last executing test programs: 1m59.426462487s ago: executing program 2 (id=403): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40000091}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x0, 0x48}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll(0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10018000}, 0x8010) 1m56.657500056s ago: executing program 0 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001a0000022abd7000fddbdf250a000006fc02000600030000050014000200000008000400c89fa39b746b6fbcc88613199a5c600202c0f40d700a3b41e9cdac84ef0ea01cd551b552", @ANYRES32=r2, @ANYBLOB="060015000400000008000300", @ANYRES32=r3, @ANYBLOB="c6000880f80accc57b118c1e78de0cf291afbfb148604b531940768e2b5f7bc0d03d0e3ac12055132f6be8861d44cf2a937ae57e8e3fc7519fc79989c633cfee8a3108152cc62ef3555e399899366f691f053341c62cc0a16abd6d4f6937d82243ebb4b49b4812f6bb187b0e79f5766f71b7bd351110099613365a93dc18ccce8ac945e5a8fe72886e7e98cf8ff21f8598eee2a9570b774b926c8fb69f3915d4709068459d91c58e80d89baa861d14ec2a292cc9f0f11870dc34f24f17a79539f893d8cafbaa0000"], 0x104}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x2c, 0x4, 0x900, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x89, 0x2, 0x0, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6}, 0x48) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088a83c008100030007dd602abe000020110000000000000000000000000000000000000000000000020000000000000000003a0004000860030000000025001890780400"/94], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000010000000c000500efff0000001000002bf8ffffffffffffff00000000000000000004ffffff7f000800000000000000000008000103e20000004400"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_misc(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="737d7a305359d0c7574b9e48f51f75a6bc1b186e985aaf8bb7f0fc6bca4215ee598e40bb89e78bb3b4551d3fd33d7b6458f02c9ad7ed95dc843e493b03d4be78546b7756f52ff1995e46d7c8cd0f900220ab83f5db3a83118a90fc1b305a800196bb83ac9b50bb916e092e9684f9dc4a4dee7e1ffe3cb3d2a717581b55e21e1037aa71045a2c9be023ffa5a5a08ac539bc53fc9dec3605c27e6f6029941832"], 0x9f) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1m40.714671557s ago: executing program 2 (id=403): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40000091}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x0, 0x48}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll(0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10018000}, 0x8010) 1m39.993682814s ago: executing program 0 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001a0000022abd7000fddbdf250a000006fc02000600030000050014000200000008000400c89fa39b746b6fbcc88613199a5c600202c0f40d700a3b41e9cdac84ef0ea01cd551b552", @ANYRES32=r2, @ANYBLOB="060015000400000008000300", @ANYRES32=r3, @ANYBLOB="c6000880f80accc57b118c1e78de0cf291afbfb148604b531940768e2b5f7bc0d03d0e3ac12055132f6be8861d44cf2a937ae57e8e3fc7519fc79989c633cfee8a3108152cc62ef3555e399899366f691f053341c62cc0a16abd6d4f6937d82243ebb4b49b4812f6bb187b0e79f5766f71b7bd351110099613365a93dc18ccce8ac945e5a8fe72886e7e98cf8ff21f8598eee2a9570b774b926c8fb69f3915d4709068459d91c58e80d89baa861d14ec2a292cc9f0f11870dc34f24f17a79539f893d8cafbaa0000"], 0x104}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x2c, 0x4, 0x900, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x89, 0x2, 0x0, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6}, 0x48) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088a83c008100030007dd602abe000020110000000000000000000000000000000000000000000000020000000000000000003a0004000860030000000025001890780400"/94], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000010000000c000500efff0000001000002bf8ffffffffffffff00000000000000000004ffffff7f000800000000000000000008000103e20000004400"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_misc(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="737d7a305359d0c7574b9e48f51f75a6bc1b186e985aaf8bb7f0fc6bca4215ee598e40bb89e78bb3b4551d3fd33d7b6458f02c9ad7ed95dc843e493b03d4be78546b7756f52ff1995e46d7c8cd0f900220ab83f5db3a83118a90fc1b305a800196bb83ac9b50bb916e092e9684f9dc4a4dee7e1ffe3cb3d2a717581b55e21e1037aa71045a2c9be023ffa5a5a08ac539bc53fc9dec3605c27e6f6029941832"], 0x9f) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1m23.107998314s ago: executing program 0 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001a0000022abd7000fddbdf250a000006fc02000600030000050014000200000008000400c89fa39b746b6fbcc88613199a5c600202c0f40d700a3b41e9cdac84ef0ea01cd551b552", @ANYRES32=r2, @ANYBLOB="060015000400000008000300", @ANYRES32=r3, @ANYBLOB="c6000880f80accc57b118c1e78de0cf291afbfb148604b531940768e2b5f7bc0d03d0e3ac12055132f6be8861d44cf2a937ae57e8e3fc7519fc79989c633cfee8a3108152cc62ef3555e399899366f691f053341c62cc0a16abd6d4f6937d82243ebb4b49b4812f6bb187b0e79f5766f71b7bd351110099613365a93dc18ccce8ac945e5a8fe72886e7e98cf8ff21f8598eee2a9570b774b926c8fb69f3915d4709068459d91c58e80d89baa861d14ec2a292cc9f0f11870dc34f24f17a79539f893d8cafbaa0000"], 0x104}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x2c, 0x4, 0x900, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x89, 0x2, 0x0, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6}, 0x48) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088a83c008100030007dd602abe000020110000000000000000000000000000000000000000000000020000000000000000003a0004000860030000000025001890780400"/94], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000010000000c000500efff0000001000002bf8ffffffffffffff00000000000000000004ffffff7f000800000000000000000008000103e20000004400"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_misc(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="737d7a305359d0c7574b9e48f51f75a6bc1b186e985aaf8bb7f0fc6bca4215ee598e40bb89e78bb3b4551d3fd33d7b6458f02c9ad7ed95dc843e493b03d4be78546b7756f52ff1995e46d7c8cd0f900220ab83f5db3a83118a90fc1b305a800196bb83ac9b50bb916e092e9684f9dc4a4dee7e1ffe3cb3d2a717581b55e21e1037aa71045a2c9be023ffa5a5a08ac539bc53fc9dec3605c27e6f6029941832"], 0x9f) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1m22.591396479s ago: executing program 2 (id=403): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40000091}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x0, 0x48}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll(0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10018000}, 0x8010) 1m4.937775345s ago: executing program 0 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001a0000022abd7000fddbdf250a000006fc02000600030000050014000200000008000400c89fa39b746b6fbcc88613199a5c600202c0f40d700a3b41e9cdac84ef0ea01cd551b552", @ANYRES32=r2, @ANYBLOB="060015000400000008000300", @ANYRES32=r3, @ANYBLOB="c6000880f80accc57b118c1e78de0cf291afbfb148604b531940768e2b5f7bc0d03d0e3ac12055132f6be8861d44cf2a937ae57e8e3fc7519fc79989c633cfee8a3108152cc62ef3555e399899366f691f053341c62cc0a16abd6d4f6937d82243ebb4b49b4812f6bb187b0e79f5766f71b7bd351110099613365a93dc18ccce8ac945e5a8fe72886e7e98cf8ff21f8598eee2a9570b774b926c8fb69f3915d4709068459d91c58e80d89baa861d14ec2a292cc9f0f11870dc34f24f17a79539f893d8cafbaa0000"], 0x104}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x2c, 0x4, 0x900, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x89, 0x2, 0x0, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6}, 0x48) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088a83c008100030007dd602abe000020110000000000000000000000000000000000000000000000020000000000000000003a0004000860030000000025001890780400"/94], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000010000000c000500efff0000001000002bf8ffffffffffffff00000000000000000004ffffff7f000800000000000000000008000103e20000004400"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_misc(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="737d7a305359d0c7574b9e48f51f75a6bc1b186e985aaf8bb7f0fc6bca4215ee598e40bb89e78bb3b4551d3fd33d7b6458f02c9ad7ed95dc843e493b03d4be78546b7756f52ff1995e46d7c8cd0f900220ab83f5db3a83118a90fc1b305a800196bb83ac9b50bb916e092e9684f9dc4a4dee7e1ffe3cb3d2a717581b55e21e1037aa71045a2c9be023ffa5a5a08ac539bc53fc9dec3605c27e6f6029941832"], 0x9f) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1m3.516685188s ago: executing program 2 (id=403): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40000091}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x0, 0x48}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll(0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10018000}, 0x8010) 48.318109016s ago: executing program 0 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001a0000022abd7000fddbdf250a000006fc02000600030000050014000200000008000400c89fa39b746b6fbcc88613199a5c600202c0f40d700a3b41e9cdac84ef0ea01cd551b552", @ANYRES32=r2, @ANYBLOB="060015000400000008000300", @ANYRES32=r3, @ANYBLOB="c6000880f80accc57b118c1e78de0cf291afbfb148604b531940768e2b5f7bc0d03d0e3ac12055132f6be8861d44cf2a937ae57e8e3fc7519fc79989c633cfee8a3108152cc62ef3555e399899366f691f053341c62cc0a16abd6d4f6937d82243ebb4b49b4812f6bb187b0e79f5766f71b7bd351110099613365a93dc18ccce8ac945e5a8fe72886e7e98cf8ff21f8598eee2a9570b774b926c8fb69f3915d4709068459d91c58e80d89baa861d14ec2a292cc9f0f11870dc34f24f17a79539f893d8cafbaa0000"], 0x104}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x2c, 0x4, 0x900, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x89, 0x2, 0x0, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6}, 0x48) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088a83c008100030007dd602abe000020110000000000000000000000000000000000000000000000020000000000000000003a0004000860030000000025001890780400"/94], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000010000000c000500efff0000001000002bf8ffffffffffffff00000000000000000004ffffff7f000800000000000000000008000103e20000004400"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_misc(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="737d7a305359d0c7574b9e48f51f75a6bc1b186e985aaf8bb7f0fc6bca4215ee598e40bb89e78bb3b4551d3fd33d7b6458f02c9ad7ed95dc843e493b03d4be78546b7756f52ff1995e46d7c8cd0f900220ab83f5db3a83118a90fc1b305a800196bb83ac9b50bb916e092e9684f9dc4a4dee7e1ffe3cb3d2a717581b55e21e1037aa71045a2c9be023ffa5a5a08ac539bc53fc9dec3605c27e6f6029941832"], 0x9f) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) 46.601969741s ago: executing program 2 (id=403): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40000091}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x0, 0x48}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll(0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10018000}, 0x8010) 43.802761004s ago: executing program 4 (id=1264): socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) (rerun: 64) 43.679897178s ago: executing program 4 (id=1265): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r2, &(0x7f0000001640)=ANY=[], 0x5ea) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 42.813279022s ago: executing program 4 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1252b415e4f9c8fa6acc60c585cb439a84648b4b0b82b1d5", "dea09ee7e84a19a512e6190f4ed29d7b8d98cd2da139c812fb04a7f2fa87287a"}}}}}}}, 0x0) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000006c79a2c4e0e332700073797a300000000014000000020a050000000000000000000000000020000000000a01020000000000000000020000000900010073797a30"], 0x7c}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, &(0x7f0000000100)=0x40000, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x190, 0x150, 0x150, 0x0, 0xf8010000, 0x260, 0x238, 0x238, 0x260, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xce5}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240488c0}, 0x10) r5 = socket(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x711, @private1, 0x1}, @in6={0xa, 0x4e21, 0x9, @local, 0x9}, @in={0x2, 0x4e20, @broadcast}], 0x48) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x5, 0x4) sendmmsg$inet(r6, &(0x7f0000000c40), 0x0, 0x8014) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000300)={0x80000001, 0x2, 0xb30, 0x3}, 0x10) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2, 0x10, 0xb, 0x9, 0x23, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0x8, 0x45, 0x3, 0x80000000}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0x1}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x0, @local, 0x8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x17, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e20, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_x_sec_ctx={0x8, 0x18, 0x90, 0x9, 0x35, "0e7e586c4db689115e7a3bffee0692392e0dde36d0ff14edc7d828c5e72d9c25a85dd910cd2ca7f3274a9591a5fdde8a2a8ae4b195"}, @sadb_ident={0x2, 0xa, 0x2d8f, 0x0, 0x5}]}, 0x118}}, 0x80) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) 42.567976246s ago: executing program 1 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_emit_ethernet(0x15a, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x124, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2"}, {0x0, 0x18, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f"}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 42.500027685s ago: executing program 4 (id=1270): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x20}, 0x1, 0xf000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) 42.418153964s ago: executing program 4 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x1040000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000001c0), 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000020103010000fc28a31ccd9eb31f59964cbfc7e900001f0000000a00000006001240000300004400028006000340000000000c000239c48c82c6707e57002c586a338ceb0300fe8000000000000000000000000000aa14000400000000000000000000000000e6ff00002c7b0aee9faf2e1d8ecdc2eb7183c326c8ff340748fbe1fa500ae6eae4e8e3085aa9ee4d33551a6a5d669a88e4ba783a3710fc242617e7997b59d7b51539375ffddbdd69"], 0x60}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xa5, 0x8}, 0xc) (async) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x0, 'syz0\x00', @default, 0x0, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18002000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='tegra_dma_complete_cb\x00', r11}, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000800030020000000fb36e400000400", @ANYRES32=r2, @ANYBLOB="22003300d00000000802110000010802110000005050505050500000040400000000000004008e000600cd0000000000"], 0x4c}}, 0x0) 42.288749724s ago: executing program 1 (id=1272): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x80, @ipv4={'\x00', '\xff\xff', @remote}, 0xc}}, 0x24) (async) connect$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x80, @ipv4={'\x00', '\xff\xff', @remote}, 0xc}}, 0x24) setsockopt(r2, 0x9, 0x2000007, &(0x7f00000001c0)="de780224ed4ee7614b699d0300a3a92099b3e5e07cbf8319cfeadabdc641a89eee84e9df7872f50d5a5fcc06dcf5d93783bb4a928aba2610252cd8581d9d2e57f734a49a981bf1f9356a7b97af9396c54de9d67da3340512d37e56177454ff43192883ee", 0x64) (async) setsockopt(r2, 0x9, 0x2000007, &(0x7f00000001c0)="de780224ed4ee7614b699d0300a3a92099b3e5e07cbf8319cfeadabdc641a89eee84e9df7872f50d5a5fcc06dcf5d93783bb4a928aba2610252cd8581d9d2e57f734a49a981bf1f9356a7b97af9396c54de9d67da3340512d37e56177454ff43192883ee", 0x64) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}, 0x3e8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x40}}, 0x0) 42.002987743s ago: executing program 4 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1800000039000701feffffffffffffff037c00009d000000"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7e}}, 0x0, 0x5}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "283271c502c7fc4f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000021000100000000000000000001"], 0x114}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000007}, 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r3, 0xffffe000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x2e}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$kcm(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) 41.971033459s ago: executing program 1 (id=1275): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffdd}, 0x70) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="823be7271019b3fe048765ad05be33fc", 0x10}], 0x1, &(0x7f0000000940)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x0, [{}, {@remote}]}, @end, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@empty}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x60}, 0x0) 41.781964217s ago: executing program 1 (id=1277): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x180c00) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff26}}, [0x3, 0x8000, 0x25f1, 0x8, 0x9, 0x4, 0x83, 0x0, 0x2, 0x5b27, 0xbe, 0x6, 0x81, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000100)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x2, 0x0, @broadcast}}) 41.607640181s ago: executing program 3 (id=1278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x40, 0x1, 0x2, 0x6, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x64, 0x0, 0x12, 0x2f, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0x27, 0x32, [@broadcast, @local, @remote, @private=0xa010102, @private=0xa010101, @remote, @rand_addr=0x64010102, @broadcast, @private=0xa010100]}]}}}}}) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)}, {&(0x7f0000000d80)="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", 0x1c2}, {&(0x7f0000000b80)="41e160ccec667d1756be17271641ddc3d2df5c3224871361dbc3cf40b2dfcd52a49ef643c548d15e9d4698f8ae4521648a30f3bb59074db921605fd12e47f812dd03ab382b69ae2c6ade0b406651c7ea62d0d5fbb11cecb9b87f32d258e89e63dc6afbe025bdeb7f00ec1baffe40819b0eb3ec43c07dfbda5f875c94b47d60b1e77940d8cee5a1cd0b706764c03dba0bc5f69fe1404f0d6b86f0a7c5d264af84a0628462490d86d260cd4e5cba3f622eaa494a660942991f2ca4255a7b94fec7cd2c3f2ff69a64eb459448e784df2f416f40126a173a1a259cb09229e30a4de981", 0xe1}, {&(0x7f0000001080)="a3a1e9ea8d9d47e01a3aada16e475062c544bfcef7b6fe89312668f046b79efbab907217a6b39ff88afb7d194f26a1275857ded1c2a447259304338baccbdf0302ed9da2af7f1a2f6fc7ac3fe8e89af9f7c991d0e3d5536e13257a279265d0f099a2a736860b53388e26a5b1cff98e4735434a282e641f59413aebb3cb57e91d52014da25ca3b2bd120d0131", 