [ 102.010858][ T6639] team_slave_1: left promiscuous mode [ 102.098028][ T2869] hsr_slave_0: left promiscuous mode [ 102.137151][ T2869] hsr_slave_1: left promiscuous mode [ 102.202205][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.220360][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.252845][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.278883][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 102.285421][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.322410][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 102.371131][ T2869] veth1_macvtap: left promiscuous mode [ 102.404457][ T2869] veth0_macvtap: left promiscuous mode [ 102.410136][ T2869] veth1_vlan: left promiscuous mode [ 102.432377][ T2869] veth0_vlan: left promiscuous mode [ 102.977463][ T2869] team0 (unregistering): Port device team_slave_1 removed [ 103.203221][ T5099] Bluetooth: hci0: command 0x041b tx timeout [ 103.337472][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 103.362224][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 103.445409][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 103.464503][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 103.505308][ T6689] team0: entered promiscuous mode [ 103.516247][ T6689] team_slave_1: entered promiscuous mode [ 103.622281][ T6688] team0: left promiscuous mode [ 103.633415][ T6688] team_slave_1: left promiscuous mode [ 103.863682][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.871389][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.879235][ T6557] bridge_slave_0: entered allmulticast mode [ 103.964099][ T6557] bridge_slave_0: entered promiscuous mode [ 103.978674][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.992120][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.001035][ T6557] bridge_slave_1: entered allmulticast mode [ 104.015456][ T6557] bridge_slave_1: entered promiscuous mode [ 104.207939][ T6720] netlink: 'syz.1.416': attribute type 11 has an invalid length. [ 104.214883][ T6724] smc: removing ib device syz0 [ 104.221435][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 104.237582][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.308406][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.350203][ T6729] netlink: 'syz.4.417': attribute type 2 has an invalid length. [ 104.370736][ T6729] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 104.523645][ T6733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.547888][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 104.926002][ T6557] team0: Port device team_slave_0 added [ 104.945590][ T6738] team0: entered promiscuous mode [ 104.956953][ T6738] team_slave_1: entered promiscuous mode [ 105.079980][ T6557] team0: Port device team_slave_1 added [ 105.108676][ T6735] team0: left promiscuous mode [ 105.117621][ T6735] team_slave_1: left promiscuous mode [ 105.285685][ T5099] Bluetooth: hci0: command 0x041b tx timeout [ 105.292362][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.318056][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.358507][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.530821][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.555933][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.743334][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.143261][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 106.507475][ T6557] hsr_slave_0: entered promiscuous mode [ 106.557030][ T6557] hsr_slave_1: entered promiscuous mode [ 106.680709][ T6771] netlink: 52 bytes leftover after parsing attributes in process `syz.3.429'. [ 106.854897][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 107.319197][ T6805] x_tables: ip_tables: ah match: only valid for protocol 51 [ 107.331352][ T6786] team0: entered promiscuous mode [ 107.343357][ T6786] team_slave_1: entered promiscuous mode [ 107.371908][ T5097] Bluetooth: hci0: command 0x041b tx timeout [ 107.372877][ T6805] netlink: 128 bytes leftover after parsing attributes in process `syz.2.436'. [ 107.474630][ T6778] team0: left promiscuous mode [ 107.483211][ T6778] team_slave_1: left promiscuous mode [ 107.565858][ T6808] Cannot find add_set index 0 as target [ 108.964253][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 109.003623][ T6831] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.443534][ T5097] Bluetooth: hci0: command 0x041b tx timeout [ 109.607763][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 109.663624][ T6849] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 109.678500][ T6849] macvlan4: entered promiscuous mode [ 109.714917][ T6849] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 109.739696][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 110.081143][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.459'. [ 110.125506][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 110.145558][ T6888] netlink: 'syz.1.460': attribute type 2 has an invalid length. [ 110.165989][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 110.176904][ T6888] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 111.113621][ T6932] netlink: 'syz.2.472': attribute type 2 has an invalid length. [ 111.121729][ T6932] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 111.523886][ T5097] Bluetooth: hci0: command 0x041b tx timeout [ 112.101285][ T6557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.129004][ T6557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.194405][ T6557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.274753][ T6557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.863387][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 113.032692][ T6956] team0: entered promiscuous mode [ 113.043536][ T6956] team_slave_1: entered promiscuous mode [ 113.502825][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 114.482046][ T6952] team0: left promiscuous mode [ 114.493246][ T6952] team_slave_1: left promiscuous mode [ 114.603983][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.681676][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.724375][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.727170][ T6986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 114.731503][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.770989][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.771181][ T6986] netlink: 5 bytes leftover after parsing attributes in process `syz.2.489'. [ 114.778182][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.886328][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.048820][ T6995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.491'. [ 115.128349][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 115.164466][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'. [ 115.261028][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.334632][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 115.389051][ T7013] team0: entered promiscuous