last executing test programs: 1m7.155733338s ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x20000800) 57.445284122s ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x20000800) 43.506897764s ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x20000800) 31.894203074s ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x20000800) 19.568948099s ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x20000800) 9.272157051s ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x20000800) 3.77459452s ago: executing program 0 (id=2144): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x8, 0x3, 0x801, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0xa}, [@typed={0xc, 0x4e, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x122}, @nested={0xcd, 0x32, 0x0, 0x1, [@nested={0x4, 0x12}, @nested={0x4, 0xf6}, @generic="8f18daee833f6dbb1f34c651837aca6a5e51dab02fb4246e47146dd45c4597083f3e8efeab7ecb81287f816d24a98727291768fc4b00ba571daf65bf038255588f6e23814175480d9974d5fe82670f1eadefb4569c208ee79c0a78fa7b8d5756fdea4828203524ed569e5a7d92199f1327793053080e2d4d62aef99d36e2e17a495661bffe70d40592d9787d1e7c0ef82e443babe1d3474a796e6f4d28a15c818c03dfb05323246d41c9116a824c39043183329629d3f63cd14f73525415a692e5"]}, @typed={0x7, 0x121, 0x0, 0x0, @str='*]\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004001}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pI4 \x00'}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000380)=0x80, 0x80800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x9, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8790, 0x7800, 0x10000, 0xa707}}) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getnexthop={0x3c, 0x6a, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20040854) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x8, 0x30}, &(0x7f00000005c0)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000600)={r5, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0x3, 0x8000, 0xd8, 0x0, 0x8000}, 0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000006c0)={r5, @in={{0x2, 0x4e21, @empty}}}, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000780)={r5, 0x5, 0x0, 0xfffffffc}, &(0x7f00000007c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', r4, 0x4, 0xb, 0x5, 0x6, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x20, 0x0, 0xbd}}) sendmsg$802154_raw(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000940)={&(0x7f0000000900)="cd0ef62205b7f4dc3b63d23fca1795219a7559616be2cc3f3a49af58d52685981a731c3c", 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x7, [@union={0x7, 0x5, 0x0, 0x5, 0x1, 0x10000, [{0x4, 0x1, 0x3}, {0xa, 0x0, 0x5}, {0x10, 0x2, 0x7bc3}, {0x6, 0x2, 0x4}, {0x6, 0x1, 0x7}]}, @var={0x9, 0x0, 0x0, 0xe, 0x5, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @datasec={0x10, 0x6, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x1}, {0x3, 0x4, 0x7}, {0x5, 0x3, 0xe71}, {0x2, 0x101, 0x8}, {0x2, 0x200, 0x3}, {0x4, 0x9, 0x4}], '('}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x6, [{0x4, 0x1, 0x4}, {0x3, 0x3, 0x3ff}, {0x7, 0x5, 0x6}, {0x0, 0x5, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0, 0x61]}}, &(0x7f0000000b80)=""/72, 0x117, 0x48, 0x1, 0x1, 0x10000}, 0x28) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', r6, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x7, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x401}, [@alu={0x4, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffe0, 0x8}, @ldst={0x0, 0x0, 0x3, 0x6, 0x0, 0x30, 0x8}, @call={0x85, 0x0, 0x0, 0x25}, @call={0x85, 0x0, 0x0, 0x67}]}, &(0x7f0000000a00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2b, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000c40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0xa, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r0, r8, r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r10, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x1a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040810) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r4, r7, 0x4, 0x3, 0x1}, 0x50) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000001080)=@req3={0x4, 0x0, 0x7, 0x1, 0xfffffffd, 0x29, 0x5}, 0x1c) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x90, r10, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1df45547e7"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f884f3ed4f064c55296fc51c7e"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "067c1708c4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "715ed993bb"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "130d8c5f98"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "96b8a809d73241b02da2cca25d"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "aea9b2d7d2ed7e7f1f3a3f80ca7d"}]}, 0x90}, 0x1, 0x0, 0x0, 0x40c0}, 0x40020) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r10, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe9800000, 0x5f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfc8e}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x8, 0x0, r8, 0x1000, '\x00', r4, r7, 0x2, 0x3}, 0x50) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001500)={'veth1_to_team\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001580)={0x3, 0x0}, 0x8) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x3f, 0x13, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@exit, @map_val={0x18, 0x6, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x27}, @jmp={0x5, 0x0, 0xb, 0x3, 0x1, 0xfffffffffffffff4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', r15, @fallback=0x27, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001540)={0x4, 0x8, 0x6, 0x2}, 0x10, r16, r9, 0x0, &(0x7f00000015c0)=[r12, r12, r8, r0, 0x1, r8], 0x0, 0x10, 0xffffff69}, 0x94) ppoll(&(0x7f00000016c0)=[{0xffffffffffffffff, 0x449}, {r1, 0x184}, {r1, 0x8008}, {r14}, {r3, 0x40}, {r17, 0x8024}, {r9, 0x400}, {0xffffffffffffffff, 0x2342}], 0x8, &(0x7f0000001700)={0x0, 0x3938700}, &(0x7f0000001740)={[0x3]}, 0x8) 3.504459105s ago: executing program 0 (id=2149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) splice(r1, 0x0, r3, 0x0, 0x80, 0x6) (async, rerun: 32) write(r3, &(0x7f0000003300)="ac", 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa0}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}]}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000c00000004000000fc"], 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x800, 0x6) (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) pipe(0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x7f}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) (async) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300009e06030014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028008000200", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac000000210001000000000001000000fe8000000000000001000000000000000000000017536800000000bb00"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a0002000a0010000000000000000000"], 0xac}}, 0x0) 3.098803688s ago: executing program 0 (id=2157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @loopback, 0x4e20, 0x3, 'sh\x00', 0x0, 0x5ffffffe, 0xe}, {@broadcast, 0x4e22, 0x12002, 0x4, 0x8001, 0x1}}, 0x44) (async, rerun: 32) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000040)=""/34, &(0x7f0000000080)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.711549181s ago: executing program 0 (id=2161): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x8916, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000)="8823a5586a", &(0x7f0000000100)=""/7}, 0x20) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) 2.274882465s ago: executing program 0 (id=2166): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000400)) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0xff, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0xffffffffffffffb1) socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfdef) close(r10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 1.981988317s ago: executing program 0 (id=2171): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 1.683436208s ago: executing program 4 (id=2175): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r0, 0x1}, 0x14}}, 0x0) 1.606568422s ago: executing program 2 (id=2177): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e4, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@jmp={0x5, 0x0, 0x6, 0x2, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffb}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x4, &(0x7f0000000440)=""/4, 0x41000, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x10, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x4, 0x5, 0x3, 0x7}, {0x4, 0x2, 0x5, 0x8}, {0x2, 0x4, 0x3, 0x2}, {0x1, 0x2, 0x2}, {0x1, 0x3, 0xb}], 0x10, 0x400}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup, 0xb, 0x1, 0xfffff554, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map=r5, r3, 0x2a, 0x2018, 0x0, @value=r6, @void, @void, @void, r4}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5d2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2080}, 0x24010000) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x11, 0xfffffff7, 0x1, 0x1, 0x10258, r5, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x0, @void, @value, @value=r8}, 0x50) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd8, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x80, 0x4}, {0x4, 0x4}, {0x9, 0x4}, {0xb, 0x7}, {0xff, 0x6}, {0xc7, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x81, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x10, 0x2}, {0x5, 0x4}, {0x1, 0x1}, {0xc}], "fdd3f1febdb35b0d"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x2, 0x3}, {0x4, 0x4}, {0x9, 0x2}, {}, {0x7, 0x6}, {0x2, 0x4}, {0x8}, {0x3}, {0x4, 0x4}, {0xc}, {0x8, 0x7}, {}], "c8c90a0a6b957bfd"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x2, 0x3}, {0x10}, {0xf8, 0x3}, {0x31, 0x5}, {0xe, 0x7}, {0x7, 0x1}, {0x6a, 0x3}, {0xf7, 0x3}, {0xe, 0x1}, {0xe7, 0x1}, {0x9, 0x7}, {0x8, 0x3}], "ecaca722aabe13aa"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x4}, {}, {0x73, 0x5}, {0x4}, {0x7}, {0xf0, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x57, 0x2}, {0x1b, 0x3}, {0x4, 0x3}, {0xd}], "f722e9ea812c65ce"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x8, 0x3}, {0x8, 0x1}, {0x80, 0x2}, {0x6, 0x3}, {0xe, 0x2}, {0x0, 0x2}, {0x71}, {0x54, 0x7}, {0x40, 0x6}, {0xd, 0x6}, {0x7, 0x6}, {0x6, 0x3}, {0x10, 0x3}, {0x6, 0x2}, {0xe, 0x6}], "1493faef52a8f58a"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4) r9 = accept4(r1, &(0x7f0000000c80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, &(0x7f0000000d00)=0x80, 0x800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d40)=""/199, 0xc7}, {&(0x7f0000000e40)=""/154, 0x9a}, {&(0x7f0000000f00)=""/218, 0xda}], 0x3, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x3) sendmsg$AUDIT_USER(r9, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x10c, 0x3ed, 0x8, 0x70bd28, 0x25dfdbfd, "894518c78d64e1a2558034f9522daf17ea7fae6af1a5d04d5974a3ee70dd6046c339a66265991b99ee66a16780e29d0741806f414c53ae92415b0a2be38a0f07144c582ce85cb0d6790be67a86610643274a245183fbb362c1dd2d59796fe10a41b4c3273fdb575621a09a24f25d2f9e1d7f3af934a13cad3e7af09697fe47253aabf245335b9f0b4dbb1c755fe16e3028941d904d5eeed6cc4a515da3d02461eaa0938a50542aed54e4bf2feade5e5790c037787386754ae8c307b5ff9e1df6a89990fc3ae3d34ec14d1d5cc361c1374f28563171d21ecd92b345fd91dd23e26b49ae22a354adfe211cb3f250790b9d1ffad8ae26456bab57", ["", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x8800) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000012c0)=0x1008, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001400)={'gretap0\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x0, 0x800, {{0x25, 0x4, 0x3, 0x4, 0x94, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0xa, 0x3, [{0x0, 0x4, "49f3"}]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x7, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x6a, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0xe0}, {@empty, 0x8}, {@loopback}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x74, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffffffff}]}, @generic={0x82, 0x10, "fafce0fd8bef68f7c9b15eea1291"}, @rr={0x7, 0xf, 0xe, [@multicast2, @rand_addr=0x64010102, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xe4, [@dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101, @remote, @private=0x9]}, @noop]}}}}}) sendmsg$nl_route_sched(r12, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xffe0, 0xfff1}, {0xa, 0xfff3}, {0x8, 0xfff1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40001) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='svcrdma_post_send\x00'}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000015c0)={r10, r14, 0x0, 0x1, &(0x7f0000001580)='\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x20c003, 0x0) ioctl$PPPIOCSMAXCID(r15, 0x40047451, &(0x7f0000001640)) pipe(&(0x7f0000001680)) openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x400000, 0x0) 1.544308184s ago: executing program 4 (id=2178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000200)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000000c0)={0x9, {{0x2, 0xfffc, @multicast1}}, {{0x2, 0x0, @private=0xa010100}}}, 0x108) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.374755259s ago: executing program 2 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket(0x1f, 0x4, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r6, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r4, 0xef, 0x6}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r4, 0x935b}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.341916137s ago: executing program 1 (id=2181): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x24060400) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@get={0x120, 0x13, 0x1, 0x70bd27, 0x25dfdbfe, {{'drbg_nopr_ctr_aes256\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0xb8c8}, {0x8, 0x1, 0x2f97}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x317a}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x5}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.254120514s ago: executing program 4 (id=2182): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @initdev}, &(0x7f00000000c0)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0xc3b, 0x0, 0x10000, {0x0, 0x0, 0x0, r1, 0x0, 0x1006}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xac327f58}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c050) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @initdev}, &(0x7f00000000c0)=0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0xc3b, 0x0, 0x10000, {0x0, 0x0, 0x0, r1, 0x0, 0x1006}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xac327f58}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c050) (async) 1.170850584s ago: executing program 1 (id=2183): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000005}, 0x20004010) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) (async) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777cc", 0x92}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d393", 0x67}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d9a", 0xd4}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65c0a44b21b4c8", 0x79}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cd", 0x84}], 0x1}}], 0x3, 0x0) 1.036003653s ago: executing program 2 (id=2184): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000290000000b0000009b0000000001005c"], 0x18}, 0x4000085) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0xfb, 0x2, 0xb}]}, 0x10) 1.007848467s ago: executing program 1 (id=2185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r1, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) 846.916805ms ago: executing program 2 (id=2186): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 844.860955ms ago: executing program 4 