0x8c}, {&(0x7f0000001140)="2612066826447b14f1f84719bcb902a29a7789516376b8942b78d30f0497900f59517f346cdc2ac897b8998d541772ebb66d11d3b81aabf635bc7a6712bb9e51dec0a56c50abaa885afa18212aff0d8c7c993d3868391f4ee75b8ebd2c0714750baf4d79848bd2c2f2338194f4b36e6f236a4a5f2b83ac154d1d053d81a4c554bb282b9433a3f2170e1016253f4aa55fed2520efe06a31c78316bfd16b58dfa38c4d928b2d6b826df9c6598b377867df95c839443309d59fdd0ae7a03925775f9f2f2a91909d", 0xc6}], 0x5, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x94}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x25, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x2b, 0x7f, [@remote, @multicast2, @broadcast, @rand_addr=0x64010101, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @empty]}, @timestamp_addr={0x44, 0x2c, 0xd8, 0x1, 0xe, [{@local, 0x8}, {@private=0xa010102, 0x9}, {@loopback, 0x8}, {@remote, 0x35}, {@empty, 0x2}]}, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x7, [0xf]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @rand_addr=0x64010102}}}], 0xe8}}], 0x1, 0x20008000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0xc00]}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @loopback}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007\x00\x00\x00\x00*'], 0x58}}], 0x1, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10008}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2086dd6087fb8900380000fe880000000000000000000000000001fe800000000000000000000000000000330604030c487f00fe8000000000000000000000000000bbff010000006a"], 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x29363d0ea810b3d4, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[], 0x1c}}, 0x0) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) 41.568048848s ago: executing program 1 (id=1279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130700000000000000007f00000100000000000000000000000000000000000000000000ffffac141400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000019000000000000000000010000000032000000ff02000000000000000000000000000100000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3f682a70000000000000000000000000000000000feffffffffffffff0000000000000000000000002bbd7000000000000200000000000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}}, 0x0) 41.476700864s ago: executing program 1 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0xb5) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000080)={'dummy0\x00', @ifru_flags=0x2000}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="9c000000130001000000000000000000080000000900000008000000ffffffff08001300", @ANYRES32, @ANYBLOB="74003180bfd14dca"], 0x9c}], 0x1}, 0x0) getsockname$netlink(r0, &(0x7f0000000140), &(0x7f0000000280)=0xc) 7.061266614s ago: executing program 0 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001a0000022abd7000fddbdf250a000006fc02000600030000050014000200000008000400c89fa39b746b6fbcc88613199a5c600202c0f40d700a3b41e9cdac84ef0ea01cd551b552", @ANYRES32=r2, @ANYBLOB="060015000400000008000300", @ANYRES32=r3, @ANYBLOB="c6000880f80accc57b118c1e78de0cf291afbfb148604b531940768e2b5f7bc0d03d0e3ac12055132f6be8861d44cf2a937ae57e8e3fc7519fc79989c633cfee8a3108152cc62ef3555e399899366f691f053341c62cc0a16abd6d4f6937d82243ebb4b49b4812f6bb187b0e79f5766f71b7bd351110099613365a93dc18ccce8ac945e5a8fe72886e7e98cf8ff21f8598eee2a9570b774b926c8fb69f3915d4709068459d91c58e80d89baa861d14ec2a292cc9f0f11870dc34f24f17a79539f893d8cafbaa0000"], 0x104}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x2c, 0x4, 0x900, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x89, 0x2, 0x0, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6}, 0x48) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088a83c008100030007dd602abe000020110000000000000000000000000000000000000000000000020000000000000000003a0004000860030000000025001890780400"/94], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000010000000c000500efff0000001000002bf8ffffffffffffff00000000000000000004ffffff7f000800000000000000000008000103e20000004400"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_misc(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="737d7a305359d0c7574b9e48f51f75a6bc1b186e985aaf8bb7f0fc6bca4215ee598e40bb89e78bb3b4551d3fd33d7b6458f02c9ad7ed95dc843e493b03d4be78546b7756f52ff1995e46d7c8cd0f900220ab83f5db3a83118a90fc1b305a800196bb83ac9b50bb916e092e9684f9dc4a4dee7e1ffe3cb3d2a717581b55e21e1037aa71045a2c9be023ffa5a5a08ac539bc53fc9dec3605c27e6f6029941832"], 0x9f) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) 3.193556908s ago: executing program 2 (id=403): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40000091}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x0, 0x48}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x8, 0xff4, &(0x7f0000001e00)=""/4084}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll(0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10018000}, 0x8010) 1.998298775s ago: executing program 3 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_emit_ethernet(0x13b, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x105, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2"}, {0x0, 0x14, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309"}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.776048761s ago: executing program 3 (id=1284): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_MTU={0x8}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socket(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) 1.413107059s ago: executing program 3 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000007fc700"/20, @ANYRES32=r2, @ANYBLOB="0000000003120100240012800b000100627269646765000014000280050025000000000005002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0xc9, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x8917, 0x0) r4 = socket(0x2, 0x6, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller0\x00', {}, 0x3ff}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @multicast2}, 0x24c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='xfrm0\x00', 0x1f, 0x0, 0xfff8}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x148, 0x0, 0x148, 0x148, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback=0x7f002600, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x11}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) socket(0x9, 0xa, 0x200) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000a00)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @random="83280000002a", @val, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "98bfef", 0x29c, 0x3a, 0xff, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0xff, 0x24, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}, @generic={0x0, 0xd5, "ad2cad429b0c58a63b31354372c3f011c8646ffc1d1940ffbe9945f74bd0430c9a25652d19b71ef8273686d5a4129198b259a22d4241b1dd23dd1ea35c974cb2a6b8c9f866bd35aed71fa686770da243ce61e44cb4122c3ed50d687828261fbb73b40ffc84ec2e352a59f5b5c6658bfe598978f1553703caa161fb0affabca2ce85dfb04bb1bc9a33636ae38900484b8960483d2f531d5f806cf828f25b39cf26da7bedea6503d17c8d4f34849d83d7c6af1688f16f92c8bb2657ae7c24bb9748515f49e587fed95c6ce3cb2f3f77b0d544ef27cda"}, @ra={0x5, 0x2, 0x436}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xa}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x3, [0x6, 0x2]}}]}, @fragment={0x87, 0x0, 0x5, 0x0, 0x0, 0x1d, 0x68}, @srh={0x2f, 0x4, 0x4, 0x2, 0xf, 0x68, 0x401, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x3a, 0xe, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x9, [0x532, 0x4, 0x2]}}, @calipso={0x7, 0x5e, {0x1, 0x6, 0x5, 0x6, [0x7fff, 0x9d, 0x1]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x100, [0x7, 0x4f7f, 0x3]}}]}], @param_prob={0x4, 0x1, 0x0, 0x1, {0x8, 0x6, "057fc3", 0x7, 0x3b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, [], "93dd232fc11278a7019c80f6589e5039dd16541509d22cb01eb01e0e67f6b990dedfabb799b6c36643bee255b6499648a7c648a7119b82db6995d8678310db7583556724a70e413786688795c85b2b83de8f3e57d69662bfc830035b1635bca6263a36f54d6c04e1f69c53944963f6644327a75204fdffb83e10c28631f7bd586f4603f24baa0414ad6793d8"}}}}}}}}, 0x2da) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40041) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="e8ae334777da0ad5c7c749bbce3436000000", @ANYRES16=r7, @ANYBLOB="01000400000000000000010000000800020003000000c4000c8014000b8008000a004764000008000900c5164b3324000b8008000a00e3cd000008000a009f880000080009003400cd6808000a0042c700002c000b8008000900952ec60608000a007e2b000008000a00e449000008000900f1f18a0108000a00cadb000044000b8008000a009b990000080009005e22d06308000900c4589f0c08000900bdc0e73b0800090007429e6508000900ad09ee1508000a00c780000008000900e4e028540c000b800800090096e011170c000b80080009001a4fdb380800010003000000"], 0xe8}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x212, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004085}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4) syz_emit_ethernet(0x8f, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb0805027e0fb6802ccd9606399c97e67a1400b7efe3de441b96a64a972bc18f9d5c50a787a643c434a021b416ce0187cb52ee4bea45f367ca0a47031e39a4c307699f304415f2d58a015b245cea7341df748215dedbe331444840887e97a943758091881d593d4d36535a005f158fa9b7235401c1bb94a9c010ccb4e292325bd3f25d61"], 0x0) pipe(&(0x7f0000002e00)) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e22, @empty}, 0x10) 319.657832ms ago: executing program 3 (id=1286): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x2}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)={0xdc, r2, 0x409, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffa5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x10) 0s ago: executing program 3 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x5, [@fwd={0x7}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x800}}, @var={0x10, 0x0, 0x0, 0xe, 0x4, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x9, 0xbe}], "11"}, @volatile={0x1}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000280)=""/146, 0x95, 0x92, 0x0, 0x2}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x229, 0x10}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0xfffffff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x48e, 0xe2, &(0x7f0000000500)=""/226, 0x41000, 0x4, '\x00', r6, 0x1c, r7, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xe, 0x81, 0x8}, 0x10, 0x184c5, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r3, r8, r9], &(0x7f0000000700)=[{0x4, 0x2, 0x0, 0x1}], 0x10, 0x4}, 0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x40000003, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x5, [@fwd={0x7}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x800}}, @var={0x10, 0x0, 0x0, 0xe, 0x4, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x9, 0xbe}], "11"}, @volatile={0x1}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000280)=""/146, 0x95, 0x92, 0x0, 0x2}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x229, 0x10}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0xfffffff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x48e, 0xe2, &(0x7f0000000500)=""/226, 0x41000, 0x4, '\x00', r6, 0x1c, r7, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xe, 0x81, 0x8}, 0x10, 0x184c5, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r3, r8, r9], &(0x7f0000000700)=[{0x4, 0x2, 0x0, 0x1}], 0x10, 0x4}, 0x90) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x40000003, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x840) (async) kernel console output (not intermixed with test programs): Removing interface: batadv_slave_0 [ 139.187476][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.209423][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.301668][ T2962] veth1_macvtap: left promiscuous mode [ 139.326172][ T2962] veth0_macvtap: left promiscuous mode [ 139.344400][ T2962] veth1_vlan: left promiscuous mode [ 139.357627][ T2962] veth0_vlan: left promiscuous mode [ 139.636790][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 139.740473][ T5242] Bluetooth: hci0: command tx timeout [ 139.917640][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.928268][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.944143][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.954512][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.969567][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.979520][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.334626][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 140.382917][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 140.813493][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 140.836922][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 140.846405][ T8495] netlink: 92 bytes leftover after parsing attributes in process `syz.4.788'. [ 141.431854][ T8430] chnl_net:caif_netlink_parms(): no params data found [ 141.459012][ T8535] dvmrp0: entered allmulticast mode [ 141.543347][ T8533] dvmrp0: left allmulticast mode [ 141.819449][ T5242] Bluetooth: hci0: command tx timeout [ 141.875759][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 141.908475][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.926362][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.945521][ T8430] bridge_slave_0: entered allmulticast mode [ 141.961309][ T8430] bridge_slave_0: entered promiscuous mode [ 141.980232][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.994997][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.009126][ T8430] bridge_slave_1: entered allmulticast mode [ 142.018509][ T8430] bridge_slave_1: entered promiscuous mode [ 142.041167][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 142.059491][ T5242] Bluetooth: hci3: command tx timeout [ 142.127326][ T2962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.264045][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.305483][ T2962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.364643][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.402748][ T2962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.428674][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.436301][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.443665][ T8506] bridge_slave_0: entered allmulticast mode [ 142.455797][ T8506] bridge_slave_0: entered promiscuous mode [ 142.496624][ T2962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.513085][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.520561][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.527980][ T8506] bridge_slave_1: entered allmulticast mode [ 142.536441][ T8506] bridge_slave_1: entered promiscuous mode [ 142.568293][ T8430] team0: Port device team_slave_0 added [ 142.581832][ T8430] team0: Port device team_slave_1 added [ 142.614129][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.646266][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.654190][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.681030][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.698712][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.792255][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.799244][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.875675][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.071425][ T8506] team0: Port device team_slave_0 added [ 143.103882][ T8506] team0: Port device team_slave_1 added [ 143.363049][ T8430] hsr_slave_0: entered promiscuous mode [ 143.403868][ T8430] hsr_slave_1: entered promiscuous mode [ 143.474899][ T2962] bridge_slave_1: left allmulticast mode [ 143.483975][ T2962] bridge_slave_1: left promiscuous mode [ 143.490245][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.500493][ T2962] bridge_slave_0: left allmulticast mode [ 143.506174][ T2962] bridge_slave_0: left promiscuous mode [ 143.518352][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.533790][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 143.561246][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 143.595676][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 143.618265][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 143.901110][ T5242] Bluetooth: hci0: command tx timeout [ 143.927159][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 144.139415][ T5242] Bluetooth: hci3: command tx timeout [ 144.306861][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.318178][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.333172][ T2962] bond0 (unregistering): Released all slaves [ 144.368101][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 144.468339][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.479356][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.538005][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.566905][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.574052][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.601940][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.734380][ T8506] hsr_slave_0: entered promiscuous mode [ 144.757129][ T8506] hsr_slave_1: entered promiscuous mode [ 144.775772][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.789499][ T8506] Cannot create hsr debugfs directory [ 144.819864][ T8662] netlink: 'syz.4.815': attribute type 7 has an invalid length. [ 144.828334][ T8662] netlink: 'syz.4.815': attribute type 8 has an invalid length. [ 144.884759][ T8668] FAULT_INJECTION: forcing a failure. [ 144.884759][ T8668] name failslab, interval 1, probability 0, space 0, times 1 [ 144.897749][ T8668] CPU: 1 UID: 0 PID: 8668 Comm: syz.1.820 Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 144.908367][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 144.918629][ T8668] Call Trace: [ 144.921938][ T8668] [ 144.924966][ T8668] dump_stack_lvl+0x241/0x360 [ 144.929674][ T8668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.934908][ T8668] ? __pfx__printk+0x10/0x10 [ 144.939875][ T8668] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 144.945882][ T8668] ? __pfx___might_resched+0x10/0x10 [ 144.951197][ T8668] should_fail_ex+0x3b0/0x4e0 [ 