last executing test programs: 1m2.74357329s ago: executing program 3 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1}}, {{@in=@private}, 0x0, @in=@private}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@generic={0x5, "c62d3c825dd7ed1ce21e571441d641cf07949e49e1d6a104df301e6e8c3bcc5ce67b9204"}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x14412, 0x4) bind$unix(r2, &(0x7f00000003c0)=@abs={0xe2fdd5f53424dbd2, 0x0, 0x4e20}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 50.820850431s ago: executing program 3 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1}}, {{@in=@private}, 0x0, @in=@private}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@generic={0x5, "c62d3c825dd7ed1ce21e571441d641cf07949e49e1d6a104df301e6e8c3bcc5ce67b9204"}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x14412, 0x4) bind$unix(r2, &(0x7f00000003c0)=@abs={0xe2fdd5f53424dbd2, 0x0, 0x4e20}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 40.074852274s ago: executing program 3 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1}}, {{@in=@private}, 0x0, @in=@private}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@generic={0x5, "c62d3c825dd7ed1ce21e571441d641cf07949e49e1d6a104df301e6e8c3bcc5ce67b9204"}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x14412, 0x4) bind$unix(r2, &(0x7f00000003c0)=@abs={0xe2fdd5f53424dbd2, 0x0, 0x4e20}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 28.454963546s ago: executing program 3 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1}}, {{@in=@private}, 0x0, @in=@private}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@generic={0x5, "c62d3c825dd7ed1ce21e571441d641cf07949e49e1d6a104df301e6e8c3bcc5ce67b9204"}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x14412, 0x4) bind$unix(r2, &(0x7f00000003c0)=@abs={0xe2fdd5f53424dbd2, 0x0, 0x4e20}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13.430047839s ago: executing program 3 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1}}, {{@in=@private}, 0x0, @in=@private}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@generic={0x5, "c62d3c825dd7ed1ce21e571441d641cf07949e49e1d6a104df301e6e8c3bcc5ce67b9204"}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x14412, 0x4) bind$unix(r2, &(0x7f00000003c0)=@abs={0xe2fdd5f53424dbd2, 0x0, 0x4e20}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 2.63222074s ago: executing program 4 (id=1623): r0 = socket$inet(0x2, 0x6, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80108906, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2.33566078s ago: executing program 2 (id=1627): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x102c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001800c00028005000100000000002c000180140003002001000000000000000000000000000114000400fc0100000000000000000000000000009d6a4bd643ade3af1816f19ddabda04a1fbfbcd4645944103455f03025e1369e92f5273c94e19ad9beba9dc0fb71ba578ec1e3658bef8b749df64b8064cb46bb207d461f28781c1ebe0e485326f5dd4289396ee5359c60f55632dd327b7f8a1779878bf24b17ea75302e0a2d3791e2f52d9c8a8fb144b7e0afe2968348c63743b6d0c23e0874042017a6e9c67bde91c84a898a79bfa8a1f051d9272a6ff25b3bd71bb6300672"], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) sendto$inet6(r7, &(0x7f0000847fff)="ce", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfffd, 0x0, 0x0, 0x22, 0x40}, 0x9c) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES8=r8, @ANYRES16=r7, @ANYRES64], 0x128}, 0x0) recvmsg(r8, 0x0, 0x10100) socket$kcm(0x29, 0x7, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0x7) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x5) 2.298303114s ago: executing program 0 (id=1628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180801d81bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.221143007s ago: executing program 2 (id=1630): unshare(0x20000400) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x10d, 0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a', @ANYRES16=r3], 0xd) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)="3fb485ec118f5f64a7cba9ba84b1e3e5865da58535d329801f02290c008e09082521f47a0bf3a0a72631a9ac2f2d84f8e11ee26369d58b4cda519d69168284dc12d260859c65d7d677bf24c262591a0e3975a977d600c8d2652bcfbaae28d7d1035f75b6105c98815775c685da6e77c39a0f5f12119e521cd544327d56e77e1c3a957efb381eebfb5f0ef12b5b8461463cbc3b2f3742a99ea9eb0e368b6c883a80282ba18d7540b58adf1dae3974cc98bc9e2b325fcf6ae72eba237d37d9bb", 0xbf}, {&(0x7f0000000140)}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}], 0x20, 0x5}, 0x40800) r4 = getgid() r5 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002400)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000002500)=0xe8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r10], 0xd) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x6, 0x0, &(0x7f0000002540), &(0x7f00000025c0)='GPL\x00', 0x1, 0x2, &(0x7f0000002600)=""/2, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0xba, 0x1}, 0x8, 0x10, &(0x7f0000002680)={0x1, 0x2, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[r1, r1, r1], 0x0, 0x10, 0x62f}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000400)}, {&(0x7f0000000580)="c9da1fac621c05a686f172520b4495edb515a7ff9ca9a05d1a1a3407215c8b93bbe2adcf3635489767f986fe88c8f53d1b01a473a77805fcfcafd85546b50380d4fc30f7dd74d1796c4b915f7b790630bc9bb8b199dedbbd8777717586b41733e3bcf95f1c", 0x65}, {&(0x7f0000000600)="519576139cfcb2c049cf420382ac8bcb32f0f0fa2d4c998d2147acd7e9b1b294dead484c8bf04b1eaeb0db8a3291fef65c5e312d5320ed90ca267cfd04768b9a24ebb1c501880cf93c73ff31306a646b75aed729fa0cbc068bdabf86b44c504c7783742993de52f99629fcf990455230ac08857496d568e92512bfe847f56e2079aa38203436ac387e24c4e7eac619a3c56799d2b02bd3d2a7f82f872c611547d50e23c3652ad34d77dccde058933362fce4cfd5e92aa014c1e25445c6665ee4753cbef0825c2eac75563386a873937f7f312782ad2bff26af38f9b0d0c20fce000ae573ead62604a2bb", 0xea}, {&(0x7f0000000740)}, {&(0x7f0000000840)="dca97f4e417100610692c4d590724e3befdfc2670c8efc5b05fdf2f5baed31a5ea96e6d04eea78751ad9eb83ec5072b472c1cd0a96f193ec8fb9a8553e4e7a47e5c1d133aecacd87fb5473a2ff6a80f185a2dbf2ab94e49be9e9f3b62f68ef0b9a4a746e79954e9539622be44684daded97c94b8709d7acf33e8d3c534f89790074ad53491b54e3f41a8a8d0c05e24a98e6217b3551526528de9794e55ddd4a7ec64774cfcf04be8edf3cffa094ca32f0c81870801815b5ce13220a2023d19766865d1d41d0cfe884433b594976bf21b0e2b5b4d", 0xd4}, {&(0x7f0000002a80)="c8b74a8962b0a7354c3e7b5c6490d9637930710f87dc1c15344abdbecdfa7fe9bbf08bd7962157dcb810635ae2337ee903a2a28b5f357ed5d9067ba287483615b6873aba469cb2ccaca2c09fc15e58e9ccc8dfe58e4567ccea2b96b5495cea5798db06497e1e29c8f553b30a84136bc1e02a03694ea1f61dbb820371da9c880539e68dd5908594404b4de96013ef1b8d989c52e79d704a6bfcb54591950d4cb52d1fcb663bbafe15dc4f03c6c53af0899e584a3ec256bdc65127fc1db3f3d98f625e4d310fc953893138c67792c4b4e59d693630bc8462a9442ebfd5a236a35cb39ebeb54262ca64d6ee38e663aeb993ca1c87d2fb94089874da97911cb6401bc7c71eb2d80d87ea97bfc16525447bcc72b541d2c7164c69ffaa8b6dedf92ea619a5e61150e2e727123f1a7f7b156a5bea70fe080387f3fac85aaa80296711e88662d7b70eb0d145c802bf79f7ac9bc4cc6197f2cb52ebf6b7c3b420cc1c5313c406e7d2dc92bbc841b38a71ba88dfbaae38c5ef2235125341881c43c3057d3bb340b766402a4b766cfcf304d2e12f4cdbca58dc11806456a858dbe6bb19ec0e83538a838c8707303c4aa0be06b0e63739196f3d1aad7ccb20724096b254f399dfdda6c485a8188ffa00f2caa4af474c3261c9ce23946b2f7cddccaa137bada89cccd2253c57cfd618bdc30e6bdb98cf41f92399941cdf5f1d478bb3b596968c58ff151f6202dfddcd068fe6d05e5fe9eb8725425c666f9e9eecd5e7b8b32ef41bc8931579b37ac3b6fb9bd756dbecfda022f189405c646f3013c175db5d488bfdecae187e6cecc4cee667a8086e9ac67d1dcdcad31ddc2d937078c8c3c255647c16eafaa272883735332018b1a57fcc4436166eaff9a8f012fe72586c3a719aab3a105b107912cb63a4e3fe7642ef80dd55cc169cbf00247de89f7b4c08f7e6d416859e78c34d11f968f89d451402b9d7623819c9f453f25cd3ffea1af0087e133f62ee5c4476711fd47dc5aa1e15d3c4e246f4667cc5d311fd71cd672db48133bf375954b7d5b77c663de09a2f084644eeb46f9686c2cb8b5e4e591cb791c5ee0c605e539232bbaf200d51eda62035e4a33dd77620c93005ca2343d9aaeec14739b9340caff0a1d7646467ab6c98cc5d51f84f9adc5dbff176d03d0df937a09c5ed833ec0bc13a5e69fa252394f012a885bfaaac8604619e6577845e4989618e9bd0a5d75a0873ec55d69d0d3e8fc819bde9b210eedc88e2c1a00e12df4b99712a4867519720bb302c7dee6ed6955b0ba94214e30374db250e240c65882b75e2b50ddbc76d05c9273c619627e8ccc3476c0850f163ba05d5ad88c4b99827c7c0bf3514ac84bc95a6e744ba72f9abb7b7d82f85246f97b7fa3c1741ca275ac9147b48871fb1f232cf050243af967a8f4b8b9b48dab80d7d0f574cf9f9873e8b99cf7141f79db7fe152c1c550a02efcadf5e4a7b0ccf5e522ef0b7c0a6e04000128a67c27f8eafc331f894c7f221f720221008dcc977de6d7ea40f77e359143599307735a669b2757db5853b18a6c87899c0f76c50cb6bde81ea1cafbcba204911bda421ac8b64d2672d4c48e2be3375e9b3de2c0c47f9a65fc13c8e513c33aa90acd263658bb292837d98f6e9feddecbc62b389c4b50751cef1a2584bb6629347bac2c180d0c842c18db62d7a004ea892b07fe0f8a39a993aa00525587d4c48da3266aac37a9bef38f6c6396a39656cfed62de40d5474cf93193fb0f4e39457f1c8343fff363afb5bdd3a8e83baa8371ee092e4471fd66f1a6f804f4ca67c4ea6d12a130b27ca06e507f5920efc4015eed2e93b354b9013d1151636451281020a424ca7c082417e26abb561dfbbb404e2587fce3f4561c1c1a2c6fbf5a6a32adf5a6a5c949e2e5bd3bc84aaa6eb9f59234d9f0dbb69343ed4cb0ea1f3a96cb685fa1f4bfe82871bff8e3b0956ddef04ec4e951a4276bc6a9c8a7026f2d17f7bafa2e8eadcfce8d00bc329e8fbe90891fc89fc6c3fc24ba40954bba6f0219e7a4a9496a09485ef65bac816c6ec3cc80a1806646e47853166a8391115770462dc446355563b001687ee103d1364e8466506c3e477999f027eb1d804d819b6d2d696463d7e7b2e0fa4fc1107ad87893ea00134dc174373115f0a80eaa016af2f8bec2bbc5a524ce9feac7c05a7371969c3baae211c77c62c9fb46eccae2a35c400d423e695bff1e036fa15cf8830f1c939da39c77016583a3cba3eec80893984c87f2be09e7f317731c6c4e676926f36efb67ba24515a11b3eb220b67e31e4773929958e97ab72674a6af02018a3e2744b15d0752b1b5dd5b50bb64fe1ea96dd018f541115a8f23aed6331526247e9f1a28bb77fb161bb6a67751a3a0c41101ea1c173bea2d6f138c8598e90d34db89a383a4200e76b0064714fd678d2800d86dac8bc2811faac579894f481f4d4aa794b902290629d34a776492a9f8f4f9892d612d8274a034c3286fc49cfeed7f7a28f394acf0134837fde969e695363e91d865ac3f55ce80bb6d2edc1ae64a16558c23b6b0cb4fdede5239eb2a25e25846243f62159e59713b664957aa736e88fa2c2d70208f4ea34c1734f3ac6c36bc449bb010e79c7a750549519f5cc703a3171a3a9121027be56a192a04613321c0ebddcc0e18fae6ddfa80145a8b3c47b72fa650b13d0c3e23b86395f8027662b25e47e8e617735ae5ddbfc60c1172e9d9e9ac05a0f23505a0ab3fc90292c4709eb14d1fcf613135090163e24f9c5e1f7e16942ee61807a0b0b300d93682f837db96f2033598dff6af21b63ff8be0ceaf6f1172295dd76b88b717f323041a74c5532528ed790c6d5f8605b23972129a78582a8e600e45660d4ef03bdab8f0bf0f7671ed23d0ea648723e83aa7ac6456902cf4358cbe323de219725f0cfed7256803419c2691c147b51475d434dcc506466bea6807da98f2849a92673d9a53c1ecbb66380914818422fad8bd8557e84d4da9644af0de26bc3ab8b05e160395e21f69bd5dcf656c6373a7544e0fa5ed4b4c86d2788ae2fe07749a7f5d6f1156ddfa3f72ce89f2a890b5c272804f2f085858f45fbeb855d28e8de899953a4d42a06722671aeb3aada382d23b79c0769fbfb640daca4c9f3b28b56bcec95edb78f6c66f1a93d77df92cec73559afdb480d365f20584f0a885a95c3fa827194e6ccb658d71a1c73b727f5dc2a57a247567625eb7f5b1df6d2b6e28c9ed7acc747e54aa97f9eb021eb11c5846164aca6a8b3d78a9afac2f24b75665ec943811207fe5631606bcf2b5d02dea39b206548ef3abd0e24ed2beb6f45f7c5c8abeffd36b159fd942fc412e259b3fb6208fb10d882ab88f4a9f83d916b507a2d86e5cefab4b366a2fbf0ee63b0ec8f18b9d1fc5683747772cf9c9db1a6a5159cbf200b10313cfaecac899e3c7951b2aff15d717473f6d9c0249d191e693c47636c1ba15f2741da1b061cd311c79dee17eb28a07bd7cd2d8c5102cfc616cf92365dbbfd4a9bccd741c9bacdc4da9075e6d147112a0f368c0d526a6a840db6772adb51a251babf94a7093e668de3406383b08e8317d0a69ff4dcbb0ea8bcd8a11bf35a451bd714e7288f2a8f2807bfe3e0712749155763514dae84d8398bd278853aab2f9ee09f6e8c9e206bd242148804f94c3f2ee2f5575892f19c92158e4012cd50b6f02b9fef50a3c4bca2353e5820ec430116ee46dc968a20b879532e930f2fb47a1cd98a02a7c6e706e3d9ed9efdc801bc0453b782aa0bc7e40241d283a50979cf6ead13a8913528a8b23cf7ec62effcec5b84a7eb917d1a332d64c30ad913caf2bd934fbd4d50b5e5215098d9c34bb19a2623f1d82eca13ff4ee57328f4095b620e9dde68f3695759960d5144d717481ad1ff5429feda77eaae3c24387bbdd25c8f09a32db8f5e184e38f59ed9f3fce4237e73a0580829e9b9f66c1c9fcd76562ad2e52cd01a39055e8d0ea0c58a80ac441073b1283dd591e41b36e6cd0866edec881be550a7b16546af85307d23515e33cd53fbfb6dba8a8b668061f1a869e32fbd53bcc616516a8c497e1b897c514b73d16170f4a7eaa976384b1dd3fddb38ae66197b66b56ac0bca3ee78007abc66d3de464250d6ac9327c4a28a6d28eea09ba6a9527ee792724e6d0e56db41a4268fa1bbb3895cd2087fea9f2c09842dd33ada5723c1b65800c8ce1602513d434a375591c3467459e575071dac660b90aac4ee99aa4d41fa877b02b649bd2d5f5a1f5731551288ff708f03b12fdf40722685c1efa40d67878b453fffed429c93f46d075d37342560f0ffe2fc6cd59bad12d7989b1551bad65a0532d54e9b52587d14a7a4bdf2e1473667ca873205a14a545601dee8cec4e9b1df8d239454e179788ddff1dcba774d5aa62216f8dd323e767adfc69d6c8e532269bf6db99dfa919a603927530992c73bf659d390dabf21a308e41fd4f8e64fdc2af2378a24e5726d8e249b2e554f02ed5979ca77cbaa2db654ddd52e0b32dc6ab7490d23d902ebe08fcafb1fdbae005c93a7521083b04c132849a0b0bdc6a89d2cd2d0223bcdb43f421e48208c63c1df96fab846f44c84e417d0f6bc40b4e4c72313e00d89e62751f00067c44a0abf3aac982bf19955c95545f092bb6965138b935f82775ddf0f37decf40a9bbde0ab9629170ac7f7e4bbecda203320d4084b206096f99a091b4507517b61d01f2f9ca485d65658e30097967f18e34f48757e0963cdfd4a47a22f7744c437dd575429495a1d0aa4f310741682812cd6b19909c929cc0f0ebda1761f5ee801fa696770c19d5dc0c871350bc6c4666f86d439825c905f9991a5a6b65b37c964812cd7833f860d904938bd25ef5aa09ecd507b5499cdeaa479a1c096083a7d8d19bc6bd68d138aafecc42e61b9de386c2362c198ca612c2db8dd5fcc0e58ab99458a8701fd678efa31f160663a55b9aaed5f6247e838473b8c0b1b258c35d124792ec470b8cc69d4e357787c2f79a52e6abdd7c0ea8bbee06323e7b59f600a31c183b6d9275338c8bfb8ab2491235f3015f14dfd3887894c1eac2c983145f6649a66626faba23b5d5a5313b793f0ec2035efb7a74cdffa62392ed8a28d19946a1bdf3f7e7e4476bbf1516a0a7b963f051e55c0188d4948e1246e2267449c66047f3cb0a8f7e8f08958c99eceffa9003d1d97df07d3fef23775edf906463100358d9b579fff05037ff3a65afc1669165640cfc7f57c01bf52de50c045f3ee786c46323625b6bb3d6877ad89383404a454560efe926273ef147f85ddd4755c4379054fd680fe57aa29d9aae7804a4055eb17ba7849a110d03148892839488418aeffed8e47df84dfb3e62ed670635998c1e796f57fe5499e977512057168cf2b92e94ac3a10b5facb72b77f51a4a296b061e2c0d89a654555c759b0c9f4685a567f6421f375cd40be890d6ea6e0530b1ca6fd8a2e490d9b303fbccc822c79a6d30c0e1e36270df8f040785c43cf186354af06d07f8b4666bec99e244e7e76f90dac2ff016631a44410d9192a0f4174cf86d88777e1099ee29a92641ea6106b0ad05c4d34739dba554b2a86858f856f245f8e030950f3ccf25db7a5c5d230daa0f3ada4f9014f890c5445eed4e6d8851b4f1def3c0f5f72ba4c261913a8872c069ecdbd8fb02fc044a785b4919498dbbbca5d3ec233214df13bdf806142c813a4d717ff3db7cfbea1296a05af1793e922d60f7b321815ca295965b6b4eeaae0e6a27e436d72836ff98b5ba373bf5fa13b5ef5bad38", 0x1000}], 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="53313db93793d3031142172594adf535ffd6b5d6599865202b1a83aa3551cb75493d936ce2b43140ee2e9062d29c24183d604c5dd93101ea1573e39421"], 0x38, 0x4044855}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="dcae052bcf5a15b5537d959fd4ae7138344ec3cfdb62ba2970c8b40c013f48153882c8e69f33902a919d9302ecd7177a57a88f3af21a041687fefbf597dbd764a887a30c2784629834e898a7bce8833f8400c1305b4d80341976924369cc563bf21f7ba958ecad7d5a9114955a4dec13824bdf4d22a7c87bbee69e5a6dfe4b9b98f018f7a3a4ba2f60c4569183590e8c3533290f6eeeef8f34f454cb16cd", 0x9e}, {0x0}, {&(0x7f0000000d00)="e95f8eb48591df9b38", 0x9}, {&(0x7f0000000d40)="c06f24932902f77fd3658d7f9b5e8f34d043d5c22b3766550e29c34143e202a98de64d99d36b635ee016712d5f40997a0f95aa2be5ad3ff2a8ea95349ec87879e42d56201f3af91c2daeaae87145af87e4c77b5716b10632e046d22411b1e4046f9f89f4c6f05c29e3", 0x69}], 0x4, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r1]}}], 0x28, 0x4000000}}, {{&(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000011c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001280)="6880a9a04e0983b6240e3e259c8b5a68dad30246495909514b2d1aa191fe1948674c7713edc9c2d19995da835ffa49d498ace1f38068fe4d639061c8ba062f57bad7acfe4608c17cb1c9070a5d034899638437b00c734da79628fab83b5a594ef54f30b7720a387ec2c9f5c0888123e6dcf90e3992d3fa7d8ef73ed29328b00e055dff43d21a7660dec5a7d628b1c02abebb889f68fe4df6", 0x98}], 0x1, &(0x7f0000002840)=[@cred={{0x1c, 0x1, 0x2, {r9, r2}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0xb8}}], 0x4, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r13 = socket$l2tp6(0xa, 0x2, 0x73) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r14, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r13, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000010400"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x90) sendmmsg$inet6(r13, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) 2.20720919s ago: executing program 0 (id=1631): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 2.084994492s ago: executing program 2 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.996058683s ago: executing program 0 (id=1634): r0 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x2532a715393045a8) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000600000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b70400000200000085000800030000009000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x8, 0xe2, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000008060300000000000000000002000000050001"], 0x1c}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000010001a80040004"], 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001a0a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r13, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r13, 0x29, 0xd1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x85) getpeername$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x811}, 0x0) 1.978326798s ago: executing program 1 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000001100)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.947154689s ago: executing program 2 (id=1636): r0 = socket(0x23, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) getsockopt$nfc_llcp(r0, 0x113, 0x0, 0x0, 0x20000024) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xf7fff034}, {0x1, 0x4}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x0) write(r4, &(0x7f0000000280)="f994760e2185100432e38eaf71c9968a89b7506bba54e7ffbd7bc0ed541b02d0eb5d686c914c83a25a4a2fa2bec7dd277d2edb4e907db05df5c978b942190500fd8eb5a4a819461b4f1aba1e49c633fb064b878ffc5d8af73c748629a0508623c004c4adc4985145f0c97848f7b0f3425a275b8ca7e8c6d6d74c66d1165ba5dabc992c70d22f1c60a66fcd87ccf34df588e194d07349bfdc340666ad74d00a82b5e4b58f2fba133733b38d248d84fc71633ed17bec9c8c1e6b248efb", 0xbc) listen(r2, 0x100101) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x8) accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='.', 0x1}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061154c000000000095beb9cc00000000"], 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@gettaction={0x1c, 