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd24, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200aaaaaaaaaaaa}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00035602", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000290780000"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f00000006c0)={@void, @val={0x2, 0x0, 0x1, 0xfca, 0xaf9, 0xe518}, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x97, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, @empty, {[], {0x4f1c, 0x4e1d, 0x97, 0x0, @wg=@data={0x4, 0x0, 0x3, "79b02060190570e9b18e88e3334c89f2a98d8fefefe06ad6b4820408bd4864add1c900ff512ec83a141edd00dde57b22bd91ad556a0b229ebd2665a39cef19c43c5720381692fc43137e0421ef69f788b6c22f9c5be8da33252869d7a0507459e081b49368a4a535a527beee35072403a66c748ec4660a41dd62b03383f558"}}}}}}}}, 0xd7) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 657.983111ms ago: executing program 2 (id=2188): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x4040000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x440c1}, 0x4008840) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000002) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.bfq.io_queued\x00', 0x0, 0x0) r6 = getuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in=@remote, 0x4e24, 0x4656, 0x4e24, 0x3, 0xa, 0xa0, 0x80, 0x32, r1, r6}, {0x6e0, 0x4, 0x40, 0x14, 0x9, 0x7, 0x6, 0x6}, {0x7, 0x1, 0x2}, 0x5, 0x6e6bb3, 0x1, 0x1, 0x3, 0x3}, {{@in=@local, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010102, 0x3502, 0x2, 0x1, 0x8, 0x80, 0x1, 0x1}}, 0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000005c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x20) r7 = openat$cgroup_ro(r4, &(0x7f00000006c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) recvfrom$x25(r7, &(0x7f0000000700)=""/94, 0x5e, 0x1, &(0x7f0000000780)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000007c0)=@req3={0x5, 0x6, 0x6, 0x8, 0x8, 0x8000, 0xc}, 0x1c) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7, 0x8, 0x3ff, 0x10002, r7, 0x4, '\x00', 0x0, r4, 0x0, 0x5, 0x4, 0x7, @void, @value, @value=r8}, 0x50) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000008c0)={@empty, @private=0xa010100, 0x0, 0x9, [@remote, @remote, @rand_addr=0x64010100, @private=0xa010102, @private=0xa010102, @local, @multicast1, @private=0xa010101, @broadcast]}, 0x34) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x134, r9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x810) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000b40)={0x4000000c}) write$cgroup_int(r7, &(0x7f0000000b80)=0x6, 0x12) openat$cgroup_ro(r7, &(0x7f0000000bc0)='blkio.bfq.idle_time\x00', 0x0, 0x0) getsockopt$netlink(r5, 0x10e, 0x6, &(0x7f0000000c00)=""/160, &(0x7f0000000cc0)=0xa0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d00)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000d40)={{{@in6=@remote, @in6=@local, 0x4e20, 0x101, 0x4e21, 0x5, 0xa, 0x20, 0x20, 0x2e, r10, r6}, {0x5, 0xd, 0x8, 0x1, 0x2, 0x4, 0x7ff, 0x5}, {0x3, 0x6, 0xffffffffffffff00, 0x9}, 0x9, 0x0, 0x2, 0x1, 0x3, 0x3}, {{@in=@local, 0x4d6, 0x32}, 0x2, @in=@remote, 0x3503, 0x2, 0x2, 0x8, 0x1, 0x6, 0xfffffffd}}, 0xe8) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x2c}}, 0x4000001) 524.060328ms ago: executing program 1 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffffffffe01, 0xe3eb7016f3ab0a39, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x80010, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x40, 0x1410, 0x10, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008090}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000039}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 426.821924ms ago: executing program 4 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0xc, 0x2, 0x9, 0x30}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x2, 0xf4, &(0x7f0000000140)=""/244, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 357.803137ms ago: executing program 4 (id=2191): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad00c5fce2b5cbaaadc5829fda", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x40) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(r0, 0xffffffff) 248.361431ms ago: executing program 1 (id=2192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="19", 0x3, 0x0, 0x81}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) 130.830542ms ago: executing program 2 (id=2193): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$tipc(0x1e, 0x2e0f4271482c5843, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r3, 0xc0a9}], 0x1, 0x3) 0s ago: executing program 1 (id=2194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710019009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0xc004, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff00003506000002000000170600000ee5e50cbf250000000000001f650000000000007507000002000000170700004c0001000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a3100000000080009"], 0x90}}, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@float={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x8}}, @enum={0xa, 0x7, 0x0, 0x6, 0x4, [{0x10, 0x2c}, {0x4, 0x3}, {0x9, 0x9}, {0xf, 0x7fffffff}, {0x4, 0x4}, {0x4, 0x795e}, {0x5, 0x2d}]}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000180)=""/59, 0xac, 0x3b, 0x1, 0x2}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc7b1, '\x00', 0x0, r8, 0x5, 0x2, 0x3}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@none}) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 249.004627][ T12] bridge_slave_1: left allmulticast mode [ 249.010326][ T12] bridge_slave_1: left promiscuous mode [ 249.017167][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.026724][ T12] bridge_slave_0: left allmulticast mode [ 249.032853][ T12] bridge_slave_0: left promiscuous mode [ 249.038564][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.334390][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.345828][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.356117][ T12] bond0 (unregistering): Released all slaves [ 249.599324][ T12] hsr_slave_0: left promiscuous mode [ 249.605976][ T12] hsr_slave_1: left promiscuous mode [ 249.612690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.620117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.630042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.638403][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.659560][ T12] veth1_macvtap: left promiscuous mode [ 249.665291][ T12] veth0_macvtap: left promiscuous mode [ 249.672275][ T12] veth1_vlan: left promiscuous mode [ 249.677575][ T12] veth0_vlan: left promiscuous mode [ 250.137404][T10897] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 250.153189][T10897] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1230'. [ 250.225123][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.242097][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.253660][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.266607][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.285737][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.449132][ T12] team0 (unregistering): Port device team_slave_1 removed [ 250.494289][ T12] team0 (unregistering): Port device team_slave_0 removed [ 251.021765][T10899] lo speed is unknown, defaulting to 1000 [ 251.640721][T10906] Failed to register nexthop notifier [ 251.667159][T10926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 251.673663][T10926] syzkaller1: linktype set to 6 [ 251.755907][T10899] chnl_net:caif_netlink_parms(): no params data found [ 251.953028][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.965193][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.974025][T10899] bridge_slave_0: entered allmulticast mode [ 251.988037][T10899] bridge_slave_0: entered promiscuous mode [ 252.325548][ T5854] Bluetooth: hci2: command tx timeout [ 253.031132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 253.039219][ C0] lec:lec_tx_timeout: lec0 [ 253.044415][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.419235][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.426878][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.434728][T10899] bridge_slave_1: entered allmulticast mode [ 253.443204][T10899] bridge_slave_1: entered promiscuous mode [ 253.566577][T10950] lo speed is unknown, defaulting to 1000 [ 253.592468][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 253.705695][T10899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.759056][T10899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.969385][T10899] team0: Port device team_slave_0 added [ 253.991665][T10899] team0: Port device team_slave_1 added [ 254.207847][T10899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.234641][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.294856][T10899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.324099][T10899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.334926][T10993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 254.340619][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.403631][ T5854] Bluetooth: hci2: command tx timeout [ 254.411631][T10899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.433300][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 254.551830][T10899] hsr_slave_0: entered promiscuous mode [ 254.559803][T10899] hsr_slave_1: entered promiscuous mode [ 254.566437][T10899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.574733][T10899] Cannot create hsr debugfs directory [ 254.661605][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 254.671297][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 255.099207][T11022] syzkaller0: entered allmulticast mode [ 255.160291][T11022] syzkaller0: left allmulticast mode [ 255.376805][T11031] tipc: Enabled bearer , priority 0 [ 255.427660][T11031] syzkaller0: entered promiscuous mode [ 255.436153][T11031] syzkaller0: entered allmulticast mode [ 255.463861][T10899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.489397][T11031] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 255.515567][T11031] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 255.554496][T10899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.605162][T11028] tipc: Resetting bearer [ 255.653581][T11028] tipc: Disabling bearer [ 255.681262][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1268'. [ 255.690332][T10899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.699097][T11043] netlink: 'syz.0.1266': attribute type 8 has an invalid length. [ 255.717065][T10899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.765514][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.819255][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1270'. [ 255.867045][T11066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1269'. [ 256.004022][T11078] netlink: 'syz.2.1272': attribute type 2 has an invalid length. [ 256.026308][T11076] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.096319][T11076] block nbd1: shutting down sockets [ 256.137499][T10899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.216285][T10899] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.254440][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.261735][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.293792][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.301023][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.481556][ T5854] Bluetooth: hci2: command tx timeout [ 256.749863][T11108] lo speed is unknown, defaulting to 1000 [ 256.772102][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1279'. [ 257.000136][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 257.063905][T11106] lo speed is unknown, defaulting to 1000 [ 257.123594][T11122] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443) [ 257.137704][T11122] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 257.148809][T11128] tipc: Enabling of bearer rejected, failed to enable media [ 257.192968][T10899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.322386][T11121] delete_channel: no stack [ 257.331373][T11121] delete_channel: no stack [ 257.477727][T11139] SET target dimension over the limit! [ 257.520181][T10899] veth0_vlan: entered promiscuous mode [ 257.548062][T10899] veth1_vlan: entered promiscuous mode [ 257.888672][T10899] veth0_macvtap: entered promiscuous mode [ 257.954795][T10899] veth1_macvtap: entered promiscuous mode [ 258.039053][T10899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.060565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 258.068665][ C0] lec:lec_tx_timeout: lec0 [ 258.074476][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 258.105806][T10899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.128240][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.245945][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.260324][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.280411][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.381397][T11182] x_tables: duplicate underflow at hook 1 [ 258.455286][T11174] lo speed is unknown, defaulting to 1000 [ 258.560665][ T5854] Bluetooth: hci2: command tx timeout [ 258.728006][T11188] __nla_validate_parse: 34 callbacks suppressed [ 258.728029][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 259.176748][T11190] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 259.249705][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.280736][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.328464][T11192] netlink: 'syz.4.1301': attribute type 11 has an invalid length. [ 259.452183][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.480960][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.496438][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'. [ 259.689715][T11204] veth8: entered allmulticast mode [ 259.719919][T11207] netlink: 'syz.4.1305': attribute type 13 has an invalid length. [ 259.749297][T11207] netlink: 'syz.4.1305': attribute type 17 has an invalid length. [ 259.844240][T11207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.086919][ T5958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.123908][T11206] lo speed is unknown, defaulting to 1000 [ 260.208944][ T5958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.388505][ T5958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.556798][ T5958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.649973][ T5958] bridge_slave_1: left allmulticast mode [ 260.656386][ T5958] bridge_slave_1: left promiscuous mode [ 260.662397][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.673968][ T5958] bridge_slave_0: left allmulticast mode [ 260.679640][ T5958] bridge_slave_0: left promiscuous mode [ 260.685500][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.013806][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.024992][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.035589][ T5958] bond0 (unregistering): Released all slaves [ 261.269839][ T5958] hsr_slave_0: left promiscuous mode [ 261.276104][ T5958] hsr_slave_1: left promiscuous mode [ 261.283295][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.292897][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.300991][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.308456][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.329902][ T5958] veth1_macvtap: left promiscuous mode [ 261.335580][ T5958] veth0_macvtap: left promiscuous mode [ 261.342083][ T5958] veth1_vlan: left promiscuous mode [ 261.347390][ T5958] veth0_vlan: left promiscuous mode [ 261.551225][T11226] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 262.014112][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.027291][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.051328][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.075365][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.101023][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.185983][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 