last executing test programs: 1m11.932123708s ago: executing program 4 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x4, 0x7, 0x43, 0x1, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x7, 0xb946, 0x357}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c5969dc7a011d251b594ee29982150dd60cc91f2c1a4cb42ae91819c022722105f65685e01362953aaec281b2ff49c65738f8dd8cb7cd894a8a9985158f6d289f45a2ba99a21b23d5ced74e741346b21e3fee63e35da58f37d50242b72f006c9fca9dcd5bb71de77afe5583d2eb2b703c892a5089c8961f9a359240e33e9b578288b2540bbdd0ebf7a7581ddeb27f66b60e84e41a14dc34b486f7c01765a6984f08a8d5036e4e78afc446e3e876b3507bf08a18fbfe21e1881ea29d1c5f57eb", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m1.835679566s ago: executing program 4 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x4, 0x7, 0x43, 0x1, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x7, 0xb946, 0x357}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c5969dc7a011d251b594ee29982150dd60cc91f2c1a4cb42ae91819c022722105f65685e01362953aaec281b2ff49c65738f8dd8cb7cd894a8a9985158f6d289f45a2ba99a21b23d5ced74e741346b21e3fee63e35da58f37d50242b72f006c9fca9dcd5bb71de77afe5583d2eb2b703c892a5089c8961f9a359240e33e9b578288b2540bbdd0ebf7a7581ddeb27f66b60e84e41a14dc34b486f7c01765a6984f08a8d5036e4e78afc446e3e876b3507bf08a18fbfe21e1881ea29d1c5f57eb", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 52.973014433s ago: executing program 4 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x4, 0x7, 0x43, 0x1, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x7, 0xb946, 0x357}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c5969dc7a011d251b594ee29982150dd60cc91f2c1a4cb42ae91819c022722105f65685e01362953aaec281b2ff49c65738f8dd8cb7cd894a8a9985158f6d289f45a2ba99a21b23d5ced74e741346b21e3fee63e35da58f37d50242b72f006c9fca9dcd5bb71de77afe5583d2eb2b703c892a5089c8961f9a359240e33e9b578288b2540bbdd0ebf7a7581ddeb27f66b60e84e41a14dc34b486f7c01765a6984f08a8d5036e4e78afc446e3e876b3507bf08a18fbfe21e1881ea29d1c5f57eb", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 42.831197713s ago: executing program 4 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x4, 0x7, 0x43, 0x1, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x7, 0xb946, 0x357}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c5969dc7a011d251b594ee29982150dd60cc91f2c1a4cb42ae91819c022722105f65685e01362953aaec281b2ff49c65738f8dd8cb7cd894a8a9985158f6d289f45a2ba99a21b23d5ced74e741346b21e3fee63e35da58f37d50242b72f006c9fca9dcd5bb71de77afe5583d2eb2b703c892a5089c8961f9a359240e33e9b578288b2540bbdd0ebf7a7581ddeb27f66b60e84e41a14dc34b486f7c01765a6984f08a8d5036e4e78afc446e3e876b3507bf08a18fbfe21e1881ea29d1c5f57eb", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 31.757958231s ago: executing program 4 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x4, 0x7, 0x43, 0x1, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x7, 0xb946, 0x357}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c5969dc7a011d251b594ee29982150dd60cc91f2c1a4cb42ae91819c022722105f65685e01362953aaec281b2ff49c65738f8dd8cb7cd894a8a9985158f6d289f45a2ba99a21b23d5ced74e741346b21e3fee63e35da58f37d50242b72f006c9fca9dcd5bb71de77afe5583d2eb2b703c892a5089c8961f9a359240e33e9b578288b2540bbdd0ebf7a7581ddeb27f66b60e84e41a14dc34b486f7c01765a6984f08a8d5036e4e78afc446e3e876b3507bf08a18fbfe21e1881ea29d1c5f57eb", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22.779697313s ago: executing program 0 (id=2389): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="5b37182347bc61090000e00086dd60"], 0x0) 22.595826322s ago: executing program 0 (id=2392): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e1e8cfcb73d18c15dfaf04550bbd479aca9d59f408a7f8647ee014f5c0325ae447fc915d6a5ba5ddd204b1d4f3c83fc3a8b2e79726653e96d", 0x80}], 0x3e}}], 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001400)=""/107, 0x40000}], 0x1}}], 0x1, 0x10100, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvfrom(r0, &(0x7f0000002f40)=""/4063, 0xfdf, 0x0, 0x0, 0x0) 22.442845254s ago: executing program 0 (id=2394): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000, @void, @value}, 0x10) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000f00)) 22.325443496s ago: executing program 0 (id=2397): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x0) close(0x3) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000500), 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001b00)=[{0x110, 0x117, 0x10000, "1d9b839f0a82cbc2a7552628a246266ac5d7afed4744ef79bbd66c9154ae26ee452e7685143afa7e5158b03189812e0f32e7d2290175db7aa0f1749a93ca85e5f2cc7bf5fa4178d9f7ffc95fee5854ab33b681f33a62be06ef49dc4d7f0389be173024a1a96e1ff4c3bf5ed8b7a38c929e393b457d6f76c49f9ab40b38a6b6172548fc781d9d55e767f39c4fb3853b30378705d8a4d2104f4dd0f61c9ec7e49e8a80dd3f873165ec91d2ecfc94e1dc91079c66c0380e30239b4ff13ada1fbe918925bd3abe1457a99578d48051ffaacd2e7f28d92731ed08e775c4bf357fe056b24020b98ca1cba384c9011b9361bde68265ce56183517db08"}, {0x60, 0x116, 0x70, "4ef04bfb80125890a8708c614ee15286895c5f19592fd6eaf73b944d5748197c68712751b6dedf097a58d7cf692b399086d513d33aee6d9ccb748a1ca7b4b838763717020941a9e7d18ae5f415"}], 0x170}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r4, @ANYBLOB="01000000000080e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES8, @ANYRESHEX], 0x6f4}}, 0x0) 22.08721019s ago: executing program 0 (id=2398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x8c5}, 0x1) 15.407308175s ago: executing program 4 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x4, 0x7, 0x43, 0x1, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x7, 0xb946, 0x357}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c5969dc7a011d251b594ee29982150dd60cc91f2c1a4cb42ae91819c022722105f65685e01362953aaec281b2ff49c65738f8dd8cb7cd894a8a9985158f6d289f45a2ba99a21b23d5ced74e741346b21e3fee63e35da58f37d50242b72f006c9fca9dcd5bb71de77afe5583d2eb2b703c892a5089c8961f9a359240e33e9b578288b2540bbdd0ebf7a7581ddeb27f66b60e84e41a14dc34b486f7c01765a6984f08a8d5036e4e78afc446e3e876b3507bf08a18fbfe21e1881ea29d1c5f57eb", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 12.885131863s ago: executing program 0 (id=2398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x8c5}, 0x1) 10.164326143s ago: executing program 1 (id=2446): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async, rerun: 32) sendmsg$inet6(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='<', 0x1}], 0x1}, 0xc000) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x80}}]}, 0x30}}, 0x0) (async) r4 = socket$inet(0x2b, 0x801, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000906000000000023e626ec000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100767469000c000280080001"], 0x38}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000380)={{0x3a, @multicast2, 0x4e24, 0x4, 'dh\x00', 0x8, 0x9, 0x40}, {@multicast2, 0x4e20, 0x2, 0x0, 0xc000, 0x7}}, 0x44) (async) sendto$inet(r4, 0x0, 0x0, 0x24000001, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xd8, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2ee8b03464c9673"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="75987210406d4a6f2a54a84b3fb7b8d23ceae6ba6cb7ea84b72619ee99acbd3b"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5249715f90b1505c"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb25800ca4fed48ac9a4f63417ad641c163d1e62af9cc880c4a7708bc91d57d4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="511ac5e97559673a6016a30f3c422187"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="20d1cf8ce3510da2ccd4358126b49d840cb8c860a57255f0c4ef1770d9c75bb3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d9944f40445c8d656d1bc4c4faae040"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x805) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 9.535865711s ago: executing program 1 (id=2449): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/215, 0xd7}, {&(0x7f0000001740)=""/42, 0x2a}, {&(0x7f0000001780)=""/255, 0xff}, {&(0x7f0000001880)=""/216, 0xd8}, {&(0x7f0000001980)=""/220, 0xdc}, {&(0x7f0000001a80)=""/235, 0xeb}], 0x9, &(0x7f0000001c40)=""/16, 0x10}, 0x951d08408e82cdff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000089", @ANYRESHEX=r1, @ANYRESHEX], 0x14}}, 0x20000040) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x2bc, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc30}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x65, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x33d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x1c0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x270c0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ba}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x292d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13643592}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b0}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x5}, 0x200488c0) 9.078753032s ago: executing program 1 (id=2452): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="000000000312016ed1656d208b6937002c0012800b000100627269646765000007000000080005000100000005"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 5.098568883s ago: executing program 1 (id=2457): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00", 0xca, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 4.896090094s ago: executing program 2 (id=2459): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010100, @in, 0x0, 0x0, 0x101, 0x0, 0xa}, {0x2, 0x0, 0x2, 0x40000000000, 0x0, 0x0, 0xd, 0x7}, {0x8, 0x0, 0x7fffffffffffffff}, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0xfffffffa}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.742526051s ago: executing program 2 (id=2460): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x4100}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 2.919961398s ago: executing program 2 (id=2465): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000140)=0x80, 0x80000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1050200}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c4464a4e71cc3d63af0fe88", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf253d00000008000300", @ANYRES32=r4, @ANYBLOB="08005d000000000008005d000100000008005d000100000008005d000000000008005d000000000008005d0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24002804) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x7f, 0xa477}, &(0x7f00000003c0)=0xc) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 2.770812364s ago: executing program 2 (id=2466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x40c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0x39c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x378, 0x6, [@m_sample={0x3c, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e382c42ebd85b3baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_ct={0x134, 0xf, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c30604ab3100a6de878355a1bfb0f58b"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea4ceb0a2367847922314f8aa6c591ae"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "58f25e882ecebd3017a6274441c51594"}]}, {0xa1, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880fc5a368aae1f7da8ca75bbda"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xf4, 0x15, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x10, 0x10000000, 0x8000, 0x1000}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x20000000, 0x1, 0x6f4f}, @remote, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x45df, 0x7ff, 0x20000000, 0x4, 0x7}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x6, 0xfffefffd}, @broadcast, @loopback, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x40c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r2, 0x13, 0x0, 0x1000, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket(0x1a, 0x5, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 2.2699048s ago: executing program 2 (id=2468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r2, 0xfffffeff) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000080)=""/90, &(0x7f0000000000)=0x5a) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x208001}, 0x8) shutdown(r0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.105873939s ago: executing program 3 (id=2470): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c9009100ff", 0x48}], 0x1) 1.971676688s ago: executing program 1 (id=2471): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000006b119800000000008510000002000000850000000500000095003300000000009500a50500000000cfb916cfb1841e8e83c8d00c2a06d3fd305b68b234e73739634ac40c039206000000000000009b0cac928bd5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x11}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(r6) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1.69998958s ago: executing program 3 (id=2472): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb014018000000000c6dd64b5945ecae92000000000000000000000000000000000077bd3e92b937b3ca67c4dfa2f988fb88f553dd024db9dddc804225014def30c7869b61b57676510afac3e374353c1ae983e1effd72fb19ca18efbca421d63b95e7ad9b6f1356584f3a4a0aa5fe7b6524fb76736a5a"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x4b948b05df82c0a5, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="6158993cc5a5a7e3bfca058454bfa682ed70", 0x12}, {&(0x7f00000000c0)="8b50fabf14dbcfa49d9d0fc6401a4749459001d6f7406723e3db03716106f1dcbd7148529ccb463b6ab11e469b1410f2eb1451cbef256a116b1726649c50ed6ffd0a9684872da08216fec0808fd27f12eb94864ab83e63573b6f4af2501478099bc97cb457de8d89404bf2d3", 0x6c}, {&(0x7f0000000140)="17dbabef8f8d3b3c1a76797d2a52f530d17ff8e45ddd0493e445c83ff02a0902ecbdaff66fb8a876daa0f6b7", 0x2c}], 0x3, &(0x7f00000002c0)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xc4, [@empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @generic={0x7, 0x6, "0d67833d"}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x5e, 0x3, 0x7, [{@empty, 0x4}, {@loopback, 0xcca}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7b17}, {@local, 0x8001}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x6, [{@private=0xa010101, 0x5}, {@multicast1, 0x7}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x4c, 0x3, 0x2, [{@multicast1, 0x51}, {@multicast2, 0x3}, {@empty, 0x7fff}, {@remote, 0x4}, {@rand_addr=0x64010101, 0x7f}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x86, 0x4, "f2ed"}]}}}], 0xd8}}], 0x1, 0x400a000) 1.624862355s ago: executing program 1 (id=2473): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x250, 0x250, 0xffffffff, 0x250, 0x250, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080005000000000008000600"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) 1.499902s ago: executing program 2 (id=2474): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) r7 = accept$packet(r0, 0x0, &(0x7f00000001c0)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000480)=0x2b, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000003c0)={0x4, &(0x7f0000000340)=[{0xe390, 0x2, 0xc3, 0x9}, {0x3, 0x9, 0xf3, 0x1}, {0x400, 0x8, 0x5, 0x9}, {0x1ff, 0x1, 0x7, 0x8}]}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 1.436063809s ago: executing program 3 (id=2475): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xfeff}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 296.096314ms ago: executing program 3 (id=2476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xa, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) recvmsg$unix(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) socket$kcm(0x29, 0xf, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)=r4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x80}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xa, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) recvmsg$unix(r0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005", @ANYRES32=0x0], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) (async) socket$kcm(0x29, 0xf, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)=r4}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x80}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) (async) 133.809606ms ago: executing program 3 (id=2477): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="5b37182347bc61090000fff586dd60"], 0x0) 0s ago: executing program 3 (id=2478): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x1}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 2.346060][T10513] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 232.366409][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.368473][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'. [ 232.383049][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.392933][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.413655][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.428517][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.515707][T10522] FAULT_INJECTION: forcing a failure. [ 232.515707][T10522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.541746][T10522] CPU: 1 UID: 0 PID: 10522 Comm: syz.3.1820 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 232.552709][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.562792][T10522] Call Trace: [ 232.566084][T10522] [ 232.569025][T10522] dump_stack_lvl+0x241/0x360 [ 232.573722][T10522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.578931][T10522] ? __pfx__printk+0x10/0x10 [ 232.583568][T10522] ? get_sigframe+0x5e2/0x800 [ 232.588269][T10522] ? __pfx_lock_release+0x10/0x10 [ 232.593320][T10522] should_fail_ex+0x3b0/0x4e0 [ 232.598027][T10522] _copy_to_user+0x2f/0xb0 [ 232.602460][T10522] copy_siginfo_to_user+0x24/0xa0 [ 232.607505][T10522] x64_setup_rt_frame+0x75d/0xcc0 [ 232.612640][T10522] ? lockdep_hardirqs_on+0x99/0x150 [ 232.617861][T10522] ? _raw_spin_unlock_irq+0x2e/0x50 [ 232.623094][T10522] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 232.628665][T10522] arch_do_signal_or_restart+0x458/0x860 [ 232.634316][T10522] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 232.640515][T10522] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 232.646537][T10522] ? syscall_exit_to_user_mode+0xa3/0x370 [ 232.652297][T10522] syscall_exit_to_user_mode+0xc9/0x370 [ 232.657873][T10522] do_syscall_64+0x100/0x230 [ 232.662475][T10522] ? clear_bhb_loop+0x35/0x90 [ 232.667166][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.673079][T10522] RIP: 0033:0x7f29e8b7dff9 [ 232.677591][T10522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.697229][T10522] RSP: 002b:00007f29e9900038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.705672][T10522] RAX: fffffffffffffff2 RBX: 00007f29e8d35f80 RCX: 00007f29e8b7dff9 [ 232.713669][T10522] RDX: 00000000200006c0 RSI: 0000000000008933 RDI: 0000000000000006 [ 232.721653][T10522] RBP: 00007f29e9900090 R08: 0000000000000000 R09: 0000000000000000 [ 232.729662][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.737645][T10522] R13: 0000000000000000 R14: 00007f29e8d35f80 R15: 00007ffd0b843468 [ 232.745671][T10522] [ 232.984932][ T6522] team0 (unregistering): Port device team_slave_1 removed [ 233.030914][ T6522] team0 (unregistering): Port device team_slave_0 removed [ 233.788267][T10514] chnl_net:caif_netlink_parms(): no params data found [ 234.065909][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.096760][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.115231][T10514] bridge_slave_0: entered allmulticast mode [ 234.143204][T10514] bridge_slave_0: entered promiscuous mode [ 234.163292][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.186666][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.193954][T10514] bridge_slave_1: entered allmulticast mode [ 234.217949][T10514] bridge_slave_1: entered promiscuous mode [ 234.311229][T10514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.344492][T10514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.411923][T10514] team0: Port device team_slave_0 added [ 234.482261][T10514] team0: Port device team_slave_1 added [ 234.516952][ T5246] Bluetooth: hci4: command tx timeout [ 234.658563][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 234.944626][T10514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.951985][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.978603][T10514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.005770][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1834'. [ 235.068494][T10514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.085772][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.116395][T10514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.364823][T10514] hsr_slave_0: entered promiscuous mode [ 235.416194][T10514] hsr_slave_1: entered promiscuous mode [ 235.456772][T10514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.489511][T10514] Cannot create hsr debugfs directory [ 235.598663][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.694854][T10619] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.727735][T10619] netlink: 'syz.1.1844': attribute type 9 has an invalid length. [ 235.872983][T10622] netlink: 'syz.0.1845': attribute type 24 has an invalid length. [ 236.079235][T10638] veth0_to_hsr: entered promiscuous mode [ 236.225827][T10638] hsr_slave_0 (unregistering): left promiscuous mode [ 236.239838][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'. [ 236.320181][T10514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.339656][T10514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.351613][T10514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.365304][T10514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.597504][ T5246] Bluetooth: hci4: command tx timeout [ 236.799667][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.872339][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.914768][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.922030][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.991317][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.998527][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.055730][T10682] netdevsim netdevsim1 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 237.064890][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 237.096767][T10682] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1857'. [ 237.134526][T10682] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 237.164963][T10682] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1857'. [ 237.183988][T10682] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 237.311696][T10691] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1858'. [ 237.346363][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 237.407020][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 237.672162][T10514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.904209][T10514] veth0_vlan: entered promiscuous mode [ 237.916134][T10514] veth1_vlan: entered promiscuous mode [ 237.942877][T10514] veth0_macvtap: entered promiscuous mode [ 237.953067][T10514] veth1_macvtap: entered promiscuous mode [ 237.971224][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.982364][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.992845][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.003575][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.013765][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.025159][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.035291][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.046133][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.058326][T10514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.082625][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.113077][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.156401][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.178144][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.189481][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.203666][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.214118][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.225587][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.238734][T10514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.268148][T10514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.292994][T10514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.316816][T10514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.325594][T10514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.532555][ T502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.565362][ T502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.610163][T10740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1873'. [ 238.643731][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 238.676697][ T5246] Bluetooth: hci4: command tx timeout [ 238.682401][T10735] netlink: 'syz.2.1871': attribute type 3 has an invalid length. [ 238.716936][T10745] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1875'. [ 238.725627][ T502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.752364][ T502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.937414][T10756] tipc: Enabling of bearer rejected, failed to enable media [ 239.072400][T10763] FAULT_INJECTION: forcing a failure. [ 239.072400][T10763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.098366][T10763] CPU: 0 UID: 0 PID: 10763 Comm: syz.2.1882 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 239.109208][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.119298][T10763] Call Trace: [ 239.122591][T10763] [ 239.125531][T10763] dump_stack_lvl+0x241/0x360 [ 239.130226][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.135438][T10763] ? __pfx__printk+0x10/0x10 [ 239.140070][T10763] ? __pfx_lock_release+0x10/0x10 [ 239.145167][T10763] ? rcu_is_watching+0x15/0xb0 [ 239.149956][T10763] should_fail_ex+0x3b0/0x4e0 [ 239.154679][T10763] _copy_from_iter+0x1ed/0x1d60 [ 239.159590][T10763] ? alloc_pages_mpol_noprof+0x417/0x680 [ 239.165250][T10763] ? __pfx__copy_from_iter+0x10/0x10 [ 239.170562][T10763] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 239.176560][T10763] ? alloc_pages_noprof+0xef/0x170 [ 239.181685][T10763] ? page_copy_sane+0x46/0x260 [ 239.186461][T10763] copy_page_from_iter+0x7a/0x100 [ 239.191496][T10763] tun_get_user+0x2046/0x47e0 [ 239.196187][T10763] ? tun_get_user+0x871/0x47e0 [ 239.200973][T10763] ? __lock_acquire+0x1384/0x2050 [ 239.206051][T10763] ? __pfx_tun_get_user+0x10/0x10 [ 239.211110][T10763] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 239.216583][T10763] ? tun_get+0x1e/0x2f0 [ 239.220749][T10763] ? __pfx_lock_release+0x10/0x10 [ 239.225822][T10763] ? tun_get+0x1e/0x2f0 [ 239.229989][T10763] ? tun_get+0x27d/0x2f0 [ 239.234249][T10763] tun_chr_write_iter+0x10d/0x1f0 [ 239.239289][T10763] vfs_write+0xa6d/0xc90 [ 239.243543][T10763] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 239.249105][T10763] ? __pfx_vfs_write+0x10/0x10 [ 239.253899][T10763] ? fdget_pos+0x19a/0x320 [ 239.258333][T10763] ksys_write+0x183/0x2b0 [ 239.262678][T10763] ? __pfx_ksys_write+0x10/0x10 [ 239.267542][T10763] ? do_syscall_64+0x100/0x230 [ 239.272413][T10763] ? do_syscall_64+0xb6/0x230 [ 239.277195][T10763] do_syscall_64+0xf3/0x230 [ 239.281711][T10763] ? clear_bhb_loop+0x35/0x90 [ 239.286492][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.292404][T10763] RIP: 0033:0x7f415677cadf [ 239.296833][T10763] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 239.316459][T10763] RSP: 002b:00007f4157557000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 239.324893][T10763] RAX: ffffffffffffffda RBX: 00007f4156935f80 RCX: 00007f415677cadf [ 239.332904][T10763] RDX: 0000000000000036 RSI: 0000000020000100 RDI: 00000000000000c8 [ 239.340910][T10763] RBP: 00007f4157557090 R08: 0000000000000000 R09: 0000000000000000 [ 239.348926][T10763] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 239.356909][T10763] R13: 0000000000000000 R14: 00007f4156935f80 R15: 00007fff9a85c0a8 [ 239.364906][T10763] [ 239.395799][T10765] IPVS: Unknown mcast interface: nr0 [ 239.520439][T10777] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 239.565714][T10777] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 239.611287][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 239.673459][T10785] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1890'. [ 240.030228][ T2461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.022747][ T2461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.063252][ T2461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.122881][ T2461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.197949][ T2461] bridge_slave_1: left allmulticast mode [ 241.203635][ T2461] bridge_slave_1: left promiscuous mode [ 241.212533][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.221434][ T2461] bridge_slave_0: left allmulticast mode [ 241.228163][ T2461] bridge_slave_0: left promiscuous mode [ 241.233874][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.671005][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.686003][T10828] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1900'. [ 241.722674][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.744080][ T2461] bond0 (unregistering): Released all slaves [ 241.774301][T10831] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1900'. [ 242.092205][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.101849][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.109935][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.136787][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.145987][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 242.239280][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.580745][T10869] netlink: 'syz.1.1914': attribute type 2 has an invalid length. [ 242.712045][ T2461] hsr_slave_0: left promiscuous mode [ 242.718972][ T2461] hsr_slave_1: left promiscuous mode [ 242.725680][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.734330][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.742796][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.750484][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.775554][ T2461] veth1_macvtap: left promiscuous mode [ 242.781316][ T2461] veth0_macvtap: left promiscuous mode [ 242.787227][ T2461] veth1_vlan: left promiscuous mode [ 242.792775][ T2461] veth0_vlan: left promiscuous mode [ 243.250283][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 243.300162][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 243.901917][T10842] chnl_net:caif_netlink_parms(): no params data found [ 244.253799][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.270350][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.277986][ T54] Bluetooth: hci4: command tx timeout [ 244.308530][T10842] bridge_slave_0: entered allmulticast mode [ 244.318368][T10917] netlink: 'syz.2.1928': attribute type 3 has an invalid length. [ 244.358674][T10842] bridge_slave_0: entered promiscuous mode [ 244.385895][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.416626][T10842] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.431161][T10842] bridge_slave_1: entered allmulticast mode [ 244.451234][T10842] bridge_slave_1: entered promiscuous mode [ 244.559825][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.622951][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.692275][T10842] team0: Port device team_slave_0 added [ 244.720134][T10842] team0: Port device team_slave_1 added [ 244.776118][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.786971][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.820485][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.834685][T10934] __nla_validate_parse: 1 callbacks suppressed [ 244.834707][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1933'. [ 244.863636][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.871527][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.897987][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.914651][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 244.923956][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 245.070028][T10842] hsr_slave_0: entered promiscuous mode [ 245.084901][T10842] hsr_slave_1: entered promiscuous mode [ 245.102872][T10842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.114693][T10842] Cannot create hsr debugfs directory [ 245.293297][T10954] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1941'. [ 245.534415][T10968] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1945'. [ 245.622897][T10970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1946'. [ 245.688636][T10974] netlink: 'syz.2.1947': attribute type 3 has an invalid length. [ 245.717024][T10974] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1947'. [ 245.747187][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 245.915172][T10984] syz.2.1951: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 245.941361][T10984] CPU: 1 UID: 0 PID: 10984 Comm: syz.2.1951 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 245.952207][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.962408][T10984] Call Trace: [ 245.965732][T10984] [ 245.968703][T10984] dump_stack_lvl+0x241/0x360 [ 245.973428][T10984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.978678][T10984] ? __pfx__printk+0x10/0x10 [ 245.983350][T10984] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 245.989817][T10984] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 245.996369][T10984] warn_alloc+0x278/0x410 [ 246.000829][T10984] ? stack_depot_save_flags+0x29/0x830 [ 246.006342][T10984] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 246.007782][T10990] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 246.012423][T10984] ? __pfx_warn_alloc+0x10/0x10 [ 246.026881][T10984] ? kasan_save_track+0x3f/0x80 [ 246.031759][T10984] ? __kasan_kmalloc+0x98/0xb0 [ 246.036563][T10984] ? xsk_setsockopt+0x4ea/0x950 [ 246.041428][T10984] ? do_sock_setsockopt+0x3af/0x720 [ 246.046827][T10984] ? __sys_setsockopt+0x1a2/0x250 [ 246.051857][T10984] ? __x64_sys_setsockopt+0xb5/0xd0 [ 246.057077][T10984] ? do_syscall_64+0xf3/0x230 [ 246.061792][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.067923][T10984] __vmalloc_node_range_noprof+0x126/0x13f0 [ 246.073886][T10984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.080266][T10984] ? __kasan_kmalloc+0x98/0xb0 [ 246.085076][T10984] ? xskq_create+0x54/0x170 [ 246.089631][T10984] vmalloc_user_noprof+0x74/0x80 [ 246.094609][T10984] ? xskq_create+0xb6/0x170 [ 246.099164][T10984] xskq_create+0xb6/0x170 [ 246.103549][T10984] xsk_init_queue+0xa1/0x100 [ 246.108189][T10984] xsk_setsockopt+0x4ea/0x950 [ 246.113000][T10984] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.118251][T10984] ? __pfx_aa_sk_perm+0x10/0x10 [ 246.123180][T10984] ? __pfx_lock_acquire+0x10/0x10 [ 246.128349][T10984] ? aa_sock_opt_perm+0x79/0x120 [ 246.133346][T10984] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.138606][T10984] do_sock_setsockopt+0x3af/0x720 [ 246.143686][T10984] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 246.149280][T10984] ? __fget_files+0x29/0x470 [ 246.153929][T10984] ? __fget_files+0x3f3/0x470 [ 246.158651][T10984] ? __fget_files+0x29/0x470 [ 246.163327][T10984] __sys_setsockopt+0x1a2/0x250 [ 246.168224][T10984] __x64_sys_setsockopt+0xb5/0xd0 [ 246.173301][T10984] do_syscall_64+0xf3/0x230 [ 246.177856][T10984] ? clear_bhb_loop+0x35/0x90 [ 246.182580][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.188560][T10984] RIP: 0033:0x7f415677dff9 [ 246.193020][T10984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.212672][T10984] RSP: 002b:00007f4157557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 246.221146][T10984] RAX: ffffffffffffffda RBX: 00007f4156935f80 RCX: 00007f415677dff9 [ 246.229168][T10984] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 246.237188][T10984] RBP: 00007f41567f0296 R08: 0000000000000004 R09: 0000000000000000 [ 246.245209][T10984] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.253236][T10984] R13: 0000000000000000 R14: 00007f4156935f80 R15: 00007fff9a85c0a8 [ 246.261296][T10984] [ 246.357836][ T54] Bluetooth: hci4: command tx timeout [ 246.365757][T10984] Mem-Info: [ 246.376607][T10984] active_anon:6020 inactive_anon:0 isolated_anon:0 [ 246.376607][T10984] active_file:1570 inactive_file:38285 isolated_file:0 [ 246.376607][T10984] unevictable:768 dirty:173 writeback:0 [ 246.376607][T10984] slab_reclaimable:9596 slab_unreclaimable:94623 [ 246.376607][T10984] mapped:20848 shmem:1255 pagetables:635 [ 246.376607][T10984] sec_pagetables:0 bounce:0 [ 246.376607][T10984] kernel_misc_reclaimable:0 [ 246.376607][T10984] free:1368135 free_pcp:700 free_cma:0 [ 246.401701][T10842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.435423][T10984] Node 0 active_anon:24180kB inactive_anon:0kB active_file:6280kB inactive_file:153068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83392kB dirty:692kB writeback:0kB shmem:3484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10616kB pagetables:2640kB sec_pagetables:0kB all_unreclaimable? no [ 246.475703][T10984] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 246.517340][T10984] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.558227][T10842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.577997][T10842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.597659][T10842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.726690][T10984] lowmem_reserve[]: 0 2465 2466 0 0 [ 246.732059][T10984] Node 0 DMA32 free:1529852kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:24140kB inactive_anon:0kB active_file:6280kB inactive_file:152240kB unevictable:1536kB writepending:688kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:3192kB local_pcp:1820kB free_cma:0kB [ 246.778863][T10842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.782349][T10984] lowmem_reserve[]: 0 0 0 0 0 [ 246.796859][T10842] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.798693][T10984] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 