mode [ 115.404277][ T7013] team_slave_1: entered promiscuous mode [ 115.557450][ T7012] team0: left promiscuous mode [ 115.562359][ T7012] team_slave_1: left promiscuous mode [ 116.490798][ T7066] trusted_key: syz.1.504 sent an empty control message without MSG_MORE. [ 119.253089][ T6557] veth0_vlan: entered promiscuous mode [ 119.281369][ T7070] veth1_to_bridge: entered promiscuous mode [ 119.323583][ T7070] veth1_to_bridge: left promiscuous mode [ 119.398204][ T6557] veth1_vlan: entered promiscuous mode [ 119.522370][ T6557] veth0_macvtap: entered promiscuous mode [ 119.524457][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 119.564559][ T6557] veth1_macvtap: entered promiscuous mode [ 119.645107][ T7099] team0: entered promiscuous mode [ 119.662318][ T7099] team_slave_1: entered promiscuous mode [ 119.696908][ T7098] team0: left promiscuous mode [ 119.708396][ T7098] team_slave_1: left promiscuous mode [ 119.717407][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.759087][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.807802][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.853131][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.884604][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.916392][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.935538][ T7110] raw_sendmsg: syz.4.514 forgot to set AF_INET. Fix it! [ 119.953364][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.967912][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.989419][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.021802][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.055105][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.075838][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.097162][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.114129][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.124790][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.134991][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.145568][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.163652][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.211682][ T6557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.253170][ T6557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.271646][ T6557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.282078][ T6557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.519621][ T2869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.574000][ T2869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.675328][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.719325][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.766813][ T7148] netlink: 56 bytes leftover after parsing attributes in process `syz.1.522'. [ 120.927450][ T7165] netlink: 'syz.0.370': attribute type 2 has an invalid length. [ 120.957026][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 121.043815][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 121.159425][ T7175] team0: entered promiscuous mode [ 121.183753][ T7175] team_slave_1: entered promiscuous mode [ 121.226066][ T7167] team0: left promiscuous mode [ 121.230875][ T7167] team_slave_1: left promiscuous mode [ 121.462591][ T7191] IPVS: length: 96 != 8 [ 121.480430][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 121.723989][ T7208] xt_CT: No such helper "snmp_trap" [ 121.844198][ T7221] netlink: 56 bytes leftover after parsing attributes in process `syz.1.537'. [ 122.089602][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 122.213869][ T7239] netlink: 'syz.2.542': attribute type 2 has an invalid length. [ 122.235924][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 123.212705][ T7274] netlink: 56 bytes leftover after parsing attributes in process `syz.0.551'. [ 123.561711][ T7296] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 123.577236][ T7296] netlink: 244 bytes leftover after parsing attributes in process `syz.1.560'. [ 123.600561][ T7300] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 123.607337][ T7292] syzkaller0: entered promiscuous mode [ 123.625029][ T7292] syzkaller0: entered allmulticast mode [ 124.776044][ T7315] __nla_validate_parse: 1 callbacks suppressed [ 124.776064][ T7315] netlink: 56 bytes leftover after parsing attributes in process `syz.0.565'. [ 125.828013][ T7332] sctp: [Deprecated]: syz.3.572 (pid 7332) Use of int in max_burst socket option deprecated. [ 125.828013][ T7332] Use struct sctp_assoc_value instead [ 126.052791][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 126.095955][ T7344] team0: entered promiscuous mode [ 126.111927][ T7344] team_slave_1: entered promiscuous mode [ 126.137350][ T7343] team0: left promiscuous mode [ 126.147940][ T7343] team_slave_1: left promiscuous mode [ 126.531660][ T7361] netlink: 96 bytes leftover after parsing attributes in process `syz.3.583'. [ 126.923765][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 126.959311][ T7372] team0: entered promiscuous mode [ 126.972017][ T7372] team_slave_1: entered promiscuous mode [ 126.980387][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 127.012235][ T7374] team0: entered promiscuous mode [ 127.018124][ T7374] team_slave_1: entered promiscuous mode [ 127.030395][ T7371] team0: left promiscuous mode [ 127.035363][ T7371] team_slave_1: left promiscuous mode [ 127.056956][ T7373] team0: left promiscuous mode [ 127.068684][ T7373] team_slave_1: left promiscuous mode [ 127.186278][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 127.227592][ T7382] team0: entered promiscuous mode [ 127.246576][ T7382] team_slave_1: entered promiscuous mode [ 127.253427][ T7388] netlink: 96 bytes leftover after parsing attributes in process `syz.3.594'. [ 127.277512][ T7380] team0: left promiscuous mode [ 127.304731][ T7380] team_slave_1: left promiscuous mode [ 127.417804][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 127.435494][ T7396] team0: entered promiscuous mode [ 127.440887][ T7396] team_slave_1: entered promiscuous mode [ 127.455445][ T7394] team0: left promiscuous mode [ 127.460876][ T7394] team_slave_1: left promiscuous mode [ 127.512789][ T7399] vxcan1: tx address claim with different name [ 127.707585][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 127.769974][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 127.806111][ T7411] team0: entered promiscuous mode [ 127.816392][ T7411] team_slave_1: entered promiscuous mode [ 127.859558][ T7410] team0: left promiscuous mode [ 127.879436][ T7410] team_slave_1: left promiscuous mode [ 128.427946][ T7423] team0: entered promiscuous mode [ 128.439937][ T7423] team_slave_1: entered promiscuous mode [ 128.488799][ T7422] team0: left promiscuous mode [ 128.513384][ T7422] team_slave_1: left promiscuous mode [ 128.582810][ T7430] team0: entered promiscuous mode [ 128.601101][ T7430] team_slave_1: entered promiscuous mode [ 128.644008][ T7429] team0: left promiscuous mode [ 