last executing test programs: 1m20.764974611s ago: executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001780)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x55d2}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000680)={0x0, 'veth0_to_team\x00', {}, 0x23ff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0x40a8}, {}, {0xffffffffffffffff, 0xbc66a0fa5b6f9da4}, {r1, 0x8201}, {r3, 0x80}, {0xffffffffffffffff, 0x18ec}], 0x6, 0x0, &(0x7f00000007c0), 0x8) r4 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x52}}, {{&(0x7f0000001c00)=@file={0x45b92ccace97ec5a, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{0x0}, {&(0x7f0000002000)="44817632cbe6fe8b1046b531b937e6baca48a945d9b229388d9d5e652571ad5a4b7d96344958a8", 0x27}, {&(0x7f00000020c0)}], 0x3, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0xb8, 0x1}}], 0x2, 0x240000c1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() 1m12.070948104s ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) ppoll(&(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRESHEX=r1, @ANYBLOB="00800000005b2729425337f53f0000000000c5c0871871eaa5b68b3ec5f33db04c64e7cf2253bcfc44fdc12efd097e5f8f0b4b1a8a76725e799c5868881f3cd3b6105c97e107c1b36851c23ac635ec4b93b82d15e6eb9d4308cdb24e07839dd70cd51c3c2d97404ada021c98dfc6d5d91403bbbfb16e3476ac45a32d008916d209ba08ca510006f501407077d7d11e9b"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x8044) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x7d, &(0x7f0000000380)={r6}, 0x8) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0x0}}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="1780c20000e9a9aaaaaaaaaa8100000086dd60b3388300103a0020010000000000000000000000000002fe8000000000000000000000000000aa"], 0x0) 1m11.142009356s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x36, 0x0, &(0x7f0000000240)="e02742e8680d85ff9782762f86dddb67ae91e14f597f30e9fd6151c67cdd778313a596b87a391f0cd6be8a2892fa106faeff95257561", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="14008000aec45b2f09b3457c9e44e8c49e234d9f02136e7ee7abdef82059e4ae3ce3bf92e47db7505fe92694bb38beb882a8baa1f354766178f39f2db7409c673ef5d73e864ab834b9583a38ec78ed6a04ddccf045e721325d834ea63f3c1c7f667a612ff5a70df3e65bdcaaf5770c4b", @ANYRES16=r4, @ANYBLOB="270200000000000000001f000000"], 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0903000000200000020060"], 0xfce) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='scsi_dispatch_cmd_start\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x2c, 0x7f}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r7, &(0x7f00000002c0), 0x0, 0x20000040) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff4f6f130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005907350000000000c1"], 0xc4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmmsg$unix(r11, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1m10.548966949s ago: executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x141, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 1m10.494704025s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x2030000000000008) connect$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 1m9.600668206s ago: executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)={0x24, r8, 0xbc12ed7e38218f1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) socket$inet6(0xa, 0x3, 0xff) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)={0x24, r8, 0xbc12ed7e38218f1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) 1m8.597345676s ago: executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001780)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x55d2}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000680)={0x0, 'veth0_to_team\x00', {}, 0x23ff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0x40a8}, {}, {0xffffffffffffffff, 0xbc66a0fa5b6f9da4}, {r1, 0x8201}, {r3, 0x80}, {0xffffffffffffffff, 0x18ec}], 0x6, 0x0, &(0x7f00000007c0), 0x8) r4 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x52}}, {{&(0x7f0000001c00)=@file={0x45b92ccace97ec5a, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{0x0}, {&(0x7f0000002000)="44817632cbe6fe8b1046b531b937e6baca48a945d9b229388d9d5e652571ad5a4b7d96344958a8", 0x27}, {&(0x7f00000020c0)}], 0x3, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0xb8, 0x1}}], 0x2, 0x240000c1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() 58.281158846s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/11]) 57.370481407s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="00e10f454afc601b464662218e59ed2c7bb9a3206c6469e8440c9a43e14fcf"], 0x230}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x22020400) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @broadcast}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0xfffffffe, r7}) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130076, r5}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x15, 0x3b, 0x8001, 0x2, 0x1004, 0xffffffffffffffff, 0x4, '\x00', r5, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000004, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r10}, 0x10) (async) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 57.313023805s ago: executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001780)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x55d2}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000680)={0x0, 'veth0_to_team\x00', {}, 0x23ff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0x40a8}, {}, {0xffffffffffffffff, 0xbc66a0fa5b6f9da4}, {r1, 0x8201}, {r3, 0x80}, {0xffffffffffffffff, 0x18ec}], 0x6, 0x0, &(0x7f00000007c0), 0x8) r4 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x52}}, {{&(0x7f0000001c00)=@file={0x45b92ccace97ec5a, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{0x0}, {&(0x7f0000002000)="44817632cbe6fe8b1046b531b937e6baca48a945d9b229388d9d5e652571ad5a4b7d96344958a8", 0x27}, {&(0x7f00000020c0)}], 0x3, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0xb8, 0x1}}], 0x2, 0x240000c1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() 57.208498385s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x0, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 57.123448517s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x3}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x5, 0x36, {{0x1b, 0x4, 0x1, 0x17, 0x6c, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @remote, {[@generic={0x83, 0xb, "bdb1051b7258d2fd4d"}, @end, @noop, @rr={0x7, 0x27, 0x14, [@empty, @multicast1, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @dev={0xac, 0x14, 0x14, 0x37}]}, @generic={0x86, 0x2}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @loopback]}]}}}}}) pipe(&(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x6, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3650}]}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000003c0)="240000001e005f0414fffffffffffff804000000b80000000000000006000d000d000000", 0x24) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x22) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x20, 0xbc3, 0xcdbd}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x3, 0x8}, 0xc) 56.188968713s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async, rerun: 32) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000180)) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) (async) r3 = socket(0x0, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006f80)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1}}], 0x1, 0x0) (async) socket$kcm(0x10, 0x0, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) r6 = accept4(r5, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r7}, 0x14) (async, rerun: 32) close(r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x32, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x0, 0x300) 51.450316176s ago: executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001780)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x55d2}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000680)={0x0, 'veth0_to_team\x00', {}, 0x23ff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0x40a8}, {}, {0xffffffffffffffff, 0xbc66a0fa5b6f9da4}, {r1, 0x8201}, {r3, 0x80}, {0xffffffffffffffff, 0x18ec}], 0x6, 0x0, &(0x7f00000007c0), 0x8) r4 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x52}}, {{&(0x7f0000001c00)=@file={0x45b92ccace97ec5a, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{0x0}, {&(0x7f0000002000)="44817632cbe6fe8b1046b531b937e6baca48a945d9b229388d9d5e652571ad5a4b7d96344958a8", 0x27}, {&(0x7f00000020c0)}], 0x3, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0xb8, 0x1}}], 0x2, 0x240000c1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() 51.159860406s ago: executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080)=0x101, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pipe(&(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="143f0000", @ANYRES16=r6, @ANYBLOB="010400"/14], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='f2fs_iostat\x00', r7}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{}, {0x0, 0x0, {}, {0x1}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x140) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$unix(r8, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x164}}, 0x0) r9 = socket(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000240)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000500e40000000000060014010000000006001200000000000a000600ffffffffffff00001c001180040004000400040004000600040001000400020004000500060014010000000006003600000000000500c20000f4ff00"], 0x8}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) 40.354339485s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async, rerun: 32) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000180)) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) (async) r3 = socket(0x0, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006f80)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1}}], 0x1, 0x0) (async) socket$kcm(0x10, 0x0, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) r6 = accept4(r5, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r7}, 0x14) (async, rerun: 32) close(r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x32, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x0, 0x300) 39.814411508s ago: executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080)=0x101, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pipe(&(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="143f0000", @ANYRES16=r6, @ANYBLOB="010400"/14], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='f2fs_iostat\x00', r7}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{}, {0x0, 0x0, {}, {0x1}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x140) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$unix(r8, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x164}}, 0x0) r9 = socket(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000240)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000500e40000000000060014010000000006001200000000000a000600ffffffffffff00001c001180040004000400040004000600040001000400020004000500060014010000000006003600000000000500c20000f4ff00"], 0x8}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) 39.562182877s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x4, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0x40}, {0x6}, {0x5, 0x7, 0x3, 0xa7}, {0x3, 0x99, 0x1, 0x7fffffff}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000d40)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r5, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000e1015f2fa6a2c9055c2c1cf7001000010400000000000000800000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020002000000140003007866726d3000"/56], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000000200)={0x0, 0xfffffffffffffdcd}, 0x1, 0x0, 0x0, 0x20004014}, 0x20bea14a1bd9b76) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 34.612208762s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x2030000000000008) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 34.507121902s ago: executing program 3: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000200)="12", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2a, 0x2, 0xd156) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffbd, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100000040000000000000000f0630000", @ANYRES32=0x0, @ANYBLOB="000202000000000008000f0005000000050021008000000008000a00", @ANYRES32=r6, @ANYRESHEX=r9], 0x50}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4efe0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x6d}, 0x40012020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4bb85498de04c5eccaeddcc5f20bd13d3664ab3d93c3e2b45ca57c543d8cc2765ffaf8", @ANYRES8=r9, @ANYRES32=r10, @ANYRES32=r5, @ANYRESOCT=r7, @ANYRESOCT], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x1b, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 33.565384303s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/21]) 32.617729419s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x802) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 31.706148503s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003180)=""/4107, 0x100b}], 0x1}}], 0x1, 0x0, 0x0) getsockname$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61156c00000000006113500000000000bf5000000000000016000000080000003d03010000000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.233459765s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000be8ff00001142"], 0x0) 31.081844805s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000340)="774a9270689360424f05a023b1da81a6e96958669890f56bd5b5ac3b4e5ca44518b92e02a1578be39bb28382f22c4b96dd49ab5d11b7491444199bd918284afdfc8caa906c7b3b3ec571cbc8202b74bd636617396d9a42f4fe3d05e522cafca760eda1141112efdfa767dcd4e28be0f130548d2a02b69a32cc5d5efa04637388b682a8ceedadee50a49a29a310169f0f16f92fc5fcb8e4978d04", 0x9a, 0x40000, &(0x7f00000000c0)={0xa, 0x0, 0x3ee, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x1}, 0x20) 31.018955738s ago: executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socket$kcm(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), 0x0}, 0x20) close(r0) 30.929393377s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x51, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"31f81f6713061788aea78d4bf7bf3e"}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 30.020800932s ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1}}]}}}]}, 0x6c}}, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) (async) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}, @dstopts_2292={{0x18}}], 0x40, 0x7ffffff7}}], 0x1, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x70, "c7f188e061193f9e8c3b23ef44fac720cf23cd8e83a45d636be63352a901ed40cf70f0a276a9d658c8895307b760f4c37a3e205081a6b9ff3d3b52eccb31e7fb082f93af808cfc064d383ef16f5ecc680ae275310903904d2025e27b92ac6917c3a334d7b6c03794816e4d43e84dd2d3"}, &(0x7f00000000c0)=0x94) (async) listen(r6, 