246.832746][T10842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.844201][T10842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.868028][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.875184][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.913260][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.920532][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.929195][T10984] lowmem_reserve[]: 0 0 0 0 0 [ 246.934012][T10984] Node 1 Normal free:3925792kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.963605][T10984] lowmem_reserve[]: 0 0 0 0 0 [ 246.968595][T10984] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 246.981648][T10984] Node 0 DMA32: 1*4kB (M) 9*8kB (E) 92*16kB (UME) 186*32kB (UME) 178*64kB (UME) 128*128kB (UME) 62*256kB (UM) 39*512kB (UM) 30*1024kB (UME) 7*2048kB (UME) 345*4096kB (UM) = 1529292kB [ 247.000689][T10984] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.012452][T10984] Node 1 Normal: 162*4kB (UE) 39*8kB (UME) 36*16kB (UME) 163*32kB (UME) 99*64kB (UME) 36*128kB (UME) 20*256kB (UME) 7*512kB (UM) 6*1024kB (UME) 5*2048kB (UE) 948*4096kB (M) = 3925792kB [ 247.037023][T10984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.057952][T10984] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.067558][T10984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.094906][T10984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.117100][T10984] 41110 total pagecache pages [ 247.121865][T10984] 0 pages in swap cache [ 247.126050][T10984] Free swap = 124996kB [ 247.144352][T10984] Total swap = 124996kB [ 247.154475][T10984] 2097051 pages RAM [ 247.168768][T10984] 0 pages HighMem/MovableOnly [ 247.173519][T10984] 427076 pages reserved [ 247.207186][T10984] 0 pages cma reserved [ 247.320168][T10842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.411994][T11039] xt_hashlimit: invalid interval [ 247.468263][T11042] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1968'. [ 247.704425][T11052] netlink: 'syz.0.1971': attribute type 13 has an invalid length. [ 247.718863][T11052] veth0_macvtap: left promiscuous mode [ 247.728073][T11052] macvtap0: entered allmulticast mode [ 247.747619][T11052] macvtap0: refused to change device tx_queue_len [ 247.763667][T11055] netlink: 'syz.2.1972': attribute type 12 has an invalid length. [ 247.815972][T10842] veth0_vlan: entered promiscuous mode [ 247.842938][T10842] veth1_vlan: entered promiscuous mode [ 247.923978][T10842] veth0_macvtap: entered promiscuous mode [ 247.944724][T10842] veth1_macvtap: entered promiscuous mode [ 247.992983][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.015012][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.035994][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1974'. [ 248.045437][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.058427][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.068861][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.080962][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.092561][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.103309][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.115133][T10842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.150423][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.173506][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.191951][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.203926][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.215271][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.226310][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.236171][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.248521][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.259867][T10842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.292994][T11077] netlink: 'syz.0.1979': attribute type 6 has an invalid length. [ 248.310485][T10842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.331424][T10842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.341015][T10842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.359253][T10842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.438498][ T54] Bluetooth: hci4: command tx timeout [ 248.511327][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.563970][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.598215][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.606103][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.770818][T11089] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.998852][T11089] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.137336][T11089] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.275575][T11089] netdevsim netdevsim1 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.421570][T11128] veth0_to_hsr: entered promiscuous mode [ 249.557769][T11128] veth0_to_hsr (unregistering): left promiscuous mode [ 249.614146][T11128] hsr_slave_0 (unregistering): left promiscuous mode [ 249.685113][T11089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.707229][T11089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.753764][T11089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.778411][T11089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.851727][T11137] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 249.874448][T11138] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 249.894621][T11137] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 250.220025][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.845056][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.034790][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.101630][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.172875][ T52] bridge_slave_1: left allmulticast mode [ 251.179759][ T52] bridge_slave_1: left promiscuous mode [ 251.185801][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.195276][ T52] bridge_slave_0: left allmulticast mode [ 251.201413][ T52] bridge_slave_0: left promiscuous mode [ 251.207561][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.544216][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.557926][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.569102][ T52] bond0 (unregistering): Released all slaves [ 251.986050][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.008685][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.036815][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.050185][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.062198][ T52] hsr_slave_0: left promiscuous mode [ 252.069162][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.079749][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.087554][ T52] hsr_slave_1: left promiscuous mode [ 252.141545][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.150092][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.160861][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.172020][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.213192][ T52] veth1_macvtap: left promiscuous mode [ 252.236848][ T52] veth0_macvtap: left promiscuous mode [ 252.242607][ T52] veth1_vlan: left promiscuous mode [ 252.253905][ T52] veth0_vlan: left promiscuous mode [ 252.789140][ T52] team0 (unregistering): Port device team_slave_1 removed [ 252.833209][ T52] team0 (unregistering): Port device team_slave_0 removed [ 253.297776][T11177] __nla_validate_parse: 1 callbacks suppressed [ 253.297796][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 253.346923][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 253.587887][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 253.597335][T11203] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2020'. [ 253.700991][T11167] chnl_net:caif_netlink_parms(): no params data found [ 253.874107][T11224] veth0_to_hsr: entered promiscuous mode [ 254.076509][T11228] veth0_to_hsr: left promiscuous mode [ 254.082300][T11167] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.090576][T11167] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.099008][T11167] bridge_slave_0: entered allmulticast mode [ 254.113868][T11167] bridge_slave_0: entered promiscuous mode [ 254.119946][ T54] Bluetooth: hci4: command tx timeout [ 254.147640][T11167] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.166522][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.174270][T11167] bridge_slave_1: entered allmulticast mode [ 254.207867][T11167] bridge_slave_1: entered promiscuous mode [ 254.279200][T11167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.299019][T11167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.363220][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 254.400289][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2035'. [ 254.416670][T11167] team0: Port device team_slave_0 added [ 254.444933][T11167] team0: Port device team_slave_1 added [ 254.539108][T11258] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 254.553812][T11167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.569035][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.587197][T11265] netlink: 'syz.3.2040': attribute type 20 has an invalid length. [ 254.604261][T11167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.628118][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2038'. [ 254.629809][T11167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.695947][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.761764][T11167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.804441][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 254.832236][T11270] vlan2: entered allmulticast mode [ 254.990525][T11167] hsr_slave_0: entered promiscuous mode [ 255.008292][T11167] hsr_slave_1: entered promiscuous mode [ 255.014750][T11167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.023492][T11167] Cannot create hsr debugfs directory [ 255.306650][T11288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 255.390205][T11304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2054'. [ 255.805442][T11167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.837207][T11167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.861572][T11167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.890363][T11167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.958795][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.085413][T11167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.135116][T11167] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.155594][ T2461] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.162803][ T2461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.192661][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.197670][ T54] Bluetooth: hci4: command tx timeout [ 256.199872][ T6521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.352872][T11339] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.709593][T11167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.723485][T11362] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 256.750596][T11363] netlink: 'syz.0.2074': attribute type 18 has an invalid length. [ 257.037243][T11381] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 257.113718][T11167] veth0_vlan: entered promiscuous mode [ 257.148060][T11167] veth1_vlan: entered promiscuous mode [ 257.218093][T11385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.219240][T11167] veth0_macvtap: entered promiscuous mode [ 257.262443][T11167] veth1_macvtap: entered promiscuous mode [ 257.305325][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.315898][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.326056][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.336609][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.346857][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.357742][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.368133][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.378999][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.390792][T11167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.401439][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.411979][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.421945][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.432583][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.442517][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.453430][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.463346][T11167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.474140][T11167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.485532][T11167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.501429][T11391] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 257.545784][T11167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.555114][T11167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.565203][T11167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.577807][T11167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.606127][T11392] sctp: [Deprecated]: syz.1.2082 (pid 11392) Use of int in max_burst socket option. [ 257.606127][T11392] Use struct sctp_assoc_value instead [ 257.755306][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.776700][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.817712][ T4507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.843206][ T4507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.150986][T11428] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 258.410125][T11446] IPv6: sit3: Disabled Multicast RS [ 258.468036][T11448] __nla_validate_parse: 12 callbacks suppressed [ 258.468057][T11448] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2099'. [ 258.985300][ T6521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.015602][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 259.406516][ T6521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.672639][ T6521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.739785][ T6521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.840870][ T6521] bridge_slave_1: left allmulticast mode [ 259.846710][ T6521] bridge_slave_1: left promiscuous mode [ 259.852412][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.861932][ T6521] bridge_slave_0: left allmulticast mode [ 259.868752][ T6521] bridge_slave_0: left promiscuous mode [ 259.874503][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.201861][ T6521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.214558][ T6521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.225594][ T6521] bond0 (unregistering): Released all slaves [ 260.411024][ T6521] hsr_slave_0: left promiscuous mode [ 260.421628][ T6521] hsr_slave_1: left promiscuous mode [ 260.429028][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.439108][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.452617][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.460386][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.480276][ T6521] veth1_macvtap: left promiscuous mode [ 260.485814][ T6521] veth0_macvtap: left promiscuous mode [ 260.491749][ T6521] veth1_vlan: left promiscuous mode [ 260.497190][ T6521] veth0_vlan: left promiscuous mode [ 260.925734][T11499] netlink: 'syz.3.2114': attribute type 72 has an invalid length. [ 260.949943][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.960156][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.982205][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.999521][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.025188][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.037252][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.351787][ T6521] team0 (unregistering): Port device team_slave_1 removed [ 261.399687][ T6521] team0 (unregistering): Port device team_slave_0 removed [ 262.210366][T11536] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 262.317422][T11539] netlink: 'syz.3.2124': attribute type 7 has an invalid length. [ 262.350053][T11539] Êü: entered promiscuous mode [ 262.375969][T11500] chnl_net:caif_netlink_parms(): no params data found [ 262.534046][T11549] netlink: 'syz.1.2128': attribute type 72 has an invalid length. [ 262.634127][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.643574][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.656197][T11500] bridge_slave_0: entered allmulticast mode [ 262.663188][T11500] bridge_slave_0: entered promiscuous mode [ 262.707219][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.714470][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.747203][T11500] bridge_slave_1: entered allmulticast mode [ 262.754564][T11500] bridge_slave_1: entered promiscuous mode [ 262.934806][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.961883][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.078580][ T54] Bluetooth: hci4: command tx timeout [ 263.201926][T11500] team0: Port device team_slave_0 added [ 263.218939][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 263.228291][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2142'. [ 263.247369][T11500] team0: Port device team_slave_1 added [ 263.314453][T11500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.315783][T11600] netlink: 'syz.2.2143': attribute type 72 has an invalid length. [ 263.334513][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.365018][T11500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.397718][T11604] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2145'. [ 263.415073][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'. [ 263.415596][T11500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.463117][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.514626][T11500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.670557][T11500] hsr_slave_0: entered promiscuous mode [ 263.698906][T11500] hsr_slave_1: entered promiscuous mode [ 263.705228][T11500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.713087][T11500] Cannot create hsr debugfs directory [ 263.824936][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 264.169942][T11644] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2157'. [ 264.441978][T11500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.464942][T11500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.488787][T11500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.510273][T11500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.551750][T11664] bridge0: port 3(gretap0) entered blocking state [ 264.566805][T11664] bridge0: port 3(gretap0) entered disabled state [ 264.584765][T11664] gretap0: entered allmulticast mode [ 264.603311][T11664] gretap0: entered promiscuous mode [ 264.619846][T11664] bridge0: port 3(gretap0) entered blocking state [ 264.626892][T11664] bridge0: port 3(gretap0) entered forwarding state [ 264.640510][T11667] gretap0: left allmulticast mode [ 264.650250][T11669] ip6t_srh: unknown srh invflags 5F00 [ 264.699799][T11667] gretap0: left promiscuous mode [ 264.709884][T11667] bridge0: port 3(gretap0) entered disabled state [ 264.725934][T11669] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 