128.648826][ T7429] team_slave_1: left promiscuous mode [ 128.835659][ T7445] team0: entered promiscuous mode [ 128.841182][ T7445] team_slave_1: entered promiscuous mode [ 128.876763][ T7443] team0: left promiscuous mode [ 128.881580][ T7443] team_slave_1: left promiscuous mode [ 129.059803][ T7463] team0: entered promiscuous mode [ 129.094856][ T7463] team_slave_1: entered promiscuous mode [ 129.136642][ T7451] team0: left promiscuous mode [ 129.141810][ T7451] team_slave_1: left promiscuous mode [ 129.264656][ T7473] team0: entered promiscuous mode [ 129.273956][ T7473] team_slave_1: entered promiscuous mode [ 129.295902][ T7471] team0: left promiscuous mode [ 129.302487][ T7471] team_slave_1: left promiscuous mode [ 129.372835][ T7481] team0: entered promiscuous mode [ 129.394499][ T7481] team_slave_1: entered promiscuous mode [ 129.445641][ T29] audit: type=1804 audit(1719354044.086:5): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.626" name="/root/syzkaller.K0pIbv/21/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 129.493198][ T7480] team0: left promiscuous mode [ 129.498537][ T7480] team_slave_1: left promiscuous mode [ 129.541331][ T29] audit: type=1804 audit(1719354044.186:6): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.626" name="/root/syzkaller.K0pIbv/21/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 129.629351][ T29] audit: type=1804 audit(1719354044.186:7): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.626" name="/root/syzkaller.K0pIbv/21/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 129.875347][ T7505] __nla_validate_parse: 8 callbacks suppressed [ 129.875365][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 129.957156][ T7505] team0: entered promiscuous mode [ 129.962567][ T7505] team_slave_1: entered promiscuous mode [ 129.990737][ T7510] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.639'. [ 130.013519][ T7504] team0: left promiscuous mode [ 130.018627][ T7504] team_slave_1: left promiscuous mode [ 130.774524][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'. [ 130.821405][ T7533] team0: entered promiscuous mode [ 130.840010][ T7533] team_slave_1: entered promiscuous mode [ 130.859030][ T7537] netlink: 'syz.0.648': attribute type 15 has an invalid length. [ 130.884396][ T7532] team0: left promiscuous mode [ 130.889221][ T7532] team_slave_1: left promiscuous mode [ 130.984660][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 131.572344][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 131.678698][ T7569] netlink: 'syz.3.659': attribute type 2 has an invalid length. [ 131.693536][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 131.951275][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 131.964065][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 131.967951][ T7580] team0: entered promiscuous mode [ 131.978418][ T7580] team_slave_1: entered promiscuous mode [ 132.000845][ T7582] netlink: 96 bytes leftover after parsing attributes in process `syz.1.665'. [ 132.015278][ T7579] team0: left promiscuous mode [ 132.020077][ T7579] team_slave_1: left promiscuous mode [ 132.035584][ T7583] team0: entered promiscuous mode [ 132.041209][ T7583] team_slave_1: entered promiscuous mode [ 132.107922][ T7577] team0: left promiscuous mode [ 132.124554][ T7577] team_slave_1: left promiscuous mode [ 132.340695][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 132.351665][ T7600] netlink: 'syz.4.672': attribute type 2 has an invalid length. [ 132.365324][ T7594] xt_connbytes: Forcing CT accounting to be enabled [ 132.372036][ T7594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.398117][ T7597] team0: entered promiscuous mode [ 132.407743][ T7597] team_slave_0: entered promiscuous mode [ 132.415344][ T7597] team_slave_1: entered promiscuous mode [ 132.492712][ T7596] team0: left promiscuous mode [ 132.502647][ T7596] team_slave_0: left promiscuous mode [ 132.508548][ T7596] team_slave_1: left promiscuous mode [ 132.561467][ T29] audit: type=1804 audit(1719354047.206:8): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.673" name="/root/syzkaller.2HPaUj/76/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 132.651246][ T7613] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 132.671029][ T7613] macsec1: entered allmulticast mode [ 132.678273][ T7613] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 132.884668][ T7622] team0: entered promiscuous mode [ 132.905442][ T7622] team_slave_1: entered promiscuous mode [ 132.949041][ T7620] team0: left promiscuous mode [ 132.962746][ T7620] team_slave_1: left promiscuous mode [ 133.087256][ T7627] sctp: [Deprecated]: syz.1.681 (pid 7627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.087256][ T7627] Use struct sctp_sack_info instead [ 133.126956][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134155][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.282032][ T7634] netlink: 'syz.0.685': attribute type 2 has an invalid length. [ 133.446326][ T7643] syz.0.688[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.446479][ T7643] syz.0.688[7643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.815267][ T7656] team0: entered promiscuous mode [ 133.849018][ T7656] team_slave_1: entered promiscuous mode [ 133.871141][ T7655] team0: left promiscuous mode [ 133.889121][ T7655] team_slave_1: left promiscuous mode [ 134.150161][ T7672] netlink: 'syz.4.698': attribute type 2 has an invalid length. [ 135.070479][ T7710] __nla_validate_parse: 11 callbacks suppressed [ 135.070497][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 135.159496][ T7713] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 135.504866][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 135.574182][ T7731] team0: entered promiscuous mode [ 135.613293][ T7731] team_slave_1: entered promiscuous mode [ 135.627838][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 135.690506][ T7730] team0: left promiscuous mode [ 135.719489][ T7730] team_slave_1: left promiscuous mode [ 135.780385][ T7747] sctp: [Deprecated]: syz.1.717 (pid 7747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.780385][ T7747] Use struct sctp_sack_info instead [ 135.882220][ T7755] netlink: 'syz.0.728': attribute type 2 has an invalid length. [ 135.913929][ T7755] netlink: 244 bytes leftover after parsing attributes in process `syz.0.728'. [ 136.152876][ T7769] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.374899][ T7777] veth3: entered promiscuous mode [ 136.460877][ T7784] netlink: 'syz.0.736': attribute type 3 has an invalid length. [ 136.485086][ T7784] netlink: 666 bytes leftover after parsing attributes in process `syz.0.736'. [ 136.512578][ T7779] netlink: 'syz.1.734': attribute type 5 has an invalid length. [ 136.596163][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 136.646262][ T7786] team0: entered promiscuous mode [ 136.667269][ T7786] team_slave_1: entered promiscuous mode [ 