262.232873][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 262.655522][T11226] bridge0: port 3(erspan0) entered disabled state [ 262.662324][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.679727][T11226] bridge0: port 3(erspan0) entered blocking state [ 262.686467][T11226] bridge0: port 3(erspan0) entered forwarding state [ 262.693515][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.700777][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.718473][T11226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 262.796171][T11243] lo speed is unknown, defaulting to 1000 [ 263.080548][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.088593][ C0] lec:lec_tx_timeout: lec0 [ 263.093498][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 263.185839][T11266] netlink: 'syz.4.1319': attribute type 21 has an invalid length. [ 263.278472][T11255] tipc: Enabled bearer , priority 0 [ 263.285959][T11255] syzkaller0: entered promiscuous mode [ 263.292108][T11255] syzkaller0: entered allmulticast mode [ 263.377819][T11243] chnl_net:caif_netlink_parms(): no params data found [ 263.390326][T11274] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1320'. [ 263.565297][T11243] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.576651][T11243] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.584318][T11243] bridge_slave_0: entered allmulticast mode [ 263.593373][T11243] bridge_slave_0: entered promiscuous mode [ 263.606204][T11243] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.614537][T11243] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.635613][T11243] bridge_slave_1: entered allmulticast mode [ 263.656982][T11243] bridge_slave_1: entered promiscuous mode [ 263.713858][T11243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.729313][T11243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.824323][T11247] tipc: Resetting bearer [ 263.873544][T11247] tipc: Disabling bearer [ 263.895929][T11243] team0: Port device team_slave_0 added [ 263.924286][T11243] team0: Port device team_slave_1 added [ 264.046892][T11243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.070613][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.129392][T11243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.164267][ T5166] Bluetooth: hci2: command tx timeout [ 264.213620][T11291] syzkaller0: entered promiscuous mode [ 264.219269][T11291] syzkaller0: entered allmulticast mode [ 264.233078][T11243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.246901][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.274937][T11243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.429967][T11243] hsr_slave_0: entered promiscuous mode [ 264.437506][T11243] hsr_slave_1: entered promiscuous mode [ 264.446329][T11243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.455031][T11243] Cannot create hsr debugfs directory [ 264.463858][T11312] netlink: 'syz.0.1328': attribute type 42 has an invalid length. [ 264.473893][T11312] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1328'. [ 264.473984][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1328'. [ 264.594552][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 265.592350][T11320] delete_channel: no stack [ 266.241465][ T5166] Bluetooth: hci2: command tx timeout [ 266.314100][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1333'. [ 266.446603][ T30] audit: type=1107 audit(1751819210.084:5): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œñ…Ì—}ƒÈhItv½Ýàâ5Z„œ‡š½šžÛ?"¸Vô³–³HböîEqWÔ_R»?u–?ØÑÉ7œyF4$Á’èšìÜDM†z£<“æt`•¸B€æˆ3_`~Xv¤ÇQ¬aCÛ¾Æ-'f£ ÑÛÁx‚gær¹M¬¼UiiP#q{yL£&ÏÑïkÎ 2¥Ò@›RÔdU)0ù&ÖÙE­°oÁÛè›1¸×l_x"!ÚwRÚŠ¤Àz¼8§52¼Q;3óÎnõwpy' [ 266.567309][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 266.601168][T11349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1337'. [ 267.092767][T11380] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.174627][T11389] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 267.486150][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 267.503410][T11380] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.543805][T11243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.559481][T11243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.573659][T11243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.601007][T11380] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.631311][T11243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.678710][T11380] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.837900][ T8644] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.879501][ T8644] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.915124][ T8644] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.995890][T11243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.037525][ T8644] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.076321][T11406] openvswitch: netlink: Message has 8 unknown bytes. [ 268.100797][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 268.108881][ C0] lec:lec_tx_timeout: lec0 [ 268.114480][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 268.130029][T11243] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.176845][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.184109][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.208198][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 268.223846][T11416] ieee802154 phy0 wpan0: encryption failed: -90 [ 268.263422][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.270634][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.322028][ T5166] Bluetooth: hci2: command tx timeout [ 268.912886][T11243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.095671][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 269.105301][T11243] veth0_vlan: entered promiscuous mode [ 269.138740][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 269.152419][T11243] veth1_vlan: entered promiscuous mode [ 269.164142][T11461] tipc: Enabling of bearer rejected, failed to enable media [ 269.180106][T11461] netlink: 'syz.2.1365': attribute type 23 has an invalid length. [ 269.276377][T11243] veth0_macvtap: entered promiscuous mode [ 269.313717][T11465] erspan0: entered promiscuous mode [ 269.319077][T11464] netlink: 'syz.0.1366': attribute type 13 has an invalid length. [ 269.335839][T11243] veth1_macvtap: entered promiscuous mode [ 269.346971][T11464] netlink: 'syz.0.1366': attribute type 17 has an invalid length. [ 269.508701][T11464] bridge0: port 1(dummy0) entered blocking state [ 269.515310][T11464] bridge0: port 1(dummy0) entered forwarding state [ 269.532978][T11464] bond0: left promiscuous mode [ 269.538190][T11464] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 269.554534][T11464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.565535][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.586131][T11464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.610399][T11243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.629589][T11475] x_tables: duplicate underflow at hook 1 [ 269.652283][T11243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.754508][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.769067][T11466] lo speed is unknown, defaulting to 1000 [ 269.794600][ T8644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.810369][ T8644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.840773][T11477] sctp: [Deprecated]: syz.2.1370 (pid 11477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.840773][T11477] Use struct sctp_sack_info instead [ 269.892790][ T8644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.918562][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.931138][ T8644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.021388][T11488] __nla_validate_parse: 2 callbacks suppressed [ 270.021403][T11488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1372'. [ 270.093257][T11494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1372'. [ 270.143190][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 270.332648][T11500] lo speed is unknown, defaulting to 1000 [ 270.373416][ T8644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.398404][ T8644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.410829][ T5166] Bluetooth: hci2: command tx timeout [ 270.479058][T11511] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1377'. [ 270.502837][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.529060][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.575002][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 270.999032][T11528] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1382'. [ 271.114630][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 271.287337][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 271.337697][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 271.377746][T11543] lo speed is unknown, defaulting to 1000 [ 271.466640][ T8644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.624908][ T8644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.785930][ T8644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.067969][ T8644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.174945][ T8644] bridge_slave_1: left allmulticast mode [ 272.183741][ T8644] bridge_slave_1: left promiscuous mode [ 272.190539][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.199858][ T8644] bridge_slave_0: left allmulticast mode [ 272.206375][ T8644] bridge_slave_0: left promiscuous mode [ 272.212332][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.536077][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.548382][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.559023][ T8644] bond0 (unregistering): Released all slaves [ 272.836565][ T8644] hsr_slave_0: left promiscuous mode [ 272.844513][ T8644] hsr_slave_1: left promiscuous mode [ 272.850332][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.860626][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.868858][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.877368][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.897701][ T8644] veth1_macvtap: left promiscuous mode [ 272.903487][ T8644] veth0_macvtap: left promiscuous mode [ 272.909110][ T8644] veth1_vlan: left promiscuous mode [ 272.915212][ T8644] veth0_vlan: left promiscuous mode [ 273.038192][T11550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 273.141066][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.149151][ C0] lec:lec_tx_timeout: lec0 [ 273.153837][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.336961][T11569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.498682][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.508824][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.519783][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.528797][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.557731][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.702139][T11580] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 273.745320][ T8644] team0 (unregistering): Port device team_slave_1 removed [ 273.784761][ T8644] team0 (unregistering): Port device team_slave_0 removed [ 274.338483][T11585] pim6reg1: entered promiscuous mode [ 274.370582][T11585] pim6reg1: entered allmulticast mode [ 274.397858][T11576] lo speed is unknown, defaulting to 1000 [ 274.843942][T11598] lo speed is unknown, defaulting to 1000 [ 275.359050][T11576] chnl_net:caif_netlink_parms(): no params data found [ 275.611697][ T5166] Bluetooth: hci2: command tx timeout [ 275.641921][T11643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.649437][T11643] bridge0: port 1(bond2) entered blocking state [ 275.656550][T11643] bridge0: port 1(bond2) entered disabled state [ 275.663362][T11643] bond2: entered allmulticast mode [ 275.671989][T11643] bond2: entered promiscuous mode [ 275.679373][T11643] bridge0: port 1(bond2) entered blocking state [ 275.685831][T11643] bridge0: port 1(bond2) entered forwarding state [ 275.703774][T11648] syz_tun: entered allmulticast mode [ 275.777722][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.802428][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.810265][T11576] bridge_slave_0: entered allmulticast mode [ 275.826804][T11576] bridge_slave_0: entered promiscuous mode [ 275.841081][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.852671][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.860113][T11576] bridge_slave_1: entered allmulticast mode [ 275.869366][T11576] bridge_slave_1: entered promiscuous mode [ 276.118650][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.165791][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.248193][T11675] __nla_validate_parse: 2 callbacks suppressed [ 276.248217][T11675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1418'. [ 276.279125][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 276.322369][T11576] team0: Port device team_slave_0 added [ 276.332938][T11576] team0: Port device team_slave_1 added [ 276.466445][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.496991][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.595711][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.635569][ T36] bridge0: port 1(bond2) entered disabled state [ 276.675049][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.697609][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.764228][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.797131][T11697] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 276.807783][T11697] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 276.933424][T11576] hsr_slave_0: entered promiscuous mode [ 276.940339][T11576] hsr_slave_1: entered promiscuous mode [ 276.957855][T11576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.968832][T11576] Cannot create hsr debugfs directory [ 277.007719][T11704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1423'. [ 277.045688][T11704] bridge_slave_1: entered promiscuous mode [ 277.268258][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1429'. [ 277.448170][T11728] lo speed is unknown, defaulting to 1000 [ 277.479114][T11732] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 277.614548][T11735] bond3: (slave veth3): Enslaving as an active interface with a down link [ 277.680759][ T5854] Bluetooth: hci2: command tx timeout [ 277.733948][T11733] bond3: (slave veth5): Enslaving as an active interface with a down link [ 277.960178][T11758] netlink: 'syz.1.1435': attribute type 16 has an invalid length. [ 278.004745][T11760] syz_tun: entered promiscuous mode [ 278.016939][T11760] batadv_slave_0: entered promiscuous mode [ 278.024064][T11758] netlink: 'syz.1.1435': attribute type 17 has an invalid length. [ 278.041578][T11760] hsr1: entered allmulticast mode [ 278.046637][T11760] syz_tun: entered allmulticast mode [ 278.055022][T11760] batadv_slave_0: entered allmulticast mode [ 278.063397][T11738] lo speed is unknown, defaulting to 1000 [ 278.223690][T11758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.263912][ T9] lo speed is unknown, defaulting to 1000 [ 278.270169][ T9] syz1: Port: 1 Link ACTIVE [ 278.271695][T11576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.321914][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 278.363205][T11576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.397664][T11576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.406324][T11775] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 278.421652][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 278.434830][T11576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.447306][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 278.725082][T11774] lo speed is unknown, defaulting to 1000 [ 278.911714][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 279.288956][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.372476][T11802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1447'. [ 