0x32, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x5, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) 1.858891076s ago: executing program 1 (id=1637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffe4}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x12, 0x0, &(0x7f00000001c0)="5cdd3086dd88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.792240702s ago: executing program 0 (id=1638): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e003020028000b05d25a806f8c6394f90924fc600d00090003000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.791830944s ago: executing program 1 (id=1639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000007740)={0xe, {{0xa, 0x4e22, 0x9, @mcast1, 0x40}}}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0xe01, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}]}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='hrtimer_init\x00', r4}, 0x10) socketpair(0xa, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x888}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='workqueue_queue_work\x00', r7}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000500000005"], 0x104}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xf, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710432000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280), 0x100002ac}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x10, 0x20, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2700}}, 0x1c}}, 0x0) 1.727576585s ago: executing program 0 (id=1640): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x102c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001800c00028005000100000000002c000180140003002001000000000000000000000000000114000400fc0100000000000000000000000000009d6a4bd643ade3af1816f19ddabda04a1fbfbcd4645944103455f03025e1369e92f5273c94e19ad9beba9dc0fb71ba578ec1e3658bef8b749df64b8064cb46bb207d461f28781c1ebe0e485326f5dd4289396ee5359c60f55632dd327b7f8a1779878bf24b17ea75302e0a2d3791e2f52d9c8a8fb144b7e0afe2968348c63743b6d0c23e0874042017a6e9c67bde91c84a898a79bfa8a1f051d9272a6ff25b3bd71bb6300672"], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) sendto$inet6(r7, &(0x7f0000847fff)="ce", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfffd, 0x0, 0x0, 0x22, 0x40}, 0x9c) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES8=r8, @ANYRES16=r7, @ANYRES64], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10100) socket$kcm(0x29, 0x7, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0x7) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x5) 1.712848989s ago: executing program 4 (id=1641): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="00000000000000000000030000000800015b04b140d150000280080001"], 0x30}}, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0xa1d95e26, 0x0, 0x2000000000903, 0xb}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0xa1d95e26, 0x0, 0x2000000000903, 0xb}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000d40)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0x3e}], 0x18}], 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x10000000, 0x4, 0x4000, 0x0, 0xce0251}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x10000000, 0x4, 0x4000, 0x0, 0xce0251}, 0x9c) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000140)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0xa, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0xb, &(0x7f0000000000)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x10d, 0xb, &(0x7f0000000000)=r7, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.636236344s ago: executing program 1 (id=1642): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) unshare(0x2000400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x0, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000280)="c5", 0x1, 0x20000000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x15}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x3c, 0x0, 0x2000000) r6 = socket$alg(0x26, 0x5, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x4, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x34, 0x3, [{0x1, 0xf, "f9fde4c3b8986107581fdd8cda"}, {0x1, 0x9, "c09a50019d989f"}, {0x1, 0xd, "35dd2640d8bf2a0a29b875"}, {0x2, 0x9, "0207099b3fd743"}]}]}}}}}) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001000010000103000000000000000063747228646573335f656465290000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000100000000000800010000000009000000000000000008000100"/252], 0x100}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r10, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c00020008000100", @ANYRES8=r4], 0x3c}}, 0x4) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) r11 = socket$inet(0x2, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r11, 0x89b0, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels}) 1.632234425s ago: executing program 4 (id=1643): unshare(0x20000400) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x10d, 0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a', @ANYRES16=r3], 0xd) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)="3fb485ec118f5f64a7cba9ba84b1e3e5865da58535d329801f02290c008e09082521f47a0bf3a0a72631a9ac2f2d84f8e11ee26369d58b4cda519d69168284dc12d260859c65d7d677bf24c262591a0e3975a977d600c8d2652bcfbaae28d7d1035f75b6105c98815775c685da6e77c39a0f5f12119e521cd544327d56e77e1c3a957efb381eebfb5f0ef12b5b8461463cbc3b2f3742a99ea9eb0e368b6c883a80282ba18d7540b58adf1dae3974cc98bc9e2b325fcf6ae72eba237d37d9bb", 0xbf}, {&(0x7f0000000140)}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}], 0x20, 0x5}, 0x40800) r4 = getgid() r5 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002400)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000002500)=0xe8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r10], 0xd) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x6, 0x0, &(0x7f0000002540), &(0x7f00000025c0)='GPL\x00', 0x1, 0x2, &(0x7f0000002600)=""/2, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0xba, 0x1}, 0x8, 0x10, &(0x7f0000002680)={0x1, 0x2, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[r1, r1, r1], 0x0, 0x10, 0x62f}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000400)}, {&(0x7f0000000580)="c9da1fac621c05a686f172520b4495edb515a7ff9ca9a05d1a1a3407215c8b93bbe2adcf3635489767f986fe88c8f53d1b01a473a77805fcfcafd85546b50380d4fc30f7dd74d1796c4b915f7b790630bc9bb8b199dedbbd8777717586b41733e3bcf95f1c", 0x65}, {&(0x7f0000000600)="519576139cfcb2c049cf420382ac8bcb32f0f0fa2d4c998d2147acd7e9b1b294dead484c8bf04b1eaeb0db8a3291fef65c5e312d5320ed90ca267cfd04768b9a24ebb1c501880cf93c73ff31306a646b75aed729fa0cbc068bdabf86b44c504c7783742993de52f99629fcf990455230ac08857496d568e92512bfe847f56e2079aa38203436ac387e24c4e7eac619a3c56799d2b02bd3d2a7f82f872c611547d50e23c3652ad34d77dccde058933362fce4cfd5e92aa014c1e25445c6665ee4753cbef0825c2eac75563386a873937f7f312782ad2bff26af38f9b0d0c20fce000ae573ead62604a2bb", 0xea}, {&(0x7f0000000740)}, {&(0x7f0000000840)="dca97f4e417100610692c4d590724e3befdfc2670c8efc5b05fdf2f5baed31a5ea96e6d04eea78751ad9eb83ec5072b472c1cd0a96f193ec8fb9a8553e4e7a47e5c1d133aecacd87fb5473a2ff6a80f185a2dbf2ab94e49be9e9f3b62f68ef0b9a4a746e79954e9539622be44684daded97c94b8709d7acf33e8d3c534f89790074ad53491b54e3f41a8a8d0c05e24a98e6217b3551526528de9794e55ddd4a7ec64774cfcf04be8edf3cffa094ca32f0c81870801815b5ce13220a2023d19766865d1d41d0cfe884433b594976bf21b0e2b5b4d", 0xd4}, {&(0x7f0000002a80)="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", 0x1000}], 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="53313db93793d3031142172594adf535ffd6b5d6599865202b1a83aa3551cb75493d936ce2b43140ee2e9062d29c24183d604c5dd93101ea1573e39421"], 0x38, 0x4044855}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="dcae052bcf5a15b5537d959fd4ae7138344ec3cfdb62ba2970c8b40c013f48153882c8e69f33902a919d9302ecd7177a57a88f3af21a041687fefbf597dbd764a887a30c2784629834e898a7bce8833f8400c1305b4d80341976924369cc563bf21f7ba958ecad7d5a9114955a4dec13824bdf4d22a7c87bbee69e5a6dfe4b9b98f018f7a3a4ba2f60c4569183590e8c3533290f6eeeef8f34f454cb16cd", 0x9e}, {0x0}, {&(0x7f0000000d00)="e95f8eb48591df9b38", 0x9}, {&(0x7f0000000d40)="c06f24932902f77fd3658d7f9b5e8f34d043d5c22b3766550e29c34143e202a98de64d99d36b635ee016712d5f40997a0f95aa2be5ad3ff2a8ea95349ec87879e42d56201f3af91c2daeaae87145af87e4c77b5716b10632e046d22411b1e4046f9f89f4c6f05c29e3", 0x69}], 0x4, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r1]}}], 0x28, 0x4000000}}, {{&(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000011c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001280)="6880a9a04e0983b6240e3e259c8b5a68dad30246495909514b2d1aa191fe1948674c7713edc9c2d19995da835ffa49d498ace1f38068fe4d639061c8ba062f57bad7acfe4608c17cb1c9070a5d034899638437b00c734da79628fab83b5a594ef54f30b7720a387ec2c9f5c0888123e6dcf90e3992d3fa7d8ef73ed29328b00e055dff43d21a7660dec5a7d628b1c02abebb889f68fe4df6", 0x98}], 0x1, &(0x7f0000002840)=[@cred={{0x1c, 0x1, 0x2, {r9, r2}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0xb8}}], 0x4, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r13 = socket$l2tp6(0xa, 0x2, 0x73) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r14, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r13, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000010400"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x90) sendmmsg$inet6(r13, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) 1.535181429s ago: executing program 4 (id=1644): write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20000004) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x0, 0x5ea, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000ecfe6d7aaca567ee506e37c16498f1860000000018110000", @ANYRES64=r2, @ANYRES32=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffc1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="1800e7520000000000000000a000000000009500000700000000b26b7c0581880b49dab0e0f42676683d7cb9fe2b58072891b4bbaf7d681388a4a6263f1eb0b252815d6318be60aa39c52df7a5f3269a69685edeec1c2213c65d6c3ba6ba65f9f34fa4cdeb68390cee08c2d28ba644fcb9e6d8b7be22e5a45ab7f35359bc35b16731faf4f9ff57b52c2b97e5c5b9d352ce9fc16a42a38e79356d17a5cbd8ac595cd80ebd92c8a6100611504e9dcc729e5b5543c81d22187ab463def9b7756b6c838ce9d768b812f2c678de08ef40827dbfeab6f1e9a0c64a21a7ff3edba6906567838c8b588554ff6e6657db18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="130000001900010000000000000000001d01000008000900477b1245ad2d77448fb9aff136da4bdadc490d43fec61d452f04d7478ad4a9ba58e218b2d9fe08f5ed4d74bd89c99280b23876c11ec47a77eaf3c0891e68cc4aea378de085be29a1a74af82a76feb2edfcd8b045fae1eb279f4e8d650756b59170eb89bdbf4f380c211382528801aaf8c414f62cc8b4542d237f214f109f47523306c771d20a4f693fd7c72f2b395cacc164d45de0", @ANYRES32=0x0, @ANYBLOB='\f\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x8, 0x10002, 0x75, r2, 0x80, '\x00', 0x0, r5, 0x4}, 0x48) r7 = socket(0x2, 0x80805, 0x0) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="300000000000000084000000010000005976020082"], 0x30}}], 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r4], 0x64}}, 0x4001040) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet_dccp(0x2, 0x6, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000014001a80100004800c00028008"], 0x34}}, 0x0) listen(r1, 0x5) 1.432172409s ago: executing program 1 (id=1645): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x64}}, 0x4000040) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r1], 0x20}}, 0x0) 1.431760633s ago: executing program 4 (id=1646): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r2, &(0x7f00000003c0)={'c', ' *:* ', 'rw\x00'}, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="eb"}], 0x1, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r6, &(0x7f0000000000)="db", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) getsockopt$inet_int(r4, 0x10d, 0x9d, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x4, 0x9, 0x0, 0x1}, {0xffff, 0xff, 0x3, 0xa18}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.376646144s ago: executing program 3 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1}}, {{@in=@private}, 0x0, @in=@private}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@generic={0x5, "c62d3c825dd7ed1ce21e571441d641cf07949e49e1d6a104df301e6e8c3bcc5ce67b9204"}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x14412, 0x4) bind$unix(r2, &(0x7f00000003c0)=@abs={0xe2fdd5f53424dbd2, 0x0, 0x4e20}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 52.461561ms ago: executing program 0 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000001100)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) 51.969546ms ago: executing program 1 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001280)={0x0, 0x7f, "a4df48c91ea0a8937f36e8fb3e4d8219a8a04c4903627b8a03fccf603145c7a459a6317d2b3a0235cb04a27117a7313062393f9c3ff415d8a0d526e44e3b0b8944cf1f49dc2e6dcbb23bfa598e5c3b102e19acdc6a064b22cd9d8cba13c9671e6ad1adea0c2c15600fc99ef442bafcf236516ee7e98594cb33414d2f273376"}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002080)={0x90, r10, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x90}}, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000180)=0x1) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000140)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xec, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000600900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 51.613239ms ago: executing program 2 (id=1649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="2b5a000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 239.195µs ago: executing program 4 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x8f) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x12, 0x0, &(0x7f00000001c0)="5cdd3086dd88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=1651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) tee(r3, r4, 0xaf5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.647'. [ 118.266897][ T7449] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 118.637859][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.647226][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.655048][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.664050][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.694200][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.705895][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.227676][ T7493] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 119.270731][ T7463] chnl_net:caif_netlink_parms(): no params data found [ 119.524379][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.598150][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.621989][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.630272][ T7517] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 119.645110][ T7463] bridge_slave_0: entered allmulticast mode [ 119.651915][ T7517] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 119.664799][ T7463] bridge_slave_0: entered promiscuous mode [ 119.696112][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.712144][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.727178][ T7463] bridge_slave_1: entered allmulticast mode [ 119.742454][ T7521] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 119.751068][ T7463] bridge_slave_1: entered promiscuous mode [ 119.766642][ T7521] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 119.873735][ T3984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.967390][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.004573][ T3984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.025329][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.127177][ T7463] team0: Port device team_slave_0 added [ 120.178354][ T3984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.205584][ T7463] team0: Port device team_slave_1 added [ 120.218385][ T7547] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 120.333268][ T7544] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 120.362344][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.371420][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.420256][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.448369][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.463893][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.502688][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.637314][ T7463] hsr_slave_0: entered promiscuous mode [ 120.668618][ T7463] hsr_slave_1: entered promiscuous mode [ 120.707198][ T7463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.724991][ T7463] Cannot create hsr debugfs directory [ 120.746341][ T5235] Bluetooth: hci3: command tx timeout [ 120.923019][ T3984] bridge_slave_1: left allmulticast mode [ 120.928965][ T3984] bridge_slave_1: left promiscuous mode [ 120.934830][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.987462][ T3984] bridge_slave_0: left allmulticast mode [ 120.993148][ T3984] bridge_slave_0: left promiscuous mode [ 121.029541][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.776566][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.795586][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.814440][ T3984] bond0 (unregistering): Released all slaves [ 121.843736][ T7590] __nla_validate_parse: 11 callbacks suppressed [ 121.843756][ T7590] netlink: 44 bytes leftover after parsing attributes in process `syz.0.693'. [ 121.859435][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.693'. [ 121.868884][ T7592] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 122.313727][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'. [ 122.354332][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 122.461960][ T3984] hsr_slave_0: left promiscuous mode [ 122.477671][ T3984] hsr_slave_1: left promiscuous mode [ 122.490859][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.507072][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.525562][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.545422][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.574163][ T3984] veth1_macvtap: left promiscuous mode [ 122.580098][ T3984] veth0_macvtap: left promiscuous mode [ 122.587106][ T3984] veth1_vlan: left promiscuous mode [ 122.593031][ T3984] veth0_vlan: left promiscuous mode [ 122.826493][ T5235] Bluetooth: hci3: command tx timeout [ 123.375481][ T3984] team0 (unregistering): Port device team_slave_1 removed [ 123.422352][ T3984] team0 (unregistering): Port device team_slave_0 removed [ 123.882607][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 123.892725][ T7636] netlink: 'syz.2.705': attribute type 18 has an invalid length. [ 123.910605][ T7636] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.919900][ T7636] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.928702][ T7636] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.938144][ T7636] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.952636][ T7636] vxlan0: entered promiscuous mode [ 123.966701][ T7654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.708'. [ 123.975593][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.708'. [ 124.425026][ T7672] netlink: 76 bytes leftover after parsing attributes in process `syz.0.715'. [ 124.439153][ T7463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.461904][ T7667] netlink: 'syz.4.713': attribute type 11 has an invalid length. [ 124.478521][ T7672] ÊüðÿG!: entered promiscuous mode [ 124.499288][ T7463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.534874][ T7463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.568520][ T7463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.595574][ T7677] netlink: 100 bytes leftover after parsing attributes in process `syz.1.717'. [ 124.611801][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 124.753427][ T45] block nbd4: Possible stuck request ffff8880265b0000: control (read@0,4096B). Runtime 30 seconds [ 124.906086][ T5235] Bluetooth: hci3: command tx timeout [ 124.913957][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.973329][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.012738][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.019950][ T4021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.140193][ T4012] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.147406][ T4012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.209213][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.316577][ T7463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.463135][ T7711] tc_dump_action: action bad kind [ 125.955596][ T7738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.045432][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.178694][ T7463] veth0_vlan: entered promiscuous mode [ 126.222549][ T7463] veth1_vlan: entered promiscuous mode [ 126.305081][ T7463] veth0_macvtap: entered promiscuous mode [ 126.319111][ T7463] veth1_macvtap: entered promiscuous mode [ 126.354287][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.375548][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.394329][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.405536][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.415619][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.427669][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.439666][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.482309][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.505073][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.537025][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.575746][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.606515][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.624401][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.637715][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.657891][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.678090][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.713381][ T7463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.734969][ T7463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.754793][ T7463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.769259][ T7463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.986148][ T5235] Bluetooth: hci3: command tx timeout [ 126.998976][ T7766] __nla_validate_parse: 10 callbacks suppressed [ 126.999025][ T7766] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.749'. [ 126.999489][ T4021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.005297][ T7766] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 127.054589][ T4021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.112831][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.117289][ T7769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.751'. [ 127.145343][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.147773][ T7769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.751'. [ 127.540411][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 127.592116][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'. [ 127.697423][ T7802] xt_CT: No such helper "pptp" [ 127.739981][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 127.782266][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 127.903181][ T7812] bridge0: entered promiscuous mode [ 127.915627][ T7812] netlink: 'syz.0.764': attribute type 9 has an invalid length. [ 128.062166][ T7812] pim6reg: entered allmulticast mode [ 128.190469][ T7819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.765'. [ 128.208824][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.765'. [ 128.285668][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'. [ 128.596456][ T7846] xt_l2tp: v2 doesn't support IP mode [ 128.736061][ T7811] bridge0: left promiscuous mode [ 128.946961][ T7864] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 129.348008][ T7885] sctp: [Deprecated]: syz.1.787 (pid 7885) Use of int in max_burst socket option. [ 129.348008][ T7885] Use struct sctp_assoc_value instead [ 129.816674][ T7905] xt_cluster: node mask cannot exceed total number of nodes [ 129.848799][ T7909] xt_cluster: node mask cannot exceed total number of nodes [ 129.933102][ T3984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.969922][ T3984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.030393][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.042425][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.050622][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.064875][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.075230][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.087996][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.124851][ T7951] syzkaller0: entered promiscuous mode [ 131.143967][ T7951] syzkaller0: entered allmulticast mode [ 131.172905][ T3984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.325910][ T3984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.426855][ C0] bridge0: port 3(ip6gretap0) entered forwarding state [ 132.433887][ C0] bridge0: topology change detected, propagating [ 133.069428][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145973][ T5235] Bluetooth: hci3: command tx timeout [ 133.278050][ T7989] bridge0: port 3(vlan2) entered blocking state [ 133.290266][ T7989] bridge0: port 3(vlan2) entered disabled state [ 133.298204][ T7989] vlan2: entered allmulticast mode [ 133.307256][ T7989] vlan2: left allmulticast mode [ 133.357292][ T7997] sch_fq: defrate 2 ignored. [ 133.418359][ T8002] netlink: 'syz.2.822': attribute type 4 has an invalid length. [ 133.525679][ T3984] bridge_slave_1: left allmulticast mode [ 133.535645][ T3984] bridge_slave_1: left promiscuous mode [ 133.543908][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.569908][ T3984] bridge_slave_0: left allmulticast mode [ 133.581118][ T3984] bridge_slave_0: left promiscuous mode [ 133.589258][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.171635][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.184953][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.197713][ T3984] bond0 (unregistering): Released all slaves [ 134.249325][ T8016] __nla_validate_parse: 10 callbacks suppressed [ 134.249345][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 134.355208][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 134.467950][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 134.488010][ T8045] netlink: 96 bytes leftover after parsing attributes in process `syz.1.833'. [ 134.743144][ T3984] hsr_slave_0: left promiscuous mode [ 134.759338][ T3984] hsr_slave_1: left promiscuous mode [ 134.779214][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.798395][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.813046][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.835133][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.848783][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 134.904395][ T3984] veth1_macvtap: left promiscuous mode [ 134.937334][ T3984] veth0_macvtap: left promiscuous mode [ 134.943825][ T3984] veth1_vlan: left promiscuous mode [ 134.951073][ T3984] veth0_vlan: left promiscuous mode [ 135.069283][ T8073] netlink: 'syz.4.841': attribute type 153 has an invalid length. [ 135.122682][ T8075] dccp_invalid_packet: P.Data Offset(0) too small [ 135.226433][ T5235] Bluetooth: hci3: command tx timeout [ 135.686044][ T3984] team0 (unregistering): Port device team_slave_1 removed [ 135.732867][ T3984] team0 (unregistering): Port device team_slave_0 removed [ 136.178922][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.186669][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.194024][ T7952] bridge_slave_0: entered allmulticast mode [ 136.201688][ T7952] bridge_slave_0: entered promiscuous mode [ 136.210777][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.219792][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.228108][ T7952] bridge_slave_1: entered allmulticast mode [ 136.235580][ T7952] bridge_slave_1: entered promiscuous mode [ 136.243571][ T8072] tipc: Started in network mode [ 136.250206][ T8072] tipc: Node identity ffffffff, cluster identity 4711 [ 136.258232][ T8072] tipc: Node number set to 4294967295 [ 136.271329][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 136.382243][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'. [ 136.444258][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.470562][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.640186][ T7952] team0: Port device team_slave_0 added [ 136.677197][ T7952] team0: Port device team_slave_1 added [ 136.769378][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.781896][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.809827][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.827576][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.839011][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.865546][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.947362][ T7952] hsr_slave_0: entered promiscuous mode [ 136.955056][ T7952] hsr_slave_1: entered promiscuous mode [ 136.963403][ T7952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.981098][ T7952] Cannot create hsr debugfs directory [ 137.277674][ T8127] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 137.307128][ T5235] Bluetooth: hci3: command tx timeout [ 137.583558][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'. [ 137.624103][ T7952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.660058][ T7952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.680555][ T7952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.718983][ T7952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.779574][ T8146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.862'. [ 137.855415][ T8152] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 137.865529][ T8148] netlink: 'syz.2.865': attribute type 178 has an invalid length. [ 137.945392][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.029203][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.087959][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 138.122044][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.129346][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.159168][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.166410][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.457116][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.875'. [ 138.673540][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.721911][ T8187] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 138.805641][ T7952] veth0_vlan: entered promiscuous mode [ 138.832301][ T7952] veth1_vlan: entered promiscuous mode [ 138.847233][ T10] block nbd1: Possible stuck request ffff8880264b0000: control (read@0,4096B). Runtime 60 seconds [ 139.013427][ T7952] veth0_macvtap: entered promiscuous mode [ 139.049532][ T7952] veth1_macvtap: entered promiscuous mode [ 139.083027][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.103045][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.120851][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.146341][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.166955][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.197145][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.218087][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.231793][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.244468][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.254497][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.266373][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.276837][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.289138][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.292090][ T8202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.881'. [ 139.302267][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.319706][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.339034][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.360598][ T8201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.882'. [ 139.386814][ T5235] Bluetooth: hci3: command tx timeout [ 139.398466][ T8203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.882'. [ 139.434957][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 139.445557][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 139.454966][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 139.495837][ T7952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.512114][ T7952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.532161][ T7952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.551462][ T7952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.658519][ T8203] delete_channel: no stack [ 139.748353][ T4021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.763282][ T4021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.819854][ T8221] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 139.862874][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.899958][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.116542][ T45] block nbd2: Possible stuck request ffff8880264f0000: control (read@0,4096B). Runtime 60 seconds [ 140.528679][ T8253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.898'. [ 140.670620][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.902'. [ 140.726527][ T8268] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 141.276210][ T8279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.908'. [ 141.285320][ T8279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.908'. [ 141.643671][ T8297] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 142.502798][ T4012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.280521][ T8342] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 143.368956][ T8345] netlink: 'syz.4.928': attribute type 21 has an invalid length. [ 143.694862][ T4012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.854920][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.864903][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.877139][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.885583][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.893649][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.901459][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.932135][ T4012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.062831][ T4012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.379436][ T4012] bridge_slave_1: left allmulticast mode [ 144.387312][ T4012] bridge_slave_1: left promiscuous mode [ 144.393183][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.413393][ T4012] bridge_slave_0: left allmulticast mode [ 144.421497][ T4012] bridge_slave_0: left promiscuous mode [ 144.431832][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.503241][ T8393] __nla_validate_parse: 10 callbacks suppressed [ 144.503261][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 145.215384][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.240899][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.256002][ T4012] bond0 (unregistering): Released all slaves [ 145.275406][ T8391] netlink: 44 bytes leftover after parsing attributes in process `syz.4.941'. [ 145.284622][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.941'. [ 145.318174][ T8369] chnl_net:caif_netlink_parms(): no params data found [ 145.368678][ T8397] netlink: 'syz.0.943': attribute type 25 has an invalid length. [ 145.394141][ T8397] netlink: 'syz.0.943': attribute type 8 has an invalid length. [ 145.442996][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.499316][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.945'. [ 145.750384][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 145.807115][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 145.946120][ T8415] nbd6: detected capacity change from 0 to 256 [ 145.947706][ T55] Bluetooth: hci3: command tx timeout [ 145.970263][ T5235] block nbd6: Receive control failed (result -104) [ 145.988510][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.004148][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.034522][ T8369] bridge_slave_0: entered allmulticast mode [ 146.047155][ T8369] bridge_slave_0: entered promiscuous mode [ 146.061816][ T4012] hsr_slave_0: left promiscuous mode [ 146.069584][ T4012] hsr_slave_1: left promiscuous mode [ 146.076405][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.084142][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.092954][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.102024][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.124322][ T4012] veth1_macvtap: left promiscuous mode [ 146.130055][ T4012] veth0_macvtap: left promiscuous mode [ 146.136114][ T4012] veth1_vlan: left promiscuous mode [ 146.141999][ T4012] veth0_vlan: left promiscuous mode [ 146.185296][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 146.734851][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 146.773271][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 147.188275][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.195468][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.207034][ T8369] bridge_slave_1: entered allmulticast mode [ 147.214708][ T8369] bridge_slave_1: entered promiscuous mode [ 147.340958][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.368946][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.404122][ T8444] netlink: 