136.709548][ T7785] team0: left promiscuous mode [ 136.726810][ T7785] team_slave_1: left promiscuous mode [ 136.777520][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 136.815946][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'. [ 137.047324][ T7809] openvswitch: netlink: Flow key attr not present in new flow. [ 137.057835][ T7803] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 137.125308][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 137.885517][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 138.478874][ T7859] netlink: 'syz.1.767': attribute type 3 has an invalid length. [ 138.678124][ T7861] sctp: [Deprecated]: syz.2.762 (pid 7861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.678124][ T7861] Use struct sctp_sack_info instead [ 138.732218][ T7861] IPVS: stopping backup sync thread 5575 ... [ 140.667121][ T7944] IPVS: length: 96 != 8 [ 140.672921][ T7944] __nla_validate_parse: 3 callbacks suppressed [ 140.672939][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 142.321253][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 142.455980][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 143.560190][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 143.750986][ T29] audit: type=1800 audit(1719354058.396:9): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.801" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 144.341576][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.812'. [ 144.372248][ T8018] netlink: 'syz.3.812': attribute type 11 has an invalid length. [ 144.391497][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.812'. [ 144.533876][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 144.784402][ T8036] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 144.840498][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 144.879485][ T8040] team0: entered promiscuous mode [ 144.905344][ T8040] team_slave_0: entered promiscuous mode [ 144.928414][ T8040] team_slave_1: entered promiscuous mode [ 144.993625][ T8040] team_slave_0: entered allmulticast mode [ 145.081749][ T8040] team0: Port device team_slave_0 removed [ 145.156238][ T8057] netlink: 'syz.2.824': attribute type 63 has an invalid length. [ 145.209867][ T8038] team0: left promiscuous mode [ 145.219714][ T8038] team_slave_1: left promiscuous mode [ 145.421107][ T8063] Bluetooth: MGMT ver 1.22 [ 145.587370][ T8075] sctp: [Deprecated]: syz.4.829 (pid 8075) Use of int in max_burst socket option deprecated. [ 145.587370][ T8075] Use struct sctp_assoc_value instead [ 145.607690][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.631411][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.642170][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.651689][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.664486][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.671990][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.688059][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 145.872499][ T2869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.939368][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 145.970013][ T8090] netlink: 5 bytes leftover after parsing attributes in process `syz.4.833'. [ 146.095315][ T2869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.110700][ T8094] netlink: 103 bytes leftover after parsing attributes in process `syz.0.834'. [ 146.384499][ T2869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.455960][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 146.520467][ T2869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.712691][ T8129] netlink: 44 bytes leftover after parsing attributes in process `syz.4.844'. [ 146.732944][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.844'. [ 146.831548][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 147.775182][ T5099] Bluetooth: hci3: command tx timeout [ 147.914627][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 147.956370][ T8139] team0: entered promiscuous mode [ 147.961449][ T8139] team_slave_1: entered promiscuous mode [ 147.994600][ T8139] team0: left promiscuous mode [ 147.999424][ T8139] team_slave_1: left promiscuous mode [ 148.025086][ T8140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 148.423534][ T2869] bridge_slave_1: left allmulticast mode [ 148.429237][ T2869] bridge_slave_1: left promiscuous mode [ 148.461254][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.495655][ T2869] bridge_slave_0: left allmulticast mode [ 148.511563][ T2869] bridge_slave_0: left promiscuous mode [ 148.519515][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.188874][ T2869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.201159][ T2869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.212761][ T2869] bond0 (unregistering): Released all slaves [ 149.235891][ T8189] team0: entered promiscuous mode [ 149.240984][ T8189] team_slave_1: entered promiscuous mode [ 149.332874][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 149.347743][ T8197] No such timeout policy "syz0" [ 149.362327][ T8187] team0: left promiscuous mode [ 149.384916][ T8187] team_slave_1: left promiscuous mode [ 149.674945][ T8208] team1: Mode changed to "loadbalance" [ 149.767232][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.795059][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.815289][ T8076] bridge_slave_0: entered allmulticast mode [ 149.830525][ T8076] bridge_slave_0: entered promiscuous mode [ 149.846245][ T5099] Bluetooth: hci3: command tx timeout [ 149.852495][ T2869] hsr_slave_0: left promiscuous mode [ 149.867879][ T2869] hsr_slave_1: left promiscuous mode [ 149.889912][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.897901][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.906493][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.914287][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.948426][ T2869] veth1_macvtap: left promiscuous mode [ 149.954219][ T2869] veth0_macvtap: left promiscuous mode [ 149.960079][ T2869] veth1_vlan: left promiscuous mode [ 149.974355][ T2869] veth0_vlan: left promiscuous mode [ 150.648760][ T2869] team0 (unregistering): Port device team_slave_1 removed [ 151.092346][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.107889][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.123657][ T8076] bridge_slave_1: entered allmulticast mode [ 151.154607][ T8076] bridge_slave_1: entered promiscuous mode [ 151.170603][ T8232] bridge0: port 3(vlan2) entered blocking state [ 151.189179][ T8232] bridge0: port 3(vlan2) entered disabled state [ 151.196178][ T8232] vlan2: entered allmulticast mode [ 151.207396][ T8232] vlan2: left allmulticast mode [ 151.342187][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.373739][ T8244] netlink: 'syz.4.880': attribute type 2 has an invalid length. [ 151.383751][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.396066][ T8249] __nla_validate_parse: 4 callbacks