144.955901][ T8668] should_failslab+0xac/0x100 [ 144.960603][ T8668] ? __alloc_skb+0x1c3/0x440 [ 144.965223][ T8668] kmem_cache_alloc_node_noprof+0x71/0x320 [ 144.971050][ T8668] __alloc_skb+0x1c3/0x440 [ 144.975503][ T8668] ? __pfx___alloc_skb+0x10/0x10 [ 144.980467][ T8668] ? netlink_ack_tlv_len+0x6e/0x200 [ 144.985686][ T8668] netlink_ack+0x13f/0xa30 [ 144.990127][ T8668] ? __pfx_lock_acquire+0x10/0x10 [ 144.995261][ T8668] ? __pfx_devlink_nl_health_reporter_recover_doit+0x10/0x10 [ 145.002651][ T8668] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 145.008774][ T8668] netlink_rcv_skb+0x262/0x430 [ 145.013561][ T8668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.018624][ T8668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.023947][ T8668] ? __netlink_deliver_tap+0x77e/0x7c0 [ 145.029442][ T8668] genl_rcv+0x28/0x40 [ 145.033445][ T8668] netlink_unicast+0x7f6/0x990 [ 145.038246][ T8668] ? __pfx_netlink_unicast+0x10/0x10 [ 145.043553][ T8668] ? __virt_addr_valid+0x183/0x530 [ 145.048688][ T8668] ? __check_object_size+0x49c/0x900 [ 145.054001][ T8668] ? bpf_lsm_netlink_send+0x9/0x10 [ 145.059138][ T8668] netlink_sendmsg+0x8e4/0xcb0 [ 145.063934][ T8668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.069240][ T8668] ? __import_iovec+0x536/0x820 [ 145.074375][ T8668] ? aa_sock_msg_perm+0x91/0x160 [ 145.079338][ T8668] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 145.084735][ T8668] ? security_socket_sendmsg+0x87/0xb0 [ 145.090226][ T8668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.095536][ T8668] __sock_sendmsg+0x221/0x270 [ 145.100243][ T8668] ____sys_sendmsg+0x525/0x7d0 [ 145.105032][ T8668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.110356][ T8668] __sys_sendmsg+0x2b0/0x3a0 [ 145.114983][ T8668] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.120122][ T8668] ? vfs_write+0x7c4/0xc90 [ 145.124613][ T8668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.130966][ T8668] ? do_syscall_64+0x100/0x230 [ 145.135759][ T8668] ? do_syscall_64+0xb6/0x230 [ 145.140466][ T8668] do_syscall_64+0xf3/0x230 [ 145.144988][ T8668] ? clear_bhb_loop+0x35/0x90 [ 145.149690][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.155618][ T8668] RIP: 0033:0x7f780cb7cef9 [ 145.160056][ T8668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.179683][ T8668] RSP: 002b:00007f780da28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.188139][ T8668] RAX: ffffffffffffffda RBX: 00007f780cd35f80 RCX: 00007f780cb7cef9 [ 145.196140][ T8668] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 145.204134][ T8668] RBP: 00007f780da28090 R08: 0000000000000000 R09: 0000000000000000 [ 145.212125][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.220119][ T8668] R13: 0000000000000000 R14: 00007f780cd35f80 R15: 00007ffd427810d8 [ 145.228136][ T8668] [ 145.605530][ T2962] hsr_slave_0: left promiscuous mode [ 145.616942][ T2962] hsr_slave_1: left promiscuous mode [ 145.633241][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.645610][ T8695] rdma_op ffff88807d65e9f0 conn xmit_rdma 0000000000000000 [ 145.653262][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.661490][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.671168][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.700258][ T2962] veth1_macvtap: left promiscuous mode [ 145.705832][ T2962] veth0_macvtap: left promiscuous mode [ 145.713590][ T2962] veth1_vlan: left promiscuous mode [ 145.718971][ T2962] veth0_vlan: left promiscuous mode [ 145.980300][ T5242] Bluetooth: hci0: command tx timeout [ 146.219503][ T5242] Bluetooth: hci3: command tx timeout [ 146.525399][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 146.577735][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 147.220296][ T8723] __nla_validate_parse: 4 callbacks suppressed [ 147.220315][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 147.247273][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 147.653183][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 147.788232][ T8749] Bluetooth: MGMT ver 1.23 [ 148.101050][ T8767] x_tables: duplicate underflow at hook 1 [ 148.145026][ T8771] raw_sendmsg: syz.3.841 forgot to set AF_INET. Fix it! [ 148.300257][ T54] Bluetooth: hci3: command tx timeout [ 148.415755][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 148.674879][ T8798] FAULT_INJECTION: forcing a failure. [ 148.674879][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 148.692131][ T8800] sctp: [Deprecated]: syz.1.846 (pid 8800) Use of int in maxseg socket option. [ 148.692131][ T8800] Use struct sctp_assoc_value instead [ 148.701392][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.4.847 Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 148.716923][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 148.727001][ T8798] Call Trace: [ 148.730303][ T8798] [ 148.733256][ T8798] dump_stack_lvl+0x241/0x360 [ 148.737966][ T8798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.743190][ T8798] ? __pfx__printk+0x10/0x10 [ 148.747815][ T8798] ? ref_tracker_alloc+0x332/0x490 [ 148.752960][ T8798] should_fail_ex+0x3b0/0x4e0 [ 148.757673][ T8798] ? skb_clone+0x20c/0x390 [ 148.762117][ T8798] should_failslab+0xac/0x100 [ 148.766826][ T8798] ? skb_clone+0x20c/0x390 [ 148.771265][ T8798] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 148.776668][ T8798] skb_clone+0x20c/0x390 [ 148.780966][ T8798] __netlink_deliver_tap+0x3cc/0x7c0 [ 148.786289][ T8798] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.791513][ T8798] netlink_deliver_tap+0x19d/0x1b0 [ 148.796649][ T8798] netlink_sendskb+0x68/0x140 [ 148.801359][ T8798] netlink_unicast+0x39d/0x990 [ 148.806146][ T8798] ? __asan_memcpy+0x40/0x70 [ 148.810766][ T8798] ? __pfx_netlink_unicast+0x10/0x10 [ 148.816094][ T8798] netlink_rcv_skb+0x262/0x430 [ 148.820880][ T8798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.825955][ T8798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.831288][ T8798] ? __netlink_deliver_tap+0x77e/0x7c0 [ 148.836788][ T8798] genl_rcv+0x28/0x40 [ 148.840792][ T8798] netlink_unicast+0x7f6/0x990 [ 148.845588][ T8798] ? __pfx_netlink_unicast+0x10/0x10 [ 148.850895][ T8798] ? __virt_addr_valid+0x183/0x530 [ 148.856027][ T8798] ? __check_object_size+0x49c/0x900 [ 148.861340][ T8798] ? bpf_lsm_netlink_send+0x9/0x10 [ 148.866476][ T8798] netlink_sendmsg+0x8e4/0xcb0 [ 148.871276][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.876596][ T8798] ? __import_iovec+0x536/0x820 [ 148.881469][ T8798] ? aa_sock_msg_perm+0x91/0x160 [ 148.886431][ T8798] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 148.891737][ T8798] ? security_socket_sendmsg+0x87/0xb0 [ 148.897221][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.902529][ T8798] __sock_sendmsg+0x221/0x270 [ 148.907238][ T8798] ____sys_sendmsg+0x525/0x7d0 [ 148.912042][ T8798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.917372][ T8798] __sys_sendmsg+0x2b0/0x3a0 [ 148.921994][ T8798] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.927137][ T8798] ? vfs_write+0x7c4/0xc90 [ 148.931628][ T8798] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.937986][ T8798] ? do_syscall_64+0x100/0x230 [ 148.942784][ T8798] ? do_syscall_64+0xb6/0x230 [ 148.947493][ T8798] do_syscall_64+0xf3/0x230 [ 148.952023][ T8798] ? clear_bhb_loop+0x35/0x90 [ 148.956710][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.962598][ T8798] RIP: 0033:0x7fe491f7cef9 [ 148.967024][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.986648][ T8798] RSP: 002b:00007fe492cfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.995067][ T8798] RAX: ffffffffffffffda RBX: 00007fe492135f80 RCX: 00007fe491f7cef9 [ 149.003034][ T8798] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 149.011019][ T8798] RBP: 00007fe492cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 149.019007][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.026990][ T8798] R13: 0000000000000000 R14: 00007fe492135f80 R15: 00007ffc392a1f88 [ 149.034981][ T8798] [ 149.448842][ T8430] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.471304][ T8430] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.484039][ T8430] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.497431][ T8430] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.581043][ T8506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.661447][ T8506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.675414][ T8838] netlink: 228 bytes leftover after parsing attributes in process `syz.4.855'. [ 149.686030][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 149.727241][ T8506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.776274][ T8506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.821247][ T5242] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 149.874347][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 150.026958][ T8848] Cannot find add_set index 0 as target [ 150.055301][ T8856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'. [ 150.122025][ T8858] FAULT_INJECTION: forcing a failure. [ 150.122025][ T8858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.133338][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.200248][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.203625][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.4.860 Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 150.217468][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.227543][ T8858] Call Trace: [ 150.230847][ T8858] [ 150.233787][ T8858] dump_stack_lvl+0x241/0x360 [ 150.238463][ T8858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.243651][ T8858] ? __pfx__printk+0x10/0x10 [ 150.248238][ T8858] ? snprintf+0xda/0x120 [ 150.252473][ T8858] should_fail_ex+0x3b0/0x4e0 [ 150.257148][ T8858] _copy_to_user+0x2f/0xb0 [ 150.261562][ T8858] simple_read_from_buffer+0xca/0x150 [ 150.266950][ T8858] proc_fail_nth_read+0x1ec/0x260 [ 150.271971][ T8858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.277510][ T8858] ? rw_verify_area+0x520/0x6b0 [ 150.282352][ T8858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.287888][ T8858] vfs_read+0x204/0xbc0 [ 150.292036][ T8858] ? __pfx_lock_release+0x10/0x10 [ 150.297420][ T8858] ? __pfx_vfs_read+0x10/0x10 [ 150.302110][ T8858] ? __fget_files+0x29/0x470 [ 150.306710][ T8858] ? __fget_files+0x3f6/0x470 [ 150.311397][ T8858] ksys_read+0x1a0/0x2c0 [ 150.315638][ T8858] ? __pfx_ksys_read+0x10/0x10 [ 150.320411][ T8858] ? do_syscall_64+0x100/0x230 [ 150.325213][ T8858] ? do_syscall_64+0xb6/0x230 [ 150.329902][ T8858] do_syscall_64+0xf3/0x230 [ 150.334406][ T8858] ? clear_bhb_loop+0x35/0x90 [ 150.339084][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.344983][ T8858] RIP: 0033:0x7fe491f7b93c [ 150.349397][ T8858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 150.369083][ T8858] RSP: 002b:00007fe492cfd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.377491][ T8858] RAX: ffffffffffffffda RBX: 00007fe492135f80 RCX: 00007fe491f7b93c [ 150.385454][ T8858] RDX: 000000000000000f RSI: 00007fe492cfd0a0 RDI: 0000000000000004 [ 150.393413][ T8858] RBP: 00007fe492cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 150.401372][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.409419][ T8858] R13: 0000000000000000 R14: 00007fe492135f80 R15: 00007ffc392a1f88 [ 150.417393][ T8858] [ 150.456502][ T8430] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.481084][ T5242] Bluetooth: hci3: command 0x1407 tx timeout [ 150.564731][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.646886][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.654082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.713188][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.720411][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.765311][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.772535][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.823410][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 150.845625][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.852841][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.862270][ T8882] netlink: 'syz.3.865': attribute type 3 has an invalid length. [ 150.880636][ T8882] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 150.889048][ T8882] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.865'. [ 151.533294][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.637754][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.790409][ T8506] veth0_vlan: entered promiscuous mode [ 151.854282][ T8506] veth1_vlan: entered promiscuous mode [ 151.885430][ T8430] veth0_vlan: entered promiscuous mode [ 151.918555][ T8926] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 151.977877][ T8430] veth1_vlan: entered promiscuous mode [ 152.072895][ T8938] sctp: [Deprecated]: syz.4.875 (pid 8938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.072895][ T8938] Use struct sctp_sack_info instead [ 152.132731][ T8430] veth0_macvtap: entered promiscuous mode [ 152.141847][ T8944] sctp: [Deprecated]: syz.4.875 (pid 8944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.141847][ T8944] Use struct sctp_sack_info instead [ 152.145540][ T8506] veth0_macvtap: entered promiscuous mode [ 152.196348][ T8430] veth1_macvtap: entered promiscuous mode [ 152.229898][ T8506] veth1_macvtap: entered promiscuous mode [ 152.348354][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.390624][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.446984][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.490967][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.507538][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.554107][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.572972][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.593675][ T8962] __nla_validate_parse: 3 callbacks suppressed [ 152.593694][ T8962] netlink: 292 bytes leftover after parsing attributes in process `syz.4.880'. [ 152.624081][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 152.634790][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 152.643894][ T8962] netlink: 68 bytes leftover after parsing attributes in process `syz.4.880'. [ 152.668299][ T8506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.698737][ T8506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.733583][ T8506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.763846][ T8506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.830986][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.864641][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.892207][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.923435][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.938965][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.960409][ T8430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.975326][ T8430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.984333][ T8430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.996034][ T8430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.018712][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.883'. [ 153.478292][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.495321][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.553812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.582371][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.676751][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.720358][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.786557][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.863746][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.956442][ T9016] netlink: 'syz.4.889': attribute type 6 has an invalid length. [ 154.189554][ T9028] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 154.268445][ T9028] team0: Device veth0_macvtap failed to register rx_handler [ 154.299186][ T9028] syz.3.893 (9028) used greatest stack depth: 18256 bytes left [ 154.368096][ T9033] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 154.381766][ T9033] team0: Device veth0_macvtap failed to register rx_handler [ 154.811859][ T9068] Unknown options in mask 1f4 [ 154.881393][ T9070] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 155.014087][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.077814][ T9068] syzkaller0: entered promiscuous mode [ 155.099688][ T9062] syzkaller0: left promiscuous mode [ 155.237951][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.352849][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.481854][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.727747][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 155.854285][ T52] bridge_slave_1: left allmulticast mode [ 155.869098][ T52] bridge_slave_1: left promiscuous mode [ 155.886742][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.924714][ T52] bridge_slave_0: left allmulticast mode [ 155.940018][ T52] bridge_slave_0: left promiscuous mode [ 155.949124][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.259085][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.269582][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.279664][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.294209][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.296465][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.316391][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.319460][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.325538][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.333152][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.356350][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.364739][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.379466][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.018694][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.048522][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.072270][ T52] bond0 (unregistering): Released all slaves [ 157.542785][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 157.581871][ T9168] Bluetooth: MGMT ver 1.23 [ 157.638737][ T9170] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 158.048661][ T52] hsr_slave_0: left promiscuous mode [ 158.067820][ T52] hsr_slave_1: left promiscuous mode [ 158.095154][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.117751][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.139007][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.160177][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.197589][ T52] veth1_macvtap: left promiscuous mode [ 158.203641][ T52] veth0_macvtap: left promiscuous mode [ 158.214789][ T52] veth1_vlan: left promiscuous mode [ 158.229068][ T52] veth0_vlan: left promiscuous mode [ 158.469745][ T5235] Bluetooth: hci3: command tx timeout [ 158.875570][ T52] team0 (unregistering): Port device team_slave_1 removed [ 158.922617][ T52] team0 (unregistering): Port device team_slave_0 removed [ 159.339767][ T9193] batadv0: mtu less than device minimum [ 159.566598][ T9116] chnl_net:caif_netlink_parms(): no params data found [ 159.648620][ T9228] netlink: 277 bytes leftover after parsing attributes in process `syz.3.924'. [ 159.723717][ T9228] netlink: 256 bytes leftover after parsing attributes in process `syz.3.924'. [ 159.742665][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.757128][ T9228] xt_SECMARK: invalid mode: 0 [ 159.815200][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 159.937635][ T9249] netlink: 'syz.3.927': attribute type 13 has an invalid length. [ 160.194920][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.204929][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.213235][ T9116] bridge_slave_0: entered allmulticast mode [ 160.230983][ T9116] bridge_slave_0: entered promiscuous mode [ 160.250054][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.257228][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.265194][ T9116] bridge_slave_1: entered allmulticast mode [ 160.274557][ T9116] bridge_slave_1: entered promiscuous mode [ 160.493224][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.512113][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.532498][ T9118] bridge_slave_0: entered allmulticast mode [ 160.539944][ T54] Bluetooth: hci3: command tx timeout [ 160.557170][ T9118] bridge_slave_0: entered promiscuous mode [ 160.568778][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.601351][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.631437][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.645961][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.653579][ T9118] bridge_slave_1: entered allmulticast mode [ 160.661141][ T9118] bridge_slave_1: entered promiscuous mode [ 160.784794][ T9116] team0: Port device team_slave_0 added [ 160.796757][ T9116] team0: Port device team_slave_1 added [ 160.816390][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.838082][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.000485][ T9118] team0: Port device team_slave_0 added [ 161.015095][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.030605][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.077288][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.262476][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.315435][ T9118] team0: Port device team_slave_1 added [ 161.364078][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.382245][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.429752][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.634211][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 161.701741][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.762160][ T9316] netlink: 'syz.4.942': attribute type 10 has an invalid length. [ 161.797592][ T9316] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.936077][ T9116] hsr_slave_0: entered promiscuous mode [ 161.973945][ T9116] hsr_slave_1: entered promiscuous mode [ 162.025036][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.039775][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.098287][ T9118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.123562][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.131344][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.159519][ T9118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.194540][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.353685][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.365425][ T9350] netlink: 68 bytes leftover after parsing attributes in process `syz.3.952'. [ 162.394059][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 162.465387][ T9118] hsr_slave_0: entered promiscuous mode [ 162.504680][ T9118] hsr_slave_1: entered promiscuous mode [ 162.517143][ T9118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.527398][ T9118] Cannot create hsr debugfs directory [ 162.615687][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 162.628284][ T9360] netlink: 56 bytes leftover after parsing attributes in process `syz.1.954'. [ 162.630469][ T54] Bluetooth: hci3: command tx timeout [ 162.668547][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 162.746527][ T9362] netlink: 'syz.1.955': attribute type 3 has an invalid length. [ 162.762902][ T9362] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.955'. [ 162.829926][ T940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.967457][ T52] bridge_slave_1: left allmulticast mode [ 162.988208][ T52] bridge_slave_1: left promiscuous mode [ 162.999023][ T9368] xt_ipcomp: unknown flags 12 [ 162.999620][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.028719][ T52] bridge_slave_0: left allmulticast mode [ 163.035656][ T52] bridge_slave_0: left promiscuous mode [ 163.045514][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.130302][ T940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.706216][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.718382][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.730825][ T52] bond0 (unregistering): Released all slaves [ 164.059118][ T9395] netlink: 56 bytes leftover after parsing attributes in process `syz.4.962'. [ 164.208792][ T9407] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 164.707683][ T9417] syzkaller1: entered promiscuous mode [ 164.714099][ T54] Bluetooth: hci3: command tx timeout [ 164.737588][ T9417] syzkaller1: entered allmulticast mode [ 164.866001][ T52] hsr_slave_0: left promiscuous mode [ 164.885259][ T52] hsr_slave_1: left promiscuous mode [ 164.906660][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.935829][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.946930][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.964473][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.007828][ T52] veth1_macvtap: left promiscuous mode [ 165.033414][ T52] veth0_macvtap: left promiscuous mode [ 165.043964][ T52] veth1_vlan: left promiscuous mode [ 165.053215][ T52] veth0_vlan: left promiscuous mode [ 165.542946][ T52] team0 (unregistering): Port device team_slave_1 removed [ 165.635183][ T52] team0 (unregistering): Port device team_slave_0 removed [ 166.742342][ T9479] tipc: Invalid UDP bearer configuration [ 166.742396][ T9479] tipc: Enabling of bearer rejected, failed to enable media [ 166.862637][ T9483] __nla_validate_parse: 2 callbacks suppressed [ 166.862655][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.981'. [ 166.910837][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.981'. [ 166.988727][ T9118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.051823][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.983'. [ 167.124554][ T9118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.136542][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 167.182113][ T9118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.237694][ T9118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.258992][ T9116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.275496][ T9116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.293895][ T9116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.298257][ T9502] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 167.308482][ T9502] netlink: 9260 bytes leftover after parsing attributes in process `syz.3.987'. [ 167.317073][ T9116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.325442][ T9502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.987'. [ 167.334523][ T9502] netlink: 'syz.3.987': attribute type 2 has an invalid length. [ 167.352127][ T9502] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 167.565454][ T9512] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 167.598038][ T9512] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.988'. [ 167.665252][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.728224][ T9118] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.785904][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.806859][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.814077][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.877642][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 167.888696][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.895901][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.926730][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.992'. [ 167.976600][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.044864][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.052106][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.110714][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.117922][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.184894][ T9538] netlink: 56 bytes leftover after parsing attributes in process `syz.1.995'. [ 168.900031][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.078188][ T9118] veth0_vlan: entered promiscuous mode [ 169.098518][ T9118] veth1_vlan: entered promiscuous mode [ 169.136290][ T9116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.245539][ T9118] veth0_macvtap: entered promiscuous mode [ 169.287636][ T9118] veth1_macvtap: entered promiscuous mode [ 169.291673][ T9590] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 169.329856][ T9590] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 169.357823][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.398593][ T9116] veth0_vlan: entered promiscuous mode [ 169.421965][ T9118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.449020][ T9118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.461486][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.515173][ T9118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.534877][ T9118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.545912][ T9118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.560967][ T9118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.597842][ T9116] veth1_vlan: entered promiscuous mode [ 169.765749][ T9116] veth0_macvtap: entered promiscuous mode [ 169.807155][ T9116] veth1_macvtap: entered promiscuous mode [ 169.878729][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.905287][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.913312][ T9612] netlink: 'syz.1.1013': attribute type 29 has an invalid length. [ 169.933689][ T9614] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 169.958699][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.030416][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.079258][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.130473][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.154196][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.169403][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.189442][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.213831][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.252569][ T9116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.275933][ T9116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.298407][ T9116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.307981][ T9116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.334602][ T9626] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 170.371729][ T9626] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 170.404809][ T35] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 170.435633][ T7450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.481261][ T7450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.688564][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.707113][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.834990][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.867544][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.955578][ T9642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.031294][ T9639] IPVS: Scheduler module ip_vs_sip not found [ 171.090513][ T9647] IPVS: length: 8 != 3945546880 [ 172.104822][ T9710] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 172.114298][ T9710] __nla_validate_parse: 9 callbacks suppressed [ 172.114316][ T9710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1029'. [ 172.499784][ T9734] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 172.515480][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 172.631208][ T8529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.197106][ T8529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.302229][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.303349][ T8529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.317119][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.329641][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.337981][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.346431][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.357273][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.405708][ T8529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.576881][ T8529] bridge_slave_1: left allmulticast mode [ 173.583794][ T8529] bridge_slave_1: left promiscuous mode [ 173.592032][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.602244][ T8529] bridge_slave_0: left allmulticast mode [ 173.608757][ T8529] bridge_slave_0: left promiscuous mode [ 173.634803][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.956406][ T9771] x_tables: duplicate underflow at hook 1 [ 174.022249][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.037949][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.049059][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.065566][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.074347][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.085201][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.283493][ T8529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.296181][ T8529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.307447][ T8529] bond0 (unregistering): Released all slaves [ 174.577030][ T9752] chnl_net:caif_netlink_parms(): no params data found [ 175.419912][ T54] Bluetooth: hci0: command tx timeout [ 175.582529][ T8529] hsr_slave_0: left promiscuous mode [ 175.639601][ T8529] hsr_slave_1: left promiscuous mode [ 175.687001][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.697207][ T8529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.715971][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.734152][ T8529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.826245][ T8529] veth1_macvtap: left promiscuous mode [ 175.844925][ T8529] veth0_macvtap: left promiscuous mode [ 175.851024][ T8529] veth1_vlan: left promiscuous mode [ 175.856380][ T8529] veth0_vlan: left promiscuous mode [ 176.140537][ T54] Bluetooth: hci3: command tx timeout [ 176.316939][ T9859] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 176.325031][ T9859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1059'. [ 176.588018][ T8529] team0 (unregistering): Port device team_slave_1 removed [ 176.632807][ T8529] team0 (unregistering): Port device team_slave_0 removed [ 177.227216][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.235118][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.244693][ T9752] bridge_slave_0: entered allmulticast mode [ 177.255594][ T9752] bridge_slave_0: entered promiscuous mode [ 177.266783][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.282418][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.289863][ T9752] bridge_slave_1: entered allmulticast mode [ 177.297258][ T9752] bridge_slave_1: entered promiscuous mode [ 177.465477][ T9752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.498673][ T9752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.510487][ T54] Bluetooth: hci0: command tx timeout [ 177.763021][ T9752] team0: Port device team_slave_0 added [ 177.843915][ T9752] team0: Port device team_slave_1 added [ 178.003222][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.044147][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.096842][ T9752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.122832][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.145161][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.190869][ T9752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.207616][ T9772] chnl_net:caif_netlink_parms(): no params data found [ 178.219883][ T54] Bluetooth: hci3: command tx timeout [ 178.750609][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1075'. [ 178.942882][ T8529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.140542][ T9752] hsr_slave_0: entered promiscuous mode [ 179.158627][ T9752] hsr_slave_1: entered promiscuous mode [ 179.189160][ T9752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.199498][ T9752] Cannot create hsr debugfs directory [ 179.507832][ T8529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.584005][ T5232] Bluetooth: hci0: command tx timeout [ 180.115479][ T8529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.272465][ T9772] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.316559][ T5232] Bluetooth: hci3: command tx timeout [ 180.317060][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.342777][ T9772] bridge_slave_0: entered allmulticast mode [ 180.350457][ T9772] bridge_slave_0: entered promiscuous mode [ 180.360279][ T9772] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.367584][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.375689][ T9772] bridge_slave_1: entered allmulticast mode [ 180.383075][ T9772] bridge_slave_1: entered promiscuous mode [ 180.402762][ T9956] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 180.433495][ T9954] netlink: 'syz.3.1080': attribute type 7 has an invalid length. [ 180.451425][ T9954] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1080'. [ 180.463798][ T8529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.551261][ T9772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.655495][ T9772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.795504][ T9772] team0: Port device team_slave_0 added [ 180.823240][ T9772] team0: Port device team_slave_1 added [ 181.074935][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.087324][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.091600][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805801ec00: rx timeout, send abort [ 181.122031][ T9772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.134562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805801f000: rx timeout, send abort [ 181.135910][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.143335][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805801ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.164644][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.166077][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805801f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.226198][ T9772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.265998][ T9990] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 181.277252][ T9990] netlink: 9340 bytes leftover after parsing attributes in process `syz.4.1086'. [ 181.294532][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 181.305092][ T9990] netlink: set zone limit has 8 unknown bytes [ 181.337095][ T9983] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 181.349751][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 181.355832][ T5232] Bluetooth: hci4: command 0x0405 tx timeout [ 181.359678][ T9983] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 181.363556][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 181.378400][ T9983] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1085'. [ 181.431390][ T8529] bridge_slave_1: left allmulticast mode [ 181.437284][ T8529] bridge_slave_1: left promiscuous mode [ 181.450372][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.470860][ T8529] bridge_slave_0: left allmulticast mode [ 181.476556][ T8529] bridge_slave_0: left promiscuous mode [ 181.482600][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.660649][ T5233] Bluetooth: hci0: command tx timeout [ 182.050772][ T8529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.068922][ T8529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.095824][ T8529] bond0 (unregistering): Released all slaves [ 182.206698][T10005] bridge3: entered promiscuous mode [ 182.212314][T10005] bridge3: entered allmulticast mode [ 182.255986][T10005] team0: Port device bridge3 added [ 182.273086][T10014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1094'. [ 182.295970][ T9772] hsr_slave_0: entered promiscuous mode [ 182.310564][ T9772] hsr_slave_1: entered promiscuous mode [ 182.327332][ T9772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.345893][ T9772] Cannot create hsr debugfs directory [ 182.392185][ T5233] Bluetooth: hci3: command tx timeout [ 182.399856][T10021] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1096'. [ 182.640743][T10025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1095'. [ 183.077757][ T8529] hsr_slave_0: left promiscuous mode [ 183.094133][ T8529] hsr_slave_1: left promiscuous mode [ 183.112512][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.130887][ T8529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.151579][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.173746][ T8529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.305210][ T8529] veth1_macvtap: left promiscuous mode [ 183.336347][ T8529] veth0_macvtap: left promiscuous mode [ 183.363608][ T8529] veth1_vlan: left promiscuous mode [ 183.368997][ T8529] veth0_vlan: left promiscuous mode [ 183.742174][ T5233] Bluetooth: hci0: command 0x0401 tx timeout [ 184.375144][ T8529] team0 (unregistering): Port device team_slave_1 removed [ 184.442188][ T8529] team0 (unregistering): Port device team_slave_0 removed [ 184.967831][T10050] lo: entered promiscuous mode [ 184.975365][T10050] lo: left promiscuous mode [ 185.444226][ T9752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.470773][ T9752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.543703][ T9752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.577958][ T9752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.982850][ T9752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.028547][T10081] bridge4: entered promiscuous mode [ 186.048779][T10081] bridge4: entered allmulticast mode [ 186.065631][T10081] team0: Port device bridge4 added [ 186.174529][ T9752] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.249360][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.256539][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.305951][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.313304][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.401848][ T9772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.480288][ T9772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.535191][ T9772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.586473][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 186.615975][ T9772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.646305][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 186.692387][T10103] team_slave_0: entered promiscuous mode [ 186.705531][T10103] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 186.720167][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 186.729145][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 186.797027][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 186.811403][T10106] team_slave_0: left promiscuous mode [ 186.847846][T10101] netlink: 'syz.4.1118': attribute type 4 has an invalid length. [ 186.862280][T10101] netlink: 'syz.4.1118': attribute type 4 has an invalid length. [ 187.146475][ T9772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.192642][T10122] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 187.225666][ T9772] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.304592][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.311854][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.376049][ T9752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.406865][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.414127][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.446967][T10135] netlink: 'syz.4.1126': attribute type 9 has an invalid length. [ 187.477796][T10135] macvtap0: entered promiscuous mode [ 187.496289][T10135] macvtap0: entered allmulticast mode [ 187.509783][T10135] veth0_macvtap: entered allmulticast mode [ 187.539134][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1126'. [ 187.556164][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 187.566469][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 187.621511][T10139] bridge2: entered promiscuous mode [ 187.640679][T10139] bridge2: entered allmulticast mode [ 187.661867][T10139] team0: Port device bridge2 added [ 187.814828][ T9752] veth0_vlan: entered promiscuous mode [ 187.895944][ T9752] veth1_vlan: entered promiscuous mode [ 187.997395][T10157] IPVS: length: 66 != 24 [ 188.051888][T10159] vlan3: entered allmulticast mode [ 188.073247][T10161] netlink: 'syz.3.1132': attribute type 11 has an invalid length. [ 188.324176][ T9752] veth0_macvtap: entered promiscuous mode [ 188.400027][ T9752] veth1_macvtap: entered promiscuous mode [ 188.484765][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.521595][ T9752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.572993][ T9752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.600907][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.659047][ T9752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.685760][ T9752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.699354][ T9752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.708329][ T9752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.743923][ T9772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.776245][T10185] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1136'. [ 189.109752][ T9772] veth0_vlan: entered promiscuous mode [ 189.167243][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.187742][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.207193][ T9772] veth1_vlan: entered promiscuous mode [ 189.348739][ T7450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.386456][ T7450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.438940][ T9772] veth0_macvtap: entered promiscuous mode [ 189.504671][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.532496][ T9772] veth1_macvtap: entered promiscuous mode [ 189.578861][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.604532][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.616506][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.633744][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.659699][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.689758][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.734402][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.784726][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.817409][T10234] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 190.023892][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 190.041868][T10249] IPv6: sit1: Disabled Multicast RS [ 190.063663][ T9772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.086357][ T9772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.119407][ T9772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.128338][ T9772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.224194][T10255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.255594][T10255] team0: Device bond0 failed to register rx_handler [ 190.606309][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.646496][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.873972][ T2962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.925428][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.947185][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.235400][ T2962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.353146][ T2962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.463764][ T2962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.654926][T10302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.679699][ T2962] bridge_slave_1: left allmulticast mode [ 191.689543][ T2962] bridge_slave_1: left promiscuous mode [ 191.699579][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.726962][T10302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.759899][T10302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.780452][T10302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.797747][ T2962] bridge_slave_0: left allmulticast mode [ 191.809815][T10302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.819030][T10302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.839501][ T2962] bridge_slave_0: left promiscuous mode [ 191.845342][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.952147][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 192.066538][T10315] ax25_connect(): syz.4.1160 uses autobind, please contact jreuter@yaina.de [ 192.120909][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.149536][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.159557][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.167941][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.176952][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.184550][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.527856][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.548749][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.560022][ T2962] bond0 (unregistering): Released all slaves [ 192.572247][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 192.585614][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 192.594732][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 192.620821][T10315] netlink: 'syz.4.1160': attribute type 11 has an invalid length. [ 192.631914][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.149246][ T2962] hsr_slave_0: left promiscuous mode [ 193.201586][ T2962] hsr_slave_1: left promiscuous mode [ 193.288649][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.307590][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.351728][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.373994][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.437647][ T2962] veth1_macvtap: left promiscuous mode [ 193.474972][ T2962] veth0_macvtap: left promiscuous mode [ 193.495336][ T2962] veth1_vlan: left promiscuous mode [ 193.508517][ T2962] veth0_vlan: left promiscuous mode [ 193.712795][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.723888][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.732419][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.745746][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.755638][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.764467][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.214306][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 194.261835][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 194.304052][ T5235] Bluetooth: hci0: command tx timeout [ 194.970328][T10326] chnl_net:caif_netlink_parms(): no params data found [ 195.039065][T10383] netlink: 'syz.1.1174': attribute type 5 has an invalid length. [ 195.360310][T10402] netlink: zone id is out of range [ 195.367855][T10402] netlink: zone id is out of range [ 195.382065][T10402] netlink: zone id is out of range [ 195.387988][T10402] netlink: zone id is out of range [ 195.396600][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.403950][T10402] netlink: zone id is out of range [ 195.409176][T10402] netlink: zone id is out of range [ 195.414738][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.430580][T10402] netlink: zone id is out of range [ 195.436471][T10326] bridge_slave_0: entered allmulticast mode [ 195.443168][T10402] netlink: zone id is out of range [ 195.449901][T10326] bridge_slave_0: entered promiscuous mode [ 195.450315][T10402] netlink: zone id is out of range [ 195.458616][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.475872][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.483425][T10326] bridge_slave_1: entered allmulticast mode [ 195.489871][T10402] netlink: zone id is out of range [ 195.497836][T10326] bridge_slave_1: entered promiscuous mode [ 195.557125][T10405] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 195.638295][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.651421][T10368] chnl_net:caif_netlink_parms(): no params data found [ 195.666985][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.673463][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.692090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.819639][ T5235] Bluetooth: hci3: command tx timeout [ 195.927888][ T2962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.065303][T10419] lo speed is unknown, defaulting to 1000 [ 196.157618][ T2962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.185197][T10326] team0: Port device team_slave_0 added [ 196.293984][T10326] team0: Port device team_slave_1 added [ 196.369986][ T2962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.380475][ T5235] Bluetooth: hci0: command tx timeout [ 196.405093][T10419] lo speed is unknown, defaulting to 1000 [ 196.445713][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.475558][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.486095][T10368] bridge_slave_0: entered allmulticast mode [ 196.494264][T10368] bridge_slave_0: entered promiscuous mode [ 196.519786][T10419] lo speed is unknown, defaulting to 1000 [ 196.566497][ T2962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.625145][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.638358][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.667159][T10368] bridge_slave_1: entered allmulticast mode [ 196.695584][T10368] bridge_slave_1: entered promiscuous mode [ 196.811910][T10434] __nla_validate_parse: 55 callbacks suppressed [ 196.811930][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 196.871920][T10419] infiniband syz0: set active [ 196.879653][T10419] infiniband syz0: added lo [ 196.886427][T10419] syz0: rxe_create_cq: returned err = -12 [ 196.895190][T10419] infiniband syz0: Couldn't create ib_mad CQ [ 196.909511][T10419] infiniband syz0: Couldn't open port 1 [ 196.971970][T10419] RDS/IB: syz0: added [ 196.980822][T10419] smc: adding ib device syz0 with port count 1 [ 196.987381][T10419] smc: ib device syz0 port 1 has pnetid [ 196.989129][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.000810][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.035945][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.049211][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1183'. [ 197.059502][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 197.070800][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 197.095526][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.106731][ T5279] lo speed is unknown, defaulting to 1000 [ 197.121178][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.150672][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.215330][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.258082][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.284876][ T5315] lo speed is unknown, defaulting to 1000 [ 197.360403][T10419] lo speed is unknown, defaulting to 1000 [ 197.365605][T10368] team0: Port device team_slave_0 added [ 197.404466][T10368] team0: Port device team_slave_1 added [ 197.551662][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.558650][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.610839][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.664765][T10326] hsr_slave_0: entered promiscuous mode [ 197.675534][T10467] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1187'. [ 197.690269][T10326] hsr_slave_1: entered promiscuous mode [ 197.790313][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.797311][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.896414][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.909848][ T5235] Bluetooth: hci3: command tx timeout [ 197.942869][T10419] lo speed is unknown, defaulting to 1000 [ 198.354672][T10368] hsr_slave_0: entered promiscuous mode [ 198.364959][T10368] hsr_slave_1: entered promiscuous mode [ 198.378694][T10368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.387900][T10368] Cannot create hsr debugfs directory [ 198.425430][ T2962] bridge_slave_1: left allmulticast mode [ 198.431287][ T2962] bridge_slave_1: left promiscuous mode [ 198.437062][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.447278][ T2962] bridge_slave_0: left allmulticast mode [ 198.454036][ T2962] bridge_slave_0: left promiscuous mode [ 198.460433][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.473455][ T5235] Bluetooth: hci0: command tx timeout [ 198.873503][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.886220][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.897818][ T2962] bond0 (unregistering): Released all slaves [ 198.914632][T10419] lo speed is unknown, defaulting to 1000 [ 199.348036][T10419] lo speed is unknown, defaulting to 1000 [ 199.363729][T10499] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 199.402731][T10499] team0: Device ipvlan1 failed to register rx_handler [ 199.757960][T10511] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1197'. [ 199.966655][T10419] lo speed is unknown, defaulting to 1000 [ 199.980116][ T5235] Bluetooth: hci3: command tx timeout [ 200.017229][T10517] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 200.090554][T10517] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1198'. [ 200.384640][T10419] lo speed is unknown, defaulting to 1000 [ 200.543246][ T5235] Bluetooth: hci0: command tx timeout [ 200.644836][T10535] tipc: Started in network mode [ 200.672436][T10535] tipc: Node identity ac1414aa, cluster identity 4711 [ 200.720950][T10535] tipc: Enabled bearer , priority 10 [ 200.762105][T10419] lo speed is unknown, defaulting to 1000 [ 200.997354][T10547] sctp: [Deprecated]: syz.1.1204 (pid 10547) Use of int in max_burst socket option. [ 200.997354][T10547] Use struct sctp_assoc_value instead [ 201.066811][T10548] sctp: [Deprecated]: syz.1.1204 (pid 10548) Use of int in max_burst socket option. [ 201.066811][T10548] Use struct sctp_assoc_value instead [ 201.163363][T10326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.203679][T10326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.255862][T10547] xt_bpf: check failed: parse error [ 201.256622][T10326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.277335][T10548] xt_bpf: check failed: parse error [ 201.350212][T10326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.598576][ T2962] hsr_slave_0: left promiscuous mode [ 201.613908][ T2962] hsr_slave_1: left promiscuous mode [ 201.625290][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.633250][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.647502][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.656904][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.705925][ T2962] veth1_macvtap: left promiscuous mode [ 201.716298][ T2962] veth0_macvtap: left promiscuous mode [ 201.724473][ T2962] veth1_vlan: left promiscuous mode [ 201.734782][ T2962] veth0_vlan: left promiscuous mode [ 201.839547][ T5279] tipc: Node number set to 2886997162 [ 202.070954][ T5235] Bluetooth: hci3: command tx timeout [ 202.426815][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 202.479742][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 202.937936][T10568] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 202.951955][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.964831][T10568] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 203.191932][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.216794][T10592] net_ratelimit: 16 callbacks suppressed [ 203.216815][T10592] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 203.243707][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.327164][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 203.356096][T10368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.396987][T10368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.456059][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.463320][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.506231][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.513489][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.562018][T10609] netlink: 'syz.4.1216': attribute type 11 has an invalid length. [ 203.567001][T10368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.628391][T10368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.085827][T10368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.172910][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.217113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.224423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.274490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.281738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.407071][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.642401][T10326] veth0_vlan: entered promiscuous mode [ 204.687873][T10326] veth1_vlan: entered promiscuous mode [ 204.792284][T10326] veth0_macvtap: entered promiscuous mode [ 204.828701][T10326] veth1_macvtap: entered promiscuous mode [ 204.978982][T10675] Bluetooth: MGMT ver 1.23 [ 205.006637][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.078399][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.109551][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.164710][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.211814][T10326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.236196][T10326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.255120][T10326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.265122][ T5233] Bluetooth: hci3: command 0x0405 tx timeout [ 205.288377][T10326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.309115][T10368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.407753][T10689] pim6reg1: entered promiscuous mode [ 205.428949][T10689] pim6reg1: entered allmulticast mode [ 205.759495][T10711] veth1_macvtap: left promiscuous mode [ 205.832187][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.834875][T10368] veth0_vlan: entered promiscuous mode [ 205.852088][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.928846][T10721] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1235'. [ 206.021670][T10368] veth1_vlan: entered promiscuous mode [ 206.152326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.183908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.275743][T10368] veth0_macvtap: entered promiscuous mode [ 206.303489][T10368] veth1_macvtap: entered promiscuous mode [ 206.479176][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.516999][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.547986][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.583187][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.620696][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.649822][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.695626][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.728271][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.757719][T10368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.805477][T10368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.825106][T10368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.839565][T10368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.130122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.139743][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.269788][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.290142][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.321329][T10775] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 207.417794][ T7450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.205696][ T7450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.410472][ T7450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.471002][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 208.519760][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 208.636667][ T7450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.668318][T10819] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 208.771864][T10830] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1250'. [ 208.821013][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 208.837915][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1249'. [ 208.851182][T10827] bond2: entered allmulticast mode [ 208.863434][T10831] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 208.874230][T10831] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 208.887219][T10831] bond2: (slave ip6gre1): making interface the new active one [ 208.918256][T10831] ip6gre1: entered allmulticast mode [ 208.939153][T10831] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 209.060786][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.072479][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.081881][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.094157][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.111364][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.119026][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.308275][T10840] lo speed is unknown, defaulting to 1000 [ 209.317953][ T7450] bridge_slave_1: left allmulticast mode [ 209.329494][ T7450] bridge_slave_1: left promiscuous mode [ 209.335296][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.379516][ T7450] bridge_slave_0: left allmulticast mode [ 209.385212][ T7450] bridge_slave_0: left promiscuous mode [ 209.398183][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.904948][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.916481][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.928845][ T7450] bond0 (unregistering): Released all slaves [ 210.436687][T10872] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1256'. [ 210.599066][T10840] chnl_net:caif_netlink_parms(): no params data found [ 210.868755][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.881694][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.918963][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.965829][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.978618][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.986167][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.143241][T10896] netlink: 'syz.3.1259': attribute type 21 has an invalid length. [ 211.179665][ T5233] Bluetooth: hci0: command tx timeout [ 211.195219][T10896] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1259'. [ 211.215611][T10896] netlink: 'syz.3.1259': attribute type 4 has an invalid length. [ 211.223771][T10896] netlink: 'syz.3.1259': attribute type 5 has an invalid length. [ 211.231681][T10896] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1259'. [ 211.251190][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 211.318787][ T7450] hsr_slave_0: left promiscuous mode [ 211.337469][ T7450] hsr_slave_1: left promiscuous mode [ 211.358424][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.375354][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.386910][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.395121][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.457282][ T7450] veth1_macvtap: left promiscuous mode [ 211.469782][ T7450] veth0_macvtap: left promiscuous mode [ 211.484536][ T7450] veth1_vlan: left promiscuous mode [ 211.496080][ T7450] veth0_vlan: left promiscuous mode [ 211.547762][T10906] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1263'. [ 212.314347][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 212.358497][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 212.918943][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.929860][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.937155][T10840] bridge_slave_0: entered allmulticast mode [ 212.946687][T10840] bridge_slave_0: entered promiscuous mode [ 213.015830][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.023929][T10888] lo speed is unknown, defaulting to 1000 [ 213.039559][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.059744][T10840] bridge_slave_1: entered allmulticast mode [ 213.067255][T10840] bridge_slave_1: entered promiscuous mode [ 213.105932][ T5233] Bluetooth: hci3: command tx timeout [ 213.192867][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.260002][ T5233] Bluetooth: hci0: command tx timeout [ 213.262906][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.424193][T10840] team0: Port device team_slave_0 added [ 213.490585][T10840] team0: Port device team_slave_1 added [ 213.653526][T10946] __nla_validate_parse: 1 callbacks suppressed [ 213.653545][T10946] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1274'. [ 213.670011][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.677462][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.748546][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.805302][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.839492][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.875145][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.153848][T10840] hsr_slave_0: entered promiscuous mode [ 214.172670][T10840] hsr_slave_1: entered promiscuous mode [ 214.264597][T10976] netlink: 'syz.1.1280': attribute type 49 has an invalid length. [ 214.494502][ T7450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.763433][ T7450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.923884][ T7450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.179449][ T5233] Bluetooth: hci3: command tx timeout [ 215.182332][ T7450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.339780][ T5233] Bluetooth: hci0: command tx timeout [ 215.782023][ T7450] bridge_slave_1: left allmulticast mode [ 215.787727][ T7450] bridge_slave_1: left promiscuous mode [ 215.872109][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.970455][ T7450] bridge_slave_0: left allmulticast mode [ 215.976622][ T7450] bridge_slave_0: left promiscuous mode [ 216.049660][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.269436][ T5233] Bluetooth: hci3: command tx timeout [ 217.449392][ T5233] Bluetooth: hci0: command tx timeout [ 219.358845][ T5233] Bluetooth: hci3: command tx timeout [ 219.402162][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.432914][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.513013][ T7450] bond0 (unregistering): Released all slaves [ 221.699604][ T7450] hsr_slave_0: left promiscuous mode [ 221.769566][ T7450] hsr_slave_1: left promiscuous mode [ 221.869501][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.876956][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.970363][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.977835][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.184249][ T7450] veth1_macvtap: left promiscuous mode [ 222.279422][ T7450] veth0_macvtap: left promiscuous mode [ 222.285134][ T7450] veth1_vlan: left promiscuous mode [ 222.371966][ T7450] veth0_vlan: left promiscuous mode [ 227.470404][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 227.930121][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 236.863858][T10888] chnl_net:caif_netlink_parms(): no params data found [ 237.426787][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.436378][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.445285][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.496319][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.507918][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.519603][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.540784][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.556298][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.556640][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.570800][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.572297][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.580556][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.588254][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.593948][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.619526][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.630323][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.650045][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 237.658827][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.916168][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.075525][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.095288][T10888] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.102624][T10888] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.112223][T10888] bridge_slave_0: entered allmulticast mode [ 238.118932][T10888] bridge_slave_0: entered promiscuous mode [ 238.128060][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.135400][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.143971][T10888] bridge_slave_1: entered allmulticast mode [ 