'syz.4.959': attribute type 25 has an invalid length. [ 147.415325][ T8444] netlink: 'syz.4.959': attribute type 8 has an invalid length. [ 147.537430][ T8369] team0: Port device team_slave_0 added [ 147.572227][ T8369] team0: Port device team_slave_1 added [ 147.814282][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.825087][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.912258][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.942069][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.954901][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.987155][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.026122][ T5235] Bluetooth: hci3: command tx timeout [ 148.065601][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 148.111858][ T8369] hsr_slave_0: entered promiscuous mode [ 148.134080][ T8369] hsr_slave_1: entered promiscuous mode [ 148.160424][ T8369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.172749][ T8369] Cannot create hsr debugfs directory [ 148.334413][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 148.385632][ T8489] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 148.417061][ T8496] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 148.574693][ T8504] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 148.596129][ T8504] netlink: 112848 bytes leftover after parsing attributes in process `syz.1.973'. [ 148.612489][ T8504] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 148.638998][ T8504] bond0: option miimon: invalid value (18446744073072082944) [ 148.681104][ T8504] bond0: option miimon: allowed values 0 - 2147483647 [ 149.530213][ T8538] __nla_validate_parse: 1 callbacks suppressed [ 149.530230][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 149.606117][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 149.808012][ T8538] nbd7: detected capacity change from 0 to 256 [ 149.823875][ T8549] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 149.861858][ T5235] block nbd7: Receive control failed (result -104) [ 149.881915][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 149.898461][ T8369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.962126][ T8369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.979230][ T8369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.996556][ T8369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.105947][ T5235] Bluetooth: hci3: command tx timeout [ 150.133494][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 150.167289][ T8566] x_tables: duplicate underflow at hook 2 [ 150.240538][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.284000][ T8369] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.310217][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.317419][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.340963][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.348203][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.583638][ T8576] netlink: 'syz.2.995': attribute type 25 has an invalid length. [ 150.605912][ T8576] netlink: 'syz.2.995': attribute type 8 has an invalid length. [ 150.717212][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.829155][ T8590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.998'. [ 150.847875][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.998'. [ 150.872967][ T8369] veth0_vlan: entered promiscuous mode [ 150.906293][ T8589] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 150.959811][ T8369] veth1_vlan: entered promiscuous mode [ 151.041043][ T8369] veth0_macvtap: entered promiscuous mode [ 151.076598][ T8369] veth1_macvtap: entered promiscuous mode [ 151.162921][ T8601] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 151.164279][ T8600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1003'. [ 151.210927][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.232916][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.249280][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.260040][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.272097][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.291546][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.303807][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.333283][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.349467][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.352285][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 151.364560][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.380459][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.390657][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.402513][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.406426][ T8608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1004'. [ 151.413404][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.432003][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.445278][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.498352][ T8369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.515270][ T8369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.526926][ T8369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.545989][ T8369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.728099][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.756810][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.799478][ T8618] netlink: 'syz.0.1009': attribute type 25 has an invalid length. [ 151.818296][ T8618] netlink: 'syz.0.1009': attribute type 8 has an invalid length. [ 151.860400][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.877406][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.069312][ T8632] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1012'. [ 152.259671][ T8639] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 153.929151][ T8699] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 154.380902][ T4012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.426109][ T8721] netlink: 'syz.1.1046': attribute type 25 has an invalid length. [ 154.433962][ T8721] netlink: 'syz.1.1046': attribute type 8 has an invalid length. [ 154.830635][ T45] block nbd4: Possible stuck request ffff8880265b0000: control (read@0,4096B). Runtime 60 seconds [ 155.177413][ T8732] __nla_validate_parse: 11 callbacks suppressed [ 155.177431][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 155.182112][ T8729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1050'. [ 155.213891][ T8729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1050'. [ 155.466047][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 155.486687][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'. [ 155.547709][ T8738] tc_dump_action: action bad kind [ 155.667870][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.677002][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.685607][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.694083][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.724772][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 155.747193][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.758156][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.765467][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 155.877371][ T8748] nbd8: detected capacity change from 0 to 256 [ 155.936021][ T55] block nbd8: Receive control failed (result -104) [ 156.021942][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 156.100722][ T8760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'. [ 156.115512][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1062'. [ 156.226093][ T4012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.240424][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1061'. [ 156.320219][ T4012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.338540][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.347677][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.354842][ T8743] bridge_slave_0: entered allmulticast mode [ 156.373713][ T8743] bridge_slave_0: entered promiscuous mode [ 156.382543][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.390034][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.398894][ T8743] bridge_slave_1: entered allmulticast mode [ 156.405682][ T8743] bridge_slave_1: entered promiscuous mode [ 156.431847][ T4012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.515672][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.539185][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.623100][ T8743] team0: Port device team_slave_0 added [ 156.638864][ T8743] team0: Port device team_slave_1 added [ 156.723872][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.732230][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.756680][ T8783] unsupported nlmsg_type 40 [ 156.768396][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.793451][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.801515][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.832673][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.845901][ T4012] bridge_slave_1: left allmulticast mode [ 156.851998][ T4012] bridge_slave_1: left promiscuous mode [ 156.858289][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.868971][ T4012] bridge_slave_0: left allmulticast mode [ 156.877840][ T4012] bridge_slave_0: left promiscuous mode [ 156.883922][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.385057][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.399945][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.410473][ T4012] bond0 (unregistering): Released all slaves [ 157.457042][ T8792] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 157.519526][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.744352][ T8743] hsr_slave_0: entered promiscuous mode [ 157.774437][ T8743] hsr_slave_1: entered promiscuous mode [ 157.793886][ T8743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.806445][ T8743] Cannot create hsr debugfs directory [ 157.816224][ T8803] nbd9: detected capacity change from 0 to 256 [ 157.852756][ T55] block nbd9: Receive control failed (result -104) [ 157.866504][ T55] Bluetooth: hci3: command tx timeout [ 157.886835][ T8808] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 157.930010][ T4012] hsr_slave_0: left promiscuous mode [ 157.937984][ T4012] hsr_slave_1: left promiscuous mode [ 157.948940][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.956636][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.965997][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.973416][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.038142][ T4012] veth1_macvtap: left promiscuous mode [ 158.043818][ T4012] veth0_macvtap: left promiscuous mode [ 158.052099][ T4012] veth1_vlan: left promiscuous mode [ 158.058966][ T4012] veth0_vlan: left promiscuous mode [ 158.796983][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 158.842690][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 159.312794][ T8822] pim6reg: entered allmulticast mode [ 159.324990][ T8830] pim6reg: left allmulticast mode [ 159.398720][ T8839] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 159.754396][ T8850] bond0: entered promiscuous mode [ 159.945975][ T5235] Bluetooth: hci3: command tx timeout [ 160.175849][ T8875] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 160.298981][ T8743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.311096][ T8883] FAULT_INJECTION: forcing a failure. [ 160.311096][ T8883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.328128][ T8743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.329774][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.4.1101 Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 160.345485][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.355529][ T8883] Call Trace: [ 160.358800][ T8883] [ 160.361734][ T8883] dump_stack_lvl+0x241/0x360 [ 160.366412][ T8883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.371601][ T8883] ? __pfx__printk+0x10/0x10 [ 160.376182][ T8883] ? __pfx_lock_release+0x10/0x10 [ 160.381208][ T8883] ? vfs_write+0x7c4/0xc90 [ 160.385615][ T8883] should_fail_ex+0x3b0/0x4e0 [ 160.390293][ T8883] _copy_from_user+0x2f/0xe0 [ 160.394881][ T8883] __sys_bpf+0x1a4/0x810 [ 160.399123][ T8883] ? __pfx___sys_bpf+0x10/0x10 [ 160.403888][ T8883] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.409864][ T8883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.416185][ T8883] ? do_syscall_64+0x100/0x230 [ 160.420941][ T8883] __x64_sys_bpf+0x7c/0x90 [ 160.425346][ T8883] do_syscall_64+0xf3/0x230 [ 160.429845][ T8883] ? clear_bhb_loop+0x35/0x90 [ 160.434604][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.440494][ T8883] RIP: 0033:0x7fe5b3979eb9 [ 160.444906][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.464586][ T8883] RSP: 002b:00007fe5b4774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.473021][ T8883] RAX: ffffffffffffffda RBX: 00007fe5b3b15f80 RCX: 00007fe5b3979eb9 [ 160.480993][ T8883] RDX: 0000000000000078 RSI: 0000000020000440 RDI: 0000000000000005 [ 160.488977][ T8883] RBP: 00007fe5b4774090 R08: 0000000000000000 R09: 0000000000000000 [ 160.496946][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.504903][ T8883] R13: 0000000000000000 R14: 00007fe5b3b15f80 R15: 00007fff16bc38e8 [ 160.512875][ T8883] [ 160.542778][ T8743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.597501][ T8743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.663487][ T8892] netlink: 'syz.0.1104': attribute type 8 has an invalid length. [ 160.713543][ T8892] __nla_validate_parse: 11 callbacks suppressed [ 160.713563][ T8892] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1104'. [ 160.755483][ T8892] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 160.863222][ T8896] atomic_op ffff88803398b198 conn xmit_atomic 0000000000000000 [ 160.993617][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.053203][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.093845][ T8906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1109'. [ 161.105319][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.112541][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.151318][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.158530][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.290618][ T8916] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 161.402322][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 161.537257][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'. [ 161.661764][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.845518][ T8743] veth0_vlan: entered promiscuous mode [ 161.918812][ T8743] veth1_vlan: entered promiscuous mode [ 162.026053][ T5235] Bluetooth: hci3: command 0x040f tx timeout [ 162.029775][ T8743] veth0_macvtap: entered promiscuous mode [ 162.070911][ T8743] veth1_macvtap: entered promiscuous mode [ 162.096309][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 162.125939][ T8947] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 162.172866][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.184579][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.205750][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.209727][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.230430][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.242206][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.252490][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.270939][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.284799][ T8952] FAULT_INJECTION: forcing a failure. [ 162.284799][ T8952] name failslab, interval 1, probability 0, space 0, times 1 [ 162.301469][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.304000][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 162.316374][ T8952] CPU: 1 UID: 0 PID: 8952 Comm: syz.1.1126 Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 162.328705][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.338928][ T8952] Call Trace: [ 162.342203][ T8952] [ 162.345122][ T8952] dump_stack_lvl+0x241/0x360 [ 162.349794][ T8952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.355501][ T8952] ? __pfx__printk+0x10/0x10 [ 162.360078][ T8952] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 162.365970][ T8952] ? __pfx___might_resched+0x10/0x10 [ 162.368831][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.371251][ T8952] should_fail_ex+0x3b0/0x4e0 [ 162.371288][ T8952] should_failslab+0xac/0x100 [ 162.371315][ T8952] __kmalloc_cache_node_noprof+0x74/0x300 [ 162.382603][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.386344][ T8952] ? __get_vm_area_node+0x113/0x270 [ 162.386381][ T8952] __get_vm_area_node+0x113/0x270 [ 162.386410][ T8952] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 162.391153][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.396762][ T8952] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.396786][ T8952] ? mark_lock+0x9a/0x350 [ 162.396837][ T8952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.396865][ T8952] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.406904][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.411815][ T8952] __vmalloc_noprof+0x79/0x90 [ 162.411840][ T8952] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.411863][ T8952] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.480074][ T8952] ? bpf_prog_alloc+0x28/0x1b0 [ 162.484862][ T8952] bpf_prog_alloc+0x3a/0x1b0 [ 162.489446][ T8952] bpf_prog_load+0x7f7/0x20f0 [ 162.494123][ T8952] ? __pfx_bpf_prog_load+0x10/0x10 [ 162.499222][ T8952] ? __pfx___might_resched+0x10/0x10 [ 162.504507][ T8952] ? __might_fault+0xc6/0x120 [ 162.509177][ T8952] ? bpf_lsm_bpf+0x9/0x10 [ 162.513493][ T8952] ? security_bpf+0x87/0xb0 [ 162.517991][ T8952] __sys_bpf+0x4ee/0x810 [ 162.522234][ T8952] ? __pfx___sys_bpf+0x10/0x10 [ 162.526996][ T8952] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.532975][ T8952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.539298][ T8952] ? do_syscall_64+0x100/0x230 [ 162.544057][ T8952] __x64_sys_bpf+0x7c/0x90 [ 162.548463][ T8952] do_syscall_64+0xf3/0x230 [ 162.552955][ T8952] ? clear_bhb_loop+0x35/0x90 [ 162.557626][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.563510][ T8952] RIP: 0033:0x7f0449779eb9 [ 162.567915][ T8952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.587507][ T8952] RSP: 002b:00007f04491ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.595909][ T8952] RAX: ffffffffffffffda RBX: 00007f0449915f80 RCX: 00007f0449779eb9 [ 162.603866][ T8952] RDX: 0000000000000078 RSI: 0000000020000440 RDI: 0000000000000005 [ 162.611828][ T8952] RBP: 00007f04491ff090 R08: 0000000000000000 R09: 0000000000000000 [ 162.619786][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.627742][ T8952] R13: 0000000000000000 R14: 00007f0449915f80 R15: 00007ffcd97a2808 [ 162.635721][ T8952] [ 162.641900][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.645877][ T8952] syz.1.1126: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 162.654188][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.674039][ T8952] CPU: 0 UID: 0 PID: 8952 Comm: syz.1.1126 Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 162.689745][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.699794][ T8952] Call Trace: [ 162.703068][ T8952] [ 162.705989][ T8952] dump_stack_lvl+0x241/0x360 [ 162.710666][ T8952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.715856][ T8952] ? __pfx__printk+0x10/0x10 [ 162.720440][ T8952] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 162.726844][ T8952] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 162.733334][ T8952] warn_alloc+0x278/0x410 [ 162.737659][ T8952] ? __pfx_warn_alloc+0x10/0x10 [ 162.742502][ T8952] ? __get_vm_area_node+0x113/0x270 [ 162.747700][ T8952] ? __get_vm_area_node+0x261/0x270 [ 162.752906][ T8952] __vmalloc_node_range_noprof+0x3eb/0x1400 [ 162.758791][ T8952] ? mark_lock+0x9a/0x350 [ 162.763135][ T8952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.769455][ T8952] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.774990][ T8952] __vmalloc_noprof+0x79/0x90 [ 162.779653][ T8952] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.785187][ T8952] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 162.790545][ T8952] ? bpf_prog_alloc+0x28/0x1b0 [ 162.795302][ T8952] bpf_prog_alloc+0x3a/0x1b0 [ 162.799883][ T8952] bpf_prog_load+0x7f7/0x20f0 [ 162.804562][ T8952] ? __pfx_bpf_prog_load+0x10/0x10 [ 162.809664][ T8952] ? __pfx___might_resched+0x10/0x10 [ 162.814954][ T8952] ? __might_fault+0xc6/0x120 [ 162.819624][ T8952] ? bpf_lsm_bpf+0x9/0x10 [ 162.823940][ T8952] ? security_bpf+0x87/0xb0 [ 162.828434][ T8952] __sys_bpf+0x4ee/0x810 [ 162.832691][ T8952] ? __pfx___sys_bpf+0x10/0x10 [ 162.837482][ T8952] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.843470][ T8952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.849812][ T8952] ? do_syscall_64+0x100/0x230 [ 162.854585][ T8952] __x64_sys_bpf+0x7c/0x90 [ 162.859005][ T8952] do_syscall_64+0xf3/0x230 [ 162.863509][ T8952] ? clear_bhb_loop+0x35/0x90 [ 162.868186][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.874075][ T8952] RIP: 0033:0x7f0449779eb9 [ 162.878484][ T8952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.898077][ T8952] RSP: 002b:00007f04491ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.906486][ T8952] RAX: ffffffffffffffda RBX: 00007f0449915f80 RCX: 00007f0449779eb9 [ 162.914445][ T8952] RDX: 0000000000000078 RSI: 0000000020000440 RDI: 0000000000000005 [ 162.922404][ T8952] RBP: 00007f04491ff090 R08: 0000000000000000 R09: 0000000000000000 [ 162.930364][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.938327][ T8952] R13: 0000000000000000 R14: 00007f0449915f80 R15: 00007ffcd97a2808 [ 162.946303][ T8952] [ 162.954452][ T8743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.965170][ T8743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.973623][ T8952] Mem-Info: [ 162.976851][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.978333][ T8952] active_anon:4075 inactive_anon:0 isolated_anon:0 [ 162.978333][ T8952] active_file:1851 inactive_file:38211 isolated_file:0 [ 162.978333][ T8952] unevictable:768 dirty:307 writeback:0 [ 162.978333][ T8952] slab_reclaimable:9507 slab_unreclaimable:96076 [ 162.978333][ T8952] mapped:21237 shmem:1263 pagetables:740 [ 162.978333][ T8952] sec_pagetables:0 bounce:0 [ 162.978333][ T8952] kernel_misc_reclaimable:0 [ 162.978333][ T8952] free:1370253 free_pcp:409 free_cma:0 [ 162.986160][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 163.038023][ T8952] Node 0 active_anon:16300kB inactive_anon:0kB active_file:7404kB inactive_file:152768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84948kB dirty:1228kB writeback:0kB shmem:3516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10004kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 163.086415][ T8950] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 163.133630][ T8743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.152330][ T55] block nbd10: Receive control failed (result -104) [ 163.174583][ T8743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.182676][ T8952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 163.183488][ T8743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.224292][ T8743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.259731][ T8954] nbd10: detected capacity change from 0 to 256 [ 163.278403][ T8952] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.338342][ T8952] lowmem_reserve[]: 0 2467 2468 0 0 [ 163.343640][ T8952] Node 0 DMA32 free:1514576kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:16176kB inactive_anon:0kB active_file:7404kB inactive_file:151952kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2554980kB mlocked:0kB bounce:0kB free_pcp:3460kB local_pcp:1832kB free_cma:0kB [ 163.446611][ T8952] lowmem_reserve[]: 0 0 0 0 0 [ 163.451387][ T8952] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 163.481225][ T8952] lowmem_reserve[]: 0 0 0 0 0 [ 163.488697][ T8952] Node 1 Normal free:3949280kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 163.532837][ T8952] lowmem_reserve[]: 0 0 0 0 0 [ 163.539715][ T8952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 163.543374][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.563150][ T8952] Node 0 DMA32: 488*4kB (UME) 379*8kB (UME) 170*16kB (UME) 86*32kB (UME) 216*64kB (UME) 64*128kB (UME) 19*256kB (UME) 6*512kB (UM) 9*1024kB (UME) 5*2048kB (UM) 355*4096kB (UME) = 1513944kB [ 163.589588][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.597254][ T8952] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 163.627500][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 163.632899][ T8952] Node 1 [ 163.638602][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.651042][ T8952] Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 4*64kB (U) 5*128kB (U) 3*256kB (UM) 4*512kB (UM) 3*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3949280kB [ 163.668012][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.682412][ T8952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 163.709308][ T8952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 163.719683][ T8952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 163.750546][ T8952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 163.790047][ T8952] 41326 total pagecache pages [ 163.794767][ T8952] 0 pages in swap cache [ 163.819423][ T8952] Free swap = 124996kB [ 163.846396][ T8952] Total swap = 124996kB [ 163.850564][ T8952] 2097051 pages RAM [ 163.854366][ T8952] 0 pages HighMem/MovableOnly [ 163.870311][ T8952] 426968 pages reserved [ 163.880392][ T8952] 0 pages cma reserved [ 163.890401][ T8974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1133'. [ 163.926622][ T8974] netlink: 'syz.4.1133': attribute type 2 has an invalid length. [ 163.934390][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 164.396785][ T9002] nbd11: detected capacity change from 0 to 256 [ 164.416372][ T55] block nbd11: Receive control failed (result -104) [ 165.217369][ T9039] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 165.343085][ T9038] nbd12: detected capacity change from 0 to 256 [ 165.373147][ T55] block nbd12: Receive control failed (result -104) [ 165.497360][ T9055] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 166.053971][ T9090] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 166.074556][ T5283] IPVS: starting estimator thread 0... [ 166.165952][ T9091] IPVS: using max 23 ests per chain, 55200 per kthread [ 166.217816][ T9095] __nla_validate_parse: 15 callbacks suppressed [ 166.217836][ T9095] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1180'. [ 166.349344][ T3984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.389229][ T9101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'. [ 167.334422][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 167.401765][ T3984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.452002][ T9113] xt_bpf: check failed: parse error [ 167.613699][ T3984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.658752][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 167.680606][ T9122] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 167.718157][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.739091][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.750602][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.759519][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.769542][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.777804][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.825619][ T3984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.866994][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.874723][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.977407][ T9138] netlink: 'syz.4.1195': attribute type 25 has an invalid length. [ 167.990307][ T9138] netlink: 'syz.4.1195': attribute type 8 has an invalid length. [ 168.136950][ T9142] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1197'. [ 168.191442][ T9143] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 168.198818][ T3984] bridge_slave_1: left allmulticast mode [ 168.213336][ T3984] bridge_slave_1: left promiscuous mode [ 168.228039][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.253734][ T3984] bridge_slave_0: left allmulticast mode [ 168.260648][ T3984] bridge_slave_0: left promiscuous mode [ 168.267712][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.685230][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.699185][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.710580][ T3984] bond0 (unregistering): Released all slaves [ 168.743183][ T9150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1200'. [ 168.772846][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1200'. [ 168.790646][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 168.917138][ T10] block nbd1: Possible stuck request ffff8880264b0000: control (read@0,4096B). Runtime 90 seconds [ 169.124013][ T3984] hsr_slave_0: left promiscuous mode [ 169.135274][ T3984] hsr_slave_1: left promiscuous mode [ 169.145151][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.160775][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.169186][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.177131][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.206089][ T3984] veth1_macvtap: left promiscuous mode [ 169.212732][ T3984] veth0_macvtap: left promiscuous mode [ 169.219577][ T3984] veth1_vlan: left promiscuous mode [ 169.225088][ T3984] veth0_vlan: left promiscuous mode [ 169.643044][ T9179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1208'. [ 169.866307][ T55] Bluetooth: hci3: command tx timeout [ 170.112163][ T3984] team0 (unregistering): Port device team_slave_1 removed [ 170.154603][ T3984] team0 (unregistering): Port device team_slave_0 removed [ 170.196478][ T45] block nbd2: Possible stuck request ffff8880264f0000: control (read@0,4096B). Runtime 90 seconds [ 170.679722][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 170.702980][ T9186] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 170.764736][ T9188] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1211'. [ 171.071366][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.105940][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.123593][ T9125] bridge_slave_0: entered allmulticast mode [ 171.134903][ T9125] bridge_slave_0: entered promiscuous mode [ 171.159234][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.174283][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.183327][ T9125] bridge_slave_1: entered allmulticast mode [ 171.212161][ T9125] bridge_slave_1: entered promiscuous mode [ 171.294319][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.325214][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.413433][ T9125] team0: Port device team_slave_0 added [ 171.425202][ T9125] team0: Port device team_slave_1 added [ 171.485050][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.493945][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.527771][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.546064][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.561138][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.594065][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.674840][ T9125] hsr_slave_0: entered promiscuous mode [ 171.682083][ T9125] hsr_slave_1: entered promiscuous mode [ 171.696767][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.704508][ T9125] Cannot create hsr debugfs directory [ 171.859453][ T9220] __nla_validate_parse: 4 callbacks suppressed [ 171.859473][ T9220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1220'. [ 171.947024][ T55] Bluetooth: hci3: command tx timeout [ 172.375526][ T9231] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.602884][ T9125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.623951][ T9125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.656539][ T9236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1227'. [ 172.695895][ T9236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1227'. [ 172.728141][ T9125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.757118][ T9125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.872255][ T9246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1229'. [ 172.896080][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1229'. [ 173.109647][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.164288][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.192139][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.199351][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.233839][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 173.255609][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.262819][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.723155][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.757722][ T9258] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1231'. [ 173.833630][ T9125] veth0_vlan: entered promiscuous mode [ 173.857539][ T9125] veth1_vlan: entered promiscuous mode [ 173.928975][ T9125] veth0_macvtap: entered promiscuous mode [ 173.948626][ T9125] veth1_macvtap: entered promiscuous mode [ 173.989118][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.001879][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.013354][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.032474][ T55] Bluetooth: hci3: command tx timeout [ 174.079874][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.111264][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.139822][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.170819][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.208394][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.234128][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.263563][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.274728][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.285101][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.304074][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.314338][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.334586][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.357175][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.385643][ T9125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.402128][ T9125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.414259][ T9125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.424878][ T9125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.575438][ T4012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.594982][ T4012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.673223][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.700368][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.061730][ T9283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1240'. [ 175.098864][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1240'. [ 175.444431][ T9303] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1244'. [ 176.239295][ T9317] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 176.716469][ T9332] nbd13: detected capacity change from 0 to 256 [ 176.728052][ T55] block nbd13: Receive control failed (result -104) [ 177.061724][ T3984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.064688][ T9355] __nla_validate_parse: 5 callbacks suppressed [ 178.064707][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 178.136430][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 178.290215][ T9363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1266'. [ 178.311094][ T9363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1266'. [ 178.462982][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.474116][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.483379][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1269'. [ 178.494174][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.503830][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.512844][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.521158][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.544729][ T9369] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1269'. [ 178.713901][ T3984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.820022][ T3984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.949416][ T3984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.179789][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 179.259684][ T3984] bridge_slave_1: left allmulticast mode [ 179.265883][ T3984] bridge_slave_1: left promiscuous mode [ 179.271807][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.283627][ T3984] bridge_slave_0: left allmulticast mode [ 179.291599][ T3984] bridge_slave_0: left promiscuous mode [ 179.299573][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.754407][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.796445][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.812490][ T3984] bond0 (unregistering): Released all slaves [ 179.867077][ T9403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1278'. [ 179.893474][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1278'. [ 180.099203][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1283'. [ 180.161385][ T9415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1281'. [ 