0x0) syz_emit_ethernet(0x96, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c210000086dd6008e50000600600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2000090780000080a00000000000000000202030300001000f2daa80000000000000008000005123a76ffed0000000000000000000000001e00001e0c800000000000000000000000003d4efbb782c5d1db53d67168e56c35f9c292343a7c9ebae8a90c2b2199afb6ad0bb3722e31e8c3eaa5075d6049b3185ead293da1d389412536632608722911f479550c8a331b516aa3e3337372d23c35fcf583"], 0x0) write$ppp(r0, &(0x7f0000000480)="23de", 0x2) 1.667525652s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x802) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 0s ago: executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00fff90001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="01000000400c00"/16, @ANYRES64=0x77359400, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000000000000046134aa76194a11fed3f28cf3560b0b18faa5c3390f73acfcdea5df7b85c1cff886e5e84f7c221a7d232b8bfe2e11af8258fbd6e9c7ec775ab993380334dd7b57c9f"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r2, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r1, @ANYRES64=0x2710, @ANYRESDEC=r3], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000640)=@sack_info={r7, 0x4, 0x4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[@ANYBLOB="1c00000007797a32001900"/28], 0x1c}}, 0x20000800) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100000, r10}, 0x38) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r9}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 4][ T5379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.723687][ T5379] veth0_vlan: entered promiscuous mode [ 102.789283][ T5379] veth1_vlan: entered promiscuous mode [ 103.090732][ T5379] veth0_macvtap: entered promiscuous mode [ 103.149416][ T5379] veth1_macvtap: entered promiscuous mode [ 103.321128][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.341180][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.624606][ T5901] lo speed is unknown, defaulting to 1000 [ 103.649765][ T5901] lo speed is unknown, defaulting to 1000 [ 103.652556][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.710294][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.732052][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.755873][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.797071][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.832188][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.848640][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.865702][ T5901] lo speed is unknown, defaulting to 1000 [ 104.105380][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.155883][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.175892][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.190512][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.247903][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.273950][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.302274][ T5923] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.314984][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.327842][ T5923] caif0 speed is unknown, defaulting to 1000 [ 104.345110][ T5379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.362184][ T5379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.380284][ T5379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.399537][ T5379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.440962][ T5923] caif0 speed is unknown, defaulting to 1000 [ 104.584674][ T5923] caif0 speed is unknown, defaulting to 1000 [ 104.780273][ T5901] infiniband syz0: set down [ 104.804519][ T5901] infiniband syz0: added lo [ 104.822946][ T5901] syz0: rxe_create_cq: returned err = -12 [ 104.845436][ T5901] infiniband syz0: Couldn't create ib_mad CQ [ 104.866295][ T5901] infiniband syz0: Couldn't open port 1 [ 105.027390][ T5901] RDS/IB: syz0: added [ 105.057870][ T5901] smc: adding ib device syz0 with port count 1 [ 105.069432][ T5901] smc: ib device syz0 port 1 has pnetid [ 105.082233][ T5930] team0 (unregistering): Port device team_slave_0 removed [ 105.136842][ T5930] team0 (unregistering): Port device team_slave_1 removed [ 105.207520][ T57] lo speed is unknown, defaulting to 1000 [ 105.292084][ T5276] lo speed is unknown, defaulting to 1000 [ 105.364154][ T5901] lo speed is unknown, defaulting to 1000 [ 105.520578][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.555865][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.697671][ T5961] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.746670][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.768578][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.987594][ T5901] lo speed is unknown, defaulting to 1000 [ 106.034725][ T5970] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 106.194354][ T5970] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 106.429057][ T5981] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.444359][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.476608][ T5901] lo speed is unknown, defaulting to 1000 [ 106.910026][ T5901] lo speed is unknown, defaulting to 1000 [ 107.076328][ T6004] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 107.133778][ T6005] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 107.261913][ T5901] lo speed is unknown, defaulting to 1000 [ 107.701159][ T5923] infiniband syz1: set down [ 107.705985][ T786] caif0 speed is unknown, defaulting to 1000 [ 107.717213][ T5923] infiniband syz1: added caif0 [ 107.761940][ T5923] syz1: rxe_create_cq: returned err = -12 [ 107.806029][ T5923] infiniband syz1: Couldn't create ib_mad CQ [ 107.812370][ T5923] infiniband syz1: Couldn't open port 1 [ 107.938477][ T5923] RDS/IB: syz1: added [ 107.942610][ T5923] smc: adding ib device syz1 with port count 1 [ 107.996364][ T5923] smc: ib device syz1 port 1 has pnetid [ 108.096455][ T57] caif0 speed is unknown, defaulting to 1000 [ 108.114664][ T5923] caif0 speed is unknown, defaulting to 1000 [ 108.339532][ T6039] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 108.588785][ T6045] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 108.639830][ T5923] caif0 speed is unknown, defaulting to 1000 [ 108.951145][ T6067] dccp_invalid_packet: P.Data Offset(144) too large [ 109.145351][ T5923] caif0 speed is unknown, defaulting to 1000 [ 109.509779][ T6084] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 109.643882][ T5923] caif0 speed is unknown, defaulting to 1000 [ 109.947394][ T6101] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.980616][ T6101] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.349133][ T5923] caif0 speed is unknown, defaulting to 1000 [ 110.718144][ T6134] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.746695][ T6134] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.749189][ T6135] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 110.799314][ T6135] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.027668][ T6141] sctp: [Deprecated]: syz-executor.0 (pid 6141) Use of int in maxseg socket option. [ 111.027668][ T6141] Use struct sctp_assoc_value instead [ 111.218321][ T6152] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 111.252346][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.297931][ T6152] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.402711][ T6167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.843831][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.907392][ T6183] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.939772][ T6183] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.981517][ T6186] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.228369][ T5129] Bluetooth: hci2: command 0x0405 tx timeout [ 112.336429][ T6204] sctp: [Deprecated]: syz-executor.0 (pid 6204) Use of int in maxseg socket option. [ 112.336429][ T6204] Use struct sctp_assoc_value instead [ 112.664982][ T6221] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 112.716488][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.867189][ T6221] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 112.883725][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.232578][ T6247] No such timeout policy "syz0" [ 113.300096][ T29] audit: type=1804 audit(1718879330.183:2): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 113.706497][ T6268] IPv6: NLM_F_REPLACE set, but no existing node found! [ 114.648294][ T6311] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 115.180107][ T6330] veth0_vlan: entered allmulticast mode [ 115.757147][ T6345] __nla_validate_parse: 5 callbacks suppressed [ 115.757173][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.292898][ T6373] dccp_invalid_packet: P.Data Offset(0) too small [ 116.503517][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.662303][ T6393] team0: Port device virt_wifi0 added [ 116.990983][ T6409] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 117.240171][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.421743][ T6427] team0: Port device virt_wifi0 added [ 118.991862][ T6476] lo speed is unknown, defaulting to 1000 [ 119.025845][ T5129] Bluetooth: hci2: command 0x0405 tx timeout [ 119.192008][ T6454] syz-executor.1 (6454) used greatest stack depth: 18064 bytes left [ 119.681863][ T6497] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 119.883152][ T6476] caif0 speed is unknown, defaulting to 1000 [ 119.951236][ T6504] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.036563][ T6504] gretap0: entered promiscuous mode [ 120.647283][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.052595][ T6531] x_tables: duplicate underflow at hook 2 [ 121.064728][ T6531] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 122.248781][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.764901][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.885957][ T6598] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.036855][ T6607] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 123.065323][ T6607] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 123.074909][ T6607] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 123.979127][ T6639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.071038][ T6647] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 124.096684][ T6647] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.119668][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.590754][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.887289][ T6679] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 124.895879][ T6679] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 124.904248][ T6679] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 125.243092][ T6694] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 125.246381][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.272337][ T6694] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.363348][ T6699] pim6reg: entered allmulticast mode [ 125.397377][ T6701] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.428496][ T29] audit: type=1800 audit(1718879342.293:3): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 125.461033][ T29] audit: type=1804 audit(1718879342.313:4): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2382652256/syzkaller.kifCqx/79/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 125.530196][ T29] audit: type=1804 audit(1718879342.313:5): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2382652256/syzkaller.kifCqx/79/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 125.740155][ T6723] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 126.412178][ T6745] pim6reg: entered allmulticast mode [ 126.621661][ T6753] macvlan1: entered promiscuous mode [ 126.628099][ T6753] macvlan1: entered allmulticast mode [ 126.633650][ T6753] veth1_vlan: entered allmulticast mode [ 126.825962][ T6761] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 127.235957][ T6773] gretap0: entered promiscuous mode [ 127.241781][ T6776] validate_nla: 2 callbacks suppressed [ 127.241800][ T6776] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 127.409110][ T6786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.457278][ T6788] __nla_validate_parse: 4 callbacks suppressed [ 127.457295][ T6788] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.474552][ T6788] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 127.599029][ T6793] lo speed is unknown, defaulting to 1000 [ 129.786360][ T6793] caif0 speed is unknown, defaulting to 1000 [ 129.814883][ T6810] pim6reg: entered allmulticast mode [ 130.189772][ T6839] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 130.798125][ T5176] IPVS: starting estimator thread 0... [ 130.916618][ T6858] IPVS: using max 16 ests per chain, 38400 per kthread [ 131.430881][ T6874] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.850563][ T6901] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 131.868224][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.937362][ T6901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.978134][ T6900] tipc: Started in network mode [ 131.985992][ T6900] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 132.007623][ T6900] tipc: Enabled bearer , priority 10 [ 132.769791][ T6953] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 132.941219][ T6968] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.970974][ T6958] tipc: Enabling of bearer rejected, already enabled [ 133.129317][ T786] tipc: Node number set to 4269801642 [ 133.351689][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.365354][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.563621][ T7002] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 133.582031][ T7002] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 133.662981][ T7005] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 133.771222][ T7005] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 134.272436][ T7032] bridge0: port 3(team0) entered blocking state [ 134.297625][ T7032] bridge0: port 3(team0) entered disabled state [ 134.306571][ T7032] team0: entered allmulticast mode [ 134.311975][ T7032] team_slave_0: entered allmulticast mode [ 134.323550][ T7034] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 134.327239][ T7032] team_slave_1: entered allmulticast mode [ 134.348999][ T7032] team0: entered promiscuous mode [ 134.354115][ T7032] team_slave_0: entered promiscuous mode [ 134.365387][ T7032] team_slave_1: entered promiscuous mode [ 134.374581][ T7032] bridge0: port 3(team0) entered blocking state [ 134.381559][ T7032] bridge0: port 3(team0) entered forwarding state [ 134.404101][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.447790][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.681630][ T7051] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 134.721909][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.750588][ T7051] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 