suppressed [ 151.396082][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 151.551163][ T8076] team0: Port device team_slave_0 added [ 151.605523][ T8076] team0: Port device team_slave_1 added [ 151.718174][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.748626][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.801740][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.869893][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.898433][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.925449][ T5099] Bluetooth: hci3: command tx timeout [ 151.934447][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.965198][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 152.060136][ T8076] hsr_slave_0: entered promiscuous mode [ 152.075125][ T8076] hsr_slave_1: entered promiscuous mode [ 152.090175][ T8076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.103655][ T8076] Cannot create hsr debugfs directory [ 152.115569][ T8286] team0: entered promiscuous mode [ 152.120772][ T8286] team_slave_1: entered promiscuous mode [ 152.136510][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.890'. [ 152.240501][ T8278] team0: left promiscuous mode [ 152.258042][ T8278] team_slave_1: left promiscuous mode [ 152.279675][ T29] audit: type=1800 audit(1719354066.926:10): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.894" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 152.488188][ T8296] hsr0: entered promiscuous mode [ 152.648198][ T8307] netlink: 'syz.0.898': attribute type 2 has an invalid length. [ 152.792567][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.825806][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.836227][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.868637][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.876619][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.886806][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.409357][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 153.466605][ T8337] netlink: 44 bytes leftover after parsing attributes in process `syz.4.906'. [ 153.610495][ T8076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.718325][ T8076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.810734][ T8076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.825753][ T8310] chnl_net:caif_netlink_parms(): no params data found [ 153.910224][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 153.927675][ T8352] netlink: 'syz.4.910': attribute type 2 has an invalid length. [ 153.960687][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.984061][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.003227][ T5099] Bluetooth: hci3: command tx timeout [ 154.023560][ T8076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.156573][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.175073][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.259880][ T8366] netlink: 96 bytes leftover after parsing attributes in process `syz.0.914'. [ 154.364153][ T8372] netlink: 'syz.2.916': attribute type 3 has an invalid length. [ 154.376886][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.390509][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.396522][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.415739][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.486359][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.499421][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.519298][ T8310] bridge_slave_0: entered allmulticast mode [ 154.534026][ T8310] bridge_slave_0: entered promiscuous mode [ 154.587480][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 154.643754][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.654705][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.676783][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.693971][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.701434][ T8310] bridge_slave_1: entered allmulticast mode [ 154.709354][ T8310] bridge_slave_1: entered promiscuous mode [ 154.767473][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.806453][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.949120][ T8310] team0: Port device team_slave_0 added [ 154.964332][ T5099] Bluetooth: hci4: command tx timeout [ 154.988445][ T61] bridge_slave_1: left allmulticast mode [ 154.996262][ T61] bridge_slave_1: left promiscuous mode [ 155.001999][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.025621][ T61] bridge_slave_0: left allmulticast mode [ 155.031391][ T61] bridge_slave_0: left promiscuous mode [ 155.037762][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.513733][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.526833][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.538048][ T61] bond0 (unregistering): Released all slaves [ 155.558171][ T8310] team0: Port device team_slave_1 added [ 155.739780][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 155.761314][ T8404] batadv2: entered promiscuous mode [ 155.769688][ T8404] batadv2: entered allmulticast mode [ 155.784773][ T8404] team0: Port device batadv2 added [ 155.788854][ T8412] netlink: 96 bytes leftover after parsing attributes in process `syz.0.926'. [ 157.044427][ T5099] Bluetooth: hci4: command tx timeout [ 157.436629][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.452342][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.525307][ T8310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.587302][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.616396][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.654770][ T8310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.728308][ T8433] netlink: 96 bytes leftover after parsing attributes in process `syz.2.935'. [ 157.834983][ T61] hsr_slave_0: left promiscuous mode [ 157.857682][ T61] hsr_slave_1: left promiscuous mode [ 157.872786][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.882809][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.891901][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.901201][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.926507][ T61] veth1_to_bond: left promiscuous mode [ 157.932197][ T61] veth1_macvtap: left promiscuous mode [ 157.954815][ T61] veth0_macvtap: left promiscuous mode [ 157.960504][ T61] veth1_vlan: left promiscuous mode [ 157.980311][ T61] @ÿ: left promiscuous mode [ 158.223345][ T61] team0 (unregistering): Port device macvlan2 removed [ 158.690823][ T61] team0 (unregistering): Port device team_slave_1 removed [ 159.079353][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.124272][ T5099] Bluetooth: hci4: command tx timeout [ 159.165011][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.282732][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.289946][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.340232][ T8310] hsr_slave_0: entered promiscuous mode [ 159.349241][ T8310] hsr_slave_1: entered promiscuous mode [ 