180.362318][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.387186][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.404780][ T9366] bridge_slave_0: entered allmulticast mode [ 180.417257][ T9366] bridge_slave_0: entered promiscuous mode [ 180.453742][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.467552][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.485280][ T9366] bridge_slave_1: entered allmulticast mode [ 180.498281][ T9366] bridge_slave_1: entered promiscuous mode [ 180.587245][ T5239] Bluetooth: hci3: command tx timeout [ 180.597488][ T3984] hsr_slave_0: left promiscuous mode [ 180.632069][ T3984] hsr_slave_1: left promiscuous mode [ 180.641967][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.649920][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.668618][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.678047][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.718890][ T3984] veth1_macvtap: left promiscuous mode [ 180.724966][ T3984] veth0_macvtap: left promiscuous mode [ 180.735522][ T3984] veth1_vlan: left promiscuous mode [ 180.741656][ T3984] veth0_vlan: left promiscuous mode [ 181.229085][ T4625] Bluetooth: hci2: command 0x0406 tx timeout [ 181.235207][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 181.498207][ T3984] team0 (unregistering): Port device team_slave_1 removed [ 181.627435][ T3984] team0 (unregistering): Port device team_slave_0 removed [ 182.181120][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.229195][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.360946][ T9366] team0: Port device team_slave_0 added [ 182.389342][ T9366] team0: Port device team_slave_1 added [ 182.547213][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.568749][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.621711][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.665966][ T5235] Bluetooth: hci3: command tx timeout [ 182.769407][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.778106][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.832612][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.028854][ T9366] hsr_slave_0: entered promiscuous mode [ 183.050141][ T9366] hsr_slave_1: entered promiscuous mode [ 183.073034][ T9366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.083134][ T9366] Cannot create hsr debugfs directory [ 183.325012][ T9501] __nla_validate_parse: 4 callbacks suppressed [ 183.325030][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 183.503413][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 183.671413][ T9511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1316'. [ 183.831180][ T9520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1319'. [ 183.847731][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 183.858987][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1319'. [ 184.040693][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 184.088846][ T9535] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1322'. [ 184.129483][ T9536] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1322'. [ 184.181416][ T9366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.223061][ T9366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.249441][ T9366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.278253][ T9366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.347234][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 184.517561][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.560072][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.595571][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.602821][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.653136][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.660331][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.745891][ T5235] Bluetooth: hci3: command tx timeout [ 184.924519][ T45] block nbd4: Possible stuck request ffff8880265b0000: control (read@0,4096B). Runtime 90 seconds [ 185.138075][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.189360][ T9580] netlink: 'syz.0.1337': attribute type 25 has an invalid length. [ 185.199183][ T9580] netlink: 'syz.0.1337': attribute type 8 has an invalid length. [ 185.271970][ T9366] veth0_vlan: entered promiscuous mode [ 185.311005][ T9366] veth1_vlan: entered promiscuous mode [ 185.376674][ T9589] netlink: 'syz.1.1339': attribute type 12 has an invalid length. [ 185.386977][ T9366] veth0_macvtap: entered promiscuous mode [ 185.405020][ T9366] veth1_macvtap: entered promiscuous mode [ 185.448930][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.460448][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.471677][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.489405][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.500688][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.511314][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.525655][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.580853][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.602136][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.620150][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.647519][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.659247][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.671210][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.681637][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.693064][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.712419][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.738344][ T9366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.747904][ T9366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.758050][ T9366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.768175][ T9366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.911229][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.935807][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.994968][ T3984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.006998][ T3984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.437778][ T9593] dccp_close: ABORT with 32 bytes unread [ 188.047852][ T9659] delete_channel: no stack [ 188.465301][ T9707] __nla_validate_parse: 15 callbacks suppressed [ 188.465316][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 188.753364][ T9713] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 188.873970][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.812886][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1385'. [ 189.910283][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 189.976101][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 190.015888][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 190.125795][ T9729] nbd14: detected capacity change from 0 to 256 [ 190.149273][ T5235] block nbd14: Receive control failed (result -104) [ 190.162936][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.175144][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.187088][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.197729][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.208372][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.215784][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.384735][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.423528][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 190.434693][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1393'. [ 190.445054][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 190.462112][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1393'. [ 190.508493][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.582039][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 190.681774][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.715089][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.850768][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.952062][ T9760] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 190.970703][ T9746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.998946][ T9766] netlink: 'syz.1.1398': attribute type 25 has an invalid length. [ 191.021180][ T9766] netlink: 'syz.1.1398': attribute type 8 has an invalid length. [ 191.050626][ T9735] chnl_net:caif_netlink_parms(): no params data found [ 191.293994][ T35] bridge_slave_1: left allmulticast mode [ 191.316756][ T35] bridge_slave_1: left promiscuous mode [ 191.330109][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.359664][ T35] bridge_slave_0: left allmulticast mode [ 191.365372][ T35] bridge_slave_0: left promiscuous mode [ 191.382208][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.902038][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.920765][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.934132][ T35] bond0 (unregistering): Released all slaves [ 192.058519][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.080400][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.089895][ T9735] bridge_slave_0: entered allmulticast mode [ 192.098604][ T9735] bridge_slave_0: entered promiscuous mode [ 192.138703][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.146345][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.153585][ T9735] bridge_slave_1: entered allmulticast mode [ 192.165737][ T9735] bridge_slave_1: entered promiscuous mode [ 192.181793][ T9801] tipc: Started in network mode [ 192.206428][ T9801] tipc: Node identity 16e6480a4971, cluster identity 4711 [ 192.220889][ T9801] tipc: Enabled bearer , priority 0 [ 192.266227][ T5235] Bluetooth: hci3: command tx timeout [ 192.284231][ T9803] syzkaller0: entered promiscuous mode [ 192.290187][ T9803] syzkaller0: entered allmulticast mode [ 192.302879][ T9803] tipc: Resetting bearer [ 192.378649][ T9800] tipc: Resetting bearer [ 193.247172][ T5283] tipc: Node number set to 1603749898 [ 193.500425][ T9847] raw_sendmsg: syz.2.1426 forgot to set AF_INET. Fix it! [ 193.764780][ T9858] __nla_validate_parse: 4 callbacks suppressed [ 193.764872][ T9858] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.1430'. [ 193.782085][ T9858] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.350810][ T5235] Bluetooth: hci3: command tx timeout [ 194.511150][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.132602][ T9800] tipc: Disabling bearer [ 195.173622][ T9735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.305405][ T9735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.505657][ T35] hsr_slave_0: left promiscuous mode [ 195.546794][ T35] hsr_slave_1: left promiscuous mode [ 195.571565][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.604468][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.628981][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.657596][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.698619][ T35] veth1_macvtap: left promiscuous mode [ 195.705428][ T35] veth0_macvtap: left promiscuous mode [ 195.712682][ T35] veth1_vlan: left promiscuous mode [ 195.725897][ T35] veth0_vlan: left promiscuous mode [ 196.373582][ T35] team0 (unregistering): Port device team_slave_1 removed [ 196.423150][ T35] team0 (unregistering): Port device team_slave_0 removed [ 196.429238][ T5235] Bluetooth: hci3: command tx timeout [ 196.997683][ T9886] bridge0: port 3(vlan2) entered blocking state [ 197.004252][ T9886] bridge0: port 3(vlan2) entered disabled state [ 197.013552][ T9886] vlan2: entered allmulticast mode [ 197.020086][ T9886] vlan2: left allmulticast mode [ 197.066675][ T9735] team0: Port device team_slave_0 added [ 197.089030][ T9735] team0: Port device team_slave_1 added [ 197.258609][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.265592][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.308689][ T9735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.338385][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 197.349020][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.378927][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.417591][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 197.444345][ T9735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.473206][ T9915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 197.560257][ T9919] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 197.588650][ T9922] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1454'. [ 197.694806][ T9735] hsr_slave_0: entered promiscuous mode [ 197.734349][ T9735] hsr_slave_1: entered promiscuous mode [ 197.752312][ T9735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.769780][ T9735] Cannot create hsr debugfs directory [ 198.000481][ T9941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1464'. [ 198.011170][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1464'. [ 198.395593][ T9950] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 198.402707][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 198.454515][ T9954] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 198.505994][ T5235] Bluetooth: hci3: command tx timeout [ 198.617234][ T9735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.630881][ T9735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.640331][ T9735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.653796][ T9735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.759044][ T9735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.792922][ T9735] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.808841][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.816033][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.831961][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.839177][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.947278][ T9964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1472'. [ 198.990616][ T10] block nbd1: Possible stuck request ffff8880264b0000: control (read@0,4096B). Runtime 120 seconds [ 199.167228][ T9735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.238220][ T9735] veth0_vlan: entered promiscuous mode [ 199.253293][ T9735] veth1_vlan: entered promiscuous mode [ 199.298416][ T9735] veth0_macvtap: entered promiscuous mode [ 199.319584][ T9735] veth1_macvtap: entered promiscuous mode [ 199.364663][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.386558][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.406809][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.426729][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.447847][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.464192][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.488189][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.515239][ T9984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1477'. [ 199.542320][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1477'. [ 199.555161][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.572522][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.582675][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.596477][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.606653][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.622191][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.654555][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.678826][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.703244][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.737507][ T9735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.765784][ T9735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.792435][ T9735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.816881][ T9735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.275868][ T45] block nbd2: Possible stuck request ffff8880264f0000: control (read@0,4096B). Runtime 120 seconds [ 200.328724][ T9998] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 200.414970][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.455857][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.483853][T10007] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 200.610340][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.626030][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.644492][T10015] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 201.199408][T10033] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1496'. [ 201.328597][T10038] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 201.400509][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1499'. [ 201.585547][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 201.609541][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 201.666027][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 201.775828][T10056] nbd15: detected capacity change from 0 to 256 [ 201.797856][ T5235] block nbd15: Receive control failed (result -104) [ 201.995554][T10066] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1507'. [ 202.055189][T10069] team0: Port device team_slave_0 removed [ 202.064527][T10069] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 203.036719][T10096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1519'. [ 203.241614][T10101] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 203.286570][T10101] syzkaller1: entered promiscuous mode [ 203.292079][T10101] syzkaller1: entered allmulticast mode [ 203.391988][T10109] vlan0: entered allmulticast mode [ 203.414681][T10109] veth0_vlan: entered allmulticast mode [ 203.830277][T10127] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 203.881160][ T4012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.938783][T10135] __nla_validate_parse: 5 callbacks suppressed [ 204.938802][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 205.076120][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 205.145347][ T4012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.196317][T10135] nbd1024: detected capacity change from 0 to 256 [ 205.220006][ T5235] block nbd1024: Receive control failed (result -104) [ 205.266522][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.276456][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.277900][ T4012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.301216][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.311845][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.319249][ T5239] Bluetooth: hci0: command tx timeout [ 205.325458][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.335085][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.376119][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 205.456380][ T4012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.588094][T10156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1540'. [ 205.598143][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1540'. [ 