264.747899][T11669] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2166'. [ 264.769570][T11669] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 264.828321][T11669] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2166'. [ 264.874536][T11500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.911367][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.928553][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.935765][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.977992][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.985243][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.024168][T11687] ebt_among: src integrity fail: 30a [ 265.057649][T11683] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2170'. [ 265.091567][T11689] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 265.105945][T11689] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2172'. [ 265.157663][ T54] Bluetooth: hci4: command tx timeout [ 265.175462][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 265.430484][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.467965][T11708] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 265.470962][T11710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2179'. [ 265.691102][T11719] sit0: entered promiscuous mode [ 265.707267][T11719] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 265.715161][T11719] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2182'. [ 265.771498][T11723] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2184'. [ 266.070501][T11500] veth0_vlan: entered promiscuous mode [ 266.163198][T11500] veth1_vlan: entered promiscuous mode [ 266.289693][T11500] veth0_macvtap: entered promiscuous mode [ 266.323960][T11500] veth1_macvtap: entered promiscuous mode [ 266.388325][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.417282][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.436443][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.458630][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.479040][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.505705][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.529891][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.565339][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.587764][T11500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.772586][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.810626][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.831108][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.854533][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.900489][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.940306][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.987169][T11761] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.995689][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.023364][T11762] xt_CT: No such helper "snmp_trap" [ 267.033079][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.044446][T11500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.054965][T11500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.063890][T11500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.072710][T11500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.081640][T11500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.210727][T11762] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 267.223855][T11762] bond3: (slave vcan1): Error -95 calling set_mac_address [ 267.236999][ T54] Bluetooth: hci4: command tx timeout [ 267.299547][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.312358][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.380004][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.388148][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.794915][T11796] netlink: 'syz.2.2206': attribute type 4 has an invalid length. [ 267.872714][T11797] netlink: 'syz.2.2206': attribute type 4 has an invalid length. [ 267.884956][T11793] netlink: 'syz.2.2206': attribute type 4 has an invalid length. [ 268.005445][T11804] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 268.071062][T11811] 1·: renamed from 70· (while UP) [ 268.081703][T11811] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 269.174670][ T6521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.397874][ T6521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.474460][ T6521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.533234][ T6521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.610963][ T6521] bridge_slave_1: left allmulticast mode [ 269.618080][ T6521] bridge_slave_1: left promiscuous mode [ 269.625316][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.635367][ T6521] bridge_slave_0: left allmulticast mode [ 269.642115][ T6521] bridge_slave_0: left promiscuous mode [ 269.648387][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.010886][ T6521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.023107][ T6521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.034884][ T6521] bond0 (unregistering): Released all slaves [ 270.253557][ T6521] hsr_slave_0: left promiscuous mode [ 270.262129][ T6521] hsr_slave_1: left promiscuous mode [ 270.268328][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.275737][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.285138][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.293061][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.312812][ T6521] veth1_macvtap: left promiscuous mode [ 270.319311][ T6521] veth0_macvtap: left promiscuous mode [ 270.324900][ T6521] veth1_vlan: left promiscuous mode [ 270.330338][ T6521] veth0_vlan: left promiscuous mode [ 270.774770][ T6521] team0 (unregistering): Port device team_slave_1 removed [ 270.818497][ T6521] team0 (unregistering): Port device team_slave_0 removed [ 271.046665][T11883] __nla_validate_parse: 7 callbacks suppressed [ 271.046686][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 271.100090][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 271.419944][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.443389][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.452370][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.489830][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.509103][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.516935][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.575962][T11897] netlink: 'syz.3.2238': attribute type 24 has an invalid length. [ 271.591064][T11901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2239'. [ 272.121076][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.136647][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.148865][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.158367][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.167735][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.177266][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.188505][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'. [ 272.258222][T11903] chnl_net:caif_netlink_parms(): no params data found [ 272.327923][T11928] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 272.338856][T11928] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 272.425265][T11938] veth0: entered promiscuous mode [ 272.463211][T11937] veth0: left promiscuous mode [ 272.475107][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.506510][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.516664][T11903] bridge_slave_0: entered allmulticast mode [ 272.528893][T11903] bridge_slave_0: entered promiscuous mode [ 272.545480][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.553685][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.569170][T11903] bridge_slave_1: entered allmulticast mode [ 272.576661][T11903] bridge_slave_1: entered promiscuous mode [ 272.607194][T11940] netlink: 'syz.2.2252': attribute type 3 has an invalid length. [ 272.608836][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.643198][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.730545][T11903] team0: Port device team_slave_0 added [ 272.745278][T11903] team0: Port device team_slave_1 added [ 272.904027][T11959] FAULT_INJECTION: forcing a failure. [ 272.904027][T11959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.918734][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.926424][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.953037][T11954] syz.0.2259 uses old SIOCAX25GETINFO [ 272.976327][T11959] CPU: 1 UID: 0 PID: 11959 Comm: syz.2.2258 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 272.987173][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.991734][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.997249][T11959] Call Trace: [ 272.997262][T11959] [ 272.997273][T11959] dump_stack_lvl+0x241/0x360 [ 272.997307][T11959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.997332][T11959] ? __pfx__printk+0x10/0x10 [ 272.997369][T11959] ? __pfx_lock_release+0x10/0x10 [ 272.997411][T11959] should_fail_ex+0x3b0/0x4e0 [ 272.997450][T11959] _copy_from_user+0x2f/0xe0 [ 272.997482][T11959] copy_msghdr_from_user+0xae/0x680 [ 272.997520][T11959] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 272.997568][T11959] __sys_sendmmsg+0x36d/0x730 [ 272.997603][T11959] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.997644][T11959] ? __pfx_lock_release+0x10/0x10 [ 273.068958][T11959] ? kstrtouint_from_user+0x128/0x190 [ 273.074368][T11959] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 273.080275][T11959] ? ksys_write+0x229/0x2b0 [ 273.084794][T11959] ? __pfx_lock_release+0x10/0x10 [ 273.089869][T11959] ? vfs_write+0x7bf/0xc90 [ 273.094292][T11959] ? kmem_cache_free+0x1a2/0x420 [ 273.099283][T11959] ? __mutex_unlock_slowpath+0x21d/0x750 [ 273.104958][T11959] ? __fget_files+0x3f3/0x470 [ 273.109658][T11959] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.115658][T11959] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.122012][T11959] ? do_syscall_64+0x100/0x230 [ 273.126799][T11959] __x64_sys_sendmmsg+0xa0/0xb0 [ 273.131738][T11959] do_syscall_64+0xf3/0x230 [ 273.136261][T11959] ? clear_bhb_loop+0x35/0x90 [ 273.140962][T11959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.146898][T11959] RIP: 0033:0x7f415677dff9 [ 273.151324][T11959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.171037][T11959] RSP: 002b:00007f4157557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.179497][T11959] RAX: ffffffffffffffda RBX: 00007f4156935f80 RCX: 00007f415677dff9 [ 273.187479][T11959] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 273.195558][T11959] RBP: 00007f4157557090 R08: 0000000000000000 R09: 0000000000000000 [ 273.203629][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.211630][T11959] R13: 0000000000000000 R14: 00007f4156935f80 R15: 00007fff9a85c0a8 [ 273.219623][T11959] [ 273.225623][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.245357][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.315104][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.461608][T11903] hsr_slave_0: entered promiscuous mode [ 273.488534][T11903] hsr_slave_1: entered promiscuous mode [ 273.514657][T11903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.538314][T11903] Cannot create hsr debugfs directory [ 273.548339][T11981] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 273.568585][ T54] Bluetooth: hci4: command tx timeout [ 273.583043][T11981] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 273.735167][T11993] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 273.988719][T12006] x_tables: duplicate underflow at hook 1 [ 274.193102][T12014] FAULT_INJECTION: forcing a failure. [ 274.193102][T12014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.214363][T12014] CPU: 0 UID: 0 PID: 12014 Comm: syz.0.2275 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 274.225223][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.235415][T12014] Call Trace: [ 274.238733][T12014] [ 274.241702][T12014] dump_stack_lvl+0x241/0x360 [ 274.246434][T12014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.251699][T12014] ? __pfx__printk+0x10/0x10 [ 274.256358][T12014] should_fail_ex+0x3b0/0x4e0 [ 274.261092][T12014] _copy_from_user+0x2f/0xe0 [ 274.265711][T12014] move_addr_to_kernel+0x82/0x150 [ 274.270758][T12014] copy_msghdr_from_user+0x43e/0x680 [ 274.276066][T12014] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 274.281996][T12014] __sys_sendmmsg+0x36d/0x730 [ 274.286694][T12014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.291916][T12014] ? __pfx_lock_release+0x10/0x10 [ 274.296957][T12014] ? kstrtouint_from_user+0x128/0x190 [ 274.302363][T12014] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 274.308293][T12014] ? ksys_write+0x229/0x2b0 [ 274.312809][T12014] ? __pfx_lock_release+0x10/0x10 [ 274.317868][T12014] ? vfs_write+0x7bf/0xc90 [ 274.322294][T12014] ? kmem_cache_free+0x1a2/0x420 [ 274.327252][T12014] ? __mutex_unlock_slowpath+0x21d/0x750 [ 274.332917][T12014] ? __fget_files+0x3f3/0x470 [ 274.337617][T12014] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.343620][T12014] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.349969][T12014] ? do_syscall_64+0x100/0x230 [ 274.354746][T12014] __x64_sys_sendmmsg+0xa0/0xb0 [ 274.359614][T12014] do_syscall_64+0xf3/0x230 [ 274.364158][T12014] ? clear_bhb_loop+0x35/0x90 [ 274.368865][T12014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.374779][T12014] RIP: 0033:0x7f5a0fd7dff9 [ 274.379224][T12014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.398844][T12014] RSP: 002b:00007f5a10aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.407279][T12014] RAX: ffffffffffffffda RBX: 00007f5a0ff35f80 RCX: 00007f5a0fd7dff9 [ 274.415263][T12014] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 274.423243][T12014] RBP: 00007f5a10aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 274.431226][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.439206][T12014] R13: 0000000000000000 R14: 00007f5a0ff35f80 R15: 00007fffcc84c5c8 [ 274.447202][T12014] [ 274.502351][T12012] nbd: couldn't find a device at index 2 [ 275.122959][T11903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.169700][T11903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.201521][T11903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.229634][T11903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.443397][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.490953][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.532391][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.539627][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.577231][T12065] FAULT_INJECTION: forcing a failure. [ 275.577231][T12065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.592679][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.599868][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.622743][T12065] CPU: 0 UID: 0 PID: 12065 Comm: syz.2.2293 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 275.633598][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.643716][T12065] Call Trace: [ 275.647035][T12065] [ 275.650007][T12065] dump_stack_lvl+0x241/0x360 [ 275.654815][T12065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.660073][T12065] ? __pfx__printk+0x10/0x10 [ 275.664722][T12065] ? iovec_from_user+0x61/0x240 [ 275.669622][T12065] ? __pfx_lock_release+0x10/0x10 [ 275.674721][T12065] should_fail_ex+0x3b0/0x4e0 [ 275.679456][T12065] _copy_from_user+0x2f/0xe0 [ 275.684074][T12065] ____sys_sendmsg+0x2ef/0x7e0 [ 275.688865][T12065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.694188][T12065] __sys_sendmmsg+0x3ab/0x730 [ 275.698891][T12065] ? __pfx___sys_sendmmsg+0x10/0x10 [ 275.704119][T12065] ? __pfx_lock_release+0x10/0x10 [ 275.709160][T12065] ? kstrtouint_from_user+0x128/0x190 [ 275.714567][T12065] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 275.720476][T12065] ? ksys_write+0x229/0x2b0 [ 275.724991][T12065] ? __pfx_lock_release+0x10/0x10 [ 275.730043][T12065] ? vfs_write+0x7bf/0xc90 [ 275.734469][T12065] ? kmem_cache_free+0x1a2/0x420 [ 275.739427][T12065] ? __mutex_unlock_slowpath+0x21d/0x750 [ 275.745073][T12065] ? __fget_files+0x3f3/0x470 [ 275.749921][T12065] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.755965][T12065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.762342][T12065] ? do_syscall_64+0x100/0x230 [ 275.767126][T12065] __x64_sys_sendmmsg+0xa0/0xb0 [ 275.771998][T12065] do_syscall_64+0xf3/0x230 [ 275.776512][T12065] ? clear_bhb_loop+0x35/0x90 [ 275.781207][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.787165][T12065] RIP: 0033:0x7f415677dff9 [ 275.791589][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.811294][T12065] RSP: 002b:00007f4157557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 275.819755][T12065] RAX: ffffffffffffffda RBX: 00007f4156935f80 RCX: 00007f415677dff9 [ 275.827738][T12065] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 275.835719][T12065] RBP: 00007f4157557090 R08: 0000000000000000 R09: 0000000000000000 [ 275.843702][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.851701][T12065] R13: 0000000000000000 R14: 00007f4156935f80 R15: 00007fff9a85c0a8 [ 275.859963][T12065] [ 275.895792][ T54] Bluetooth: hci4: command tx timeout [ 276.216061][T12080] sit3: entered promiscuous mode [ 276.222050][T12080] sit3: entered allmulticast mode [ 276.335295][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.338742][T12083] x_tables: ip_tables: udp match: only valid for protocol 17 [ 276.895899][T11903] veth0_vlan: entered promiscuous mode [ 276.953838][T11903] veth1_vlan: entered promiscuous mode [ 276.958654][T12109] __nla_validate_parse: 64 callbacks suppressed [ 276.958679][T12109] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2305'. [ 277.043656][T12110] FAULT_INJECTION: forcing a failure. [ 277.043656][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 277.063421][T11903] veth0_macvtap: entered promiscuous mode [ 277.075854][T12110] CPU: 0 UID: 0 PID: 12110 Comm: syz.0.2306 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 277.086698][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.090777][T11903] veth1_macvtap: entered promiscuous mode [ 277.096852][T12110] Call Trace: [ 277.096864][T12110] [ 277.096875][T12110] dump_stack_lvl+0x241/0x360 [ 277.096909][T12110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.104051][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2307'. [ 277.105889][T12110] ? __pfx__printk+0x10/0x10 [ 277.132197][T12110] ? __pfx_lock_acquire+0x10/0x10 [ 277.137253][T12110] should_fail_ex+0x3b0/0x4e0 [ 277.141967][T12110] ? dst_alloc+0x12b/0x190 [ 277.146420][T12110] should_failslab+0xac/0x100 [ 277.151113][T12110] ? dst_alloc+0x12b/0x190 [ 277.155560][T12110] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 277.160948][T12110] ? inet_select_addr+0x5b/0xa20 [ 277.165905][T12110] dst_alloc+0x12b/0x190 [ 277.170181][T12110] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 277.176287][T12110] ip_route_output_key_hash+0x193/0x2b0 [ 277.181854][T12110] ? ip_route_output_key_hash+0xdf/0x2b0 [ 277.187505][T12110] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 277.193601][T12110] ? ip_cmsg_send+0x9cd/0xa80 [ 277.198315][T12110] ip_route_output_flow+0x29/0x140 [ 277.203535][T12110] udp_sendmsg+0x174a/0x2a60 [ 277.208250][T12110] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 277.213816][T12110] ? __pfx_udp_sendmsg+0x10/0x10 [ 277.218813][T12110] ? __lock_acquire+0x1384/0x2050 [ 277.223878][T12110] udpv6_sendmsg+0x1386/0x3270 [ 277.228696][T12110] ? release_sock+0x30/0x1f0 [ 277.233328][T12110] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 277.238462][T12110] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.244827][T12110] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 277.250563][T12110] ? inet_send_prepare+0x1b7/0x260 [ 277.255710][T12110] ? do_raw_spin_unlock+0x13c/0x8b0 [ 277.260932][T12110] ? inet_send_prepare+0x1b7/0x260 [ 277.266069][T12110] __sock_sendmsg+0xef/0x270 [ 277.270688][T12110] ____sys_sendmsg+0x52a/0x7e0 [ 277.275471][T12110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.280790][T12110] __sys_sendmmsg+0x3ab/0x730 [ 277.285485][T12110] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.290725][T12110] ? __pfx_lock_release+0x10/0x10 [ 277.295770][T12110] ? kstrtouint_from_user+0x128/0x190 [ 277.301191][T12110] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 277.307097][T12110] ? ksys_write+0x229/0x2b0 [ 277.311612][T12110] ? __pfx_lock_release+0x10/0x10 [ 277.316661][T12110] ? vfs_write+0x7bf/0xc90 [ 277.321089][T12110] ? kmem_cache_free+0x1a2/0x420 [ 277.326045][T12110] ? __mutex_unlock_slowpath+0x21d/0x750 [ 277.331710][T12110] ? __fget_files+0x3f3/0x470 [ 277.336424][T12110] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.342428][T12110] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.348775][T12110] ? do_syscall_64+0x100/0x230 [ 277.353726][T12110] __x64_sys_sendmmsg+0xa0/0xb0 [ 277.358593][T12110] do_syscall_64+0xf3/0x230 [ 277.363108][T12110] ? clear_bhb_loop+0x35/0x90 [ 277.367801][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.373711][T12110] RIP: 0033:0x7f5a0fd7dff9 [ 277.378143][T12110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.397760][T12110] RSP: 002b:00007f5a10aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.406188][T12110] RAX: ffffffffffffffda RBX: 00007f5a0ff35f80 RCX: 00007f5a0fd7dff9 [ 277.414173][T12110] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 277.422158][T12110] RBP: 00007f5a10aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 277.430227][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.438218][T12110] R13: 0000000000000000 R14: 00007f5a0ff35f80 R15: 00007fffcc84c5c8 [ 277.446225][T12110] [ 277.465831][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.478557][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.488927][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.490617][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 277.499675][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.519120][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.529712][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.540355][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.550864][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.563539][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.621310][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.636912][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.657022][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.685997][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.706319][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.726974][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.746317][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.766374][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.777787][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.814652][T12121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2308'. [ 277.833114][T11903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.848040][T11903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.866339][T11903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.875108][T11903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.967315][ T54] Bluetooth: hci4: command tx timeout [ 278.139400][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.163748][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.246158][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.255939][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.281397][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 278.552649][T12153] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 278.783449][T12165] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 278.793323][T12165] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 279.263403][T12188] FAULT_INJECTION: forcing a failure. [ 279.263403][T12188] name failslab, interval 1, probability 0, space 0, times 0 [ 279.276623][T12188] CPU: 0 UID: 0 PID: 12188 Comm: syz.3.2333 Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 279.287952][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.298105][T12188] Call Trace: [ 279.301477][T12188] [ 279.304415][T12188] dump_stack_lvl+0x241/0x360 [ 279.309107][T12188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.314312][T12188] ? __pfx__printk+0x10/0x10 [ 279.319015][T12188] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 279.325024][T12188] ? __pfx___might_resched+0x10/0x10 [ 279.330326][T12188] should_fail_ex+0x3b0/0x4e0 [ 279.335023][T12188] should_failslab+0xac/0x100 [ 279.339722][T12188] ? __alloc_skb+0x1c3/0x440 [ 279.344329][T12188] kmem_cache_alloc_node_noprof+0x71/0x320 [ 279.350166][T12188] __alloc_skb+0x1c3/0x440 [ 279.354596][T12188] ? __pfx___alloc_skb+0x10/0x10 [ 279.359544][T12188] ? __pfx_validate_chain+0x10/0x10 [ 279.364756][T12188] alloc_skb_with_frags+0xc3/0x820 [ 279.369885][T12188] sock_alloc_send_pskb+0x91a/0xa60 [ 279.375120][T12188] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 279.380849][T12188] ? __lock_acquire+0x1384/0x2050 [ 279.385901][T12188] __ip_append_data+0x2d5f/0x41d0 [ 279.390956][T12188] ? __local_bh_enable_ip+0x168/0x200 [ 279.396350][T12188] ? __local_bh_enable_ip+0x168/0x200 [ 279.401749][T12188] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 279.407343][T12188] ? ip_route_output_key_hash+0xdf/0x2b0 [ 279.412999][T12188] ? __pfx___ip_append_data+0x10/0x10 [ 279.418389][T12188] ? ipv4_mtu+0x2bc/0x3d0 [ 279.422758][T12188] ? ip_setup_cork+0x4ae/0x8b0 [ 279.427553][T12188] ip_make_skb+0x198/0x420 [ 279.432091][T12188] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 279.437660][T12188] ? __pfx_ip_make_skb+0x10/0x10 [ 279.442719][T12188] udp_sendmsg+0x1bef/0x2a60 [ 279.447348][T12188] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 279.452921][T12188] ? __pfx_udp_sendmsg+0x10/0x10 [ 279.457911][T12188] ? __lock_acquire+0x1384/0x2050 [ 279.462990][T12188] udpv6_sendmsg+0x1386/0x3270 [ 279.467790][T12188] ? release_sock+0x30/0x1f0 [ 279.472431][T12188] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 279.477563][T12188] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.483918][T12188] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.489653][T12188] ? inet_send_prepare+0x1b7/0x260 [ 279.494782][T12188] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.500026][T12188] ? inet_send_prepare+0x1b7/0x260 [ 279.505159][T12188] __sock_sendmsg+0xef/0x270 [ 279.509767][T12188] ____sys_sendmsg+0x52a/0x7e0 [ 279.514547][T12188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.519853][T12188] __sys_sendmmsg+0x3ab/0x730 [ 279.524546][T12188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.529761][T12188] ? __pfx_lock_release+0x10/0x10 [ 279.534798][T12188] ? kstrtouint_from_user+0x128/0x190 [ 279.540201][T12188] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 279.546108][T12188] ? ksys_write+0x229/0x2b0 [ 279.550627][T12188] ? __pfx_lock_release+0x10/0x10 [ 279.555672][T12188] ? vfs_write+0x7bf/0xc90 [ 279.560094][T12188] ? kmem_cache_free+0x1a2/0x420 [ 279.565067][T12188] ? __mutex_unlock_slowpath+0x21d/0x750 [ 279.570718][T12188] ? __fget_files+0x3f3/0x470 [ 279.575435][T12188] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.581433][T12188] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.587784][T12188] ? do_syscall_64+0x100/0x230 [ 279.592561][T12188] __x64_sys_sendmmsg+0xa0/0xb0 [ 279.597424][T12188] do_syscall_64+0xf3/0x230 [ 279.602022][T12188] ? clear_bhb_loop+0x35/0x90 [ 279.606709][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.612616][T12188] RIP: 0033:0x7f29e8b7dff9 [ 279.617124][T12188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.636824][T12188] RSP: 002b:00007f29e9900038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.645250][T12188] RAX: ffffffffffffffda RBX: 00007f29e8d35f80 RCX: 00007f29e8b7dff9 [ 279.653234][T12188] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 279.661217][T12188] RBP: 00007f29e9900090 R08: 0000000000000000 R09: 0000000000000000 [ 279.669216][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.677194][T12188] R13: 0000000000000000 R14: 00007f29e8d35f80 R15: 00007ffd0b843468 [ 279.685188][T12188] [ 280.378284][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.693850][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.697446][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.714743][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.724338][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.732730][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.750694][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.767223][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.823508][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.909116][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.013088][T12212] chnl_net:caif_netlink_parms(): no params data found [ 281.051171][ T52] bridge_slave_1: left allmulticast mode [ 281.056967][ T52] bridge_slave_1: left promiscuous mode [ 281.062678][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.072089][ T52] bridge_slave_0: left allmulticast mode [ 281.078585][ T52] bridge_slave_0: left promiscuous mode [ 281.084796][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.455966][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.470527][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.483108][ T52] bond0 (unregistering): Released all slaves [ 281.599559][T12212] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.611545][T12212] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.620581][T12212] bridge_slave_0: entered allmulticast mode [ 281.630212][T12212] bridge_slave_0: entered promiscuous mode [ 281.639021][T12212] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.646617][T12212] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.653942][T12212] bridge_slave_1: entered allmulticast mode [ 281.661283][T12212] bridge_slave_1: entered promiscuous mode [ 281.715269][T12212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.730158][T12212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.772188][ T52] hsr_slave_0: left promiscuous mode [ 281.781748][ T52] hsr_slave_1: left promiscuous mode [ 281.788732][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.796150][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.807844][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.815300][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.834241][ T52] veth1_macvtap: left promiscuous mode [ 281.840048][ T52] veth0_macvtap: left promiscuous mode [ 281.845704][ T52] veth1_vlan: left promiscuous mode [ 281.851730][ T52] veth0_vlan: left promiscuous mode [ 282.582021][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.589723][ T52] team0 (unregistering): Port device team_slave_1 removed [ 282.601099][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.611788][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.620649][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.640990][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.648795][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.724529][ T52] team0 (unregistering): Port device team_slave_0 removed [ 282.841765][ T54] Bluetooth: hci0: command tx timeout [ 283.230721][T12212] team0: Port device team_slave_0 added [ 283.264666][T12212] team0: Port device team_slave_1 added [ 283.320885][T12292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2350'. [ 283.417501][T12301] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2353'. [ 283.467364][T12297] netlink: 'syz.0.2351': attribute type 1 has an invalid length. [ 283.487352][T12212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.515853][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.559659][T12212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.595419][T12212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.624455][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.701558][T12212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.819077][T12212] hsr_slave_0: entered promiscuous mode [ 283.846928][T12212] hsr_slave_1: entered promiscuous mode [ 283.864066][T12212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.876069][T12212] Cannot create hsr debugfs directory [ 284.125915][T12265] chnl_net:caif_netlink_parms(): no params data found [ 284.310060][ T52] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.453201][ T52] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.466858][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2364'. [ 284.496833][T12265] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.514280][T12265] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.522229][T12265] bridge_slave_0: entered allmulticast mode [ 284.538399][T12265] bridge_slave_0: entered promiscuous mode [ 284.558532][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.566019][T12265] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.583937][T12265] bridge_slave_1: entered allmulticast mode [ 284.597914][T12265] bridge_slave_1: entered promiscuous mode [ 284.626551][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 284.628489][ T52] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.759200][ T54] Bluetooth: hci4: command tx timeout [ 284.764002][T12265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.795450][T12265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.820400][ T52] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.863903][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2365'. [ 284.916515][ T54] Bluetooth: hci0: command tx timeout [ 284.952498][T12265] team0: Port device team_slave_0 added [ 285.000358][T12265] team0: Port device team_slave_1 added [ 285.120374][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 285.148276][T12353] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 285.470688][T12375] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2375'. [ 285.851137][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.864390][ T52] bond_slave_0: left promiscuous mode [ 285.872624][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.884961][ T52] bond_slave_1: left promiscuous mode [ 285.892279][ T52] bond0 (unregistering): Released all slaves [ 286.019376][ T52] bond1 (unregistering): Released all slaves [ 286.033433][T12265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.041945][T12265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.068681][T12265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.169871][T12265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.195244][T12265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.247231][T12265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.276638][ T52] Êü: left promiscuous mode [ 286.382652][ T52] tipc: Disabling bearer [ 286.405087][ T52] tipc: Left network mode [ 286.542312][T12265] hsr_slave_0: entered promiscuous mode [ 286.563218][T12265] hsr_slave_1: entered promiscuous mode [ 286.577714][T12265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.585529][T12265] Cannot create hsr debugfs directory [ 286.837219][ T54] Bluetooth: hci4: command tx timeout [ 286.996489][ T54] Bluetooth: hci0: command tx timeout [ 287.162173][T12212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.225889][T12212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.309666][ T52] hsr_slave_0: left promiscuous mode [ 287.315989][ T52] hsr_slave_1: left promiscuous mode [ 287.324199][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.334321][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.360526][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.374185][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.419494][ T52] veth1_to_hsr: left allmulticast mode [ 287.431630][ T52] veth1_to_hsr: left promiscuous mode [ 287.440352][ T52] veth1_macvtap: left promiscuous mode [ 287.446022][ T52] veth0_macvtap: left promiscuous mode [ 287.460036][ T52] veth1_vlan: left promiscuous mode [ 288.741535][ T52] vcan0 (unregistering): left allmulticast mode [ 288.783440][T12212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.799981][T12212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.824265][T12412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.916553][ T54] Bluetooth: hci4: command tx timeout [ 289.076923][ T54] Bluetooth: hci0: command tx timeout [ 289.257154][T12212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.367030][T12212] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.405820][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.413079][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.542297][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.549532][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.658173][T12454] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2396'. [ 289.679119][T12454] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.009610][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.071433][T12265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.098966][T12265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.119778][T12265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.316126][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.353184][T12265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.384943][T12467] Bluetooth: MGMT ver 1.23 [ 290.435476][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.474153][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.484046][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.493507][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.504290][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.512768][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.529927][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.562663][T12212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.622587][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.708489][T12472] Cannot find add_set index 