279.398833][T11802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1447'. [ 279.441265][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6290 ms [ 279.449390][ C0] lec:lec_tx_timeout: lec0 [ 279.454494][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.760792][ T5166] Bluetooth: hci2: command tx timeout [ 280.099832][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.147546][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.154774][ T8644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.215805][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.223109][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.263680][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 280.459928][T11576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.092903][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.119005][T11864] sctp: [Deprecated]: syz.1.1462 (pid 11864) Use of int in maxseg socket option. [ 281.119005][T11864] Use struct sctp_assoc_value instead [ 281.185192][T11866] openvswitch: netlink: IP tunnel dst address not specified [ 281.195943][T11576] veth0_vlan: entered promiscuous mode [ 281.248233][T11576] veth1_vlan: entered promiscuous mode [ 281.347586][T11576] veth0_macvtap: entered promiscuous mode [ 281.358854][T11576] veth1_macvtap: entered promiscuous mode [ 281.412048][T11576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.464439][T11576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.508211][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.526771][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.545918][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.572866][T11883] __nla_validate_parse: 5 callbacks suppressed [ 281.572887][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 281.601093][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.822983][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.839802][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.847378][ T5166] Bluetooth: hci2: command 0x0419 tx timeout [ 281.903897][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.939839][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.084910][T11911] x_tables: duplicate underflow at hook 3 [ 282.369570][T11917] netlink: 'syz.4.1478': attribute type 9 has an invalid length. [ 282.378004][T11917] netlink: 'syz.4.1478': attribute type 6 has an invalid length. [ 282.385945][T11917] netlink: 'syz.4.1478': attribute type 7 has an invalid length. [ 282.411628][T11917] netlink: 'syz.4.1478': attribute type 8 has an invalid length. [ 282.613679][T11925] netlink: 'syz.4.1480': attribute type 11 has an invalid length. [ 282.637329][T11925] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1480'. [ 282.709269][T11929] --map-set only usable from mangle table [ 282.714174][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 282.913669][ T8644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.307354][ T8644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.695863][ T8644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.767618][ T8644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.858619][ T8644] bridge_slave_1: left allmulticast mode [ 283.865053][ T8644] bridge_slave_1: left promiscuous mode [ 283.871357][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.881221][ T8644] bridge_slave_0: left allmulticast mode [ 283.886873][ T8644] bridge_slave_0: left promiscuous mode [ 283.893897][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.225926][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.237611][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.248225][ T8644] bond0 (unregistering): Released all slaves [ 284.572337][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 284.664063][T11949] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1485'. [ 284.717416][ T8644] hsr_slave_0: left promiscuous mode [ 284.891060][ T8644] hsr_slave_1: left promiscuous mode [ 284.904712][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.940242][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.985436][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.016835][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.173553][ T8644] veth1_macvtap: left promiscuous mode [ 285.199570][ T8644] veth0_macvtap: left promiscuous mode [ 285.200560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 285.213246][ C0] lec:lec_tx_timeout: lec0 [ 285.214719][ T8644] veth1_vlan: left promiscuous mode [ 285.220902][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.250061][ T8644] veth0_vlan: left promiscuous mode [ 285.498440][T11963] xt_l2tp: invalid flags combination: 4 [ 285.517703][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.531819][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.547277][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.559411][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.569044][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.215718][ T8644] team0 (unregistering): Port device team_slave_1 removed [ 286.256411][ T8644] team0 (unregistering): Port device team_slave_0 removed [ 286.490752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.729563][T11966] lo speed is unknown, defaulting to 1000 [ 286.808222][ T5166] Bluetooth: hci3: command 0x0405 tx timeout [ 286.904932][ T9664] IPVS: starting estimator thread 0... [ 286.908844][T11992] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 287.027448][T11995] IPVS: using max 36 ests per chain, 86400 per kthread [ 287.299706][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 287.333029][T11966] chnl_net:caif_netlink_parms(): no params data found [ 287.401058][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 287.680841][ T5854] Bluetooth: hci2: command tx timeout [ 287.837637][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.855703][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.873614][T11966] bridge_slave_0: entered allmulticast mode [ 287.889783][T11966] bridge_slave_0: entered promiscuous mode [ 287.910878][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.926050][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.944662][T11966] bridge_slave_1: entered allmulticast mode [ 287.956682][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1498'. [ 287.964534][T11966] bridge_slave_1: entered promiscuous mode [ 288.021012][T11966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.044190][T11966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.114073][T11966] team0: Port device team_slave_0 added [ 288.124429][T11966] team0: Port device team_slave_1 added [ 288.131855][T12028] lo speed is unknown, defaulting to 1000 [ 288.138724][T12030] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20002 [ 288.202949][T11966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.209972][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.238084][T11966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.255717][T11966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.263875][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.292188][T11966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.488259][T11966] hsr_slave_0: entered promiscuous mode [ 288.495488][T11966] hsr_slave_1: entered promiscuous mode [ 288.509690][T11966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.517727][T11966] Cannot create hsr debugfs directory [ 288.710288][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 288.759424][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 288.839068][T12051] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1507'. [ 288.958815][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 289.047386][T12056] nbd: must specify a size in bytes for the device [ 289.160709][T11966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.175961][T11966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.188319][T11966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.200170][T11966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.372959][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.404428][T12072] Cannot find del_set index 286 as target [ 289.415268][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.432390][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.439640][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.447898][T12072] netlink: 'syz.1.1512': attribute type 3 has an invalid length. [ 289.467623][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.474818][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.646395][T12076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.770574][ T5854] Bluetooth: hci2: command tx timeout [ 289.988562][T12101] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 290.018961][T12101] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 290.349447][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.358534][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 290.377800][T12120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1523'. [ 290.408120][T12122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1525'. [ 290.514156][T11966] veth0_vlan: entered promiscuous mode [ 290.546707][T11966] veth1_vlan: entered promiscuous mode [ 290.595061][T12127] ip_vti0: left allmulticast mode [ 290.682032][T11966] veth0_macvtap: entered promiscuous mode [ 290.715128][T11966] veth1_macvtap: entered promiscuous mode [ 290.775500][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.806654][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.937306][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.960495][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 290.968594][ C0] lec:lec_tx_timeout: lec0 [ 290.974797][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.995606][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.051582][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.093362][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.255115][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.307728][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.384438][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.436183][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.922870][T12183] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.088590][T12187] pim6reg: entered allmulticast mode [ 292.184691][T12187] pim6reg: left allmulticast mode [ 292.707556][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.872407][T12222] __nla_validate_parse: 8 callbacks suppressed [ 292.872429][T12222] netlink: 4884 bytes leftover after parsing attributes in process `syz.4.1553'. [ 292.911599][T12222] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 293.300574][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.368324][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.427735][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.527375][ T36] bridge_slave_1: left allmulticast mode [ 293.541071][ T36] bridge_slave_1: left promiscuous mode [ 293.546829][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.568143][ T36] bridge_slave_0: left allmulticast mode [ 293.574882][ T36] bridge_slave_0: left promiscuous mode [ 293.580792][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.856494][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.867440][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.879938][ T36] bond0 (unregistering): Released all slaves [ 294.117928][ T36] hsr_slave_0: left promiscuous mode [ 294.124250][ T36] hsr_slave_1: left promiscuous mode [ 294.130084][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.137795][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.148494][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.156150][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.176681][ T36] veth1_macvtap: left promiscuous mode [ 294.182549][ T36] veth0_macvtap: left promiscuous mode [ 294.188168][ T36] veth1_vlan: left promiscuous mode [ 294.193618][ T36] veth0_vlan: left promiscuous mode [ 294.439083][T12231] netlink: 'syz.1.1555': attribute type 39 has an invalid length. [ 294.928569][T12253] FAULT_INJECTION: forcing a failure. [ 294.928569][T12253] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.965131][T12253] CPU: 1 UID: 0 PID: 12253 Comm: syz.2.1559 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 294.965165][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.965186][T12253] Call Trace: [ 294.965195][T12253] [ 294.965205][T12253] dump_stack_lvl+0x189/0x250 [ 294.965249][T12253] ? __pfx____ratelimit+0x10/0x10 [ 294.965278][T12253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.965305][T12253] ? __pfx__printk+0x10/0x10 [ 294.965336][T12253] ? __might_fault+0xb0/0x130 [ 294.965377][T12253] should_fail_ex+0x414/0x560 [ 294.965415][T12253] _copy_from_user+0x2d/0xb0 [ 294.965448][T12253] ___sys_sendmsg+0x158/0x2a0 [ 294.965487][T12253] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.965566][T12253] ? __fget_files+0x2a/0x420 [ 294.965595][T12253] ? __fget_files+0x3a0/0x420 [ 294.965638][T12253] __x64_sys_sendmsg+0x19b/0x260 [ 294.965662][T12253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.965709][T12253] ? __pfx_ksys_write+0x10/0x10 [ 294.965732][T12253] ? rcu_is_watching+0x15/0xb0 [ 294.965771][T12253] ? do_syscall_64+0xbe/0x3b0 [ 294.965805][T12253] do_syscall_64+0xfa/0x3b0 [ 294.965833][T12253] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.965860][T12253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.965882][T12253] ? clear_bhb_loop+0x60/0xb0 [ 294.965909][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.965931][T12253] RIP: 0033:0x7f463d58e929 [ 294.965956][T12253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.965975][T12253] RSP: 002b:00007f463e3c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.966004][T12253] RAX: ffffffffffffffda RBX: 00007f463d7b6160 RCX: 00007f463d58e929 [ 294.966020][T12253] RDX: 0000000004044000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 294.966035][T12253] RBP: 00007f463e3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 294.966048][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.966061][T12253] R13: 0000000000000000 R14: 00007f463d7b6160 R15: 00007fff4143e5c8 [ 294.966099][T12253] [ 295.231648][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.268390][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.287807][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.296723][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.309885][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.527718][ T36] team0 (unregistering): Port device team_slave_1 removed [ 295.576341][ T36] team0 (unregistering): Port device team_slave_0 removed [ 295.983540][T12231] veth0_macvtap: left promiscuous mode [ 295.991165][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 295.999260][ C0] lec:lec_tx_timeout: lec0 [ 296.003906][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.040127][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 296.163462][T12257] lo speed is unknown, defaulting to 1000 [ 296.319913][T12282] tipc: Enabled bearer , priority 0 [ 296.406990][T12282] syzkaller0: entered promiscuous mode [ 296.421135][T12282] syzkaller0: entered allmulticast mode [ 296.448890][T12282] tipc: Resetting bearer [ 296.502999][T12281] tipc: Resetting bearer [ 296.536305][T12281] tipc: Disabling bearer [ 296.637842][T12299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1571'. [ 296.764869][T12257] chnl_net:caif_netlink_parms(): no params data found [ 296.996799][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'. [ 297.016893][T12323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.079975][T12257] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.101637][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.118086][T12257] bridge_slave_0: entered allmulticast mode [ 297.132500][T12257] bridge_slave_0: entered promiscuous mode [ 297.142358][T12257] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.149702][T12257] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.157115][T12257] bridge_slave_1: entered allmulticast mode [ 297.174280][T12257] bridge_slave_1: entered promiscuous mode [ 297.224923][T12257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.238596][T12257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.350222][ T30] audit: type=1107 audit(1751819240.984:6): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¹†j¬ëj÷ÅÎr [ 297.350222][ T30] K6=ï fŸþò§Ô+꘎Ñeš»‰[åÿ€=y4MĘ  K“òJÙcÚ_íLáºd0¥¯ÝW(qІ،ºn<$!e[¶q­VV´ Ç1@™;|íC4àZeàÿŽãgÎJCAäg 1 [ 305.824829][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.835042][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.844572][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.852780][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.031393][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.039989][ C0] lec:lec_tx_timeout: lec0 [ 306.044522][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.426076][T12616] lo speed is unknown, defaulting to 1000 [ 306.504578][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 306.534707][T12628] netlink: 'syz.1.1658': attribute type 8 has an invalid length. [ 306.892325][T12638] netlink: 'syz.2.1660': attribute type 45 has an invalid length. [ 306.948753][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 306.970405][T12642] lo speed is unknown, defaulting to 1000 [ 306.982180][T12644] netlink: 'syz.4.1661': attribute type 10 has an invalid length. [ 307.316192][T12616] chnl_net:caif_netlink_parms(): no params data found [ 307.802453][T12616] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.830404][T12616] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.837808][T12616] bridge_slave_0: entered allmulticast mode [ 307.852187][T12616] bridge_slave_0: entered promiscuous mode [ 307.862078][T12616] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.869524][T12616] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.877516][T12616] bridge_slave_1: entered allmulticast mode [ 307.885678][T12616] bridge_slave_1: entered promiscuous mode [ 307.921115][ T5854] Bluetooth: hci2: command tx timeout [ 308.005194][T12616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.025426][T12616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.108729][T12616] team0: Port device team_slave_0 added [ 308.155961][T12616] team0: Port device team_slave_1 added [ 308.234351][T12616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.257763][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.296226][T12616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.311405][T12616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.318762][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.345857][T12616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.369895][T12685] __nla_validate_parse: 4 callbacks suppressed [ 308.369915][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1674'. [ 308.390986][T12685] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1674'. [ 308.513462][T12616] hsr_slave_0: entered promiscuous mode [ 308.534751][T12616] hsr_slave_1: entered promiscuous mode [ 308.546510][T12616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.570676][T12616] Cannot create hsr debugfs directory [ 308.650229][T12687] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 308.875846][T12696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.002237][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 309.140977][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 309.203785][T12705] dummy0: entered promiscuous mode [ 309.223388][T12705] dummy0: left promiscuous mode [ 309.263047][T12710] netlink: 'syz.4.1681': attribute type 11 has an invalid length. [ 309.305827][T12707] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.456736][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1684'. [ 309.493087][T12716] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1685'. [ 309.530971][T12716] tc_dump_action: action bad kind [ 309.692642][T12718] lo speed is unknown, defaulting to 1000 [ 309.707382][T12616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 309.750049][T12616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 309.820273][T12616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 309.927486][T12616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 310.004584][ T5854] Bluetooth: hci2: command tx timeout [ 310.201178][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 310.277143][T12742] geneve4: entered promiscuous mode [ 310.291805][T12742] geneve4: entered allmulticast mode [ 310.303617][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 310.319100][T12616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.364214][T12745] delete_channel: no stack [ 310.575316][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1691'. [ 310.603327][T12616] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.639031][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.646254][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.735376][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.742652][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.017263][T12763] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 311.061161][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.068524][T12763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.069224][ C0] lec:lec_tx_timeout: lec0 [ 311.080723][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 311.124877][T12763] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 311.417837][T12616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.580134][T12616] veth0_vlan: entered promiscuous mode [ 311.631460][T12616] veth1_vlan: entered promiscuous mode [ 311.723646][T12616] veth0_macvtap: entered promiscuous mode [ 311.755632][T12616] veth1_macvtap: entered promiscuous mode [ 311.807243][T12616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.835119][T12616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.968246][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.988943][T12774] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1697'. [ 311.998501][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.035172][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.086590][ T5854] Bluetooth: hci2: command tx timeout [ 312.115749][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.337645][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.373851][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.433130][T12787] IPVS: length: 8 != 446622349272 [ 312.474371][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.491443][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.858359][T12799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.349591][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.668115][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.793480][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.544872][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.580982][T12847] __nla_validate_parse: 2 callbacks suppressed [ 315.581005][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 315.787820][T12855] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1730'. [ 315.855943][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.867362][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.883611][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.887297][ T1145] bridge_slave_1: left allmulticast mode [ 315.897425][ T1145] bridge_slave_1: left promiscuous mode [ 315.909582][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.917322][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.934736][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.976478][ T1145] bridge_slave_0: left allmulticast mode [ 315.986668][ T1145] bridge_slave_0: left promiscuous mode [ 316.006563][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.036183][T12869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.090494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 316.098594][ C0] lec:lec_tx_timeout: lec0 [ 316.103382][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.139667][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 316.149563][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 316.628798][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.640174][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.653955][ T1145] bond0 (unregistering): Released all slaves [ 316.828156][T12859] lo speed is unknown, defaulting to 1000 [ 317.069935][T12902] openvswitch: netlink: Message has 24 unknown bytes. [ 317.205944][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484314][ T1145] hsr_slave_0: left promiscuous mode [ 317.501609][ T1145] hsr_slave_1: left promiscuous mode [ 317.518402][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.535033][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.565263][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.589617][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.662893][ T1145] veth1_macvtap: left promiscuous mode [ 317.678760][ T1145] veth0_macvtap: left promiscuous mode [ 317.688996][ T1145] veth1_vlan: left promiscuous mode [ 317.699069][ T1145] veth0_vlan: left promiscuous mode [ 318.010787][ T5854] Bluetooth: hci2: command tx timeout [ 318.357257][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 318.404233][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 318.917990][T12936] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 318.948062][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 318.964740][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 318.974221][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 318.983862][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 318.994278][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 319.041282][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 319.083750][T12859] chnl_net:caif_netlink_parms(): no params data found [ 319.323604][T12962] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 319.341830][T12962] bond0 (unregistering): Released all slaves [ 319.431620][T12969] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 319.517655][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.526104][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.533436][T12859] bridge_slave_0: entered allmulticast mode [ 319.541873][T12859] bridge_slave_0: entered promiscuous mode [ 319.551485][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.559570][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.567712][T12859] bridge_slave_1: entered allmulticast mode [ 319.592597][T12859] bridge_slave_1: entered promiscuous mode [ 319.690225][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.707536][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.776049][T12859] team0: Port device team_slave_0 added [ 319.796154][T12859] team0: Port device team_slave_1 added [ 319.870582][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.881603][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.920772][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.975411][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.982838][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.010303][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.080644][ T5854] Bluetooth: hci2: command tx timeout [ 320.155845][T12859] hsr_slave_0: entered promiscuous mode [ 320.163756][T12859] hsr_slave_1: entered promiscuous mode [ 320.170289][T12859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.184663][T12859] Cannot create hsr debugfs directory [ 320.267969][T13001] syz.1.1785 uses old SIOCAX25GETINFO [ 320.280147][T12996] syzkaller0: entered allmulticast mode [ 320.835298][T13026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.112346][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 321.120418][ C0] lec:lec_tx_timeout: lec0 [ 321.126214][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.161007][ T5166] Bluetooth: hci2: command tx timeout [ 322.268324][T13039] lo speed is unknown, defaulting to 1000 [ 322.543175][T13046] lo speed is unknown, defaulting to 1000 [ 322.688031][T13054] scsi_nl_rcv_msg: discarding partial skb [ 322.694249][T13060] scsi_nl_rcv_msg: discarding partial skb [ 322.707864][T13059] tipc: Enabled bearer , priority 0 [ 322.734282][T13058] tipc: Disabling bearer [ 322.782302][T13054] lo speed is unknown, defaulting to 1000 [ 323.088759][T13074] __nla_validate_parse: 29 callbacks suppressed [ 323.088781][T13074] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1806'. [ 323.136442][T12859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.158852][T12859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.203940][T12859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.219883][T13077] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1807'. [ 323.259516][T13076] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.277919][T13076] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.293655][T13076] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.298916][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 323.318197][T12859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.382972][T13077] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.392488][T13077] team0: Port device batadv1 added [ 323.423630][T13076] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.456966][T13076] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.469308][T13076] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.549118][T13076] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.559893][T13076] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.574295][T13076] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.614352][T13092] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1810'. [ 323.642908][T13094] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1811'. [ 323.670069][T13076] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.683730][T13076] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.725387][T13076] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.847738][T13096] wireguard0: entered promiscuous mode [ 323.869216][T13096] wireguard0: entered allmulticast mode [ 323.942960][T13101] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 324.048074][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.155023][ T203] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.179369][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'. [ 324.181115][ T203] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 324.214470][ T203] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.232105][T13118] xt_bpf: check failed: parse error [ 324.238637][ T5958] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.240834][ T5166] Bluetooth: hci2: command 0x0419 tx timeout [ 324.247945][ T5958] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 324.293871][ T5958] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.315821][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.367124][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.381769][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 324.389920][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.427105][ T203] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.444215][ T203] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 324.466684][ T203] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.500976][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.508225][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.585802][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.593050][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.667018][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 324.736961][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1819'. [ 