134.781411][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.836887][ T7058] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.870873][ T7059] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 135.000622][ T7059] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 135.186377][ T5129] Bluetooth: hci2: command 0x0405 tx timeout [ 135.732275][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.410373][ T7142] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.526179][ T7145] Bluetooth: MGMT ver 1.22 [ 137.136865][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.144627][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.214802][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.222332][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.231368][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.238639][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.247917][ T7174] bridge0: entered promiscuous mode [ 137.253199][ T7174] bridge0: entered allmulticast mode [ 137.408555][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.444124][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.027951][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.036301][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.087852][ T7223] bridge0: left promiscuous mode [ 138.093632][ T7223] bridge0: left allmulticast mode [ 138.150281][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.174377][ T7229] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 138.201151][ T7229] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.236262][ T7229] IPv6: Can't replace route, no match found [ 138.254711][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.262174][ T7238] openvswitch: netlink: Message has 4 unknown bytes. [ 138.264574][ T7240] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.294386][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.301746][ T7228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.309408][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.316685][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.356193][ T7228] bridge0: entered promiscuous mode [ 138.361742][ T7228] bridge0: entered allmulticast mode [ 138.378773][ T7233] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 138.454556][ T7234] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 138.545872][ T5129] Bluetooth: hci2: command 0x0405 tx timeout [ 138.555278][ T5135] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 138.640157][ T7253] ipt_ECN: cannot use operation on non-tcp rule [ 139.113096][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.170545][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.479731][ T7296] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.492858][ T7291] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 139.503148][ T7291] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.517205][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.610046][ T7305] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 139.779482][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.836670][ T7313] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 139.911124][ T7313] : entered promiscuous mode [ 139.949769][ T7319] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.985116][ T7319] bridge_slave_1: left allmulticast mode [ 140.005158][ T7319] bridge_slave_1: left promiscuous mode [ 140.022068][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.125424][ T7319] bridge_slave_0: left allmulticast mode [ 140.150956][ T7319] bridge_slave_0: left promiscuous mode [ 140.172510][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.678109][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.706950][ T7336] bond_slave_0: entered promiscuous mode [ 140.713060][ T7336] bond_slave_1: entered promiscuous mode [ 140.729985][ T7336] macvtap1: entered promiscuous mode [ 140.735456][ T7336] bond0: entered promiscuous mode [ 140.762004][ T7336] macvtap1: entered allmulticast mode [ 140.772094][ T7336] bond0: entered allmulticast mode [ 140.793419][ T7336] bond_slave_0: entered allmulticast mode [ 140.832077][ T7336] bond_slave_1: entered allmulticast mode [ 140.877471][ T7336] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.916721][ T7346] sch_fq: defrate 0 ignored. [ 140.964943][ T7350] bond0: left allmulticast mode [ 140.970693][ T7350] bond_slave_0: left allmulticast mode [ 140.980853][ T7350] bond_slave_1: left allmulticast mode [ 140.991006][ T7350] bond0: left promiscuous mode [ 141.002159][ T7350] bond_slave_0: left promiscuous mode [ 141.007787][ T7350] bond_slave_1: left promiscuous mode [ 141.020921][ T7350] macvtap1: left promiscuous mode [ 141.042262][ T7350] macvtap1: left allmulticast mode [ 141.523337][ T7391] sch_fq: defrate 0 ignored. [ 141.868883][ T7413] sctp: [Deprecated]: syz-executor.2 (pid 7413) Use of int in max_burst socket option deprecated. [ 141.868883][ T7413] Use struct sctp_assoc_value instead [ 142.369860][ T7431] sch_fq: defrate 0 ignored. [ 142.490494][ T2482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.680722][ T2482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.822010][ T7456] syz-executor.0[7456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.822183][ T7456] syz-executor.0[7456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.892367][ T2482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.053754][ T2482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.240397][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.272902][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.284257][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.308590][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.326879][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.334403][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.735796][ T7486] No such timeout policy "syz0" [ 144.088781][ T2811] tipc: Subscription rejected, illegal request [ 144.106398][ T7503] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 144.125144][ T7503] __nla_validate_parse: 4 callbacks suppressed [ 144.125167][ T7503] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.648132][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.659504][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.678301][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.696135][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.705348][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.713777][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.723070][ T2482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.755311][ T2482] bond_slave_0: left promiscuous mode [ 144.772872][ T2482] bond_slave_0: left allmulticast mode [ 144.798682][ T2482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.816880][ T2482] bond_slave_1: left promiscuous mode [ 144.822512][ T2482] bond_slave_1: left allmulticast mode [ 144.849630][ T2482] bond0 (unregistering): Released all slaves [ 145.021877][ T7510] lo speed is unknown, defaulting to 1000 [ 145.257323][ T7516] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.336268][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.429226][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.442996][ T7510] caif0 speed is unknown, defaulting to 1000 [ 145.594368][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.106874][ T7555] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 146.533476][ T2482] hsr_slave_0: left promiscuous mode [ 146.573155][ T2482] hsr_slave_1: left promiscuous mode [ 146.594716][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.613418][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.623809][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.631716][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.667718][ T2482] veth1_macvtap: left promiscuous mode [ 146.673313][ T2482] veth0_macvtap: left promiscuous mode [ 146.679229][ T2482] veth1_vlan: left promiscuous mode [ 146.787018][ T5135] Bluetooth: hci0: command tx timeout [ 147.075553][ T2482] team0 (unregistering): Port device virt_wifi0 removed [ 147.902014][ T2482] team0 (unregistering): Port device team_slave_1 removed [ 148.027411][ T2482] team0 (unregistering): Port device team_slave_0 removed [ 148.875761][ T5135] Bluetooth: hci0: command tx timeout [ 149.297590][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.531227][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.639105][ T7613] --map-set only usable from mangle table [ 149.652858][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 150.169765][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.182458][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.190078][ T7510] bridge_slave_0: entered allmulticast mode [ 150.207609][ T7510] bridge_slave_0: entered promiscuous mode [ 150.224944][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.236654][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.243973][ T7510] bridge_slave_1: entered allmulticast mode [ 150.264266][ T7510] bridge_slave_1: entered promiscuous mode [ 150.354546][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.374620][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.461675][ T7510] team0: Port device team_slave_0 added [ 150.472638][ T7510] team0: Port device team_slave_1 added [ 150.538484][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.556055][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.594351][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.608027][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.615043][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.643901][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.754447][ T7662] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.864782][ T7510] hsr_slave_0: entered promiscuous mode [ 150.893454][ T7510] hsr_slave_1: entered promiscuous mode [ 150.946422][ T5135] Bluetooth: hci0: command tx timeout [ 151.017390][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.075473][ T7674] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 151.102222][ T7674] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 151.368641][ T7694] tipc: Enabling of bearer rejected, already enabled [ 151.579154][ T7700] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 151.633157][ T7703] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.143568][ T7510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.200566][ T7510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.265115][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.288462][ T7510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.313191][ T7510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.322104][ T7729] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.393403][ T7733] bond_slave_0: entered promiscuous mode [ 152.399318][ T7733] bond_slave_1: entered promiscuous mode [ 152.434944][ T7733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.543870][ T7740] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.745199][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.803139][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.859048][ T7510] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.924043][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.932223][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.972378][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.979684][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.026756][ T5135] Bluetooth: hci0: command tx timeout [ 153.674392][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.062361][ T7794] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 154.085418][ T7794] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.336493][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.484451][ T7510] veth0_vlan: entered promiscuous mode [ 154.522633][ T7510] veth1_vlan: entered promiscuous mode [ 154.641256][ T7510] veth0_macvtap: entered promiscuous mode [ 154.689495][ T7510] veth1_macvtap: entered promiscuous mode [ 154.751730][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.775945][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.806293][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.845848][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.866533][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.893496][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.924303][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.953832][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.965020][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.992241][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.038109][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.070105][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.102080][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.162726][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.208556][ T7510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.231065][ T7510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.252771][ T7510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.270759][ T7510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.331746][ T7841] lo speed is unknown, defaulting to 1000 [ 155.547252][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.561939][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.626802][ T7844] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.700639][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.718122][ T7857] Bluetooth: MGMT ver 1.22 [ 155.722753][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.773402][ T7862] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.228064][ T7877] tipc: Can't bind to reserved service type 1 [ 156.244186][ T7841] caif0 speed is unknown, defaulting to 1000 [ 156.304236][ T7885] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 156.323205][ T7885] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 156.394363][ T7879] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 156.414911][ T7879] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 156.736482][ T7894] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.834698][ T7904] tipc: Started in network mode [ 156.857665][ T7904] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 156.924629][ T7904] tipc: Enabled bearer , priority 10 [ 156.969238][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.312895][ T7930] sctp: [Deprecated]: syz-executor.2 (pid 7930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.312895][ T7930] Use struct sctp_sack_info instead [ 157.442364][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.680129][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.752022][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.837807][ T7938] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 158.017576][ T7938] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 158.036387][ T9] tipc: Node number set to 4269801642 [ 158.158272][ T7953] tipc: Started in network