0 as target [ 290.767361][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 290.899159][T12265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.927183][ T52] team0: left allmulticast mode [ 290.932131][ T52] team_slave_0: left allmulticast mode [ 290.940000][ T52] team_slave_1: left allmulticast mode [ 290.945530][ T52] bond0: left allmulticast mode [ 290.950963][ T52] bond_slave_0: left allmulticast mode [ 290.956802][ T52] bond_slave_1: left allmulticast mode [ 290.962583][ T52] team0: left promiscuous mode [ 290.968046][ T52] team_slave_0: left promiscuous mode [ 290.973823][ T52] team_slave_1: left promiscuous mode [ 290.979789][ T52] bond0: left promiscuous mode [ 290.986420][ T52] bond_slave_0: left promiscuous mode [ 290.992005][ T52] bond_slave_1: left promiscuous mode [ 291.006900][ T54] Bluetooth: hci4: command tx timeout [ 291.017096][ T52] bridge0: port 3(team0) entered disabled state [ 291.025781][ T52] bridge_slave_1: left allmulticast mode [ 291.039974][ T52] bridge_slave_1: left promiscuous mode [ 291.051559][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.062961][ T52] bridge_slave_0: left allmulticast mode [ 291.075804][ T52] bridge_slave_0: left promiscuous mode [ 291.083566][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.212578][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2407'. [ 291.230864][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2407'. [ 291.306098][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'. [ 291.925057][ T52] team0: Port device bond0 removed [ 291.937676][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.948895][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.960231][ T52] bond0 (unregistering): Released all slaves [ 291.973567][ T52] bond1 (unregistering): Released all slaves [ 291.985711][ T52] bond2 (unregistering): Released all slaves [ 292.001401][ T52] bond3 (unregistering): Released all slaves [ 292.026589][T12265] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.078376][T12212] veth0_vlan: entered promiscuous mode [ 292.143520][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.150814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.165427][ T52] tipc: Disabling bearer [ 292.190129][T12212] veth1_vlan: entered promiscuous mode [ 292.205013][ T52] tipc: Left network mode [ 292.238846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.246060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.331222][T12469] chnl_net:caif_netlink_parms(): no params data found [ 292.475494][ T52] hsr_slave_1: left promiscuous mode [ 292.501179][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.514884][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.533886][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.543289][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.563964][ T52] veth1_macvtap: left promiscuous mode [ 292.574970][ T52] veth1_vlan: left promiscuous mode [ 292.580574][ T52] veth0_vlan: left promiscuous mode [ 292.606470][ T54] Bluetooth: hci3: command tx timeout [ 293.052225][ T52] team0 (unregistering): Port device team_slave_1 removed [ 293.091646][ T52] team0 (unregistering): Port device team_slave_0 removed [ 293.581872][T12212] veth0_macvtap: entered promiscuous mode [ 293.591903][T12212] veth1_macvtap: entered promiscuous mode [ 293.735082][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.744089][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.757111][T12469] bridge_slave_0: entered allmulticast mode [ 293.763940][T12469] bridge_slave_0: entered promiscuous mode [ 293.786816][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.797699][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.808552][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.819688][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.839891][T12212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.853302][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.864060][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.874374][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.886297][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.897401][T12212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.904879][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.914950][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.925453][T12469] bridge_slave_1: entered allmulticast mode [ 293.934812][T12469] bridge_slave_1: entered promiscuous mode [ 293.972435][T12212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.981894][T12212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.992559][T12212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.001770][T12212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.048956][T12469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.070773][T12469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.129315][T12469] team0: Port device team_slave_0 added [ 294.150491][T12265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.168881][T12469] team0: Port device team_slave_1 added [ 294.181091][ T52] IPVS: stop unused estimator thread 0... [ 294.267623][T12469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.274631][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.303821][T12469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.330863][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.340111][T12469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.349135][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.349822][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.390902][T12469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.471304][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.490277][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.495283][T12469] hsr_slave_0: entered promiscuous mode [ 294.505490][T12469] hsr_slave_1: entered promiscuous mode [ 294.522274][T12469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.532069][T12469] Cannot create hsr debugfs directory [ 294.652869][T12543] C: renamed from team_slave_0 [ 294.664453][T12543] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 294.674155][T12543] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.697041][ T54] Bluetooth: hci3: command tx timeout [ 294.800241][T12265] veth0_vlan: entered promiscuous mode [ 294.880118][T12265] veth1_vlan: entered promiscuous mode [ 294.979988][T12265] veth0_macvtap: entered promiscuous mode [ 295.012178][T12265] veth1_macvtap: entered promiscuous mode [ 295.069352][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.096799][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.115588][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.135012][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.145980][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.164486][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.185228][T12265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.227559][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.258514][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.275758][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.293934][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.304352][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.332490][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.358081][T12265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.390624][T12265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.399672][T12265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.426839][T12265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.435713][T12265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.675999][T12469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.698481][T12469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.720187][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.728345][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.745784][T12469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 295.789795][T12469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 295.869169][ T4507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.926661][ T4507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.933072][T12469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.981184][T12469] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.010349][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.017576][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.030742][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.038004][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.442192][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 296.578510][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.742257][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.757296][ T54] Bluetooth: hci3: command tx timeout [ 296.781230][T12469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.829833][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.860905][T12469] veth0_vlan: entered promiscuous mode [ 296.874171][T12469] veth1_vlan: entered promiscuous mode [ 296.913362][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.931600][T12469] veth0_macvtap: entered promiscuous mode [ 296.942947][T12469] veth1_macvtap: entered promiscuous mode [ 296.960699][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.971921][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.982303][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.992828][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.003168][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.013729][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.023631][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.034278][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.045441][T12469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.063214][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.076798][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.088281][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.098796][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.108688][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.119277][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.129231][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.139895][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.151496][T12469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.167503][T12469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.176819][T12469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.185572][T12469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.195276][T12469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.250216][ T12] bridge_slave_1: left allmulticast mode [ 297.255911][ T12] bridge_slave_1: left promiscuous mode [ 297.263106][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.272085][ T12] bridge_slave_0: left allmulticast mode [ 297.279159][ T12] bridge_slave_0: left promiscuous mode [ 297.284871][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.620536][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.634357][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.646631][ T12] bond0 (unregistering): Released all slaves [ 297.714624][ T6521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.731848][ T6521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.787033][ T6521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.794922][ T6521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.921890][ T12] hsr_slave_0: left promiscuous mode [ 297.930308][ T12] hsr_slave_1: left promiscuous mode [ 297.936607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.944046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.953157][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.962172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.983854][ T12] veth1_macvtap: left promiscuous mode [ 297.992504][ T12] veth0_macvtap: left promiscuous mode [ 297.999478][ T12] veth1_vlan: left promiscuous mode [ 298.004780][ T12] veth0_vlan: left promiscuous mode [ 298.467286][ T12] team0 (unregistering): Port device team_slave_1 removed [ 298.516137][ T12] team0 (unregistering): Port device team_slave_0 removed [ 299.324474][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.428252][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.499074][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.533219][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.543056][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 299.552595][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.965899][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.981654][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.994303][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.004691][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.013632][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 300.031995][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.456693][T12609] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2439'. [ 301.646462][ T5246] Bluetooth: hci3: command tx timeout [ 302.123531][ T5246] Bluetooth: hci4: command tx timeout [ 302.204642][T12612] chnl_net:caif_netlink_parms(): no params data found [ 302.422185][T12646] tipc: Started in network mode [ 302.427716][T12646] tipc: Node identity 7f000001, cluster identity 4711 [ 302.668439][T12646] tipc: Enabled bearer , priority 10 [ 302.820372][T12615] chnl_net:caif_netlink_parms(): no params data found [ 303.040775][T12663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2453'. [ 303.289985][T12667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2452'. [ 303.310617][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.318006][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.716493][ T5246] Bluetooth: hci3: command tx timeout [ 303.786487][T12279] tipc: Node number set to 2130706433 [ 304.197297][ T5246] Bluetooth: hci4: command tx timeout [ 305.796599][ T5246] Bluetooth: hci3: command tx timeout [ 306.286659][ T5246] Bluetooth: hci4: command tx timeout [ 306.985154][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.016120][T12615] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.040688][T12615] bridge_slave_0: entered allmulticast mode [ 307.077839][T12615] bridge_slave_0: entered promiscuous mode [ 307.106625][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.126557][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.151321][T12612] bridge_slave_0: entered allmulticast mode [ 307.180227][T12612] bridge_slave_0: entered promiscuous mode [ 307.216578][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.234210][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.264550][T12615] bridge_slave_1: entered allmulticast mode [ 307.302688][T12615] bridge_slave_1: entered promiscuous mode [ 307.336598][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.364333][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.397076][T12612] bridge_slave_1: entered allmulticast mode [ 307.432609][T12612] bridge_slave_1: entered promiscuous mode [ 307.766796][T12615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.806073][T12615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.855198][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.888098][ T5246] Bluetooth: hci3: command tx timeout [ 307.896958][T12697] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2462'. [ 307.919044][T12697] 0·: renamed from hsr_slave_1 (while UP) [ 307.964728][T12697] 0·: entered allmulticast mode [ 307.980845][T12697] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 308.206409][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.356526][ T5246] Bluetooth: hci4: command tx timeout [ 308.625703][T12615] team0: Port device team_slave_0 added [ 308.678054][T12612] team0: Port device team_slave_0 added [ 308.695912][T12615] team0: Port device team_slave_1 added [ 308.725414][T12612] team0: Port device team_slave_1 added [ 308.813363][T12703] netlink: 'syz.3.2464': attribute type 7 has an invalid length. [ 309.182842][T12615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.212549][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.289849][T12615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.341621][T12615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.357768][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.404190][T12615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.422370][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.437006][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.519631][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.789507][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.797705][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.909714][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.953598][T12615] hsr_slave_0: entered promiscuous mode [ 309.987886][T12615] hsr_slave_1: entered promiscuous mode [ 310.006548][T12615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.022132][T12615] Cannot create hsr debugfs directory [ 310.359502][T12731] xt_l2tp: v2 sid > 0xffff: 262144 [ 310.481431][T12733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.416802][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.603488][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.613472][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.624986][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.635417][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.643474][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.650961][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.729503][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.753233][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.762810][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.771085][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.778986][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 321.786439][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.096237][ C0] sched: DL replenish lagged too much [ 322.476161][ T5246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.493588][ T5246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.504798][ T5246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.520029][ T5246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.527974][ T5246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 322.535424][ T5246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.726634][ T5246] Bluetooth: hci5: command tx timeout [ 323.876625][ T5246] Bluetooth: hci6: command tx timeout [ 324.596528][ T5246] Bluetooth: hci7: command tx timeout [ 325.796479][ T5246] Bluetooth: hci5: command tx timeout [ 325.956425][ T5246] Bluetooth: hci6: command tx timeout [ 326.681013][ T5246] Bluetooth: hci7: command tx timeout [ 327.896275][ T5246] Bluetooth: hci5: command tx timeout [ 328.039785][ T5246] Bluetooth: hci6: command tx timeout [ 328.756510][ T5246] Bluetooth: hci7: command tx timeout [ 329.956399][ T5246] Bluetooth: hci5: command tx