325.115058][T13132] bridge0: port 3(erspan0) entered disabled state [ 325.217180][T13132] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.289822][T13147] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 325.312538][T13147] netlink: 'syz.4.1826': attribute type 10 has an invalid length. [ 325.323167][T13132] 0ªX¹¦À: left allmulticast mode [ 325.356829][T13147] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1826'. [ 325.400003][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.505662][T12859] veth0_vlan: entered promiscuous mode [ 325.566710][T12859] veth1_vlan: entered promiscuous mode [ 325.634850][T12859] veth0_macvtap: entered promiscuous mode [ 325.659540][T12859] veth1_macvtap: entered promiscuous mode [ 325.691160][T13161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.727629][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.747332][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.785491][ T203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.844889][ T203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.864951][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'. [ 325.883094][ T203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.904521][ T203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.074559][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.086317][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.226564][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.245170][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.321011][ T5166] Bluetooth: hci2: command 0x0419 tx timeout [ 326.569089][T13190] No such timeout policy "syz1" [ 326.960555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 326.968610][ C0] lec:lec_tx_timeout: lec0 [ 326.973932][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.059761][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.089625][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.197033][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.458972][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.738192][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.927525][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.041582][ T36] bridge_slave_1: left allmulticast mode [ 328.047263][ T36] bridge_slave_1: left promiscuous mode [ 328.055033][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.064582][ T36] bridge_slave_0: left allmulticast mode [ 328.070243][ T36] bridge_slave_0: left promiscuous mode [ 328.076412][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.407102][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.418221][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.428773][ T36] bond0 (unregistering): Released all slaves [ 328.649106][ T36] hsr_slave_0: left promiscuous mode [ 328.655777][ T36] hsr_slave_1: left promiscuous mode [ 328.662615][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.670055][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.678722][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.686980][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.707364][ T36] veth1_macvtap: left promiscuous mode [ 328.713284][ T36] veth0_macvtap: left promiscuous mode [ 328.718921][ T36] veth1_vlan: left promiscuous mode [ 328.725076][ T36] veth0_vlan: left promiscuous mode [ 329.167204][ T36] team0 (unregistering): Port device team_slave_1 removed [ 329.274395][ T36] team0 (unregistering): Port device team_slave_0 removed [ 329.328278][T13213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.519340][T13220] sctp: [Deprecated]: syz.2.1850 (pid 13220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.519340][T13220] Use struct sctp_sack_info instead [ 330.049919][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.059959][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.070708][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.082348][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.091946][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.354086][T13234] __nla_validate_parse: 6 callbacks suppressed [ 330.354104][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 330.453298][T13234] veth1_macvtap: left promiscuous mode [ 330.528519][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 330.683507][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 330.762085][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1856'. [ 330.780650][T13241] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1856'. [ 330.800208][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1856'. [ 330.953389][T13229] lo speed is unknown, defaulting to 1000 [ 331.085820][T13246] tipc: Failed to obtain node identity [ 331.111405][T13246] tipc: Enabling of bearer rejected, failed to enable media [ 331.632468][T13229] chnl_net:caif_netlink_parms(): no params data found [ 331.867723][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.875422][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.921543][T13229] bridge_slave_0: entered allmulticast mode [ 331.939814][T13229] bridge_slave_0: entered promiscuous mode [ 331.957090][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.976427][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.980689][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 331.991587][ C0] lec:lec_tx_timeout: lec0 [ 331.995076][T13229] bridge_slave_1: entered allmulticast mode [ 331.996869][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.022709][T13229] bridge_slave_1: entered promiscuous mode [ 332.161158][ T5854] Bluetooth: hci2: command tx timeout [ 332.204564][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.238622][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.380026][T13229] team0: Port device team_slave_0 added [ 332.477492][T13229] team0: Port device team_slave_1 added [ 332.658253][T13293] lo speed is unknown, defaulting to 1000 [ 332.877088][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.884266][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.961645][T13304] netlink: 'syz.2.1869': attribute type 6 has an invalid length. [ 332.980336][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.127776][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.196656][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.299209][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.734369][T13229] hsr_slave_0: entered promiscuous mode [ 333.760018][T13229] hsr_slave_1: entered promiscuous mode [ 333.774445][T13229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.784315][T13229] Cannot create hsr debugfs directory [ 333.808417][T13324] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 333.819740][T13324] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1877'. [ 333.962968][T13322] Cannot find del_set index 2 as target [ 334.037048][T13322] can: request_module (can-proto-5) failed. [ 334.073012][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 334.247857][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1880'. [ 334.257355][ T5854] Bluetooth: hci2: command tx timeout [ 334.803436][T13229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.824390][T13229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.833051][T13364] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 334.929101][T13229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.953505][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 334.957842][T13229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.034103][T13364] tipc: Enabled bearer , priority 0 [ 335.052583][T13364] syzkaller0: entered promiscuous mode [ 335.058154][T13364] syzkaller0: entered allmulticast mode [ 335.146806][T13364] tipc: Resetting bearer [ 335.217496][T13360] tipc: Resetting bearer [ 335.241427][T13360] tipc: Disabling bearer [ 335.351491][T13387] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 335.426350][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.474861][T13392] vlan0: entered allmulticast mode [ 335.480298][T13392] geneve1: entered allmulticast mode [ 335.505159][T13392] bond0: (slave vlan0): Opening slave failed [ 335.536811][T13394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'. [ 335.789826][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.823589][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.837791][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.845023][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.903400][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.910676][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.984133][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 336.028745][T13403] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 336.332461][ T5854] Bluetooth: hci2: command tx timeout [ 336.421580][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.478253][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 336.582744][T13229] veth0_vlan: entered promiscuous mode [ 336.617487][T13229] veth1_vlan: entered promiscuous mode [ 336.721175][T13229] veth0_macvtap: entered promiscuous mode [ 336.755132][T13229] veth1_macvtap: entered promiscuous mode [ 336.831486][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 336.843534][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.898591][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.954517][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.981295][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.010526][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 337.018600][ C0] lec:lec_tx_timeout: lec0 [ 337.040373][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.075416][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.098427][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 337.165228][T13460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1914'. [ 337.346745][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 337.356063][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.385311][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.466570][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1919'. [ 337.495443][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.503781][T13477] netlink: 'syz.0.1920': attribute type 4 has an invalid length. [ 337.529286][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.563493][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 337.590145][T13472] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.597458][T13472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.611387][T13472] bridge0: entered promiscuous mode [ 337.667944][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 337.757741][T13491] netlink: 'syz.0.1925': attribute type 2 has an invalid length. [ 337.779372][T13491] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 338.016539][T13502] nbd: must specify a size in bytes for the device [ 338.451583][T13524] wireguard0: entered promiscuous mode [ 338.457118][T13524] wireguard0: entered allmulticast mode [ 338.698713][T13539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.786667][T13542] erspan0: entered promiscuous mode [ 338.972653][ T5958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.412859][ T5958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.477219][ T5958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.547196][ T5958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.653184][ T5958] bridge_slave_1: left allmulticast mode [ 339.658946][ T5958] bridge_slave_1: left promiscuous mode [ 339.665473][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.674941][ T5958] bridge_slave_0: left allmulticast mode [ 339.680892][ T5958] bridge_slave_0: left promiscuous mode [ 339.686821][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.005069][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.017363][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.029637][ T5958] bond0 (unregistering): Released all slaves [ 340.248395][ T5958] hsr_slave_0: left promiscuous mode [ 340.254440][ T5958] hsr_slave_1: left promiscuous mode [ 340.260315][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.271012][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.279009][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.287035][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.308915][ T5958] veth1_macvtap: left promiscuous mode [ 340.314843][ T5958] veth0_macvtap: left promiscuous mode [ 340.321134][ T5958] veth1_vlan: left promiscuous mode [ 340.326453][ T5958] veth0_vlan: left promiscuous mode [ 340.778075][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 340.826726][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 341.457498][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.476650][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.491735][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.529313][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.549690][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.669708][T13570] lo speed is unknown, defaulting to 1000 [ 341.866744][T13575] lo speed is unknown, defaulting to 1000 [ 342.942978][T13608] ¾x9ÿ: left allmulticast mode [ 343.026605][ T1145] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.070519][ T1145] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 343.078933][ T1145] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.125806][ T1145] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.147020][ T1145] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 343.160641][ T1145] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.176046][T13575] chnl_net:caif_netlink_parms(): no params data found [ 343.191934][ T1145] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.200346][ T1145] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 343.217947][ T1145] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.273515][ T1145] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.290560][ T1145] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 343.296402][T13633] xt_l2tp: v2 doesn't support IP mode [ 343.309174][ T1145] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.607695][ T5166] Bluetooth: hci2: command tx timeout [ 343.646121][T13639] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.667215][T13639] syzkaller0: entered promiscuous mode [ 343.672896][T13639] syzkaller0: entered allmulticast mode [ 343.680150][T13656] __nla_validate_parse: 3 callbacks suppressed [ 343.680169][T13656] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1967'. [ 343.698277][T13656] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1967'. [ 343.719335][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.736240][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.744345][T13575] bridge_slave_0: entered allmulticast mode [ 343.756740][T13575] bridge_slave_0: entered promiscuous mode [ 343.767323][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.779564][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.788137][T13575] bridge_slave_1: entered allmulticast mode [ 343.801171][T13575] bridge_slave_1: entered promiscuous mode [ 343.817778][T13661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1970'. [ 343.879942][T13664] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 343.984888][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 345.251090][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.284419][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.381044][T13673] nbd: must specify at least one socket [ 345.510336][T13575] team0: Port device team_slave_0 added [ 345.560129][T13575] team0: Port device team_slave_1 added [ 345.676588][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.690613][ T5166] Bluetooth: hci2: command tx timeout [ 345.694823][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.761286][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.789302][T13687] netlink: 'syz.0.1976': attribute type 5 has an invalid