mode [ 158.164285][ T7953] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 158.186093][ T7953] tipc: Enabling of bearer rejected, failed to enable media [ 158.356267][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.389199][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.400854][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.411946][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.430078][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.439520][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.448042][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.549067][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.664934][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.749276][ T7963] lo speed is unknown, defaulting to 1000 [ 159.013353][ T12] bridge_slave_1: left allmulticast mode [ 159.038103][ T12] bridge_slave_1: left promiscuous mode [ 159.044088][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.189037][ T12] bridge_slave_0: left allmulticast mode [ 159.194864][ T12] bridge_slave_0: left promiscuous mode [ 159.216858][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.794115][ T8019] xt_TCPMSS: Only works on TCP SYN packets [ 159.906143][ T5129] Bluetooth: hci2: command 0x0405 tx timeout [ 159.953369][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.965698][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.978412][ T12] bond0 (unregistering): Released all slaves [ 159.993931][ T8002] tipc: Enabling of bearer rejected, already enabled [ 160.001767][ T7963] caif0 speed is unknown, defaulting to 1000 [ 160.182194][ T8023] No such timeout policy "syz0" [ 160.546323][ T5135] Bluetooth: hci0: command tx timeout [ 161.170225][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 161.301531][ T8063] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.418081][ T12] hsr_slave_0: left promiscuous mode [ 161.435477][ T12] hsr_slave_1: left promiscuous mode [ 161.449079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.466679][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.496694][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.504171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.541647][ T12] veth1_macvtap: left promiscuous mode [ 161.548201][ T12] veth0_macvtap: left promiscuous mode [ 161.553930][ T12] veth1_vlan: left promiscuous mode [ 161.559398][ T12] veth0_vlan: left promiscuous mode [ 161.997902][ T5135] Bluetooth: hci2: command 0x0405 tx timeout [ 162.250394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.300482][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.629131][ T5135] Bluetooth: hci0: command tx timeout [ 162.756089][ T8061] tipc: Enabling of bearer rejected, failed to enable media [ 163.025148][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.054001][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.063992][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.082816][ T7963] bridge_slave_0: entered allmulticast mode [ 163.095519][ T7963] bridge_slave_0: entered promiscuous mode [ 163.110786][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.126237][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.148638][ T7963] bridge_slave_1: entered allmulticast mode [ 163.174045][ T7963] bridge_slave_1: entered promiscuous mode [ 163.278392][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.332838][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.585047][ T7963] team0: Port device team_slave_0 added [ 163.607223][ T7963] team0: Port device team_slave_1 added [ 163.667673][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.682403][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.709438][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.725329][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.732783][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.760885][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.892180][ T7963] hsr_slave_0: entered promiscuous mode [ 163.903487][ T7963] hsr_slave_1: entered promiscuous mode [ 163.931324][ T29] audit: type=1804 audit(1718879380.813:6): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3865805407/syzkaller.cVH12b/146/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 163.980318][ T29] audit: type=1804 audit(1718879380.863:7): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3865805407/syzkaller.cVH12b/146/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 164.042865][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.305351][ T8137] ip6tnl1: entered allmulticast mode [ 164.589143][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.618063][ T8155] batadv0: entered promiscuous mode [ 164.641153][ T8155] batadv0: entered allmulticast mode [ 164.709727][ T5135] Bluetooth: hci0: command tx timeout [ 164.895832][ T786] IPVS: starting estimator thread 0... [ 164.903751][ T7963] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.944072][ T7963] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.975039][ T7963] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.009927][ T7963] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.022798][ T8170] IPVS: using max 17 ests per chain, 40800 per kthread [ 165.251858][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.290183][ T8182] tipc: Started in network mode [ 165.305595][ T8182] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 165.337133][ T8182] tipc: Enabled bearer , priority 10 [ 165.384528][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.399461][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.406707][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.467569][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.474758][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.513855][ T8194] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.524594][ T8194] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.827361][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.838543][ T7963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.129206][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.163778][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.454988][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.458114][ T9] tipc: Node number set to 4269801642 [ 166.509249][ T8239] tipc: Enabling of bearer rejected, failed to enable media [ 166.587625][ T7963] veth0_vlan: entered promiscuous mode [ 166.618502][ T7963] veth1_vlan: entered promiscuous mode [ 166.760766][ T7963] veth0_macvtap: entered promiscuous mode [ 166.786153][ T5135] Bluetooth: hci0: command tx timeout [ 166.820112][ T7963] veth1_macvtap: entered promiscuous mode [ 166.916385][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.937860][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.954489][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.981136][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.997027][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.007794][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.020746][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.053825][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.067433][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.088306][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.105421][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.128599][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.161604][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.190830][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.229792][ T7963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.248250][ T7963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.262910][ T7963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.285861][ T7963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.394804][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.412748][ T8271] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 167.484391][ T8279] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 167.507096][ T8279] bond0: (slave bond_slave_0): Releasing backup interface [ 167.570048][ T8281] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 167.632957][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.668857][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.718229][ T8285] tipc: Enabling of bearer rejected, already enabled [ 167.746636][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.755140][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.796408][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.950482][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.964416][ T8296] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.980884][ T8296] gtp0: entered promiscuous mode [ 167.987075][ T8298] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 168.002218][ T8296] gtp0: entered allmulticast mode [ 168.430283][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.530306][ T8319] syzkaller0: entered promiscuous mode [ 168.537614][ T8319] syzkaller0: entered allmulticast mode [ 168.557687][ T8319] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 168.620145][ T8327] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.724768][ T8324] tipc: Enabling of bearer rejected, already enabled [ 168.833423][ T8337] x_tables: ip_tables: ah match: only valid for protocol 51 [ 168.924868][ T8340] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 168.989258][ T8345] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 168.997586][ T8343] ip6tnl0: Master is either lo or non-ether device [ 169.201230][ T8354] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 169.250283][ T8356] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.755476][ T8395] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 170.966889][ T8398] x_tables: duplicate entry at hook 1 [ 170.983516][ T8398] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.261781][ T8400] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 171.947122][ T8427] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 171.966121][ T8428] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 172.204987][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.291910][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.392920][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.520661][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.733755][ T12] bridge_slave_1: left allmulticast mode [ 172.746046][ T12] bridge_slave_1: left promiscuous mode [ 172.758903][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.827620][ T12] bridge_slave_0: left allmulticast mode [ 172.851600][ T12] bridge_slave_0: left promiscuous mode [ 172.877416][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.907284][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.922347][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.930931][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.949086][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.962818][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.972466][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.463467][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.481554][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.493351][ T12] bond0 (unregistering): Released all slaves [ 173.512374][ T8462] batadv_slave_1: entered promiscuous mode [ 173.638919][ T8458] batadv_slave_1: left promiscuous mode [ 173.720123][ T8455] lo speed is unknown, defaulting to 1000 [ 173.906908][ T8486] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.089439][ T8455] caif0 speed is unknown, defaulting to 1000 [ 174.272601][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.291447][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.321257][ T8496] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 174.345114][ T8496] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.375320][ T8496] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 174.384490][ T8496] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 174.416769][ T8496] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.432838][ T8497] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 174.455763][ T8497] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.465248][ T8497] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 174.495844][ T8497] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 174.504001][ T8497] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.878721][ T8505] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.934340][ T12] hsr_slave_0: left promiscuous mode [ 174.943916][ T12] hsr_slave_1: left promiscuous mode [ 174.960645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.970431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.988553][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.005852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.035996][ T5129] Bluetooth: hci0: command tx timeout [ 175.076336][ T12] veth1_macvtap: left promiscuous mode [ 175.081981][ T12] veth0_macvtap: left promiscuous mode [ 175.116354][ T12] veth1_vlan: left promiscuous mode [ 175.129325][ T12] veth0_vlan: left promiscuous mode [ 176.031205][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.091889][ T12] team0 (unregistering): Port device team_slave_0 removed [ 176.735531][ T8513] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.745481][ T8509] lo speed is unknown, defaulting to 1000 [ 176.930017][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.107663][ T5129] Bluetooth: hci0: command tx timeout [ 177.138122][ T8529] bond_slave_0: entered promiscuous mode [ 177.143963][ T8529] bond_slave_1: entered promiscuous mode [ 177.177300][ T8529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.219585][ T8529] bond_slave_0: left promiscuous mode [ 177.225176][ T8529] bond_slave_1: left promiscuous mode [ 177.294472][ T8455] chnl_net:caif_netlink_parms(): no params data found [ 177.436197][ T8509] caif0 speed is unknown, defaulting to 1000 [ 177.617922][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.632490][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.639988][ T8455] bridge_slave_0: entered allmulticast mode [ 177.656994][ T8455] bridge_slave_0: entered promiscuous mode [ 177.681478][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.697450][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.704759][ T8455] bridge_slave_1: entered allmulticast mode [ 177.734552][ T8455] bridge_slave_1: entered promiscuous mode [ 177.858913][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.889069][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.964013][ T8455] team0: Port device team_slave_0 added [ 177.974618][ T8455] team0: Port device team_slave_1 added [ 178.070397][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.083206][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.133851][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.149767][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.165881][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.241234][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.610326][ T8455] hsr_slave_0: entered promiscuous mode [ 178.624525][ T8455] hsr_slave_1: entered promiscuous mode [ 179.186247][ T5129] Bluetooth: hci0: command tx timeout [ 179.278648][ T786] IPVS: starting estimator thread 0... [ 179.376892][ T8563] IPVS: using max 16 ests per chain, 38400 per kthread [ 179.559661][ T8455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.585982][ T8455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.624345][ T8455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.672678][ T8455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.900110][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.971798][ T8455] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.009830][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.017107][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.055677][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.063077][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.064744][ T8582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.549717][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.727044][ T8606] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 181.142456][ T8619] tipc: Enabling of bearer rejected, already enabled [ 181.237598][ T8455] veth0_vlan: entered promiscuous mode [ 181.266008][ T5129] Bluetooth: hci0: command tx timeout [ 181.285191][ T8455] veth1_vlan: entered promiscuous mode [ 181.354695][ T8455] veth0_macvtap: entered promiscuous mode [ 181.368207][ T8455] veth1_macvtap: entered promiscuous mode [ 181.395383][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.406490][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.433545][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.452830][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.464447][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.483811][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.497263][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.523386][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.537237][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.547387][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.558368][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.574372][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.593834][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.606560][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.618419][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.671523][ T8455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.687354][ T8455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.702527][ T8455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.713947][ T8455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.879711][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.895623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.968500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.990543][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.006785][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.055555][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.154791][ T8646] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 182.238335][ T29] audit: type=1804 audit(1718879399.123:8): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2454364679/syzkaller.uvd2Ss/238/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 182.242118][ T8646] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.275189][ T8650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.377171][ T8661] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.562329][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.732742][ T8683] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 182.756484][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.764119][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.796380][ T8683] bridge0: left promiscuous mode [ 182.812045][ T8683] bridge0: left allmulticast mode [ 182.857770][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.865092][ T8683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.872758][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.880207][ T8683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.929765][ T8683] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 183.192714][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.012630][ T8710] tipc: Enabling of bearer rejected, already enabled [ 184.512567][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.114881][ T8765] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.159522][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.164822][ T8765] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.195212][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.207131][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.223867][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.234129][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.243328][ T8773] netlink: 'syz-executor.0': attribute type 291 has an invalid length. [ 185.253620][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.385052][ T8766] lo speed is unknown, defaulting to 1000 [ 185.453318][ T8783] tipc: Enabling of bearer rejected, already enabled [ 185.569850][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.640402][ T8784] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 185.676850][ T8784] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.783544][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.946984][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.998501][ T8766] caif0 speed is unknown, defaulting to 1000 [ 186.260675][ T8819] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 186.401588][ T8821] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 186.457337][ T12] bridge_slave_1: left allmulticast mode [ 186.473373][ T12] bridge_slave_1: left promiscuous mode [ 186.494085][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.535591][ T12] bridge_slave_0: left allmulticast mode [ 186.561391][ T12] bridge_slave_0: left promiscuous mode [ 186.575394][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.014245][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.028736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.050015][ T12] bond0 (unregistering): Released all slaves [ 187.063247][ T8826] __nla_validate_parse: 1 callbacks suppressed [ 187.063264][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.160895][ T8833] tipc: Enabling of bearer rejected, already enabled [ 187.346288][ T5135] Bluetooth: hci0: command tx timeout [ 187.412807][ T8851] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 187.422633][ T8851] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.241194][ T8879] tipc: Enabling of bearer rejected, already enabled [ 188.405356][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 188.490826][ T12] hsr_slave_0: left promiscuous mode [ 188.505148][ T12] hsr_slave_1: left promiscuous mode [ 188.514835][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.525627][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.533814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.543348][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.551759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.591241][ T12] veth1_macvtap: left promiscuous mode [ 188.605236][ T12] veth0_macvtap: left promiscuous mode [ 188.611286][ T12] veth1_vlan: left promiscuous mode [ 188.616968][ T12] veth0_vlan: left promiscuous mode [ 189.426142][ T5135] Bluetooth: hci0: command tx timeout [ 189.508769][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.573791][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.262650][ T8910] ip6tnl2: entered allmulticast mode [ 190.283719][ T8921] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 190.294105][ T8921] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 190.301692][ T8921] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 190.312251][ T8921] bridge0: port 3(netdevsim0) entered disabled state [ 190.338146][ T8921] team0: Port device netdevsim0 added [ 190.344297][ T8934] tipc: Enabling of bearer rejected, already enabled [ 190.503081][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.525567][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.545142][ T8766] bridge_slave_0: entered allmulticast mode [ 190.553813][ T8766] bridge_slave_0: entered promiscuous mode [ 190.569003][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.589944][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.616090][ T8766] bridge_slave_1: entered allmulticast mode [ 190.623616][ T8766] bridge_slave_1: entered promiscuous mode [ 190.705440][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.729718][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.792845][ T8766] team0: Port device team_slave_0 added [ 190.812288][ T8766] team0: Port device team_slave_1 added [ 190.884494][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.892185][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.919957][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.934415][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.949786][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.979039][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.036954][ T8766] hsr_slave_0: entered promiscuous mode [ 191.043575][ T8766] hsr_slave_1: entered promiscuous mode [ 191.055907][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.506494][ T5135] Bluetooth: hci0: command tx timeout [ 191.701920][ T8974] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.723739][ T8766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.738195][ T8766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.760956][ T8766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.787511][ T8976] ip6tnl3: entered allmulticast mode [ 191.793166][ T8766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.070325][ T8980] tipc: Enabling of bearer rejected, failed to enable media [ 192.119995][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.212891][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.271200][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.278464][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.293823][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.301086][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.423551][ T8766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.459504][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.803763][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.108328][ T8766] veth0_vlan: entered promiscuous mode [ 193.123218][ T8766] veth1_vlan: entered promiscuous mode [ 193.160872][ T8766] veth0_macvtap: entered promiscuous mode [ 193.172659][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.175375][ T8766] veth1_macvtap: entered promiscuous mode [ 193.209397][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.236543][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.265774][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.293416][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.304345][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.315251][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.343603][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.367939][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.388161][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.398264][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.427603][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.446976][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.463478][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.482961][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.523753][ T8766] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.539150][ T8766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.548145][ T8766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.558218][ T8766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.585954][ T5135] Bluetooth: hci0: command tx timeout [ 193.761908][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.786785][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.817946][ T9036] syz-executor.3[9036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.818313][ T9036] syz-executor.3[9036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.850300][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.893027][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.980716][ T29] audit: type=1804 audit(1718879410.863:9): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2454364679/syzkaller.uvd2Ss/269/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 194.291053][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.372590][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 194.790870][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.266359][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.344106][ T9090] bridge0: entered promiscuous mode [ 195.351660][ T9090] bridge0: left promiscuous mode [ 195.737701][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.991467][ T9115] tipc: Enabling of bearer rejected, already enabled [ 196.394892][ T9135] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 196.590279][ T614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.812942][ T9151] syz-executor.2[9151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.813167][ T9151] syz-executor.2[9151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.878132][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 196.897866][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 196.903957][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 196.990189][ T29] audit: type=1804 audit(1718879413.873:10): pid=9151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3865805407/syzkaller.cVH12b/234/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 197.101332][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.311215][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.329262][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.342280][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.351878][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.367339][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.374928][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.422496][ T9164] tipc: Enabling of bearer rejected, failed to enable media [ 197.462113][ T9158] lo speed is unknown, defaulting to 1000 [ 197.677365][ T9158] caif0 speed is unknown, defaulting to 1000 [ 197.834077][ T9173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.190915][ T614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.223456][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 198.271124][ T614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.360981][ T614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.460661][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.481328][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.490317][ T9158] bridge_slave_0: entered allmulticast mode [ 198.507659][ T9158] bridge_slave_0: entered promiscuous mode [ 198.527536][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.534705][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.542819][ T9158] bridge_slave_1: entered allmulticast mode [ 198.551636][ T9158] bridge_slave_1: entered promiscuous mode [ 198.630530][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.644401][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.732765][ T9158] team0: Port device team_slave_0 added [ 198.771195][ T9158] team0: Port device team_slave_1 added [ 198.784430][ T614] bridge_slave_1: left allmulticast mode [ 198.790798][ T614] bridge_slave_1: left promiscuous mode [ 198.799270][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.821445][ T614] bridge_slave_0: left allmulticast mode [ 198.831958][ T614] bridge_slave_0: left promiscuous mode [ 198.838344][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.279371][ T614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.292557][ T614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.304567][ T614] bond0 (unregistering): Released all slaves [ 199.436297][ T5129] Bluetooth: hci0: command tx timeout [ 199.454034][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.481198][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.516687][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.574005][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.589925][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.646240][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.730580][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.961358][ T9158] hsr_slave_0: entered promiscuous mode [ 199.976365][ T9158] hsr_slave_1: entered promiscuous mode [ 200.000216][ T9158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.016532][ T9158] Cannot create hsr debugfs directory [ 200.473299][ T614] hsr_slave_0: left promiscuous mode [ 200.480366][ T614] hsr_slave_1: left promiscuous mode [ 200.489115][ T614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.496951][ T614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.508090][ T614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.524683][ T614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.557878][ T614] veth1_macvtap: left promiscuous mode [ 200.563489][ T614] veth0_macvtap: left promiscuous mode [ 200.570576][ T614] veth1_vlan: left promiscuous mode [ 200.576226][ T614] veth0_vlan: left promiscuous mode [ 201.247935][ T614] team0 (unregistering): Port device team_slave_1 removed [ 201.316592][ T614] team0 (unregistering): Port device team_slave_0 removed [ 201.516011][ T5129] Bluetooth: hci0: command tx timeout [ 202.283615][ T9259] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.333361][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.413085][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.499968][ T9158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.524744][ T9158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.548232][ T9158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.571877][ T9158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.690610][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.722857][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.737142][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.744289][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.778827][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.786082][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.017917][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.483979][ T9158] veth0_vlan: entered promiscuous mode [ 203.518345][ T9298] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 203.523711][ T9158] veth1_vlan: entered promiscuous mode [ 203.559468][ T9298] nbd: illegal input index -1708589048 [ 203.587423][ T5129] Bluetooth: hci0: command tx timeout [ 203.589853][ T9158] veth0_macvtap: entered promiscuous mode [ 203.658541][ T9158] veth1_macvtap: entered promiscuous mode [ 203.778564][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.817966][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.849032][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.888955][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.928562][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.970973][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.027421][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.133831][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.189465][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.239459][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.286862][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.337546][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.390333][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.402227][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.420584][ T9158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.436633][ T9158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.446882][ T9158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.467855][ T9158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.649489][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.667105][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.726981][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.753280][ T9315] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20001 [ 204.772902][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.797220][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.864533][ T9317] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.909046][ T9317] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 206.119635][ T9341] pim6reg: entered allmulticast mode [ 206.128914][ T9341] pim6reg: left allmulticast mode [ 206.561951][ T9366] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 206.569448][ T9366] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 206.672031][ T9368] macsec0: entered promiscuous mode [ 206.682346][ T9368] veth1_macvtap: left promiscuous mode [ 206.722185][ T9368] macsec0 (unregistering): left promiscuous mode [ 206.939472][ T9373] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.955582][ T9373] No such timeout policy "syz1" [ 207.303953][ T9391] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.323683][ T9391] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 207.340418][ T9391] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.851447][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.867592][ T9412] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.126108][ T9418] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 208.136408][ T9418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.400847][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.411932][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.421200][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.430468][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.457923][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.476176][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.538314][ T9427] lo speed is unknown, defaulting to 1000 [ 208.699580][ T9427] caif0 speed is unknown, defaulting to 1000 [ 208.789395][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.817328][ T9436] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 208.825471][ T9436] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.851489][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.011299][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.144486][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.322873][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.700278][ T35] bridge_slave_1: left allmulticast mode [ 209.709338][ T35] bridge_slave_1: left promiscuous mode [ 209.715154][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.734467][ T35] bridge_slave_0: left allmulticast mode [ 209.740572][ T35] bridge_slave_0: left promiscuous mode [ 209.756639][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.268612][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.289378][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.298774][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.320485][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.343193][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.361753][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.428897][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.441475][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.454969][ T35] bond0 (unregistering): Released all slaves [ 210.477236][ T9473] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.489786][ T9474] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 210.498094][ T9474] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.556002][ T5129] Bluetooth: hci0: command tx timeout [ 210.588240][ T9427] chnl_net:caif_netlink_parms(): no params data found [ 210.627379][ T9476] lo speed is unknown, defaulting to 1000 [ 210.660574][ T9480] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.672633][ T9480] syz1: rxe_newlink: already configured on caif0 [ 211.115601][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.115619][ T9476] caif0 speed is unknown, defaulting to 1000 [ 211.125015][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.136781][ T9427] bridge_slave_0: entered allmulticast mode [ 211.144349][ T9427] bridge_slave_0: entered promiscuous mode [ 211.164146][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.172429][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.180469][ T9427] bridge_slave_1: entered allmulticast mode [ 211.189313][ T9427] bridge_slave_1: entered promiscuous mode [ 211.258522][ T9427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.283550][ T9427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.346284][ T9427] team0: Port device team_slave_0 added [ 211.361453][ T9503] vlan2: entered promiscuous mode [ 211.369103][ T9503] veth1: entered promiscuous mode [ 211.374362][ T9503] vlan2: entered allmulticast mode [ 211.391885][ T9503] veth1: entered allmulticast mode [ 211.404168][ T9503] veth1: left allmulticast mode [ 211.413071][ T9503] veth1: left promiscuous mode [ 211.531126][ T9427] team0: Port device team_slave_1 added [ 211.874515][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.882081][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.926164][ T9427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.975107][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.984598][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.024024][ T9427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.101322][ T35] hsr_slave_0: left promiscuous mode [ 212.116688][ T35] hsr_slave_1: left promiscuous mode [ 212.132216][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.145785][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.153907][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.166503][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.212176][ T35] veth1_macvtap: left promiscuous mode [ 212.218996][ T35] veth0_macvtap: left promiscuous mode [ 212.224821][ T35] veth1_vlan: left promiscuous mode [ 212.231009][ T35] veth0_vlan: left promiscuous mode [ 212.479447][ T5129] Bluetooth: hci2: command tx timeout [ 212.626183][ T5129] Bluetooth: hci0: command tx timeout [ 212.822123][ T35] team0 (unregistering): Port device team_slave_1 removed [ 212.869573][ T35] team0 (unregistering): Port device team_slave_0 removed [ 213.304033][ T9514] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 213.312825][ T9514] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.446422][ T9427] hsr_slave_0: entered promiscuous mode [ 213.476719][ T9427] hsr_slave_1: entered promiscuous mode [ 213.976494][ T9476] chnl_net:caif_netlink_parms(): no params data found [ 214.054767][ T35] bridge_slave_1: left allmulticast mode [ 214.076075][ T35] bridge_slave_1: left promiscuous mode [ 214.081962][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.112071][ T35] bridge_slave_0: left allmulticast mode [ 214.121904][ T35] bridge_slave_0: left promiscuous mode [ 214.136087][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.321725][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.342107][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.362788][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.366670][ T35] bond0 (unregistering): Released all slaves [ 214.383505][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.392546][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.402147][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.411667][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.419388][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.545908][ T5129] Bluetooth: hci2: command tx timeout [ 214.733811][ T9566] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 214.742300][ T9566] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.753472][ T9476] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.761498][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.769816][ T9476] bridge_slave_0: entered allmulticast mode [ 214.794731][ T9476] bridge_slave_0: entered promiscuous mode [ 214.814969][ T9476] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.846132][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.853719][ T9476] bridge_slave_1: entered allmulticast mode [ 214.872099][ T9476] bridge_slave_1: entered promiscuous mode [ 214.905871][ T9558] lo speed is unknown, defaulting to 1000 [ 215.155505][ T9476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.250909][ T9476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.319269][ T35] hsr_slave_0: left promiscuous mode [ 215.346176][ T35] hsr_slave_1: left promiscuous mode [ 215.373551][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.419566][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.550946][ T35] team0 (unregistering): Port device team_slave_1 removed [ 215.606835][ T35] team0 (unregistering): Port device team_slave_0 removed [ 215.928815][ T9476] team0: Port device team_slave_0 added [ 215.939201][ T9558] caif0 speed is unknown, defaulting to 1000 [ 215.958261][ T9476] team0: Port device team_slave_1 added [ 216.075187][ T9601] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 216.092486][ T9601] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.126670][ T9476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.133669][ T9476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.195964][ T9476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.226945][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.263220][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.290754][ T9476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.298089][ T9476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.327336][ T9476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.441205][ T9476] hsr_slave_0: entered promiscuous mode [ 216.447980][ T9476] hsr_slave_1: entered promiscuous mode [ 216.466597][ T5129] Bluetooth: hci0: command tx timeout [ 216.633724][ T5129] Bluetooth: hci2: command tx timeout [ 216.899503][ T9476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.920992][ T9612] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 216.927266][ T9612] syzkaller0: Linktype set failed because interface is up [ 216.934916][ T12] syzkaller0: tun_net_xmit 76 [ 216.940806][ T12] syzkaller0: tun_net_xmit 48 [ 216.957487][ T9] syzkaller0: tun_net_xmit 76 [ 218.524407][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 218.546385][ T5129] Bluetooth: hci0: command tx timeout [ 218.591450][ T9476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.706198][ T5129] Bluetooth: hci2: command tx timeout [ 218.713930][ T9476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.784531][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.792220][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.800063][ T9558] bridge_slave_0: entered allmulticast mode [ 218.810341][ T9558] bridge_slave_0: entered promiscuous mode [ 218.844958][ T9476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.859896][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.874776][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.897813][ T9558] bridge_slave_1: entered allmulticast mode [ 218.905064][ T9558] bridge_slave_1: entered promiscuous mode [ 218.969284][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.988448][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.072859][ T9558] team0: Port device team_slave_0 added [ 219.094973][ T9558] team0: Port device team_slave_1 added [ 219.213634][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.230011][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.264226][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.279805][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.288682][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.315158][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.425492][ T9558] hsr_slave_0: entered promiscuous mode [ 219.435134][ T9558] hsr_slave_1: entered promiscuous mode [ 219.443594][ T9558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.451502][ T9558] Cannot create hsr debugfs directory [ 219.457959][ T9642] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 219.480259][ T9642] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.513039][ T9476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.585080][ T9476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.651548][ T9476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.714196][ T9476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.798617][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.034937][ T9657] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.103120][ T9476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.169557][ T9476] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.201612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.208874][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.219159][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.226375][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.295361][ T9476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.488456][ T9558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.511752][ T9558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.552847][ T9558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.586043][ T9558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.625959][ T5129] Bluetooth: hci0: command tx timeout [ 220.715661][ T9476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.942279][ T9476] veth0_vlan: entered promiscuous mode [ 220.999623][ T9476] veth1_vlan: entered promiscuous mode [ 221.023954][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.082329][ T9673] sit0: entered promiscuous mode [ 221.103936][ T9673] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 221.125900][ T9673] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.152389][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.209456][ T9476] veth0_macvtap: entered promiscuous mode [ 221.239642][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.246868][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.278887][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.286343][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.312344][ T9476] veth1_macvtap: entered promiscuous mode [ 221.393145][ T9476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.426375][ T9476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.445882][ T9476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.465810][ T9476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.485882][ T9476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.505738][ T9476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.530517][ T9476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.569757][ T9476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.595884][ T9476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.615836][ T9476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.635737][ T9476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.656065][ T9476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.675304][ T9476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.699059][ T9476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.782449][ T9476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.826188][ T9476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.834963][ T9476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.855902][ T9476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.875464][ T9685] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 221.895357][ T9685] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.090966][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.118316][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.190228][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.224175][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.245088][ T9558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.548672][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.706275][ T5129] Bluetooth: hci0: command tx timeout [ 222.837635][ T9558] veth0_vlan: entered promiscuous mode [ 222.869761][ T9558] veth1_vlan: entered promiscuous mode [ 222.950150][ T9558] veth0_macvtap: entered promiscuous mode [ 222.985567][ T9558] veth1_macvtap: entered promiscuous mode [ 223.021207][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.043399][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.054421][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.065179][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.077561][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.088275][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.099358][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.110208][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.127510][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.158597][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.181580][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.196651][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.208169][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.218150][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.229234][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.240583][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.254203][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.268716][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.280533][ T9722] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 223.291201][ T9722] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.311589][ T9558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.331875][ T9558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.342363][ T9558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.352204][ T9558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.484873][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.518336][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.557112][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.565329][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.870070][ T9719] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 224.818704][ T614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.374620][ T9756] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.475561][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.486779][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.498938][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.518195][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.534533][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.545150][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.664617][ T5276] IPVS: starting estimator thread 0... [ 225.683523][ T9757] lo speed is unknown, defaulting to 1000 [ 225.826916][ T9762] IPVS: using max 15 ests per chain, 36000 per kthread [ 226.063670][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.080568][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.090985][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.100633][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.114489][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.122493][ T614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.134229][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.222722][ T9757] caif0 speed is unknown, defaulting to 1000 [ 226.308205][ T614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.371925][ T9767] lo speed is unknown, defaulting to 1000 [ 226.480823][ T614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.523252][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.535335][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.545191][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.554698][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.567476][ T5134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 226.575114][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.898891][ T614] bridge_slave_1: left allmulticast mode [ 226.904606][ T614] bridge_slave_1: left promiscuous mode [ 226.936144][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.966812][ T614] bridge_slave_0: left allmulticast mode [ 226.972564][ T614] bridge_slave_0: left promiscuous mode [ 226.997568][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.049761][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.515074][ T614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.530150][ T614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.542296][ T614] bond0 (unregistering): Released all slaves [ 227.562934][ T9775] lo speed is unknown, defaulting to 1000 [ 227.569484][ T9767] caif0 speed is unknown, defaulting to 1000 [ 227.586514][ T5129] Bluetooth: hci0: command tx timeout [ 228.168230][ T9775] caif0 speed is unknown, defaulting to 1000 [ 228.226330][ T5129] Bluetooth: hci2: command tx timeout [ 228.364944][ T9757] chnl_net:caif_netlink_parms(): no params data found [ 228.626368][ T5129] Bluetooth: hci5: command tx timeout [ 229.065896][ T614] hsr_slave_0: left promiscuous mode [ 229.073508][ T614] hsr_slave_1: left promiscuous mode [ 229.083538][ T614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.096113][ T614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.104535][ T614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.112525][ T614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.142483][ T614] veth1_macvtap: left promiscuous mode [ 229.148330][ T614] veth0_macvtap: left promiscuous mode [ 229.154399][ T614] veth1_vlan: left promiscuous mode [ 229.163004][ T614] veth0_vlan: left promiscuous mode [ 229.668214][ T5129] Bluetooth: hci0: command tx timeout [ 229.974919][ T614] team0 (unregistering): Port device team_slave_1 removed [ 230.024052][ T614] team0 (unregistering): Port device team_slave_0 removed [ 230.308409][ T5129] Bluetooth: hci2: command tx timeout [ 230.560752][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.576220][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.583635][ T9757] bridge_slave_0: entered allmulticast mode [ 230.597452][ T9757] bridge_slave_0: entered promiscuous mode [ 230.611570][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.621457][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.634990][ T9757] bridge_slave_1: entered allmulticast mode [ 230.642918][ T9757] bridge_slave_1: entered promiscuous mode [ 230.713742][ T5129] Bluetooth: hci5: command tx timeout [ 230.789860][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.870804][ T9767] chnl_net:caif_netlink_parms(): no params data found [ 230.905074][ T9757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.997085][ T9757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.161150][ T9757] team0: Port device team_slave_0 added [ 231.187134][ T9757] team0: Port device team_slave_1 added [ 231.309082][ T9775] chnl_net:caif_netlink_parms(): no params data found [ 231.352265][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.361100][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.371132][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.381535][ T9767] bridge_slave_0: entered allmulticast mode [ 231.392788][ T9767] bridge_slave_0: entered promiscuous mode [ 231.421524][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.432108][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.465542][ T9757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.479063][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.490967][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.514107][ T9767] bridge_slave_1: entered allmulticast mode [ 231.534291][ T9767] bridge_slave_1: entered promiscuous mode [ 231.584561][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.616204][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.663262][ T9757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.746464][ T5129] Bluetooth: hci0: command tx timeout [ 231.815361][ T9767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.890075][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.901035][ T9863] ve: renamed from syz_tun (while UP) [ 231.928103][ T9767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.103331][ T9767] team0: Port device team_slave_0 added [ 232.136614][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.145255][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.158666][ T9775] bridge_slave_0: entered allmulticast mode [ 232.174096][ T9775] bridge_slave_0: entered promiscuous mode [ 232.248275][ T614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.275038][ T9767] team0: Port device team_slave_1 added [ 232.333198][ T9757] hsr_slave_0: entered promiscuous mode [ 232.341932][ T9757] hsr_slave_1: entered promiscuous mode [ 232.360018][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.368935][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.378549][ T9775] bridge_slave_1: entered allmulticast mode [ 232.387567][ T5129] Bluetooth: hci2: command tx timeout [ 232.389088][ T9775] bridge_slave_1: entered promiscuous mode [ 232.459782][ T614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.659069][ T614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.674190][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.685784][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.719629][ T9767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.764851][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.796047][ T5129] Bluetooth: hci5: command tx timeout [ 232.803051][ T614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.824243][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.831818][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.865870][ T9767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.893992][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.077978][ T9775] team0: Port device team_slave_0 added [ 233.098524][ T9775] team0: Port device team_slave_1 added [ 233.232146][ T9767] hsr_slave_0: entered promiscuous mode [ 233.247523][ T9767] hsr_slave_1: entered promiscuous mode [ 233.261947][ T9767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.265641][ T9884] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.279258][ T9767] Cannot create hsr debugfs directory [ 233.286777][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.293894][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.323223][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.474721][ T9893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.488691][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.496106][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.531801][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.547342][ T9896] IPVS: length: 73 != 8 [ 233.661679][ T9899] Bluetooth: MGMT ver 1.22 [ 233.826896][ T5129] Bluetooth: hci0: command tx timeout [ 234.309188][ T9916] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.319844][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.329440][ T9916] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.339041][ T9916] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.467943][ T5129] Bluetooth: hci2: command tx timeout [ 234.866075][ T5129] Bluetooth: hci5: command tx timeout [ 256.229667][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.790246][ T5134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.801054][ T5134] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.810813][ T5134] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.822650][ T5134] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.830819][ T5134] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.838447][ T5134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.556285][ T5134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 265.576003][ T5134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 265.586908][ T5134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 265.596556][ T5134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 265.604554][ T5134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 265.612283][ T5134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.905998][ T5134] Bluetooth: hci6: command tx timeout [ 267.666239][ T5134] Bluetooth: hci7: command tx timeout [ 267.985975][ T5134] Bluetooth: hci6: command tx timeout [ 269.746224][ T5134] Bluetooth: hci7: command tx timeout [ 270.066048][ T5134] Bluetooth: hci6: command tx timeout [ 271.830306][ T5134] Bluetooth: hci7: command tx timeout [ 272.146119][ T5134] Bluetooth: hci6: command tx timeout [ 273.905935][ T5134] Bluetooth: hci7: command tx timeout [ 290.608587][ T5129] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 290.626473][ T5129] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 290.635267][ T5129] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 290.645281][ T5129] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 290.665837][ T5129] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 290.674408][ T5129] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 291.087055][ T5129] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 291.099147][ T5129] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 291.108833][ T5129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 291.118112][ T5129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 291.127428][ T5129] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 291.134901][ T5129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 291.234267][ T5129] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 291.250150][ T5129] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 291.258970][ T5129] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 291.269277][ T5129] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 291.278318][ T5129] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 291.287494][ T5129] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 292.785908][ T5134] Bluetooth: hci8: command tx timeout [ 293.193908][ T5134] Bluetooth: hci9: command tx timeout [ 293.346242][ T5129] Bluetooth: hci10: command tx timeout [ 294.865885][ T5134] Bluetooth: hci8: command tx timeout [ 295.266326][ T5134] Bluetooth: hci9: command tx timeout [ 295.427174][ T5129] Bluetooth: hci10: command tx timeout [ 296.945950][ T5129] Bluetooth: hci8: command tx timeout [ 297.350648][ T5129] Bluetooth: hci9: command tx timeout [ 297.506095][ T5129] Bluetooth: hci10: command tx timeout [ 299.026161][ T5129] Bluetooth: hci8: command tx timeout [ 299.438078][ T5129] Bluetooth: hci9: command tx timeout [ 299.596088][ T5129] Bluetooth: hci10: command tx timeout [ 317.671482][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.883224][ T5134] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 328.893677][ T5134] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 328.902370][ T5134] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 328.911996][ T5134] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 328.921440][ T5134] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 328.929479][ T5134] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 330.607697][ T5134] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 330.618175][ T5134] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 330.629181][ T5134] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 330.638740][ T5134] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 330.646995][ T5134] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 330.655555][ T5134] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 331.029598][ T5129] Bluetooth: hci11: command tx timeout [ 332.706000][ T5129] Bluetooth: hci12: command tx timeout [ 333.105880][ T5129] Bluetooth: hci11: command tx timeout [ 334.786085][ T5129] Bluetooth: hci12: command tx timeout [ 335.187328][ T5129] Bluetooth: hci11: command tx timeout [ 336.866118][ T5129] Bluetooth: hci12: command tx timeout [ 337.272219][ T5129] Bluetooth: hci11: command tx timeout [ 338.946010][ T5129] Bluetooth: hci12: command tx timeout [ 350.471249][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 350.477652][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 350.483781][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 356.007069][ T5135] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.025972][ T5135] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.036362][ T5135] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.045962][ T5135] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.056775][ T5135] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 356.065467][ T5135] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 356.324418][ T5134] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 356.346515][ T5134] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 356.357505][ T5134] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 356.378816][ T5134] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 356.388346][ T5134] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 356.406080][ T5134] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 356.614661][ T5135] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 356.626536][ T5135] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 356.639158][ T5135] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 356.648752][ T5135] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 356.667235][ T5135] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 356.676303][ T5135] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 358.147615][ T5134] Bluetooth: hci13: command tx timeout [ 358.466065][ T5134] Bluetooth: hci14: command tx timeout [ 358.706448][ T5134] Bluetooth: hci15: command tx timeout [ 360.225926][ T5134] Bluetooth: hci13: command tx timeout [ 360.546081][ T5134] Bluetooth: hci14: command tx timeout [ 360.786325][ T5134] Bluetooth: hci15: command tx timeout [ 362.306122][ T5134] Bluetooth: hci13: command tx timeout [ 362.625920][ T5134] Bluetooth: hci14: command tx timeout [ 362.866153][ T5134] Bluetooth: hci15: command tx timeout [ 364.386342][ T5134] Bluetooth: hci13: command tx timeout [ 364.705856][ T5135] Bluetooth: hci14: command tx timeout [ 364.946196][ T5135] Bluetooth: hci15: command tx timeout [ 379.112581][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.311648][ T5135] Bluetooth: hci6: command 0x0406 tx timeout [ 391.434215][ T5134] Bluetooth: hci7: command 0x0406 tx timeout [ 393.948994][ T5134] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 393.966249][ T5134] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 393.974833][ T5134] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 393.986953][ T5134] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 393.995391][ T5134] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 394.003182][ T5134] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 395.600037][ T5135] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 395.613735][ T5135] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 395.626115][ T5135] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 395.635538][ T5135] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 395.643712][ T5135] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 395.651495][ T5135] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 396.067311][ T5134] Bluetooth: hci16: command tx timeout [ 396.386064][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 396.393692][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 396.415876][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.424708][ T30] task:kworker/1:0 state:D stack:23352 pid:25 tgid:25 ppid:2 flags:0x00004000 2024/06/20 10:33:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 396.445206][ T30] Workqueue: events linkwatch_event [ 396.476006][ T30] Call Trace: [ 396.479372][ T30] [ 396.482338][ T30] __schedule+0x17e8/0x4a20 [ 396.495854][ T30] ? __pfx___schedule+0x10/0x10 [ 396.500803][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 396.519704][ T30] ? __pfx_lock_release+0x10/0x10 [ 396.524817][ T30] ? kick_pool+0x45c/0x620 [ 396.535822][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.541177][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 396.555782][ T30] ? schedule+0x90/0x320 [ 396.560110][ T30] schedule+0x14b/0x320 [ 396.564409][ T30] schedule_preempt_disabled+0x13/0x30 [ 396.580821][ T30] __mutex_lock+0x6a4/0xd70 [ 396.585427][ T30] ? __mutex_lock+0x527/0xd70 [ 396.594956][ T30] ? linkwatch_event+0xe/0x60 [ 396.602156][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 396.615801][ T30] ? process_scheduled_works+0x945/0x1830 [ 396.621597][ T30] linkwatch_event+0xe/0x60 [ 396.637274][ T30] process_scheduled_works+0xa2c/0x1830 [ 396.642936][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.652479][ T30] ? assign_work+0x364/0x3d0 [ 396.665720][ T30] worker_thread+0x86d/0xd70 [ 396.670413][ T30] ? __kthread_parkme+0x169/0x1d0 [ 396.675481][ T30] ? __pfx_worker_thread+0x10/0x10 [ 396.690812][ T30] kthread+0x2f0/0x390 [ 396.694967][ T30] ? __pfx_worker_thread+0x10/0x10 [ 396.704986][ T30] ? __pfx_kthread+0x10/0x10 [ 396.715878][ T30] ret_from_fork+0x4b/0x80 [ 396.720459][ T30] ? __pfx_kthread+0x10/0x10 [ 396.725092][ T30] ret_from_fork_asm+0x1a/0x30 [ 396.740876][ T30] [ 396.744019][ T30] INFO: task kworker/u8:5:614 blocked for more than 143 seconds. [ 396.755134][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 396.773482][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.782546][ T30] task:kworker/u8:5 state:D stack:18776 pid:614 tgid:614 ppid:2 flags:0x00004000 [ 396.803990][ T30] Workqueue: netns cleanup_net [ 396.818222][ T30] Call Trace: [ 396.821572][ T30] [ 396.824544][ T30] __schedule+0x17e8/0x4a20 [ 396.855481][ T30] ? __pfx___schedule+0x10/0x10 [ 396.866197][ T30] ? __pfx_lock_release+0x10/0x10 [ 396.875770][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 396.881308][ T30] ? kthread_data+0x52/0xd0 [ 396.895792][ T30] ? schedule+0x90/0x320 [ 396.900132][ T30] ? wq_worker_sleeping+0x66/0x240 [ 396.905288][ T30] ? schedule+0x90/0x320 [ 396.927817][ T30] schedule+0x14b/0x320 [ 396.932133][ T30] schedule_preempt_disabled+0x13/0x30 [ 396.945735][ T30] __mutex_lock+0x6a4/0xd70 [ 396.950334][ T30] ? __mutex_lock+0x527/0xd70 [ 396.955145][ T30] ? nsim_create+0x408/0x890 [ 396.975721][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 396.980855][ T30] ? kmemdup_noprof+0x45/0x60 [ 396.985573][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 397.001884][ T30] nsim_create+0x408/0x890 [ 397.025988][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 397.031678][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 397.045908][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 397.051475][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 397.065769][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 397.071682][ T30] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 397.095864][ T30] ? nsim_dev_hwstats_init+0x3c2/0x3d0 [ 397.101415][ T30] nsim_dev_reload_up+0x69b/0x8e0 [ 397.125879][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 397.131534][ T30] devlink_reload+0x478/0x870 [ 397.147775][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 397.153135][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 397.165836][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 397.171925][ T30] ? class_remove_file_ns+0x121/0x160 [ 397.185970][ T30] cleanup_net+0x615/0xcc0 [ 397.190482][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 397.195491][ T30] ? process_scheduled_works+0x945/0x1830 [