238.152170][T10888] bridge_slave_1: entered promiscuous mode [ 238.162215][T11003] lo speed is unknown, defaulting to 1000 [ 238.284828][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.337145][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.354821][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.365716][T10997] lo speed is unknown, defaulting to 1000 [ 238.426913][ T62] bond0: (slave netdevsim0): Releasing backup interface [ 238.445239][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.512183][T10888] team0: Port device team_slave_0 added [ 238.561372][T10888] team0: Port device team_slave_1 added [ 238.645707][T10995] lo speed is unknown, defaulting to 1000 [ 238.688067][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.700864][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.733657][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.821270][T10840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.868288][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.896195][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.923050][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.963296][T10840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.988642][T10840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.015414][T10840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.112240][ T62] bridge_slave_1: left allmulticast mode [ 239.118130][ T62] bridge_slave_1: left promiscuous mode [ 239.127792][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.138564][ T62] bridge_slave_0: left allmulticast mode [ 239.144472][ T62] bridge_slave_0: left promiscuous mode [ 239.151272][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.669501][ T5235] Bluetooth: hci2: command tx timeout [ 239.669760][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.687493][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.699122][ T62] bond0 (unregistering): Released all slaves [ 239.710700][ T62] bond1 (unregistering): Released all slaves [ 239.723270][ T62] bond2 (unregistering): Released all slaves [ 239.739625][ T5235] Bluetooth: hci4: command tx timeout [ 239.745843][ T5235] Bluetooth: hci1: command tx timeout [ 239.823010][ T62] Κό: left promiscuous mode [ 239.925380][T10888] hsr_slave_0: entered promiscuous mode [ 239.931794][T10888] hsr_slave_1: entered promiscuous mode [ 239.938053][T10888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.945923][T10888] Cannot create hsr debugfs directory [ 239.982407][ T62] tipc: Disabling bearer [ 239.988422][ T62] tipc: Left network mode [ 240.050587][ T62] IPVS: stopping backup sync thread 6334 ... [ 240.250718][T11003] chnl_net:caif_netlink_parms(): no params data found [ 240.540141][T10995] chnl_net:caif_netlink_parms(): no params data found [ 240.879459][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.887255][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.895247][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.916702][ T62] veth1_macvtap: left promiscuous mode [ 240.922906][ T62] veth0_macvtap: left promiscuous mode [ 240.928489][ T62] veth1_vlan: left promiscuous mode [ 240.934056][ T62] veth0_vlan: left promiscuous mode [ 241.417831][ T62] team0 (unregistering): Port device team_slave_1 removed [ 241.742524][ T5235] Bluetooth: hci2: command tx timeout [ 241.819675][ T5233] Bluetooth: hci4: command tx timeout [ 241.825300][ T5235] Bluetooth: hci1: command tx timeout [ 241.894175][T10997] chnl_net:caif_netlink_parms(): no params data found [ 241.971481][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.978672][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.987275][T11003] bridge_slave_0: entered allmulticast mode [ 241.994768][T11003] bridge_slave_0: entered promiscuous mode [ 242.073448][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.082552][T11003] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.090447][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.097637][T11003] bridge_slave_1: entered allmulticast mode [ 242.105567][T11003] bridge_slave_1: entered promiscuous mode [ 242.216713][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.229104][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.236664][T10995] bridge_slave_0: entered allmulticast mode [ 242.243544][T10995] bridge_slave_0: entered promiscuous mode [ 242.288787][T11003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.309669][T11003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.349087][T11003] team0: Port device team_slave_0 added [ 242.358957][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.366658][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.375394][T10995] bridge_slave_1: entered allmulticast mode [ 242.387245][T10995] bridge_slave_1: entered promiscuous mode [ 242.414185][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.421437][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.428586][T10997] bridge_slave_0: entered allmulticast mode [ 242.435427][T10997] bridge_slave_0: entered promiscuous mode [ 242.443988][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.451179][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.458388][T10997] bridge_slave_1: entered allmulticast mode [ 242.467209][T10997] bridge_slave_1: entered promiscuous mode [ 242.476220][T11003] team0: Port device team_slave_1 added [ 242.512433][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.525145][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.564181][T10840] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.578061][T11003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.585477][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.612743][T11003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.628658][T11003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.636632][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.666619][T11003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.704130][T10997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.738316][T10995] team0: Port device team_slave_0 added [ 242.750441][T10997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.768353][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.775474][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.806779][T10995] team0: Port device team_slave_1 added [ 242.891717][T10997] team0: Port device team_slave_0 added [ 242.902317][T10997] team0: Port device team_slave_1 added [ 242.910689][T10888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.921240][T10888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.944532][T11003] hsr_slave_0: entered promiscuous mode [ 242.952574][T11003] hsr_slave_1: entered promiscuous mode [ 242.958753][T11003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.967696][T11003] Cannot create hsr debugfs directory [ 242.974192][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.981475][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.007412][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.024659][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.031802][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.072181][T10997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.079153][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.105444][T10997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.119231][T10888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.128812][T10888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.138509][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.145813][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.172860][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.198580][T10997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.205763][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.232290][T10997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.367311][T10995] hsr_slave_0: entered promiscuous mode [ 243.374800][T10995] hsr_slave_1: entered promiscuous mode [ 243.382503][T10995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.390199][T10995] Cannot create hsr debugfs directory [ 243.410332][T10997] hsr_slave_0: entered promiscuous mode [ 243.416808][T10997] hsr_slave_1: entered promiscuous mode [ 243.423634][T10997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.431658][T10997] Cannot create hsr debugfs directory [ 243.788839][T11003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.821349][ T5235] Bluetooth: hci2: command tx timeout [ 243.901465][ T5233] Bluetooth: hci4: command tx timeout [ 243.906997][ T5235] Bluetooth: hci1: command tx timeout [ 243.955542][T11003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.129201][T11003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.208931][ T62] IPVS: stop unused estimator thread 0... [ 244.284760][T11003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.315070][T10888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.407488][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.420492][T10888] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.488104][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.495303][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.508447][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.515693][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.526443][ T62] macvlan2: left allmulticast mode [ 244.538094][ T62] macvlan2: left promiscuous mode [ 244.558976][ T62] bridge0: port 3(macvlan2) entered disabled state [ 244.568077][ T62] bridge_slave_1: left allmulticast mode [ 244.580982][ T62] bridge_slave_1: left promiscuous mode [ 244.586776][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.601685][ T62] bridge_slave_0: left allmulticast mode [ 244.607473][ T62] bridge_slave_0: left promiscuous mode [ 244.620158][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.155076][ T62] team0: Port device bridge2 removed [ 245.364550][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.376195][ T62] bond0 (unregistering): Released all slaves [ 245.387168][ T62] bond1 (unregistering): Released all slaves [ 245.495234][ T62] : left promiscuous mode [ 245.576921][T10995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.598561][T11003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.621168][ T62] tipc: Disabling bearer [ 245.627137][ T62] tipc: Left network mode [ 245.627500][T11003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.684266][T10995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.711662][T10840] veth0_vlan: entered promiscuous mode [ 245.731779][T11003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.758188][T11003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.897056][T10995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.899687][ T5235] Bluetooth: hci2: command tx timeout [ 245.951193][T10840] veth1_vlan: entered promiscuous mode [ 245.979603][ T5233] Bluetooth: hci4: command tx timeout [ 245.985083][ T5235] Bluetooth: hci1: command tx timeout [ 246.006222][T10995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.305056][T10840] veth0_macvtap: entered promiscuous mode [ 246.358362][T10840] veth1_macvtap: entered promiscuous mode [ 246.494474][T10888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.627654][ T62] veth1_vlan: left promiscuous mode [ 246.637336][ T62] veth0_vlan: left promiscuous mode [ 247.109011][ T62] team0 (unregistering): Port device team_slave_1 removed [ 247.160966][ T62] team0 (unregistering): Port device team_slave_0 removed [ 247.515391][T11003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.525192][T10840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.545598][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.644306][T10840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.653944][T10840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.665087][T10840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.676499][T10840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.764236][T11003] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.834945][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.842187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.859034][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.866257][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.938996][T10888] veth0_vlan: entered promiscuous mode [ 247.961597][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.985300][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.063296][T10888] veth1_vlan: entered promiscuous mode [ 248.088234][ T62] IPVS: stop unused estimator thread 0... [ 248.095803][T10997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.106554][T10997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.119805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.137463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.167486][T10997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.181056][T10997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.416051][T10888] veth0_macvtap: entered promiscuous mode [ 248.444560][T10995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.466509][T10995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.498263][T10995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.543232][T10995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.580648][T10888] veth1_macvtap: entered promiscuous mode [ 248.644600][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.808719][T11003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.840622][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.878654][T10888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.891608][T10888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.908990][T10888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.964573][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.991929][T10888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.012191][T10888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.035182][T10888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.098596][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.123408][T10888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.138974][T10888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.158387][T10888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.167234][T10888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.237431][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.432764][T11003] veth0_vlan: entered promiscuous mode [ 249.448063][T10997] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.505093][ T11] bridge_slave_1: left allmulticast mode [ 249.511290][ T11] bridge_slave_1: left promiscuous mode [ 249.520018][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.531921][ T11] bridge_slave_0: left allmulticast mode [ 249.537617][ T11] bridge_slave_0: left promiscuous mode [ 249.544060][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.838898][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.853421][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.864610][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.875971][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.884154][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.891882][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.025996][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.040786][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.051514][ T11] bond0 (unregistering): Released all slaves [ 250.069517][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.076654][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.087102][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.094253][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.138774][T11003] veth1_vlan: entered promiscuous mode [ 250.211450][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.233884][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.284982][T11154] lo speed is unknown, defaulting to 1000 [ 250.295320][T10997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.307238][T10997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.600865][T10995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.627248][T11003] veth0_macvtap: entered promiscuous mode [ 250.733350][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.765232][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.802911][T10995] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.838871][T11003] veth1_macvtap: entered promiscuous mode [ 250.871297][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.912876][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.941174][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.951879][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.963842][T11003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.105117][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.112316][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.125234][ T11] hsr_slave_0: left promiscuous mode [ 251.135192][ T11] hsr_slave_1: left promiscuous mode [ 251.141463][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.148900][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.159208][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.168986][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.189790][ T11] veth1_macvtap: left promiscuous mode [ 251.195362][ T11] veth0_macvtap: left promiscuous mode [ 251.201339][ T11] veth1_vlan: left promiscuous mode [ 251.206619][ T11] veth0_vlan: left promiscuous mode [ 251.674792][ T11] team0 (unregistering): Port device team_slave_1 removed [ 251.725397][ T11] team0 (unregistering): Port device team_slave_0 removed [ 251.979719][ T5235] Bluetooth: hci0: command tx timeout [ 