length. [ 345.815147][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.831540][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.905151][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.099503][T13703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1979'. [ 346.126894][T13575] hsr_slave_0: entered promiscuous mode [ 346.148394][T13575] hsr_slave_1: entered promiscuous mode [ 346.167733][T13575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.187246][T13575] Cannot create hsr debugfs directory [ 346.615284][T13723] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 346.637755][T13723] netlink: 'syz.4.1987': attribute type 2 has an invalid length. [ 346.648353][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 347.035989][T13575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.083999][T13575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.118490][T13575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.153364][T13575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.451273][T13575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.522479][T13575] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.566327][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.573613][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.647516][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.654736][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.713031][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 347.761176][ T5166] Bluetooth: hci2: command tx timeout [ 347.789697][T13756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1996'. [ 347.843056][T13762] bridge0: Device is already in use. [ 347.866852][T13756] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 347.910837][T13756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1996'. [ 348.240150][T13767] syzkaller1: entered promiscuous mode [ 348.252493][T13767] syzkaller1: entered allmulticast mode [ 348.471704][T13575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.615365][T13575] veth0_vlan: entered promiscuous mode [ 349.048902][T13805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2009'. [ 349.074606][T13575] veth1_vlan: entered promiscuous mode [ 349.158044][T13808] netlink: 'syz.4.2010': attribute type 15 has an invalid length. [ 349.172681][T13575] veth0_macvtap: entered promiscuous mode [ 349.187130][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 349.229369][T13575] veth1_macvtap: entered promiscuous mode [ 349.234117][T13811] netlink: 'syz.4.2010': attribute type 15 has an invalid length. [ 349.263887][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 349.287543][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 349.312495][T13575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.347949][T13575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.515127][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.555329][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.616348][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.651343][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.795767][T13819] netlink: 'syz.4.2013': attribute type 3 has an invalid length. [ 349.808427][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 349.841228][ T5166] Bluetooth: hci2: command tx timeout [ 349.902942][T13819] tipc: Enabled bearer , priority 18 [ 349.918534][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.921193][T13823] bridge: RTM_NEWNEIGH with invalid ether address [ 349.935297][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.951296][T13822] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 349.985852][T13822] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.994554][T13826] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 350.000108][T13822] bridge0: left promiscuous mode [ 350.049941][T13826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.081927][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2014'. [ 350.088741][T13826] gretap1: entered promiscuous mode [ 350.100768][T13826] bond1: (slave gretap1): making interface the new active one [ 350.109744][T13826] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 350.127580][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.140994][T13827] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 350.157530][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.203873][T13826] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 350.440407][T13839] sctp: [Deprecated]: syz.4.2018 (pid 13839) Use of int in maxseg socket option. [ 350.440407][T13839] Use struct sctp_assoc_value instead [ 350.732607][T13853] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 350.744261][T13853] netlink: 784 bytes leftover after parsing attributes in process `syz.0.2022'. [ 350.765044][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 351.021352][ T5952] tipc: Node number set to 2624073068 [ 351.179650][T13867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2026'. [ 351.194717][ T203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.207917][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2026'. [ 351.434182][ T203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.626680][ T203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.706985][ T203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.849187][ T203] bridge_slave_1: left allmulticast mode [ 351.861106][ T203] bridge_slave_1: left promiscuous mode [ 351.866953][ T203] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.882478][ T203] bridge_slave_0: left allmulticast mode [ 351.888298][ T203] bridge_slave_0: left promiscuous mode [ 351.894964][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.263761][ T203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.276546][ T203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.288572][ T203] bond0 (unregistering): Released all slaves [ 352.505423][ T203] hsr_slave_0: left promiscuous mode [ 352.512708][ T203] hsr_slave_1: left promiscuous mode [ 352.518824][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.526635][ T203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.536427][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.544596][ T203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.567568][ T203] veth1_macvtap: left promiscuous mode [ 352.573293][ T203] veth0_macvtap: left promiscuous mode [ 352.579063][ T203] veth1_vlan: left promiscuous mode [ 352.584740][ T203] veth0_vlan: left promiscuous mode [ 353.041211][ T203] team0 (unregistering): Port device team_slave_1 removed [ 353.079363][ T203] team0 (unregistering): Port device team_slave_0 removed [ 353.708022][T13884] dvmrp8: entered allmulticast mode [ 354.302948][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.314989][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.327065][T13907] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 354.330370][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.344554][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.361940][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.378720][T13909] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 354.416075][T13907] bond0: (slave dummy0): Releasing backup interface [ 354.465745][T13909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 354.504501][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 354.513689][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 354.624763][T13905] lo speed is unknown, defaulting to 1000 [ 354.799811][T13929] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 354.907675][T13935] netlink: 'syz.2.2043': attribute type 21 has an invalid length. [ 354.918439][T13935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2043'. [ 355.030142][T13940] netlink: 'syz.1.2044': attribute type 11 has an invalid length. [ 355.280819][T13905] chnl_net:caif_netlink_parms(): no params data found [ 355.412717][T13959] netlink: 'syz.2.2051': attribute type 7 has an invalid length. [ 355.429887][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2052'. [ 355.467643][T13959] : entered promiscuous mode [ 355.627593][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.643058][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.650356][T13905] bridge_slave_0: entered allmulticast mode [ 355.659800][T13905] bridge_slave_0: entered promiscuous mode [ 355.678828][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.700949][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.708247][T13905] bridge_slave_1: entered allmulticast mode [ 355.754248][T13905] bridge_slave_1: entered promiscuous mode [ 355.781480][T13986] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.2057'. [ 355.791941][T13986] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.2057'. [ 355.807053][T13985] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 355.817858][T13986] netlink: 508 bytes leftover after parsing attributes in process `syz.0.2057'. [ 355.965818][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.990292][T13985] vlan0: entered allmulticast mode [ 356.001162][T13985] bond7: entered allmulticast mode [ 356.029364][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 356.078627][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.277357][T13905] team0: Port device team_slave_0 added [ 356.293981][T13905] team0: Port device team_slave_1 added [ 356.467725][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.477394][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.511422][ T5854] Bluetooth: hci2: command tx timeout [ 356.560354][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.665550][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.680590][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.740509][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.765646][T14032] tipc: Enabling of bearer rejected, already enabled [ 356.930549][T13905] hsr_slave_0: entered promiscuous mode [ 356.939705][T13905] hsr_slave_1: entered promiscuous mode [ 356.948214][T13905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.968046][T13905] Cannot create hsr debugfs directory [ 357.145303][T14054] lo speed is unknown, defaulting to 1000 [ 357.469254][T14063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2079'. [ 357.505108][T14063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.698187][T13905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.708935][T13905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.719149][T13905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.729735][T13905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.068702][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.105319][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.146871][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.154151][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.219059][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.226451][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.560998][ T5854] Bluetooth: hci2: command tx timeout [ 358.567351][T14098] vlan0: entered promiscuous mode [ 358.577719][T14098] syz_tun: entered promiscuous mode [ 358.641345][T14103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2089'. [ 358.843235][T13905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.863595][T14111] bond0: entered promiscuous mode [ 358.868769][T14111] bond_slave_0: entered promiscuous mode [ 358.874851][T14111] bond_slave_1: entered promiscuous mode [ 358.881932][T14111] bridge0: entered promiscuous mode [ 358.905980][T14116] lo speed is unknown, defaulting to 1000 [ 359.098787][T13905] veth0_vlan: entered promiscuous mode [ 359.138025][T13905] veth1_vlan: entered promiscuous mode [ 359.306315][T13905] veth0_macvtap: entered promiscuous mode [ 359.319467][T13905] veth1_macvtap: entered promiscuous mode [ 359.358432][T13905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.415023][T13905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.487776][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.518603][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.563033][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.592707][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.623754][T14138] IPVS: Error connecting to the multicast addr [ 359.630872][T14141] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 359.636246][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 359.654356][T14143] netlink: 'syz.4.2101': attribute type 2 has an invalid length. [ 359.666186][T14143] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 359.674566][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 359.781246][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'. [ 359.791932][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'. [ 359.919968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.961168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.975239][T14147] lo speed is unknown, defaulting to 1000 [ 360.039045][T14149] tipc: Enabling of bearer rejected, failed to enable media [ 360.058202][T14143] lo speed is unknown, defaulting to 1000 [ 360.112250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.147895][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.649860][ T5854] Bluetooth: hci2: command tx timeout [ 361.422974][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.648991][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.894106][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.997560][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.149906][ T62] bridge_slave_1: left allmulticast mode [ 362.156077][ T62] bridge_slave_1: left promiscuous mode [ 362.162274][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.173223][ T62] bridge_slave_0: left allmulticast mode [ 362.179005][ T62] bridge_slave_0: left promiscuous mode [ 362.185143][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.658355][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.669767][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.680293][ T62] bond0 (unregistering): Released all slaves [ 362.898939][ T62] hsr_slave_0: left promiscuous mode [ 362.905049][ T62] hsr_slave_1: left promiscuous mode [ 362.911212][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.918657][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.926999][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.936102][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.959651][ T62] veth1_macvtap: left promiscuous mode [ 362.965813][ T62] veth0_macvtap: left promiscuous mode [ 362.971995][ T62] veth1_vlan: left promiscuous mode [ 362.977413][ T62] veth0_vlan: left promiscuous mode [ 363.410358][ T62] team0 (unregistering): Port device team_slave_1 removed [ 363.452837][ T62] team0 (unregistering): Port device team_slave_0 removed [ 363.810299][T14197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2115'. [ 363.862625][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2117'. [ 363.888013][T14205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2114'. [ 364.098138][T14204] 8021q: VLANs not supported on ip_vti0 [ 364.256340][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.275049][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.294451][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.303937][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.317190][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.391921][T14216] lo speed is unknown, defaulting to 1000 [ 364.686776][T14216] chnl_net:caif_netlink_parms(): no params data found [ 365.162506][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.196446][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.221097][T14216] bridge_slave_0: entered allmulticast mode [ 365.229061][T14216] bridge_slave_0: entered promiscuous mode [ 365.263528][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.274947][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.283243][T14216] bridge_slave_1: entered allmulticast mode [ 365.300361][T14216] bridge_slave_1: entered promiscuous mode [ 365.411636][T14259] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2127'. [ 365.486867][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.522596][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.605542][T14216] team0: Port device team_slave_0 added [ 365.624068][T14216] team0: Port device team_slave_1 added [ 365.756215][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.770888][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.809824][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.823600][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.830942][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.857953][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.923361][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2135'. [ 365.976516][T14283] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 365.994053][T14283] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2136'. [ 366.049513][T14216] hsr_slave_0: entered promiscuous mode [ 366.072342][T14216] hsr_slave_1: entered promiscuous mode [ 366.078593][T14216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.100681][T14216] Cannot create hsr debugfs directory [ 366.290110][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2137'. [ 366.420235][ T5854] Bluetooth: hci2: command tx timeout [ 366.514609][T14289] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 366.815842][T14304] pim6reg: entered allmulticast mode [ 366.835777][T14302] pim6reg: left allmulticast mode [ 366.989337][T14316] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 367.203789][T14316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.276464][T14336] Cannot find set identified by id 0 to match [ 367.329196][T14216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.424743][T14216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.448007][T14216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.541800][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 367.545376][T14216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.563797][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 367.592084][T14348] bond0: option lp_interval: invalid value (18446744073709551604) [ 367.600252][T14348] bond0: option lp_interval: allowed values 1 - 2147483647 [ 367.612127][T14354] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2158'. [ 367.624506][T14354] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2158'. [ 367.907695][T14216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.996118][T14216] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.035894][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.043117][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.114979][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.122247][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.415755][T14391] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 368.481374][ T5854] Bluetooth: hci2: command tx timeout [ 368.593731][T14396] netlink: 'syz.2.2170': attribute type 1 has an invalid length. [ 368.811802][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2173'. [ 368.828040][T14406] lo speed is unknown, defaulting to 1000 [ 368.854918][T14216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.130407][T14216] veth0_vlan: entered promiscuous mode [ 369.153687][T14216] veth1_vlan: entered promiscuous mode [ 369.176478][T14428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.192714][T14433] openvswitch: netlink: Message has 4 unknown bytes. [ 369.366814][T14216] veth0_macvtap: entered promiscuous mode [ 369.400185][T14216] veth1_macvtap: entered promiscuous mode [ 369.421988][T14216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.434180][T14216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.454868][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.497647][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.539286][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.574239][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.685899][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2185'. [ 370.068297][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.098785][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.189105][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.222070][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.458269][T14478] __nla_validate_parse: 2 callbacks suppressed [ 370.458289][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 370.560652][ C1] ------------[ cut here ]------------ [ 370.566558][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 370.573389][ C1] WARNING: CPU: 1 PID: 14216 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 370.582595][ C1] Modules linked in: [ 370.586836][ C1] CPU: 1 UID: 0 PID: 14216 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 370.599129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.609238][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 370.614577][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 79 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 e0 8c 35 00 90 0f 0b 90 e9 dd fc ff [ 370.634469][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 370.640650][ C1] RAX: 3f09ff946b35aa00 RBX: 0000000000000100 RCX: ffff8880459fda00 [ 370.648640][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 370.656635][ C1] RBP: 1ffff1100f3a6c38 R08: 0000000000000003 R09: 0000000000000004 [ 370.664618][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: dffffc0000000000 [ 370.672631][ C1] R13: ffff888034aa0988 R14: 0000000000000008 R15: ffff888079d36178 [ 370.680615][ C1] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 370.689570][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.696160][ C1] CR2: 00002000001d3000 CR3: 000000003187c000 CR4: 00000000003526f0 [ 370.704145][ C1] Call Trace: [ 370.707439][ C1] [ 370.710306][ C1] call_timer_fn+0x17e/0x5f0 [ 370.714914][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 370.720737][ C1] ? call_timer_fn+0xbe/0x5f0 [ 370.725462][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 370.730598][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 370.735814][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 370.741636][ C1] __run_timer_base+0x646/0x860 [ 370.746515][ C1] ? ktime_get+0x3e/0x1f0 [ 370.750966][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 370.756351][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 370.762618][ C1] run_timer_softirq+0xb7/0x180 [ 370.767499][ C1] handle_softirqs+0x286/0x870 [ 370.772279][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 370.777058][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 370.782361][ C1] __irq_exit_rcu+0xca/0x1f0 [ 370.786962][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 370.792183][ C1] irq_exit_rcu+0x9/0x30 [ 370.796435][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 370.802085][ C1] [ 370.805039][ C1] [ 370.807982][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.813974][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 370.819269][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b 6d 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 370.838890][ C1] RSP: 0018:ffffc90004ad7768 EFLAGS: 00000206 [ 370.844978][ C1] RAX: 3f09ff946b35aa00 RBX: 0000000000000000 RCX: 3f09ff946b35aa00 [ 370.853005][ C1] RDX: ffffffff93549f90 RSI: ffffffff8db89b9e RDI: ffffffff8be28f80 [ 370.860998][ C1] RBP: ffffffff818b1385 R08: 0000000000000008 R09: ffffffff95cbb4d0 [ 370.868971][ C1] R10: 00000000c7ccedce R11: 00000000ab4465ee R12: 0000000000000000 [ 370.876944][ C1] R13: ffff888079d36148 R14: 0000000000000001 R15: 0000000000000246 [ 370.884925][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 370.890260][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 370.895558][ C1] touch_wq_lockdep_map+0xcb/0x180 [ 370.900676][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 370.905974][ C1] __flush_workqueue+0x121/0x14b0 [ 370.911015][ C1] ? drain_workqueue+0xb1/0x390 [ 370.915886][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 370.921392][ C1] drain_workqueue+0xd3/0x390 [ 370.926109][ C1] hci_dev_close_sync+0x659/0x1330 [ 370.931246][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 370.936798][ C1] ? up_write+0x1c4/0x420 [ 370.941156][ C1] hci_unregister_dev+0x21a/0x510 [ 370.946197][ C1] vhci_release+0x80/0xd0 [ 370.950543][ C1] ? __pfx_vhci_release+0x10/0x10 [ 370.955583][ C1] __fput+0x449/0xa70 [ 370.959581][ C1] task_work_run+0x1d1/0x260 [ 370.964196][ C1] ? __pfx_task_work_run+0x10/0x10 [ 370.969344][ C1] ? kmem_cache_free+0x18f/0x400 [ 370.974325][ C1] do_exit+0x6b5/0x22e0 [ 370.978536][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.983946][ C1] ? __pfx_do_exit+0x10/0x10 [ 370.988598][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.993836][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.999069][ C1] do_group_exit+0x21c/0x2d0 [ 371.003728][ C1] __x64_sys_exit_group+0x3f/0x40 [ 371.008804][ C1] x64_sys_call+0x21ba/0x21c0 [ 371.013512][ C1] do_syscall_64+0xfa/0x3b0 [ 371.018036][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.023260][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.029336][ C1] ? clear_bhb_loop+0x60/0xb0 [ 371.034019][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.039926][ C1] RIP: 0033:0x7faf7618e929 [ 371.044381][ C1] Code: Unable to access opcode bytes at 0x7faf7618e8ff. [ 371.051408][ C1] RSP: 002b:00007ffca3212188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 371.059847][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf7618e929 [ 371.067823][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 371.075892][ C1] RBP: 00007faf761ee8f0 R08: 00007ffca320ff27 R09: 0000000000000003 [ 371.083874][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.091851][ C1] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffca3212340 [ 371.099856][ C1] [ 371.102901][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 371.110189][ C1] CPU: 1 UID: 0 PID: 14216 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 371.122446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.132596][ C1] Call Trace: [ 371.135922][ C1] [ 371.138776][ C1] dump_stack_lvl+0x99/0x250 [ 371.143390][ C1] ? __asan_memcpy+0x40/0x70 [ 371.148000][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.153307][ C1] ? __pfx__printk+0x10/0x10 [ 371.157928][ C1] panic+0x2db/0x790 [ 371.161844][ C1] ? __pfx_panic+0x10/0x10 [ 371.166271][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 371.171499][ C1] __warn+0x31b/0x4b0 [ 371.175503][ C1] ? __queue_work+0xd62/0xfe0 [ 371.180219][ C1] ? __queue_work+0xd62/0xfe0 [ 371.184919][ C1] report_bug+0x2be/0x4f0 [ 371.189276][ C1] ? __queue_work+0xd62/0xfe0 [ 371.193973][ C1] ? __queue_work+0xd62/0xfe0 [ 371.198668][ C1] ? __queue_work+0xd64/0xfe0 [ 371.203367][ C1] handle_bug+0x84/0x160 [ 371.207638][ C1] exc_invalid_op+0x1a/0x50 [ 371.212166][ C1] asm_exc_invalid_op+0x1a/0x20 [ 371.217028][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 371.222327][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 79 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 e0 8c 35 00 90 0f 0b 90 e9 dd fc ff [ 371.242204][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 371.248285][ C1] RAX: 3f09ff946b35aa00 RBX: 0000000000000100 RCX: ffff8880459fda00 [ 371.256272][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 371.264265][ C1] RBP: 1ffff1100f3a6c38 R08: 0000000000000003 R09: 0000000000000004 [ 371.272252][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: dffffc0000000000 [ 371.280231][ C1] R13: ffff888034aa0988 R14: 0000000000000008 R15: ffff888079d36178 [ 371.288227][ C1] ? __queue_work+0xd61/0xfe0 [ 371.292931][ C1] call_timer_fn+0x17e/0x5f0 [ 371.297622][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 371.303440][ C1] ? call_timer_fn+0xbe/0x5f0 [ 371.308142][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 371.313275][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 371.318485][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 371.324307][ C1] __run_timer_base+0x646/0x860 [ 371.329212][ C1] ? ktime_get+0x3e/0x1f0 [ 371.333583][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 371.339006][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 371.345280][ C1] run_timer_softirq+0xb7/0x180 [ 371.350159][ C1] handle_softirqs+0x286/0x870 [ 371.354942][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 371.359744][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 371.365073][ C1] __irq_exit_rcu+0xca/0x1f0 [ 371.369685][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 371.374909][ C1] irq_exit_rcu+0x9/0x30 [ 371.379184][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 371.384827][ C1] [ 371.387762][ C1] [ 371.390736][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.396816][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 371.402107][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b 6d 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 371.421810][ C1] RSP: 0018:ffffc90004ad7768 EFLAGS: 00000206 [ 371.427932][ C1] RAX: 3f09ff946b35aa00 RBX: 0000000000000000 RCX: 3f09ff946b35aa00 [ 371.435928][ C1] RDX: ffffffff93549f90 RSI: ffffffff8db89b9e RDI: ffffffff8be28f80 [ 371.443915][ C1] RBP: ffffffff818b1385 R08: 0000000000000008 R09: ffffffff95cbb4d0 [ 371.451900][ C1] R10: 00000000c7ccedce R11: 00000000ab4465ee R12: 0000000000000000 [ 371.459883][ C1] R13: ffff888079d36148 R14: 0000000000000001 R15: 0000000000000246 [ 371.467873][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 371.473208][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 371.478510][ C1] touch_wq_lockdep_map+0xcb/0x180 [ 371.483632][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 371.488933][ C1] __flush_workqueue+0x121/0x14b0 [ 371.493974][ C1] ? drain_workqueue+0xb1/0x390 [ 371.498848][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 371.504338][ C1] drain_workqueue+0xd3/0x390 [ 371.509036][ C1] hci_dev_close_sync+0x659/0x1330 [ 371.514169][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 371.519729][ C1] ? up_write+0x1c4/0x420 [ 371.524085][ C1] hci_unregister_dev+0x21a/0x510 [ 371.529125][ C1] vhci_release+0x80/0xd0 [ 371.533471][ C1] ? __pfx_vhci_release+0x10/0x10 [ 371.538521][ C1] __fput+0x449/0xa70 [ 371.542525][ C1] task_work_run+0x1d1/0x260 [ 371.547180][ C1] ? __pfx_task_work_run+0x10/0x10 [ 371.552318][ C1] ? kmem_cache_free+0x18f/0x400 [ 371.557284][ C1] do_exit+0x6b5/0x22e0 [ 371.561488][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 371.566888][ C1] ? __pfx_do_exit+0x10/0x10 [ 371.571509][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.576715][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.581921][ C1] do_group_exit+0x21c/0x2d0 [ 371.586538][ C1] __x64_sys_exit_group+0x3f/0x40 [ 371.591579][ C1] x64_sys_call+0x21ba/0x21c0 [ 371.596273][ C1] do_syscall_64+0xfa/0x3b0 [ 371.600876][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.606084][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.612161][ C1] ? clear_bhb_loop+0x60/0xb0 [ 371.616865][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.622779][ C1] RIP: 0033:0x7faf7618e929 [ 371.627299][ C1] Code: Unable to access opcode bytes at 0x7faf7618e8ff. [ 371.634337][ C1] RSP: 002b:00007ffca3212188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 371.642778][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf7618e929 [ 371.650761][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 371.658764][ C1] RBP: 00007faf761ee8f0 R08: 00007ffca320ff27 R09: 0000000000000003 [ 371.666740][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.674717][ C1] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffca3212340 [ 371.682714][ C1] [ 371.686123][ C1] Kernel Offset: disabled [ 371.690464][ C1] Rebooting in 86400 seconds..