159.356452][ T8310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.370157][ T8310] Cannot create hsr debugfs directory [ 159.393574][ T8479] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 159.476328][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.483540][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.557714][ T8485] netlink: 96 bytes leftover after parsing attributes in process `syz.0.946'. [ 159.691376][ T8076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.940237][ T8497] geneve2: entered promiscuous mode [ 159.945953][ T8497] geneve2: entered allmulticast mode [ 160.226295][ T8503] bond0: entered promiscuous mode [ 160.232601][ T8503] bond_slave_0: entered promiscuous mode [ 160.239442][ T8503] bond_slave_1: entered promiscuous mode [ 160.268881][ T8511] netlink: 96 bytes leftover after parsing attributes in process `syz.4.953'. [ 160.288483][ T8503] netlink: 'syz.4.953': attribute type 5 has an invalid length. [ 160.515291][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 161.203594][ T5099] Bluetooth: hci4: command tx timeout [ 161.619556][ T8508] syzkaller0: entered promiscuous mode [ 161.626550][ T8508] syzkaller0: entered allmulticast mode [ 163.002161][ T8521] team0: entered promiscuous mode [ 163.007996][ T8521] team_slave_1: entered promiscuous mode [ 163.014281][ T8521] team0: left promiscuous mode [ 163.019067][ T8521] team_slave_1: left promiscuous mode [ 163.066313][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.200381][ T8536] geneve2: entered promiscuous mode [ 163.207275][ T8536] geneve2: entered allmulticast mode [ 163.249626][ T8310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.294487][ T8310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.317255][ T8076] veth0_vlan: entered promiscuous mode [ 163.334924][ T8310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.367270][ T8310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.386455][ T8076] veth1_vlan: entered promiscuous mode [ 163.488751][ T8076] veth0_macvtap: entered promiscuous mode [ 163.536153][ T8076] veth1_macvtap: entered promiscuous mode [ 163.591646][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.615789][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.626831][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.638605][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.648948][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.659543][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.674270][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.692155][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 163.702074][ T8556] netlink: 'syz.0.969': attribute type 25 has an invalid length. [ 163.718066][ T8556] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.727270][ T8556] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.736250][ T8556] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.745074][ T8556] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.795991][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.812268][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.823622][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.835466][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.846216][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.857196][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.869142][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.899772][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.931651][ T8076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.952533][ T8076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.974581][ T8076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.986024][ T8076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.091310][ T8310] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.112405][ T2869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.122263][ T2869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.136365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.143565][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.176204][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.183424][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.200431][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.209118][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.313835][ T8569] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 164.623255][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 164.656086][ T8310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.720745][ T29] audit: type=1800 audit(1719354079.366:11): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.981" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 164.985640][ T8310] veth0_vlan: entered promiscuous mode [ 165.066015][ T8310] veth1_vlan: entered promiscuous mode [ 165.151467][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 165.185842][ T8613] team0: entered promiscuous mode [ 165.205698][ T8613] team_slave_0: entered promiscuous mode [ 165.223337][ T8613] team_slave_1: entered promiscuous mode [ 165.236853][ T8617] team_slave_0: entered allmulticast mode [ 165.322195][ T8310] veth0_macvtap: entered promiscuous mode [ 165.337106][ T8612] team0: left promiscuous mode [ 165.359751][ T8612] team_slave_1: left promiscuous mode [ 165.386469][ T8310] veth1_macvtap: entered promiscuous mode [ 165.465782][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.497910][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 165.503177][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.533117][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.543966][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.553879][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.564732][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.574581][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.585135][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.599902][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.614554][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.625113][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.634974][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.645915][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.657673][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.668240][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.679401][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.690519][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.706335][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.762099][ T8310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.783329][ T8310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.792056][ T8310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.821309][ T8310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.042240][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.074000][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.095387][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.131567][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.142276][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.155364][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.160383][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 166.168308][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.191902][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.206553][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.220518][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.240572][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.253569][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.264881][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.276254][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.286211][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.296777][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.436449][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 166.507302][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 166.533667][ T8662] team0: entered promiscuous mode [ 166.538732][ T8662] team_slave_1: entered promiscuous mode [ 166.574081][ T8667] team0: entered promiscuous mode [ 166.584528][ T8667] team_slave_1: entered promiscuous mode [ 166.592441][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 166.603001][ T8665] team0: entered promiscuous mode [ 166.612470][ T8665] team_slave_1: entered promiscuous mode [ 166.634792][ T8665] team0: Port device team_slave_0 removed [ 166.663230][ T2869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.675959][ T2869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.687005][ T8661] team0: left promiscuous mode [ 166.692259][ T8661] team_slave_1: left promiscuous mode [ 166.698878][ T8660] team0: left promiscuous mode [ 166.703997][ T8660] team_slave_1: left promiscuous mode [ 166.711200][ T8663] team0: left promiscuous mode [ 166.733169][ T8663] team_slave_1: left promiscuous mode [ 166.776820][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.791333][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.884444][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1004'. [ 166.904210][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 167.174862][ T8685] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 167.207426][ T8688] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 167.920247][ T8712] wg2: entered promiscuous mode [ 167.929432][ T8712] wg2: entered allmulticast mode [ 168.104988][ T8739] netlink: 'syz.1.1029': attribute type 9 has an invalid length. [ 168.143608][ T8739] netlink: 'syz.1.1029': attribute type 7 has an invalid length. [ 168.174416][ T8739] netlink: 'syz.1.1029': attribute type 8 has an invalid length. [ 168.218233][ T8747] team_slave_0: mtu less than device minimum [ 168.968187][ T8778] __nla_validate_parse: 7 callbacks suppressed [ 168.968205][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 169.180926][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 169.204814][ T8785] netlink: 'syz.2.1044': attribute type 25 has an invalid length. [ 169.234775][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 169.255743][ T8790] netlink: 'syz.3.1045': attribute type 25 has an invalid length. [ 169.318473][ T8790] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.327663][ T8790] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.336543][ T8790] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.345369][ T8790] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.354623][ T8794] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1049'. [ 169.478619][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 169.962980][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 170.041979][ T8814] team0: entered promiscuous mode [ 170.067154][ T8814] team_slave_1: entered promiscuous mode [ 170.111667][ T8813] team0: left promiscuous mode [ 170.134520][ T8813] team_slave_1: left promiscuous mode [ 170.224447][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 170.365032][ T8836] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1061'. [ 170.631446][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 170.655948][ T8855] team0: entered promiscuous mode [ 170.656207][ T8857] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 170.661005][ T8855] team_slave_1: entered promiscuous mode [ 170.673610][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 170.697378][ T8858] netlink: 'syz.3.1067': attribute type 25 has an invalid length. [ 170.711713][ T8854] team0: left promiscuous mode [ 170.721951][ T8854] team_slave_1: left promiscuous mode [ 170.852824][ T8868] netlink: 'syz.0.1071': attribute type 15 has an invalid length. [ 171.175080][ T8884] netlink: 'syz.1.1074': attribute type 7 has an invalid length. [ 171.442211][ T8883] team0: Device veth1_vlan failed to register rx_handler [ 171.582351][ T8902] team0: entered promiscuous mode [ 171.592506][ T8902] team_slave_1: entered promiscuous mode [ 171.669223][ T8900] team0: left promiscuous mode [ 171.674285][ T8900] team_slave_1: left promiscuous mode [ 173.712347][ T8958] team0: entered promiscuous mode [ 173.717697][ T8958] team_slave_1: entered promiscuous mode [ 173.725447][ T8958] team0: left promiscuous mode [ 173.730242][ T8958] team_slave_1: left promiscuous mode [ 173.958423][ T8977] validate_nla: 2 callbacks suppressed [ 173.958443][ T8977] netlink: 'syz.0.1099': attribute type 15 has an invalid length. [ 174.001641][ T8977] __nla_validate_parse: 7 callbacks suppressed [ 174.001661][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1099'. [ 174.651510][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1106'. [ 174.661777][ T8995] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 174.760889][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 175.052118][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 175.085124][ T9015] netlink: 'syz.3.1111': attribute type 25 has an invalid length. [ 176.164315][ T5100] Bluetooth: hci1: command 0x0406 tx timeout [ 176.164454][ T5092] Bluetooth: hci2: command 0x0406 tx timeout [ 177.107358][ T9032] netlink: 'syz.4.1118': attribute type 15 has an invalid length. [ 177.115629][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 177.292650][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 177.553745][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 177.576476][ T9072] netlink: 'syz.2.1131': attribute type 25 has an invalid length. [ 177.651609][ T9078] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xa [ 178.089396][ T9097] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1142'. [ 178.249319][ T9108] [ 178.251686][ T9108] ====================================================== [ 178.258707][ T9108] WARNING: possible circular locking dependency detected [ 178.265721][ T9108] 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 Not tainted [ 178.272903][ T9108] ------------------------------------------------------ [ 178.279901][ T9108] syz.0.1148/9108 is trying to acquire lock: [ 178.285861][ T9108] ffff8880740e0a50 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_switch_to_fallback+0x35/0xd00 [ 178.296669][ T9108] [ 178.296669][ T9108] but task is already holding lock: [ 178.304015][ T9108] ffff8880740e0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 178.312792][ T9108] [ 178.312792][ T9108] which lock already depends on the new lock. [ 178.312792][ T9108] [ 178.323179][ T9108] [ 178.323179][ T9108] the existing dependency chain (in reverse order) is: [ 178.332179][ T9108] [ 178.332179][ T9108] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 178.339812][ T9108] lock_acquire+0x1ed/0x550 [ 178.344824][ T9108] lock_sock_nested+0x48/0x100 [ 178.350090][ T9108] do_ip_setsockopt+0x1a2d/0x3cd0 [ 178.355624][ T9108] ip_setsockopt+0x63/0x100 [ 178.360637][ T9108] do_sock_setsockopt+0x3af/0x720 [ 178.366170][ T9108] __sys_setsockopt+0x1ae/0x250 [ 178.371535][ T9108] __x64_sys_setsockopt+0xb5/0xd0 [ 178.377067][ T9108] do_syscall_64+0xf3/0x230 [ 178.382078][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.388479][ T9108] [ 178.388479][ T9108] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 178.395676][ T9108] lock_acquire+0x1ed/0x550 [ 178.400685][ T9108] __mutex_lock+0x136/0xd70 [ 178.405696][ T9108] ip_mc_drop_socket+0x81/0x280 [ 178.411052][ T9108] inet_release+0x96/0x200 [ 178.415972][ T9108] sock_release+0x82/0x150 [ 178.420895][ T9108] stop_sync_thread+0x4e6/0x5e0 [ 178.426254][ T9108] do_ip_vs_set_ctl+0x47b/0x13d0 [ 178.431700][ T9108] nf_setsockopt+0x295/0x2c0 [ 178.436797][ T9108] smc_setsockopt+0x275/0xe50 [ 178.441980][ T9108] do_sock_setsockopt+0x3af/0x720 [ 178.447512][ T9108] __sys_setsockopt+0x1ae/0x250 [ 178.452867][ T9108] __x64_sys_setsockopt+0xb5/0xd0 [ 178.458396][ T9108] do_syscall_64+0xf3/0x230 [ 178.463407][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.469812][ T9108] [ 178.469812][ T9108] -> #0 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 178.478403][ T9108] validate_chain+0x18e0/0x5900 [ 178.483772][ T9108] __lock_acquire+0x1346/0x1fd0 [ 178.489125][ T9108] lock_acquire+0x1ed/0x550 [ 178.494219][ T9108] __mutex_lock+0x136/0xd70 [ 178.499231][ T9108] smc_switch_to_fallback+0x35/0xd00 [ 178.505029][ T9108] smc_sendmsg+0x11f/0x530 [ 178.510037][ T9108] __sock_sendmsg+0x221/0x270 [ 178.515253][ T9108] __sys_sendto+0x3a4/0x4f0 [ 178.520261][ T9108] __x64_sys_sendto+0xde/0x100 [ 178.525529][ T9108] do_syscall_64+0xf3/0x230 [ 178.530547][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.536946][ T9108] [ 178.536946][ T9108] other info that might help us debug this: [ 178.536946][ T9108] [ 178.547153][ T9108] Chain exists of: [ 178.547153][ T9108] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 178.547153][ T9108] [ 178.560693][ T9108] Possible unsafe locking scenario: [ 178.560693][ T9108] [ 178.568130][ T9108] CPU0 CPU1 [ 178.573490][ T9108] ---- ---- [ 178.578843][ T9108] lock(sk_lock-AF_INET); [ 178.583247][ T9108] lock(rtnl_mutex); [ 178.589733][ T9108] lock(sk_lock-AF_INET); [ 178.596650][ T9108] lock(&smc->clcsock_release_lock); [ 178.602009][ T9108] [ 178.602009][ T9108] *** DEADLOCK *** [ 178.602009][ T9108] [ 178.610132][ T9108] 1 lock held by syz.0.1148/9108: [ 178.615136][ T9108] #0: ffff8880740e0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 178.624352][ T9108] [ 178.624352][ T9108] stack backtrace: [ 178.630253][ T9108] CPU: 0 PID: 9108 Comm: syz.0.1148 Not tainted 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 [ 178.640298][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.650343][ T9108] Call Trace: [ 178.653610][ T9108] [ 178.656525][ T9108] dump_stack_lvl+0x241/0x360 [ 178.661193][ T9108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.666382][ T9108] ? print_circular_bug+0x130/0x1a0 [ 178.671568][ T9108] check_noncircular+0x36a/0x4a0 [ 178.676496][ T9108] ? __pfx_check_noncircular+0x10/0x10 [ 178.681942][ T9108] ? lockdep_lock+0x123/0x2b0 [ 178.686602][ T9108] ? __lock_acquire+0x1346/0x1fd0 [ 178.691610][ T9108] ? _find_first_zero_bit+0xd3/0x100 [ 178.696886][ T9108] validate_chain+0x18e0/0x5900 [ 178.701731][ T9108] ? __pfx_validate_chain+0x10/0x10 [ 178.706913][ T9108] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.712879][ T9108] ? validate_chain+0x11e/0x5900 [ 178.717803][ T9108] ? validate_chain+0x11e/0x5900 [ 178.722723][ T9108] ? finish_task_switch+0x1e5/0x870 [ 178.727911][ T9108] ? look_up_lock_class+0x77/0x160 [ 178.733008][ T9108] ? register_lock_class+0x102/0x980 [ 178.738282][ T9108] ? __pfx_register_lock_class+0x10/0x10 [ 178.743900][ T9108] ? __pfx_validate_chain+0x10/0x10 [ 178.749083][ T9108] ? mark_lock+0x9a/0x350 [ 178.753394][ T9108] ? __pfx_validate_chain+0x10/0x10 [ 178.758580][ T9108] __lock_acquire+0x1346/0x1fd0 [ 178.763431][ T9108] lock_acquire+0x1ed/0x550 [ 178.767921][ T9108] ? smc_switch_to_fallback+0x35/0xd00 [ 178.773373][ T9108] ? __pfx_lock_acquire+0x10/0x10 [ 178.778380][ T9108] ? __pfx___might_resched+0x10/0x10 [ 178.783663][ T9108] __mutex_lock+0x136/0xd70 [ 178.788155][ T9108] ? smc_switch_to_fallback+0x35/0xd00 [ 178.793632][ T9108] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.799594][ T9108] ? smc_switch_to_fallback+0x35/0xd00 [ 178.805043][ T9108] ? __pfx___mutex_lock+0x10/0x10 [ 178.810053][ T9108] ? __local_bh_enable_ip+0x168/0x200 [ 178.815419][ T9108] ? lockdep_hardirqs_on+0x99/0x150 [ 178.820688][ T9108] ? __local_bh_enable_ip+0x168/0x200 [ 178.826043][ T9108] smc_switch_to_fallback+0x35/0xd00 [ 178.831314][ T9108] ? do_raw_spin_unlock+0x13c/0x8b0 [ 178.836505][ T9108] smc_sendmsg+0x11f/0x530 [ 178.840910][ T9108] ? __pfx_smc_sendmsg+0x10/0x10 [ 178.845837][ T9108] __sock_sendmsg+0x221/0x270 [ 178.850500][ T9108] __sys_sendto+0x3a4/0x4f0 [ 178.854990][ T9108] ? __pfx___sys_sendto+0x10/0x10 [ 178.859999][ T9108] ? do_futex+0x392/0x560 [ 178.864323][ T9108] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.870289][ T9108] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.876601][ T9108] __x64_sys_sendto+0xde/0x100 [ 178.881351][ T9108] do_syscall_64+0xf3/0x230 [ 178.885843][ T9108] ? clear_bhb_loop+0x35/0x90 [ 178.890511][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.896425][ T9108] RIP: 0033:0x7f55d3b75ae9 [ 178.900921][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.920538][ T9108] RSP: 002b:00007f55d4950048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 178.928942][ T9108] RAX: ffffffffffffffda RBX: 00007f55d3d03fa0 RCX: 00007f55d3b75ae9 [ 178.936899][ T9108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 178.944867][ T9108] RBP: 00007f55d3bf6746 R08: 0000000020e68000 R09: 0000000000000010 [ 178.952833][ T9108] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 178.960800][ T9108] R13: 000000000000000b R14: 00007f55d3d03fa0 R15: 00007ffd09a08318 [ 178.968770][ T9108]