252.206784][T10997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.227855][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.238737][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.251548][T11003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.280567][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.287749][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.330140][T11003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.338880][T11003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.355959][T11003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.365695][T11003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.696117][T10997] veth0_vlan: entered promiscuous mode [ 252.805056][T11154] chnl_net:caif_netlink_parms(): no params data found [ 252.852546][T10997] veth1_vlan: entered promiscuous mode [ 252.980530][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.053921][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.063833][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.182109][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.203817][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.214015][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.243212][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.285147][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.386958][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.406019][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.416520][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.432868][T11154] bridge_slave_0: entered allmulticast mode [ 253.440258][T11154] bridge_slave_0: entered promiscuous mode [ 253.449145][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.458657][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.466055][T11154] bridge_slave_1: entered allmulticast mode [ 253.473337][T11154] bridge_slave_1: entered promiscuous mode [ 253.486161][T10997] veth0_macvtap: entered promiscuous mode [ 253.538881][T10997] veth1_macvtap: entered promiscuous mode [ 253.586975][T11154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.675062][T11154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.867610][T11154] team0: Port device team_slave_0 added [ 253.895108][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.930504][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.946805][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 253.949457][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.997776][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.016610][T10997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.060747][ T5235] Bluetooth: hci0: command tx timeout [ 254.071630][T11154] team0: Port device team_slave_1 added [ 254.084102][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 254.098135][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.113147][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.125923][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.143359][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.146128][ T11] bridge_slave_1: left allmulticast mode [ 254.162082][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.174967][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.182231][ T11] bridge_slave_1: left promiscuous mode [ 254.188011][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.240187][ T11] bridge_slave_0: left allmulticast mode [ 254.245889][ T11] bridge_slave_0: left promiscuous mode [ 254.252836][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.387685][T11227] Cannot find add_set index 0 as target [ 254.743080][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.754878][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.767065][ T11] bond0 (unregistering): Released all slaves [ 254.885036][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.899713][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.910595][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.921679][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.933428][T10997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.945085][T10997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.954585][T10997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.963412][T10997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.972338][T10997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.986434][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.993512][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.019959][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.032428][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.040566][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.066697][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.237756][T11216] lo speed is unknown, defaulting to 1000 [ 255.247828][T10995] veth0_vlan: entered promiscuous mode [ 255.359039][T11154] hsr_slave_0: entered promiscuous mode [ 255.382489][T11154] hsr_slave_1: entered promiscuous mode [ 255.472533][T11237] tipc: Started in network mode [ 255.483929][T11237] tipc: Node identity 7f000001, cluster identity 4711 [ 255.498509][T11237] tipc: New replicast peer: 10.1.1.1 [ 255.508299][T11237] tipc: Enabled bearer , priority 10 [ 255.558530][T10995] veth1_vlan: entered promiscuous mode [ 255.918660][ T11] hsr_slave_0: left promiscuous mode [ 255.931877][ T11] hsr_slave_1: left promiscuous mode [ 255.945300][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.953080][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.967764][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.975766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.004101][ T11] veth1_macvtap: left promiscuous mode [ 256.010200][ T11] veth0_macvtap: left promiscuous mode [ 256.015771][ T11] veth1_vlan: left promiscuous mode [ 256.021287][ T11] veth0_vlan: left promiscuous mode [ 256.139636][ T5235] Bluetooth: hci0: command tx timeout [ 256.219966][ T5235] Bluetooth: hci3: command tx timeout [ 256.503018][ T11] team0 (unregistering): Port device team_slave_1 removed [ 256.553628][ T11] team0 (unregistering): Port device team_slave_0 removed [ 256.619741][ T5315] tipc: Node number set to 2130706433 [ 256.700470][ T30] INFO: task udevd:5234 blocked for more than 143 seconds. [ 256.707813][ T30] Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 256.716197][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.726701][ T30] task:udevd state:D stack:21632 pid:5234 tgid:5234 ppid:4684 flags:0x00004002 [ 256.737618][ T30] Call Trace: [ 256.740941][ T30] [ 256.743874][ T30] __schedule+0x1800/0x4a60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.748385][ T30] ? __pfx___schedule+0x10/0x10 [ 256.753508][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.758561][ T30] ? __lock_acquire+0x137a/0x2040 [ 256.763704][ T30] ? schedule+0x90/0x320 [ 256.767966][ T30] schedule+0x14b/0x320 [ 256.806287][ T30] schedule_timeout+0xb0/0x310 [ 256.831651][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 256.837114][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.843898][ T30] ? wait_for_completion+0x2fe/0x620 [ 256.849233][ T30] ? wait_for_completion+0x2fe/0x620 [ 256.854853][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.860286][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 256.865616][ T30] ? wait_for_completion+0x2fe/0x620 [ 256.871728][ T30] wait_for_completion+0x355/0x620 [ 256.876892][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 256.882592][ T30] ? flush_workqueue_prep_pwqs+0x45c/0x4c0 [ 256.888493][ T30] ? check_flush_dependency+0xb2/0x390 [ 256.894068][ T30] __flush_workqueue+0x7d6/0x1710 [ 256.899169][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 256.904660][ T30] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 256.910777][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 256.916254][ T30] nbd_disconnect_and_put+0xaa/0x250 [ 256.921561][ T30] ? __pfx_nbd_release+0x10/0x10 [ 256.926531][ T30] nbd_release+0x103/0x130 [ 256.931338][ T30] bdev_release+0x5e3/0x700 [ 256.935881][ T30] blkdev_release+0x15/0x20 [ 256.940913][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 256.946110][ T30] __fput+0x24a/0x8a0 [ 256.950140][ T30] __x64_sys_close+0x7f/0x110 [ 256.954837][ T30] do_syscall_64+0xf3/0x230 [ 256.959960][ T30] ? clear_bhb_loop+0x35/0x90 [ 256.964667][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.970856][ T30] RIP: 0033:0x7fa23cd170a8 [ 256.975291][ T30] RSP: 002b:00007ffcc15cb988 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 256.983871][ T30] RAX: ffffffffffffffda RBX: 00007fa23d1d8ae0 RCX: 00007fa23cd170a8 [ 256.991995][ T30] RDX: 0000000003938700 RSI: 000000000aba9500 RDI: 0000000000000008 [ 257.001570][ T30] RBP: 0000558589a60e10 R08: 0000000000000001 R09: 90847c93e0c9c272 [ 257.009861][ T30] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000002 [ 257.018109][ T30] R13: 0000558589a48a90 R14: 0000000000000008 R15: 0000558589a3f910 [ 257.026309][ T30] [ 257.029653][ T30] [ 257.029653][ T30] Showing all locks held in the system: [ 257.046145][ T30] 4 locks held by kworker/u8:0/11: [ 257.051705][ T30] 4 locks held by kworker/1:0/25: [ 257.056761][ T30] #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 257.067123][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 257.078769][ T30] #2: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xfd/0x280 [ 257.090440][ T30] #3: ffffffff9a5f47e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 257.100981][ T30] 1 lock held by khungtaskd/30: [ 257.105835][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 257.117211][ T30] 3 locks held by kworker/u8:6/1098: [ 257.122593][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 257.134445][ T30] #1: ffffc90003e0fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 257.145729][ T30] #2: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 257.154878][ T30] 3 locks held by kworker/u8:7/2962: [ 257.161248][ T30] #0: ffff88802fa6b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 257.173098][ T30] #1: ffffc9000978fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 257.186824][ T30] #2: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 257.196462][ T30] 1 lock held by dhcpcd/4898: [ 257.201234][ T30] #0: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 257.210565][ T30] 2 locks held by getty/4980: [ 257.215276][ T30] #0: ffff8880305550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 257.225510][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 257.236003][ T30] 2 locks held by kworker/u9:5/5238: [ 257.241720][ T30] #0: ffff888025e74948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 257.253060][ T30] #1: ffffc90003a17d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 257.266693][ T30] 2 locks held by udevd/5234: [ 257.272645][ T30] #0: ffff888025ddc4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 257.282587][ T30] #1: ffff888025e70998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_disconnect_and_put+0x34/0x250 [ 257.293302][ T30] 1 lock held by syz-executor/10995: [ 257.298729][ T30] #0: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.308197][ T30] 1 lock held by syz-executor/10997: [ 257.313570][ T30] #0: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 257.322750][ T30] 1 lock held by syz-executor/11154: [ 257.328042][ T30] #0: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.338351][ T30] 2 locks held by syz-executor/11216: [ 257.344570][ T30] #0: ffffffff8fc7ee50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 257.354319][ T30] #1: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 257.363900][ T30] 2 locks held by syz.3.1287/11245: [ 257.369078][ T30] #0: ffffffff8fcf1170 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 257.377395][ T30] #1: ffffffff8fc8ba08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 257.387249][ T30] [ 257.392280][ T30] ============================================= [ 257.392280][ T30] [ 257.400876][ T30] NMI backtrace for cpu 1 [ 257.405257][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 257.415775][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.425933][ T30] Call Trace: [ 257.429238][ T30] [ 257.432159][ T30] dump_stack_lvl+0x241/0x360 [ 257.436829][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.442041][ T30] ? __pfx__printk+0x10/0x10 [ 257.446638][ T30] ? vprintk_emit+0x667/0x7c0 [ 257.451319][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 257.456344][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 257.461287][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 257.466750][ T30] ? _printk+0xd5/0x120 [ 257.470900][ T30] ? __pfx__printk+0x10/0x10 [ 257.475480][ T30] ? __wake_up_klogd+0xcc/0x110 [ 257.480412][ T30] ? __pfx__printk+0x10/0x10 [ 257.484995][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 257.490014][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 257.495986][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 257.501961][ T30] watchdog+0xff4/0x1040 [ 257.506203][ T30] ? watchdog+0x1ea/0x1040 [ 257.510622][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.515477][ T30] kthread+0x2f0/0x390 [ 257.519552][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.524226][ T30] ? __pfx_kthread+0x10/0x10 [ 257.528812][ T30] ret_from_fork+0x4b/0x80 [ 257.533225][ T30] ? __pfx_kthread+0x10/0x10 [ 257.537809][ T30] ret_from_fork_asm+0x1a/0x30 [ 257.542582][ T30] [ 257.546438][ T30] Sending NMI from CPU 1 to CPUs 0: [ 257.551911][ C0] NMI backtrace for cpu 0 [ 257.551925][ C0] CPU: 0 UID: 0 PID: 7450 Comm: kworker/u8:8 Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 257.551944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.551954][ C0] Workqueue: bat_events batadv_nc_worker [ 257.551979][ C0] RIP: 0010:lock_acquire+0xdc/0x550 [ 257.552000][ C0] Code: 08 0f 83 f4 02 00 00 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 28 6c 18 90 be 08 00 00 00 e8 0c 0d 8b 00 48 0f a3 1d 9c 9f a8 0e <73> 16 e8 cd f5 09 00 84 c0 75 0d 80 3d c5 6b 92 0e 00 0f 84 f9 02 [ 257.552014][ C0] RSP: 0018:ffffc900034079e0 EFLAGS: 00000257 [ 257.552026][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816fcc84 [ 257.552038][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90186c28 [ 257.552048][ C0] RBP: ffffc90003407b40 R08: ffffffff90186c2f R09: 1ffffffff2030d85 [ 257.552059][ C0] R10: dffffc0000000000 R11: fffffbfff2030d86 R12: 1ffff92000680f44 [ 257.552071][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 257.552083][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 257.552101][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.552113][ C0] CR2: 0000000000000000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 257.552126][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.552136][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.552146][ C0] Call Trace: [ 257.552152][ C0] [ 257.552160][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 257.552179][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 257.552199][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 257.552217][ C0] ? nmi_handle+0x2a/0x5a0 [ 257.552240][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 257.552258][ C0] ? nmi_handle+0x14f/0x5a0 [ 257.552272][ C0] ? nmi_handle+0x2a/0x5a0 [ 257.552288][ C0] ? lock_acquire+0xdc/0x550 [ 257.552305][ C0] ? default_do_nmi+0x63/0x160 [ 257.552324][ C0] ? exc_nmi+0x123/0x1f0 [ 257.552341][ C0] ? end_repeat_nmi+0xf/0x53 [ 257.552363][ C0] ? lock_acquire+0xd4/0x550 [ 257.552382][ C0] ? lock_acquire+0xdc/0x550 [ 257.552400][ C0] ? lock_acquire+0xdc/0x550 [ 257.552419][ C0] ? lock_acquire+0xdc/0x550 [ 257.552437][ C0] [ 257.552442][ C0] [ 257.552451][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 257.552471][ C0] ? batadv_nc_worker+0xcb/0x610 [ 257.552490][ C0] ? __pfx_lock_release+0x10/0x10 [ 257.552510][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.552533][ C0] batadv_nc_worker+0xec/0x610 [ 257.552551][ C0] ? batadv_nc_worker+0xcb/0x610 [ 257.552570][ C0] ? batadv_nc_worker+0xcb/0x610 [ 257.552590][ C0] ? process_scheduled_works+0x945/0x1830 [ 257.552609][ C0] process_scheduled_works+0xa2c/0x1830 [ 257.552642][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.552666][ C0] ? assign_work+0x364/0x3d0 [ 257.552686][ C0] worker_thread+0x86d/0xd10 [ 257.552709][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 257.552732][ C0] ? __kthread_parkme+0x169/0x1d0 [ 257.552752][ C0] ? __pfx_worker_thread+0x10/0x10 [ 257.552769][ C0] kthread+0x2f0/0x390 [ 257.552789][ C0] ? __pfx_worker_thread+0x10/0x10 [ 257.552805][ C0] ? __pfx_kthread+0x10/0x10 [ 257.552825][ C0] ret_from_fork+0x4b/0x80 [ 257.552843][ C0] ? __pfx_kthread+0x10/0x10 [ 257.552862][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.552889][ C0] [ 257.555128][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 257.893420][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00193-g4963d2343af8 #0 [ 257.903919][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.913968][ T30] Call Trace: [ 257.917238][ T30] [ 257.920163][ T30] dump_stack_lvl+0x241/0x360 [ 257.924837][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.930022][ T30] ? __pfx__printk+0x10/0x10 [ 257.934601][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.940581][ T30] ? vscnprintf+0x5d/0x90 [ 257.944901][ T30] panic+0x349/0x860 [ 257.948783][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 257.954939][ T30] ? __pfx_panic+0x10/0x10 [ 257.959352][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 257.964725][ T30] ? __irq_work_queue_local+0x137/0x410 [ 257.970264][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 257.975626][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 257.981770][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 257.987912][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 257.994057][ T30] watchdog+0x1033/0x1040 [ 257.998379][ T30] ? watchdog+0x1ea/0x1040 [ 258.002793][ T30] ? __pfx_watchdog+0x10/0x10 [ 258.007461][ T30] kthread+0x2f0/0x390 [ 258.011527][ T30] ? __pfx_watchdog+0x10/0x10 [ 258.016195][ T30] ? __pfx_kthread+0x10/0x10 [ 258.020777][ T30] ret_from_fork+0x4b/0x80 [ 258.025186][ T30] ? __pfx_kthread+0x10/0x10 [ 258.029852][ T30] ret_from_fork_asm+0x1a/0x30 [ 258.034628][ T30] [ 258.037753][ T30] Kernel Offset: disabled [ 258.042066][ T30] Rebooting in 86400 seconds..