timeout [ 330.116464][ T5246] Bluetooth: hci6: command tx timeout [ 330.837556][ T5246] Bluetooth: hci7: command tx timeout [ 360.641277][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.654060][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 360.662499][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 360.672568][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 360.680373][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 360.687820][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 362.334845][ T5246] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 362.344150][ T5246] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 362.352621][ T5246] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 362.366493][ T5246] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 362.375727][ T5246] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 362.386019][ T5246] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 362.756478][ T5246] Bluetooth: hci8: command tx timeout [ 364.454574][ T5246] Bluetooth: hci9: command tx timeout [ 364.836409][ T5246] Bluetooth: hci8: command tx timeout [ 366.524871][ T5246] Bluetooth: hci9: command tx timeout [ 366.916355][ T5246] Bluetooth: hci8: command tx timeout [ 368.598345][ T5246] Bluetooth: hci9: command tx timeout [ 368.996299][ T5246] Bluetooth: hci8: command tx timeout [ 370.676529][ T5246] Bluetooth: hci9: command tx timeout [ 378.838757][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.114225][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 382.124160][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 382.132842][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 382.141290][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 382.149118][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 382.157691][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 382.195862][ T5246] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 382.205309][ T5246] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 382.214107][ T5246] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 382.225791][ T5246] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 382.233828][ T5246] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 382.241616][ T5246] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 382.917997][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 382.936403][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 382.947174][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 382.956084][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 382.964101][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 382.973960][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 384.196395][ T54] Bluetooth: hci10: command tx timeout [ 384.276404][ T54] Bluetooth: hci11: command tx timeout [ 384.996567][ T54] Bluetooth: hci12: command tx timeout [ 386.276318][ T54] Bluetooth: hci10: command tx timeout [ 386.356351][ T54] Bluetooth: hci11: command tx timeout [ 387.076458][ T54] Bluetooth: hci12: command tx timeout [ 388.356383][ T54] Bluetooth: hci10: command tx timeout [ 388.436385][ T54] Bluetooth: hci11: command tx timeout [ 389.167079][ T54] Bluetooth: hci12: command tx timeout [ 390.438706][ T54] Bluetooth: hci10: command tx timeout [ 390.516431][ T54] Bluetooth: hci11: command tx timeout [ 391.236491][ T54] Bluetooth: hci12: command tx timeout [ 406.523856][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 421.883691][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 421.893294][ T5233] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 421.904816][ T5233] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 421.913060][ T5233] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 421.921227][ T5233] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 421.929674][ T5233] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 421.937241][ T5233] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 424.036481][ T54] Bluetooth: hci13: command tx timeout [ 426.116649][ T5233] Bluetooth: hci13: command tx timeout [ 427.017172][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 428.196304][ T54] Bluetooth: hci13: command tx timeout [ 430.276499][ T54] Bluetooth: hci13: command tx timeout [ 440.278378][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.489904][ T5241] Bluetooth: hci5: command 0x0406 tx timeout [ 447.523780][ T5241] Bluetooth: hci6: command 0x0406 tx timeout [ 447.532013][ T5241] Bluetooth: hci7: command 0x0406 tx timeout [ 470.356263][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 470.363974][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 470.393755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.416510][ T30] task:kworker/u8:1 state:D stack:23000 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 470.456315][ T30] Workqueue: netns cleanup_net [ 470.461207][ T30] Call Trace: [ 470.464520][ T30] [ 470.486380][ T30] __schedule+0x1895/0x4b30 [ 470.491272][ T30] ? __pfx___schedule+0x10/0x10 [ 470.516190][ T30] ? __pfx_lock_release+0x10/0x10 [ 470.521315][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 470.545220][ T30] ? kthread_data+0x52/0xd0 [ 470.564453][ T30] ? schedule+0x90/0x320 [ 470.568997][ T30] ? wq_worker_sleeping+0x66/0x240 [ 470.574169][ T30] ? schedule+0x90/0x320 [ 470.596299][ T30] schedule+0x14b/0x320 [ 470.600564][ T30] schedule_preempt_disabled+0x13/0x30 [ 470.606083][ T30] __mutex_lock+0x6a7/0xd70 [ 470.637027][ T30] ? __mutex_lock+0x52a/0xd70 [ 470.641810][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 470.674393][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 470.679647][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 470.685003][ T30] ? mpls_net_exit+0x78/0x2a0 [ 470.711883][ T30] ? kfree+0x1a0/0x440 [ 470.716048][ T30] ? mpls_net_exit+0x78/0x2a0 [ 470.735373][ T30] mpls_net_exit+0x7d/0x2a0 [ 470.751238][ T30] cleanup_net+0x802/0xcc0 [ 470.755773][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 470.785968][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 470.796324][ T30] ? process_scheduled_works+0x976/0x1850 [ 470.802141][ T30] process_scheduled_works+0xa63/0x1850 [ 470.840305][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.866278][ T30] ? assign_work+0x364/0x3d0 [ 470.870979][ T30] worker_thread+0x870/0xd30 [ 470.875638][ T30] ? __kthread_parkme+0x169/0x1d0 [ 470.906410][ T30] ? __pfx_worker_thread+0x10/0x10 [ 470.911626][ T30] kthread+0x2f0/0x390 [ 470.915743][ T30] ? __pfx_worker_thread+0x10/0x10 [ 470.946346][ T30] ? __pfx_kthread+0x10/0x10 [ 470.951034][ T30] ret_from_fork+0x4b/0x80 [ 470.955509][ T30] ? __pfx_kthread+0x10/0x10 [ 470.994600][ T30] ret_from_fork_asm+0x1a/0x30 [ 471.000006][ T30] [ 471.016315][ T30] INFO: task kworker/u8:5:502 blocked for more than 144 seconds. [ 471.024113][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 471.062196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.086402][ T30] task:kworker/u8:5 state:D stack:21720 pid:502 tgid:502 ppid:2 flags:0x00004000 [ 471.114296][ T30] Workqueue: events_unbound linkwatch_event [ 471.126510][ T30] Call Trace: [ 471.146956][ T30] [ 471.149976][ T30] __schedule+0x1895/0x4b30 [ 471.154634][ T30] ? __pfx___schedule+0x10/0x10 [ 471.185067][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.190333][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 471.195853][ T30] ? kthread_data+0x52/0xd0 [ 471.226418][ T30] ? schedule+0x90/0x320 [ 471.230771][ T30] ? wq_worker_sleeping+0x66/0x240 [ 471.236037][ T30] ? schedule+0x90/0x320 [ 471.263522][ T30] schedule+0x14b/0x320 [ 471.276333][ T30] schedule_preempt_disabled+0x13/0x30 [ 471.281895][ T30] __mutex_lock+0x6a7/0xd70 [ 471.306385][ T30] ? __mutex_lock+0x52a/0xd70 [ 471.311158][ T30] ? linkwatch_event+0xe/0x60 [ 471.315895][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.346416][ T30] ? process_scheduled_works+0x976/0x1850 [ 471.352257][ T30] linkwatch_event+0xe/0x60 [ 471.386268][ T30] process_scheduled_works+0xa63/0x1850 [ 471.392052][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.436369][ T30] ? assign_work+0x364/0x3d0 [ 471.441076][ T30] worker_thread+0x870/0xd30 [ 471.471133][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 471.485397][ T30] ? __kthread_parkme+0x169/0x1d0 [ 471.498943][ T30] ? __pfx_worker_thread+0x10/0x10 [ 471.504153][ T30] kthread+0x2f0/0x390 [ 471.526325][ T30] ? __pfx_worker_thread+0x10/0x10 [ 471.531630][ T30] ? __pfx_kthread+0x10/0x10 [ 471.555244][ T30] ret_from_fork+0x4b/0x80 [ 471.571755][ T30] ? __pfx_kthread+0x10/0x10 [ 471.586365][ T30] ret_from_fork_asm+0x1a/0x30 [ 471.591255][ T30] [ 471.606408][ T30] INFO: task kworker/u8:8:4507 blocked for more than 144 seconds. [ 471.614305][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 471.655641][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.684368][ T30] task:kworker/u8:8 state:D stack:18968 pid:4507 tgid:4507 ppid:2 flags:0x00004000 [ 471.714811][ T30] Workqueue: l2tp l2tp_session_del_work [ 471.726202][ T30] Call Trace: [ 471.729557][ T30] [ 471.732530][ T30] __schedule+0x1895/0x4b30 [ 471.755718][ T30] ? __pfx___schedule+0x10/0x10 [ 471.774407][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.786331][ T30] ? kthread_data+0x52/0xd0 [ 471.791003][ T30] ? wq_worker_sleeping+0x66/0x240 [ 471.816382][ T30] ? schedule+0x90/0x320 [ 471.820744][ T30] schedule+0x14b/0x320 [ 471.824961][ T30] schedule_timeout+0xb0/0x310 [ 471.856704][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 471.862183][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 471.906207][ T30] ? wait_for_completion+0x2fe/0x620 [ 471.911610][ T30] ? wait_for_completion+0x2fe/0x620 [ 471.936391][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.941701][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 471.966375][ T30] ? wait_for_completion+0x2fe/0x620 [ 471.971775][ T30] wait_for_completion+0x355/0x620 [ 471.996375][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 472.002133][ T30] ? __flush_work+0xe7/0xc50 [ 472.026370][ T30] __flush_work+0xa37/0xc50 [ 472.030985][ T30] ? __flush_work+0xe7/0xc50 [ 472.035654][ T30] ? __pfx___flush_work+0x10/0x10 [ 472.075250][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 472.080800][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.113382][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 472.122918][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.143051][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 472.161539][ T30] ? preempt_schedule+0xe1/0xf0 [ 472.181926][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 472.189109][ T30] ? __pfx___might_resched+0x10/0x10 [ 472.194470][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 472.235155][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 472.260635][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 472.286291][ T30] ? __mutex_lock+0x303/0xd70 [ 472.291075][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 472.313735][ T30] unregister_netdevice_queue+0x303/0x370 [ 472.326230][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 472.332572][ T30] l2tp_eth_delete+0xdb/0x100 [ 472.354630][ T30] ? __pfx_l2tp_eth_delete+0x10/0x10 [ 472.374906][ T30] l2tp_session_del_work+0x738/0x870 [ 472.391495][ T30] ? process_scheduled_works+0x976/0x1850 [ 472.406340][ T30] process_scheduled_works+0xa63/0x1850 [ 472.412066][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.444485][ T30] ? assign_work+0x364/0x3d0 [ 472.456463][ T30] worker_thread+0x870/0xd30 [ 472.461154][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 472.492133][ T30] ? __kthread_parkme+0x169/0x1d0 [ 472.514037][ T30] ? __pfx_worker_thread+0x10/0x10 [ 472.519626][ T30] kthread+0x2f0/0x390 [ 472.523755][ T30] ? __pfx_worker_thread+0x10/0x10 [ 472.556276][ T30] ? __pfx_kthread+0x10/0x10 [ 472.560966][ T30] ret_from_fork+0x4b/0x80 [ 472.565533][ T30] ? __pfx_kthread+0x10/0x10 [ 472.605007][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.610017][ T30] [ 472.613228][ T30] INFO: task syz-executor:12612 blocked for more than 145 seconds. [ 472.640812][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 472.666252][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.695128][ T30] task:syz-executor state:D stack:21376 pid:12612 tgid:12612 ppid:1 flags:0x00000004 [ 472.724868][ T30] Call Trace: [ 472.736199][ T30] [ 472.739206][ T30] __schedule+0x1895/0x4b30 [ 472.743791][ T30] ? __pfx___schedule+0x10/0x10 [ 472.764804][ T30] ? __pfx_lock_release+0x10/0x10 [ 472.775922][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 472.802024][ T30] ? schedule+0x90/0x320 [ 472.816367][ T30] schedule+0x14b/0x320 [ 472.820719][ T30] schedule_preempt_disabled+0x13/0x30 [ 472.855201][ T30] __mutex_lock+0x6a7/0xd70 [ 472.866225][ T30] ? __mutex_lock+0x52a/0xd70 [ 472.870997][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 472.901382][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 472.926442][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 472.931484][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 472.964406][ T30] ? __lock_acquire+0x1384/0x2050 [ 472.969828][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.975374][ T30] netlink_rcv_skb+0x1e3/0x430 [ 473.016367][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.021938][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.046231][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.051569][ T30] netlink_unicast+0x7f6/0x990 [ 473.075635][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 473.096235][ T30] ? __virt_addr_valid+0x183/0x530 [ 473.101455][ T30] ? __check_object_size+0x48e/0x900 [ 473.126428][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 473.131306][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.164945][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 473.176388][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.181757][ T30] __sock_sendmsg+0x221/0x270 [ 473.214840][ T30] __sys_sendto+0x39b/0x4f0 [ 473.219555][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 473.224667][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 473.264772][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 473.273250][ T30] __x64_sys_sendto+0xde/0x100 [ 473.296789][ T30] do_syscall_64+0xf3/0x230 [ 473.301392][ T30] ? clear_bhb_loop+0x35/0x90 [ 473.320351][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.344424][ T30] RIP: 0033:0x7f3a8c97fe8c [ 473.349057][ T30] RSP: 002b:00007fff130ba130 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 473.374986][ T30] RAX: ffffffffffffffda RBX: 00007f3a8d664620 RCX: 00007f3a8c97fe8c [ 473.415462][ T30] RDX: 0000000000000020 RSI: 00007f3a8d664670 RDI: 0000000000000003 [ 473.434660][ T30] RBP: 0000000000000000 R08: 00007fff130ba184 R09: 000000000000000c [ 473.456419][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 473.464489][ T30] R13: 0000000000000000 R14: 00007f3a8d664670 R15: 0000000000000000 [ 473.497201][ T30] [ 473.506301][ T30] INFO: task syz-executor:12615 blocked for more than 146 seconds. [ 473.514278][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 473.556617][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.565375][ T30] task:syz-executor state:D stack:21728 pid:12615 tgid:12615 ppid:1 flags:0x00000004 [ 473.606292][ T30] Call Trace: [ 473.609659][ T30] [ 473.612662][ T30] __schedule+0x1895/0x4b30 [ 473.646405][ T30] ? __pfx___schedule+0x10/0x10 [ 473.651365][ T30] ? __pfx_lock_release+0x10/0x10 [ 473.672967][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 473.694452][ T30] ? schedule+0x90/0x320 [ 473.706330][ T30] schedule+0x14b/0x320 [ 473.710607][ T30] schedule_preempt_disabled+0x13/0x30 [ 473.744457][ T30] __mutex_lock+0x6a7/0xd70 [ 473.749138][ T30] ? __mutex_lock+0x52a/0xd70 [ 473.753874][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 473.786481][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 473.791622][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 473.822145][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 473.844859][ T30] ? __lock_acquire+0x1384/0x2050 [ 473.856187][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.861754][ T30] netlink_rcv_skb+0x1e3/0x430 [ 473.896188][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.906335][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.911879][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.932507][ T30] netlink_unicast+0x7f6/0x990 [ 473.954710][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 473.974305][ T30] ? __virt_addr_valid+0x183/0x530 [ 473.986189][ T30] ? __check_object_size+0x48e/0x900 [ 473.991574][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 474.014530][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.030403][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 474.035440][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.066435][ T30] __sock_sendmsg+0x221/0x270 [ 474.071222][ T30] __sys_sendto+0x39b/0x4f0 [ 474.075780][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 474.106367][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.113309][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.145257][ T30] __x64_sys_sendto+0xde/0x100 [ 474.156394][ T30] do_syscall_64+0xf3/0x230 [ 474.160973][ T30] ? clear_bhb_loop+0x35/0x90 [ 474.165710][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.226355][ T30] RIP: 0033:0x7f5a5137fe8c [ 474.230868][ T30] RSP: 002b:00007ffefbb1ae10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 474.259868][ T30] RAX: ffffffffffffffda RBX: 00007f5a52064620 RCX: 00007f5a5137fe8c [ 474.296210][ T30] RDX: 0000000000000064 RSI: 00007f5a52064670 RDI: 0000000000000003 [ 474.304364][ T30] RBP: 0000000000000000 R08: 00007ffefbb1ae64 R09: 000000000000000c [ 474.336012][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 474.357623][ T30] R13: 0000000000000000 R14: 00007f5a52064670 R15: 0000000000000000 [ 474.365716][ T30] [ 474.396405][ T30] INFO: task syz.1.2473:12731 blocked for more than 147 seconds. [ 474.404222][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 474.445339][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.464292][ T30] task:syz.1.2473 state:D stack:25984 pid:12731 tgid:12730 ppid:5229 flags:0x00000004 [ 474.503123][ T30] Call Trace: [ 474.516867][ T30] [ 474.519894][ T30] __schedule+0x1895/0x4b30 [ 474.524484][ T30] ? __pfx___schedule+0x10/0x10 [ 474.556265][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.561489][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 474.586218][ T30] ? schedule+0x90/0x320 [ 474.590672][ T30] schedule+0x14b/0x320 [ 474.594887][ T30] schedule_preempt_disabled+0x13/0x30 [ 474.624214][ T30] __mutex_lock+0x6a7/0xd70 [ 474.643376][ T30] ? __mutex_lock+0x52a/0xd70 [ 474.673048][ T30] ? rtnl_dumpit+0x99/0x200 [ 474.683113][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 474.714647][ T30] ? __alloc_skb+0x28f/0x440 [ 474.719429][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 474.736437][ T30] ? __pfx_vxlan_vnifilter_dump+0x10/0x10 [ 474.742252][ T30] rtnl_dumpit+0x99/0x200 [ 474.766192][ T30] netlink_dump+0x647/0xd80 [ 474.770807][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 474.775913][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 474.816212][ T30] __netlink_dump_start+0x5a2/0x790 [ 474.821527][ T30] ? __pfx_vxlan_vnifilter_dump+0x10/0x10 [ 474.854186][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 474.874478][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.880190][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 474.885184][ T30] ? __pfx_vxlan_vnifilter_dump+0x10/0x10 [ 474.914611][ T30] ? ref_tracker_free+0x643/0x7e0 [ 474.926637][ T30] netlink_rcv_skb+0x1e3/0x430 [ 474.931513][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.964440][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.976197][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.981467][ T30] netlink_unicast+0x7f6/0x990 [ 475.006196][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 475.011589][ T30] ? __virt_addr_valid+0x183/0x530 [ 475.038556][ T30] ? __check_object_size+0x48e/0x900 [ 475.043952][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 475.068573][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.073961][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 475.103923][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.116318][ T30] __sock_sendmsg+0x221/0x270 [ 475.121086][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 475.125924][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.156293][ T30] __sys_sendmsg+0x292/0x380 [ 475.160994][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.186408][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.192851][ T30] ? do_syscall_64+0x100/0x230 [ 475.216275][ T30] ? do_syscall_64+0xb6/0x230 [ 475.221046][ T30] do_syscall_64+0xf3/0x230 [ 475.225682][ T30] ? clear_bhb_loop+0x35/0x90 [ 475.256203][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.266371][ T30] RIP: 0033:0x7f556c37dff9 [ 475.270851][ T30] RSP: 002b:00007f556d24d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.306246][ T30] RAX: ffffffffffffffda RBX: 00007f556c535f80 RCX: 00007f556c37dff9 [ 475.314305][ T30] RDX: 0000000000000000 RSI: 00000000200047c0 RDI: 0000000000000005 [ 475.346622][ T30] RBP: 00007f556c3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 475.354776][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.406413][ T30] R13: 0000000000000000 R14: 00007f556c535f80 R15: 00007ffc484394d8 [ 475.414577][ T30] [ 475.436289][ T30] INFO: task syz.2.2474:12733 blocked for more than 148 seconds. [ 475.464803][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 475.476178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.484908][ T30] task:syz.2.2474 state:D stack:23512 pid:12733 tgid:12732 ppid:5237 flags:0x00000004 [ 475.545513][ T30] Call Trace: [ 475.548923][ T30] [ 475.551900][ T30] __schedule+0x1895/0x4b30 [ 475.576395][ T30] ? __pfx___schedule+0x10/0x10 [ 475.581361][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.596177][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 475.601816][ T30] ? schedule+0x90/0x320 [ 475.634822][ T30] schedule+0x14b/0x320 [ 475.643557][ T30] schedule_preempt_disabled+0x13/0x30 [ 475.664306][ T30] __mutex_lock+0x6a7/0xd70 [ 475.686396][ T30] ? __mutex_lock+0x52a/0xd70 [ 475.691164][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 475.706238][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 475.711365][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 475.736238][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 475.741500][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.765799][ T30] ? ref_tracker_free+0x643/0x7e0 [ 475.786381][ T30] netlink_rcv_skb+0x1e3/0x430 [ 475.791259][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.806273][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.811686][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.846465][ T30] netlink_unicast+0x7f6/0x990 [ 475.852050][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 475.866261][ T30] ? __virt_addr_valid+0x183/0x530 [ 475.876186][ T30] ? __check_object_size+0x48e/0x900 [ 475.881559][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 475.914937][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.927059][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 475.932177][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.956497][ T30] __sock_sendmsg+0x221/0x270 [ 475.961361][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 475.986358][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.991751][ T30] __sys_sendmsg+0x292/0x380 [ 476.024587][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.029921][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 476.053099][ T30] ? do_syscall_64+0x100/0x230 [ 476.062958][ T30] ? do_syscall_64+0xb6/0x230 [ 476.080030][ T30] do_syscall_64+0xf3/0x230 [ 476.084628][ T30] ? clear_bhb_loop+0x35/0x90 [ 476.101371][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.119826][ T30] RIP: 0033:0x7f415677dff9 [ 476.124323][ T30] RSP: 002b:00007f4157557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.156648][ T30] RAX: ffffffffffffffda RBX: 00007f4156935f80 RCX: 00007f415677dff9 [ 476.164711][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 476.213585][ T30] RBP: 00007f41567f0296 R08: 0000000000000000 R09: 0000000000000000 [ 476.246361][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.254424][ T30] R13: 0000000000000000 R14: 00007f4156935f80 R15: 00007fff9a85c0a8 [ 476.296211][ T30] [ 476.314772][ T30] INFO: task syz.3.2478:12746 blocked for more than 149 seconds. [ 476.326638][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 476.354394][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.381965][ T30] task:syz.3.2478 state:D stack:27392 pid:12746 tgid:12745 ppid:12212 flags:0x00000004 [ 476.413321][ T30] Call Trace: [ 476.416894][ T30] [ 476.419876][ T30] __schedule+0x1895/0x4b30 [ 476.424466][ T30] ? __pfx___schedule+0x10/0x10 [ 476.456213][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.461344][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 476.514405][ T30] ? schedule+0x90/0x320 [ 476.518886][ T30] schedule+0x14b/0x320 [ 476.523102][ T30] schedule_preempt_disabled+0x13/0x30 [ 476.553274][ T30] __mutex_lock+0x6a7/0xd70 [ 476.557957][ T30] ? __mutex_lock+0x52a/0xd70 [ 476.562690][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 476.593349][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 476.606327][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 476.611468][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 476.636215][ T30] ? aa_sk_perm+0x96d/0xab0 [ 476.640824][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 476.645810][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 476.675192][ T30] ip_setsockopt+0x63/0x100 [ 476.695230][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 476.714740][ T30] do_sock_setsockopt+0x3af/0x720 [ 476.726424][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 476.732055][ T30] ? __fget_files+0x29/0x470 [ 476.756510][ T30] ? __fget_files+0x3f3/0x470 [ 476.761376][ T30] ? __fget_files+0x29/0x470 [ 476.766037][ T30] __sys_setsockopt+0x1a2/0x250 [ 476.795575][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 476.814343][ T30] do_syscall_64+0xf3/0x230 [ 476.826453][ T30] ? clear_bhb_loop+0x35/0x90 [ 476.831220][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.866232][ T30] RIP: 0033:0x7f1323b7dff9 [ 476.870825][ T30] RSP: 002b:00007f13249cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 476.924767][ T30] RAX: ffffffffffffffda RBX: 00007f1323d35f80 RCX: 00007f1323b7dff9 [ 476.933040][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 476.964552][ T30] RBP: 00007f1323bf0296 R08: 000000000000000c R09: 0000000000000000 [ 476.994687][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 477.016197][ T30] R13: 0000000000000000 R14: 00007f1323d35f80 R15: 00007ffe6e7427e8 [ 477.024276][ T30] [ 477.046319][ T30] INFO: task syz.3.2478:12747 blocked for more than 150 seconds. [ 477.054113][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 477.096300][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.105053][ T30] task:syz.3.2478 state:D stack:27392 pid:12747 tgid:12745 ppid:12212 flags:0x00000004 [ 477.144717][ T30] Call Trace: [ 477.166295][ T30] [ 477.169314][ T30] __schedule+0x1895/0x4b30 [ 477.174252][ T30] ? __pfx___schedule+0x10/0x10 [ 477.196192][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.201464][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 477.236315][ T30] ? schedule+0x90/0x320 [ 477.240670][ T30] schedule+0x14b/0x320 [ 477.244887][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.285508][ T30] __mutex_lock+0x6a7/0xd70 [ 477.304332][ T30] ? __mutex_lock+0x52a/0xd70 [ 477.309157][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 477.314404][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.354743][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 477.359996][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 477.365463][ T30] ? aa_sk_perm+0x96d/0xab0 [ 477.405558][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.410827][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 477.416023][ T30] ip_setsockopt+0x63/0x100 [ 477.444000][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 477.456172][ T30] do_sock_setsockopt+0x3af/0x720 [ 477.461282][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 477.484690][ T30] ? __fget_files+0x29/0x470 [ 477.496307][ T30] ? __fget_files+0x3f3/0x470 [ 477.501076][ T30] ? __fget_files+0x29/0x470 [ 477.505735][ T30] __sys_setsockopt+0x1a2/0x250 [ 477.544364][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 477.556372][ T30] do_syscall_64+0xf3/0x230 [ 477.560963][ T30] ? clear_bhb_loop+0x35/0x90 [ 477.565691][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.596229][ T30] RIP: 0033:0x7f1323b7dff9 [ 477.600743][ T30] RSP: 002b:00007f13249ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.646334][ T30] RAX: ffffffffffffffda RBX: 00007f1323d36058 RCX: 00007f1323b7dff9 [ 477.654402][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 477.686259][ T30] RBP: 00007f1323bf0296 R08: 000000000000000c R09: 0000000000000000 [ 477.715043][ T30] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 477.746376][ T30] R13: 0000000000000001 R14: 00007f1323d36058 R15: 00007ffe6e7427e8 [ 477.754463][ T30] [ 477.776323][ T30] INFO: task syz.3.2478:12748 blocked for more than 150 seconds. [ 477.784138][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 477.812307][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.843557][ T30] task:syz.3.2478 state:D stack:25584 pid:12748 tgid:12745 ppid:12212 flags:0x00000004 [ 477.866396][ T30] Call Trace: [ 477.869770][ T30] [ 477.872747][ T30] __schedule+0x1895/0x4b30 [ 477.924421][ T30] ? __pfx___schedule+0x10/0x10 [ 477.946332][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.951512][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 477.984674][ T30] ? schedule+0x90/0x320 [ 477.989301][ T30] schedule+0x14b/0x320 [ 477.993526][ T30] schedule_preempt_disabled+0x13/0x30 [ 478.016319][ T30] __mutex_lock+0x6a7/0xd70 [ 478.020937][ T30] ? __mutex_lock+0x52a/0xd70 [ 478.025672][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 478.060908][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 478.066057][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 478.096433][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 478.102327][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.126379][ T30] ? ref_tracker_free+0x643/0x7e0 [ 478.131508][ T30] netlink_rcv_skb+0x1e3/0x430 [ 478.156376][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.162031][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.186393][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.191680][ T30] netlink_unicast+0x7f6/0x990 [ 478.216300][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 478.221698][ T30] ? __virt_addr_valid+0x183/0x530 [ 478.254738][ T30] ? __check_object_size+0x48e/0x900 [ 478.274549][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 478.286422][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.291799][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 478.316791][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.322174][ T30] __sock_sendmsg+0x221/0x270 [ 478.354770][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 478.359882][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.365276][ T30] __sys_sendmsg+0x292/0x380 [ 478.398521][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.403783][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.430915][ T30] ? do_syscall_64+0x100/0x230 [ 478.435788][ T30] ? do_syscall_64+0xb6/0x230 [ 478.466364][ T30] do_syscall_64+0xf3/0x230 [ 478.471569][ T30] ? clear_bhb_loop+0x35/0x90 [ 478.504406][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.511417][ T30] RIP: 0033:0x7f1323b7dff9 [ 478.516073][ T30] RSP: 002b:00007f132498a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.564273][ T30] RAX: ffffffffffffffda RBX: 00007f1323d36130 RCX: 00007f1323b7dff9 [ 478.572511][ T30] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 478.596331][ T30] RBP: 00007f1323bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 478.604477][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.654511][ T30] R13: 0000000000000000 R14: 00007f1323d36130 R15: 00007ffe6e7427e8 [ 478.674446][ T30] [ 478.677820][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 478.726345][ T30] INFO: task syz-executor:12751 blocked for more than 151 seconds. [ 478.734321][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 478.773267][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.796410][ T30] task:syz-executor state:D stack:24128 pid:12751 tgid:12751 ppid:1 flags:0x00000004 [ 478.816293][ T30] Call Trace: [ 478.820331][ T30] [ 478.823315][ T30] __schedule+0x1895/0x4b30 [ 478.874439][ T30] ? __pfx___schedule+0x10/0x10 [ 478.894437][ T30] ? __pfx_lock_release+0x10/0x10 [ 478.906311][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 478.911965][ T30] ? schedule+0x90/0x320 [ 478.943043][ T30] schedule+0x14b/0x320 [ 478.956322][ T30] schedule_preempt_disabled+0x13/0x30 [ 478.961876][ T30] __mutex_lock+0x6a7/0xd70 [ 478.986335][ T30] ? __mutex_lock+0x52a/0xd70 [ 478.991121][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 479.006235][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 479.011459][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 479.040468][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 479.045692][ T30] ? __lock_acquire+0x1384/0x2050 [ 479.070850][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.096267][ T30] netlink_rcv_skb+0x1e3/0x430 [ 479.101148][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.125133][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.143740][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.156375][ T30] netlink_unicast+0x7f6/0x990 [ 479.161239][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 479.186217][ T30] ? __virt_addr_valid+0x183/0x530 [ 479.191431][ T30] ? __check_object_size+0x48e/0x900 [ 479.224421][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 479.236394][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.241781][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 479.273797][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.286421][ T30] __sock_sendmsg+0x221/0x270 [ 479.291202][ T30] __sys_sendto+0x39b/0x4f0 [ 479.295773][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 479.326301][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.356361][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.362817][ T30] ? exc_page_fault+0x590/0x8c0 [ 479.393649][ T30] __x64_sys_sendto+0xde/0x100 [ 479.398737][ T30] do_syscall_64+0xf3/0x230 [ 479.403314][ T30] ? clear_bhb_loop+0x35/0x90 [ 479.426777][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.446290][ T30] RIP: 0033:0x7fba44f7fe8c [ 479.450818][ T30] RSP: 002b:00007ffc94b861d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 479.486248][ T30] RAX: ffffffffffffffda RBX: 00007fba45c64620 RCX: 00007fba44f7fe8c [ 479.494405][ T30] RDX: 0000000000000028 RSI: 00007fba45c64670 RDI: 0000000000000003 [ 479.534338][ T30] RBP: 0000000000000000 R08: 00007ffc94b86224 R09: 000000000000000c [ 479.552064][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 479.594626][ T30] R13: 0000000000000000 R14: 00007fba45c64670 R15: 0000000000000000 [ 479.602873][ T30] [ 479.605935][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 479.645430][ T30] INFO: task syz-executor:12753 blocked for more than 152 seconds. [ 479.672018][ T30] Not tainted 6.12.0-rc2-syzkaller-00207-g8a6be4bd6fb3 #0 [ 479.696267][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.705017][ T30] task:syz-executor state:D stack:24128 pid:12753 tgid:12753 ppid:1 flags:0x00000004 [ 479.764105][ T30] Call Trace: [ 479.767669][ T30] [ 479.770655][ T30] __schedule+0x1895/0x4b30 [ 479.775239][ T30] ? __pfx___schedule+0x10/0x10 [ 479.805348][ T30] ? __pfx_lock_release+0x10/0x10 [ 479.816332][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 479.821896][ T30] ? schedule+0x90/0x320 [ 479.854845][ T30] schedule+0x14b/0x320 [ 479.874935][ T30] schedule_preempt_disabled+0x13/0x30 [ 479.886424][ T30] __mutex_lock+0x6a7/0xd70 [ 479.891125][ T30] ? __mutex_lock+0x52a/0xd70 [ 479.895859][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 479.936273][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 479.941414][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 479.976028][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 479.994345][ T30] ? __lock_acquire+0x1384/0x2050 [ 480.006412][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.011991][ T30] netlink_rcv_skb+0x1e3/0x430 [ 480.044642][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.056437][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.061897][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.095026][ T30] netlink_unicast+0x7f6/0x990 [ 480.106320][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 480.112135][ T30] ? __virt_addr_valid+0x183/0x530 [ 480.149062][ T30] ? __check_object_size+0x48e/0x900 [ 480.154555][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 480.193832][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.214691][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 480.234590][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.246376][ T30] __sock_sendmsg+0x221/0x270 [ 480.251836][ T30] __sys_sendto+0x39b/0x4f0 [ 480.286275][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 480.291431][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.316385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 480.322833][ T30] ? exc_page_fault+0x590/0x8c0 [ 480.354069][ T30] __x64_sys_sendto+0xde/0x100 [ 480.360296][ T30] do_syscall_64+0xf3/0x230 [ 480.364878][ T30] ? clear_bhb_loop+0x35/0x90