205.798138][ T4012] bridge_slave_1: left allmulticast mode [ 205.810674][ T4012] bridge_slave_1: left promiscuous mode [ 205.816661][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.919909][ T4012] bridge_slave_0: left allmulticast mode [ 205.925989][ T4012] bridge_slave_0: left promiscuous mode [ 205.931877][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.391970][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.403476][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.414817][ T4012] bond0 (unregistering): Released all slaves [ 206.457859][T10170] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 206.610763][T10143] chnl_net:caif_netlink_parms(): no params data found [ 206.653041][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 206.786974][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 206.936679][T10184] nbd16: detected capacity change from 0 to 256 [ 206.948714][ T55] block nbd16: Receive control failed (result -104) [ 206.967815][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1552'. [ 206.996111][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1553'. [ 207.152834][T10209] team0: entered promiscuous mode [ 207.170818][T10209] team_slave_1: entered promiscuous mode [ 207.285678][T10209] team0: left promiscuous mode [ 207.295273][T10209] team_slave_1: left promiscuous mode [ 207.332493][ T4012] hsr_slave_0: left promiscuous mode [ 207.357504][ T4012] hsr_slave_1: left promiscuous mode [ 207.374760][T10218] x_tables: duplicate entry at hook 3 [ 207.380588][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.386164][ T55] Bluetooth: hci3: command tx timeout [ 207.417003][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.443456][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.463275][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.500438][ T4012] veth1_macvtap: left promiscuous mode [ 207.506507][ T4012] veth0_macvtap: left promiscuous mode [ 207.512109][ T4012] veth1_vlan: left promiscuous mode [ 207.517782][ T4012] veth0_vlan: left promiscuous mode [ 207.528300][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 207.548669][ T5283] IPVS: starting estimator thread 0... [ 207.666129][T10224] IPVS: using max 19 ests per chain, 45600 per kthread [ 208.175208][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 208.224316][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 208.650930][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.658900][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.676674][T10143] bridge_slave_0: entered allmulticast mode [ 208.685155][T10143] bridge_slave_0: entered promiscuous mode [ 208.693101][T10211] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.716089][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.729680][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.765257][T10143] bridge_slave_1: entered allmulticast mode [ 208.786159][T10143] bridge_slave_1: entered promiscuous mode [ 208.951310][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.967851][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.219194][T10250] netlink: 'syz.2.1569': attribute type 25 has an invalid length. [ 209.227774][T10250] netlink: 'syz.2.1569': attribute type 8 has an invalid length. [ 209.264452][T10143] team0: Port device team_slave_0 added [ 209.287491][T10143] team0: Port device team_slave_1 added [ 209.467307][ T55] Bluetooth: hci3: command tx timeout [ 209.575960][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.583015][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.616321][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.630257][T10264] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 209.640775][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.648695][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.674782][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.841163][T10143] hsr_slave_0: entered promiscuous mode [ 209.854077][T10143] hsr_slave_1: entered promiscuous mode [ 209.861711][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.871592][T10143] Cannot create hsr debugfs directory [ 209.877445][T10268] vcan0 speed is unknown, defaulting to 1000 [ 209.904130][T10268] vcan0 speed is unknown, defaulting to 1000 [ 209.929371][T10268] vcan0 speed is unknown, defaulting to 1000 [ 210.157486][T10271] __nla_validate_parse: 5 callbacks suppressed [ 210.157506][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 210.357570][T10268] infiniband syz2: set active [ 210.364459][ T5280] vcan0 speed is unknown, defaulting to 1000 [ 210.374487][T10268] infiniband syz2: added vcan0 [ 210.547057][T10284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1580'. [ 210.561961][T10268] RDS/IB: syz2: added [ 210.576179][T10143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.583112][T10268] smc: adding ib device syz2 with port count 1 [ 210.616620][T10143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.626237][T10268] smc: ib device syz2 port 1 has pnetid [ 210.665958][T10143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.682316][T10268] vcan0 speed is unknown, defaulting to 1000 [ 210.690259][T10143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.737809][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 210.822247][ T5330] vcan0 speed is unknown, defaulting to 1000 [ 210.887517][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 210.916248][T10296] IPv6: sit1: Disabled Multicast RS [ 210.954179][T10268] vcan0 speed is unknown, defaulting to 1000 [ 211.016023][T10291] nbd17: detected capacity change from 0 to 256 [ 211.054983][ T55] block nbd17: Receive control failed (result -104) [ 211.104363][T10301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1586'. [ 211.222272][T10303] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1587'. [ 211.246028][T10303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1587'. [ 211.271929][T10306] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 211.349580][T10268] vcan0 speed is unknown, defaulting to 1000 [ 211.372749][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'. [ 211.416117][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'. [ 211.436193][T10311] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1591'. [ 211.502779][T10143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.556086][ T55] Bluetooth: hci3: command tx timeout [ 211.615452][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.681669][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.688886][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.745428][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.752663][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.785944][T10268] vcan0 speed is unknown, defaulting to 1000 [ 211.795787][T10322] netlink: 'syz.4.1593': attribute type 25 has an invalid length. [ 211.803618][T10322] netlink: 'syz.4.1593': attribute type 8 has an invalid length. [ 212.028799][T10330] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 212.261585][T10268] vcan0 speed is unknown, defaulting to 1000 [ 212.329179][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.385033][T10339] syzkaller0: entered promiscuous mode [ 212.429376][T10339] syzkaller0 (unregistering): left promiscuous mode [ 212.566514][T10337] nbd18: detected capacity change from 0 to 256 [ 212.594571][T10143] veth0_vlan: entered promiscuous mode [ 212.601475][ T55] block nbd18: Receive control failed (result -104) [ 212.634469][T10143] veth1_vlan: entered promiscuous mode [ 212.678215][T10143] veth0_macvtap: entered promiscuous mode [ 212.695595][T10143] veth1_macvtap: entered promiscuous mode [ 212.757024][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.776135][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.789514][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.801945][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.814751][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.835840][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.849368][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.879599][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.928615][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.960312][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.983620][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.001376][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.017636][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.046972][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.058193][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.070655][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.113724][T10143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.156429][T10143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.196148][T10143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.226736][T10143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.434918][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.452692][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.524272][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.533974][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.627967][ T55] Bluetooth: hci3: command tx timeout [ 213.767921][T10395] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.725436][T10430] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.906895][T10441] tipc: Started in network mode [ 214.919643][T10441] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 214.931811][T10441] tipc: Enabled bearer , priority 0 [ 214.942386][T10441] tipc: Enabled bearer , priority 0 [ 214.989817][ T45] block nbd4: Possible stuck request ffff8880265b0000: control (read@0,4096B). Runtime 120 seconds [ 215.278976][T10465] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 215.289092][T10465] __nla_validate_parse: 15 callbacks suppressed [ 215.289110][T10465] netlink: 113592 bytes leftover after parsing attributes in process `syz.0.1638'. [ 215.316650][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 215.443483][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 215.468740][T10475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1642'. [ 215.803260][ T4012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.936414][ T25] tipc: Node number set to 10136234 [ 217.168122][ T4012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.349095][ T4012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.518503][ T4012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.846055][ T4012] bridge_slave_1: left allmulticast mode [ 217.851744][ T4012] bridge_slave_1: left promiscuous mode [ 217.896266][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.947059][ T4012] bridge_slave_0: left allmulticast mode [ 217.952748][ T4012] bridge_slave_0: left promiscuous mode [ 217.996683][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.987363][ T4012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.039325][ T4012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.109663][ T4012] bond0 (unregistering): Released all slaves [ 221.149632][ T4012] hsr_slave_0: left promiscuous mode [ 221.186584][ T4012] hsr_slave_1: left promiscuous mode [ 221.225919][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.233377][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.305554][ T4012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.335936][ T4012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.421187][ T4012] veth1_macvtap: left promiscuous mode [ 221.497733][ T4012] veth0_macvtap: left promiscuous mode [ 221.503404][ T4012] veth1_vlan: left promiscuous mode [ 221.566021][ T4012] veth0_vlan: left promiscuous mode [ 224.177669][ T4012] team0 (unregistering): Port device team_slave_1 removed [ 224.426561][ T4012] team0 (unregistering): Port device team_slave_0 removed [ 229.076533][ T10] block nbd1: Possible stuck request ffff8880264b0000: control (read@0,4096B). Runtime 150 seconds [ 230.375797][ T45] block nbd2: Possible stuck request ffff8880264f0000: control (read@0,4096B). Runtime 150 seconds [ 231.967417][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.009535][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.024198][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.056148][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.065992][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.073629][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.164870][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.179332][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.186533][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.187244][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.195906][ T4625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.202785][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.214796][ T4625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.237743][ T5242] bond0: (slave syz_tun): Releasing backup interface [ 232.244597][ T4625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.253981][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.275297][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.277003][ T4625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.283965][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.298234][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.306830][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.307276][ T4625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.314161][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.346649][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.363420][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.388672][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.389493][T10511] vcan0 speed is unknown, defaulting to 1000 [ 232.395969][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.413017][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.426274][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.434716][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.442408][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.595306][T10510] vcan0 speed is unknown, defaulting to 1000 [ 232.813727][T10508] vcan0 speed is unknown, defaulting to 1000 [ 232.828309][T10511] chnl_net:caif_netlink_parms(): no params data found [ 232.963474][T10516] vcan0 speed is unknown, defaulting to 1000 [ 233.056323][T10511] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.063532][T10511] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.083439][T10511] bridge_slave_0: entered allmulticast mode [ 233.091066][T10511] bridge_slave_0: entered promiscuous mode [ 233.148672][T10511] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.156066][T10511] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.163245][T10511] bridge_slave_1: entered allmulticast mode [ 233.170933][T10511] bridge_slave_1: entered promiscuous mode [ 233.192578][T10514] vcan0 speed is unknown, defaulting to 1000 [ 233.267965][T10511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.312447][T10510] chnl_net:caif_netlink_parms(): no params data found [ 233.341325][T10511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.442894][T10511] team0: Port device team_slave_0 added [ 233.454686][T10511] team0: Port device team_slave_1 added [ 233.539376][T10511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.550788][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.578539][T10511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.591243][T10511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.598288][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.625011][T10511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.676601][T10508] chnl_net:caif_netlink_parms(): no params data found [ 233.721399][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.728743][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.736241][T10510] bridge_slave_0: entered allmulticast mode [ 233.742927][T10510] bridge_slave_0: entered promiscuous mode [ 233.781579][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.789272][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.798172][T10510] bridge_slave_1: entered allmulticast mode [ 233.804906][T10510] bridge_slave_1: entered promiscuous mode [ 233.824370][T10511] hsr_slave_0: entered promiscuous mode [ 233.831230][T10511] hsr_slave_1: entered promiscuous mode [ 233.837686][T10511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.845247][T10511] Cannot create hsr debugfs directory [ 233.940814][T10510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.954454][T10510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.141163][T10508] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.148535][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.155731][T10508] bridge_slave_0: entered allmulticast mode [ 234.162969][T10508] bridge_slave_0: entered promiscuous mode [ 234.174015][T10510] team0: Port device team_slave_0 added [ 234.183171][T10510] team0: Port device team_slave_1 added [ 234.186335][ T5235] Bluetooth: hci3: command tx timeout [ 234.197088][T10516] chnl_net:caif_netlink_parms(): no params data found [ 234.232674][T10508] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.240021][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.248741][T10508] bridge_slave_1: entered allmulticast mode [ 234.255451][T10508] bridge_slave_1: entered promiscuous mode [ 234.337064][T10508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.348195][ T5235] Bluetooth: hci2: command tx timeout [ 234.363140][T10510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.370557][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.396769][T10510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.420534][T10508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.433226][ T5235] Bluetooth: hci0: command tx timeout [ 234.435775][ T5239] Bluetooth: hci1: command tx timeout [ 234.462952][T10510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.470035][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.495976][T10510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.506872][ T5239] Bluetooth: hci4: command tx timeout [ 234.546060][T10514] chnl_net:caif_netlink_parms(): no params data found [ 234.574035][T10508] team0: Port device team_slave_0 added [ 234.583450][T10508] team0: Port device team_slave_1 added [ 234.643400][T10511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.762203][T10511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.778001][T10508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.784960][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.812089][T10508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.824508][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.832178][T10516] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.832503][ T30] INFO: task udevd:5238 blocked for more than 143 seconds. [ 234.840135][T10516] bridge_slave_0: entered allmulticast mode [ 234.854730][T10516] bridge_slave_0: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.864863][ T30] Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 234.873512][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.882885][ T30] task:udevd state:D stack:21400 pid:5238 tgid:5238 ppid:1 flags:0x00004002 [ 234.931737][ T30] Call Trace: [ 234.935059][ T30] [ 234.941010][ T30] __schedule+0x1800/0x4a60 [ 234.945582][ T30] ? __pfx___schedule+0x10/0x10 [ 234.950942][ T30] ? __blk_flush_plug+0x449/0x500 [ 234.956083][ T30] ? __pfx_lock_release+0x10/0x10 [ 234.961941][ T30] ? __asan_memset+0x23/0x50 [ 234.966693][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 234.972517][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.978914][ T30] ? schedule+0x90/0x320 [ 234.983171][ T30] schedule+0x14b/0x320 [ 234.987429][ T30] schedule_timeout+0x1be/0x310 [ 234.992291][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 234.997769][ T30] ? __pfx_process_timeout+0x10/0x10 [ 235.003091][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 235.008616][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 235.013241][ T30] ? validate_chain+0x11e/0x5900 [ 235.018464][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 235.023495][ T30] ? __lock_acquire+0x137a/0x2040 [ 235.030363][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.036543][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 235.042328][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 235.047454][ T30] ? sbitmap_get+0x289/0x3f0 [ 235.052054][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 235.058110][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 235.063932][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 235.070293][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 235.077127][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 235.082430][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.087824][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 235.093814][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 235.099173][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 235.104286][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 235.109665][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 235.115241][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 235.121305][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 235.126677][ T30] __blk_flush_plug+0x420/0x500 [ 235.131543][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 235.138952][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 235.144206][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.149635][ T30] __submit_bio+0x422/0x560 [ 235.154152][ T30] ? __pfx___submit_bio+0x10/0x10 [ 235.161373][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 235.167780][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 235.174390][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 235.180166][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 235.186461][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.191783][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 235.198105][ T30] block_read_full_folio+0x93b/0xcd0 [ 235.203408][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 235.208826][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 235.214619][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 235.219552][ T30] ? folio_add_lru+0x357/0xd70 [ 235.224330][ T30] ? folio_add_lru+0x58f/0xd70 [ 235.229196][ T30] filemap_read_folio+0x1a0/0x790 [ 235.234235][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 235.239745][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 235.245407][ T30] ? __filemap_get_folio+0x984/0xc10 [ 235.250867][ T30] do_read_cache_folio+0x134/0x820 [ 235.257993][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 235.263478][ T30] read_part_sector+0xb3/0x330 [ 235.268320][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 235.273281][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 235.278122][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 235.283674][ T30] ? snprintf+0xda/0x120 [ 235.287991][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 235.293634][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 235.298291][ T30] ? vsnprintf+0x184/0x1da0 [ 235.302805][ T30] ? __pfx_snprintf+0x10/0x10 [ 235.307607][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 235.312399][ T30] bdev_disk_changed+0x72c/0x13d0 [ 235.317611][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 235.323087][ T30] blkdev_get_whole+0x2d2/0x450 [ 235.327965][ T30] bdev_open+0x2d4/0xc60 [ 235.332205][ T30] blkdev_open+0x3e8/0x570 [ 235.336699][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 235.341654][ T30] do_dentry_open+0x970/0x1440 [ 235.346714][ T30] vfs_open+0x3e/0x330 [ 235.350795][ T30] path_openat+0x2b3e/0x3470 [ 235.355375][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 235.360790][ T30] ? __lock_acquire+0x137a/0x2040 [ 235.367891][ T30] ? __pfx_path_openat+0x10/0x10 [ 235.372878][ T30] do_filp_open+0x235/0x490 [ 235.377436][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 235.382464][ T30] ? _raw_spin_unlock+0x28/0x50 [ 235.387350][ T30] ? alloc_fd+0x5a1/0x640 [ 235.391671][ T30] do_sys_openat2+0x13e/0x1d0 [ 235.396456][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.401687][ T30] __x64_sys_openat+0x247/0x2a0 [ 235.406575][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.411936][ T30] ? do_syscall_64+0x100/0x230 [ 235.416744][ T30] ? do_syscall_64+0xb6/0x230 [ 235.421408][ T30] do_syscall_64+0xf3/0x230 [ 235.425963][ T30] ? clear_bhb_loop+0x35/0x90 [ 235.430660][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.436640][ T30] RIP: 0033:0x7f73815169a4 [ 235.441062][ T30] RSP: 002b:00007ffd8efa49d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.449760][ T30] RAX: ffffffffffffffda RBX: 0000558ebc58a550 RCX: 00007f73815169a4 [ 235.457781][ T30] RDX: 00000000000a0800 RSI: 0000558ebc5708f0 RDI: 00000000ffffff9c [ 235.466194][ T30] RBP: 0000558ebc5708f0 R08: 0000000000000001 R09: 7fffffffffffffff [ 235.474182][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 235.483295][ T30] R13: 0000558ebc5776f0 R14: 0000000000000001 R15: 0000558ebc565910 [ 235.491408][ T30] [ 235.494614][ T30] [ 235.494614][ T30] Showing all locks held in the system: [ 235.502412][ T30] 1 lock held by khungtaskd/30: [ 235.507314][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 235.513512][T10510] hsr_slave_0: entered promiscuous mode [ 235.517292][ T30] 3 locks held by kworker/u8:8/3984: [ 235.517312][ T30] 2 locks held by getty/4987: [ 235.517324][ T30] #0: ffff888034af20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 235.517385][ T30] #1: ffffc900034b32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 235.517446][ T30] 1 lock held by udevd/5231: [ 235.517458][ T30] #0: ffff8880264084c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 235.517511][ T30] 3 locks held by udevd/5238: [ 235.517522][ T30] #0: ffff888025fb44c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 235.581098][ T30] #1: ffff888025f62290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 235.591062][ T30] #2: ffff888026450180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 235.600601][ T30] 1 lock held by udevd/5244: [ 235.605201][ T30] #0: ffff8880264804c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 235.614637][ T30] 3 locks held by kworker/0:5/5282: [ 235.620856][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 235.632274][ T30] #1: ffffc900043dfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 235.643621][ T30] #2: ffffffff8fc8c048 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 235.654360][ T30] 1 lock held by udevd/6071: [ 235.659206][ T30] #0: ffff8880264844c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 235.668716][ T30] 1 lock held by syz-executor/10508: [ 235.674076][ T30] #0: ffffffff8fc8c048 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 235.683707][ T30] 2 locks held by syz-executor/10510: [ 235.689109][ T30] #0: ffffffff8fc8c048 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 235.698794][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 235.710257][ T30] 7 locks held by syz-executor/10511: [ 235.716593][ T30] #0: ffff888024074420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 235.725537][ T30] #1: ffff88805e545488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 235.736344][ T30] #2: ffff8880289a7f08 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 235.746900][ T30] #3: ffffffff8f526768 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 235.757673][ T30] #4: ffff8880607450e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 235.768479][ T30] #5: ffff888060746250 (&devlink->lock_key){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 235.778407][ T30] #6: ffffffff8fc8c048 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 235.787642][ T30] 1 lock held by syz-executor/10514: [ 235.792931][ T30] #0: ffffffff8fc8c048 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 235.802401][ T30] 1 lock held by syz-executor/10516: [ 235.807759][ T30] #0: ffffffff8fc8c048 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 235.819214][ T30] [ 235.819663][T10510] hsr_slave_1: entered promiscuous mode [ 235.821535][ T30] ============================================= [ 235.821535][ T30] [ 235.821557][ T30] NMI backtrace for cpu 0 [ 235.839785][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 235.850277][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.860322][ T30] Call Trace: [ 235.863618][ T30] [ 235.866538][ T30] dump_stack_lvl+0x241/0x360 [ 235.871212][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.876502][ T30] ? __pfx__printk+0x10/0x10 [ 235.881107][ T30] ? vprintk_emit+0x667/0x7c0 [ 235.885797][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 235.890823][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 235.895841][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.901279][ T30] ? _printk+0xd5/0x120 [ 235.905409][ T30] ? __pfx__printk+0x10/0x10 [ 235.909977][ T30] ? __wake_up_klogd+0xcc/0x110 [ 235.914807][ T30] ? __pfx__printk+0x10/0x10 [ 235.919377][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 235.924379][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 235.930349][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 235.936331][ T30] watchdog+0xff4/0x1040 [ 235.940569][ T30] ? watchdog+0x1ea/0x1040 [ 235.944982][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.949649][ T30] kthread+0x2f0/0x390 [ 235.953711][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.958379][ T30] ? __pfx_kthread+0x10/0x10 [ 235.962967][ T30] ret_from_fork+0x4b/0x80 [ 235.967465][ T30] ? __pfx_kthread+0x10/0x10 [ 235.972048][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.976816][ T30] [ 235.980475][ T30] Sending NMI from CPU 0 to CPUs 1: [ 235.985773][ C1] NMI backtrace for cpu 1 [ 235.985785][ C1] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 235.985804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.985814][ C1] Workqueue: bat_events batadv_nc_worker [ 235.985840][ C1] RIP: 0010:attach_entity_load_avg+0x210/0x520 [ 235.985859][ C1] Code: f9 00 08 00 00 b8 02 00 00 00 48 0f 43 c2 48 85 c9 48 0f 44 c1 41 bc 01 00 00 00 4c 39 f8 73 0d 89 c1 4c 89 f8 31 d2 48 f7 f1 <49> 89 c4 48 89 eb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df 80 3c [ 235.985872][ C1] RSP: 0018:ffffc90000a18420 EFLAGS: 00000046 [ 235.985884][ C1] RAX: 000000000000826a RBX: 000000000209a810 RCX: 0000000000000400 [ 235.985896][ C1] RDX: 0000000000000010 RSI: ffff8880333c9e80 RDI: ffff8880333c9f60 [ 235.985907][ C1] RBP: ffff8880333c9f48 R08: ffffffff90187a2f R09: 1ffffffff2030f45 [ 235.985919][ C1] R10: dffffc0000000000 R11: fffffbfff2030f46 R12: 0000000000000001 [ 235.985930][ C1] R13: ffff8880333c9e80 R14: 1ffff110066793d0 R15: 000000000209a810 [ 235.985942][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 235.985956][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.985967][ C1] CR2: 0000560e8d964058 CR3: 000000000e734000 CR4: 00000000003506f0 [ 235.985981][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.985991][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.986001][ C1] Call Trace: [ 235.986008][ C1] [ 235.986015][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 235.986035][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 235.986055][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.986075][ C1] ? nmi_handle+0x2a/0x5a0 [ 235.986099][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 235.986116][ C1] ? nmi_handle+0x14f/0x5a0 [ 235.986131][ C1] ? nmi_handle+0x2a/0x5a0 [ 235.986146][ C1] ? attach_entity_load_avg+0x210/0x520 [ 235.986162][ C1] ? default_do_nmi+0x63/0x160 [ 235.986181][ C1] ? exc_nmi+0x123/0x1f0 [ 235.986200][ C1] ? end_repeat_nmi+0xf/0x53 [ 235.986226][ C1] ? attach_entity_load_avg+0x210/0x520 [ 235.986243][ C1] ? attach_entity_load_avg+0x210/0x520 [ 235.986259][ C1] ? attach_entity_load_avg+0x210/0x520 [ 235.986276][ C1] [ 235.986281][ C1] [ 235.986293][ C1] update_load_avg+0xe29/0x1a00 [ 235.986318][ C1] enqueue_entity+0x73/0x1930 [ 235.986336][ C1] ? rcu_is_watching+0x15/0xb0 [ 235.986358][ C1] enqueue_task_fair+0x173/0x920 [ 235.986381][ C1] enqueue_task+0x1a5/0x300 [ 235.986402][ C1] activate_task+0x61/0xc0 [ 235.986422][ C1] attach_task+0xee/0x190 [ 235.986438][ C1] sched_balance_rq+0x65b1/0x8590 [ 235.986493][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 235.986509][ C1] ? __lock_acquire+0x137a/0x2040 [ 235.986537][ C1] ? __lock_acquire+0x137a/0x2040 [ 235.986572][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 235.986602][ C1] sched_balance_domains+0x565/0xa90 [ 235.986625][ C1] ? sched_balance_domains+0x1b2/0xa90 [ 235.986640][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 235.986659][ C1] ? sched_balance_softirq+0xe7/0x170 [ 235.986681][ C1] handle_softirqs+0x2c4/0x970 [ 235.986706][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 235.986727][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 235.986747][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 235.986767][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 235.986785][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 235.986808][ C1] irq_exit_rcu+0x9/0x30 [ 235.986823][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 235.986840][ C1] [ 235.986845][ C1] [ 235.986851][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.986870][ C1] RIP: 0010:lock_acquire+0x9e/0x550 [ 235.986888][ C1] Code: ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 2c 43 c7 44 2c 09 f2 f2 f2 00 43 c7 44 2c 11 f3 f3 f3 f3 66 43 c7 44 2c 15 f3 f3 <43> c6 44 2c 17 f3 0f 1f 44 00 00 65 8b 05 ac 0a 94 7e 83 f8 08 0f [ 235.986901][ C1] RSP: 0018:ffffc900015df980 EFLAGS: 00000a02 [ 235.986913][ C1] RAX: f2f2f200f1f1f1f1 RBX: ffff88806057ccc0 RCX: 0000000000000002 [ 235.986924][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e938320 [ 235.986935][ C1] RBP: ffffc900015dfad0 R08: 0000000000000000 R09: 0000000000000000 [ 235.986945][ C1] R10: dffffc0000000000 R11: fffffbfff2030f46 R12: 1ffff920002bbf38 [ 235.986957][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8b84d480 [ 235.986968][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 235.986996][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 235.987015][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 235.987030][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 235.987047][ C1] ? __pfx_lock_release+0x10/0x10 [ 235.987064][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 235.987082][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 235.987098][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 235.987117][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 235.987132][ C1] batadv_nc_process_nc_paths+0xd6/0x3a0 [ 235.987148][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 235.987164][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 235.987182][ C1] batadv_nc_worker+0x42a/0x610 [ 235.987206][ C1] ? process_scheduled_works+0x945/0x1830 [ 235.987225][ C1] process_scheduled_works+0xa2c/0x1830 [ 235.987259][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.987282][ C1] ? assign_work+0x364/0x3d0 [ 235.987302][ C1] worker_thread+0x86d/0xd10 [ 235.987329][ C1] ? __kthread_parkme+0x169/0x1d0 [ 235.987350][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.987367][ C1] kthread+0x2f0/0x390 [ 235.987387][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.987404][ C1] ? __pfx_kthread+0x10/0x10 [ 235.987423][ C1] ret_from_fork+0x4b/0x80 [ 235.987442][ C1] ? __pfx_kthread+0x10/0x10 [ 235.987460][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.987488][ C1] [ 235.992201][T10510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.992802][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 235.992814][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00769-g55ddb6c5a3ae #0 [ 235.992835][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.992845][ T30] Call Trace: [ 235.992852][ T30] [ 235.992860][ T30] dump_stack_lvl+0x241/0x360 [ 235.992887][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.992908][ T30] ? __pfx__printk+0x10/0x10 [ 235.992924][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.992957][ T30] ? vscnprintf+0x5d/0x90 [ 235.992981][ T30] panic+0x349/0x860 [ 235.993001][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 235.993025][ T30] ? __pfx_panic+0x10/0x10 [ 235.993040][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 235.993060][ T30] ? __irq_work_queue_local+0x137/0x410 [ 235.993084][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 235.993103][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 235.993123][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 235.993148][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 235.993173][ T30] watchdog+0x1033/0x1040 [ 235.993196][ T30] ? watchdog+0x1ea/0x1040 [ 235.993223][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.993244][ T30] kthread+0x2f0/0x390 [ 235.993266][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.993287][ T30] ? __pfx_kthread+0x10/0x10 [ 235.993310][ T30] ret_from_fork+0x4b/0x80 [ 235.993331][ T30] ? __pfx_kthread+0x10/0x10 [ 235.993354][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.993388][ T30] [ 235.996749][ T30] Kernel Offset: disabled