last executing test programs: 1m24.409365934s ago: executing program 3 (id=2097): r0 = socket(0x1e, 0x6, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x44}}, 0x0) 1m21.772453082s ago: executing program 4 (id=1408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001340)="05", 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x300, 0x70bd24, 0x25dfdbfd, {0xa, 0x1, 0xe6, 0x1cf, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xc0bd, 0x44, 0x7}}]}, 0x3e}, 0x1, 0x0, 0x0, 0xc850}, 0x8000) 1m9.418939097s ago: executing program 3 (id=2097): r0 = socket(0x1e, 0x6, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x44}}, 0x0) 1m6.161677045s ago: executing program 4 (id=1408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001340)="05", 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x300, 0x70bd24, 0x25dfdbfd, {0xa, 0x1, 0xe6, 0x1cf, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xc0bd, 0x44, 0x7}}]}, 0x3e}, 0x1, 0x0, 0x0, 0xc850}, 0x8000) 54.498762333s ago: executing program 3 (id=2097): r0 = socket(0x1e, 0x6, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x44}}, 0x0) 51.075913611s ago: executing program 4 (id=1408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001340)="05", 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x300, 0x70bd24, 0x25dfdbfd, {0xa, 0x1, 0xe6, 0x1cf, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xc0bd, 0x44, 0x7}}]}, 0x3e}, 0x1, 0x0, 0x0, 0xc850}, 0x8000) 39.054712405s ago: executing program 3 (id=2097): r0 = socket(0x1e, 0x6, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x44}}, 0x0) 36.817059719s ago: executing program 4 (id=1408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001340)="05", 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x300, 0x70bd24, 0x25dfdbfd, {0xa, 0x1, 0xe6, 0x1cf, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xc0bd, 0x44, 0x7}}]}, 0x3e}, 0x1, 0x0, 0x0, 0xc850}, 0x8000) 25.345876487s ago: executing program 3 (id=2097): r0 = socket(0x1e, 0x6, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x44}}, 0x0) 23.021786257s ago: executing program 4 (id=1408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001340)="05", 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x300, 0x70bd24, 0x25dfdbfd, {0xa, 0x1, 0xe6, 0x1cf, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xc0bd, 0x44, 0x7}}]}, 0x3e}, 0x1, 0x0, 0x0, 0xc850}, 0x8000) 11.92475835s ago: executing program 3 (id=2097): r0 = socket(0x1e, 0x6, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8}]}}]}, 0x44}}, 0x0) 9.666612271s ago: executing program 4 (id=1408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001340)="05", 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x300, 0x70bd24, 0x25dfdbfd, {0xa, 0x1, 0xe6, 0x1cf, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x400, 0xc0bd, 0x44, 0x7}}]}, 0x3e}, 0x1, 0x0, 0x0, 0xc850}, 0x8000) 4.11863383s ago: executing program 0 (id=3505): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x140, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0xc, 0x20, 0x0, 0x1, [@typed={0x6, 0x65, 0x0, 0x0, @str='\\\x00'}]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) 4.019388119s ago: executing program 0 (id=3506): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001c40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001740)={&(0x7f00000021c0)={0x60, 0x2, 0x7, 0x205, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe5fec9065718a0c2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001c40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001740)={&(0x7f00000021c0)={0x60, 0x2, 0x7, 0x205, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe5fec9065718a0c2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x25dfdbfe, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket$nl_generic(0x11, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) close(r5) 3.964367407s ago: executing program 2 (id=3507): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0a00020001f546649b000000"], 0x34}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0xc, 0x4) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0a00020001f546649b000000"], 0x34}}, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0xc, 0x4) (async) 3.596798006s ago: executing program 0 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x383800, 0x26}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000801) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4c0, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x464, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, '},,@(\',%--[[\x84,:{/)(:%\\@,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '${\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9998}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "ba2e8f934d818b3bffceaaaf4c07869acfcf71ce457fab532834f2f71397b7888142c8157d851f30ce9238aca1025308f6c4ea545f14ebdb40c63917d2ae1975ef75209c400d9e57265c8842dfc1fcc235bf5e8b1f4562c859e3a01e2056c86b3e70e6b7ff4e912f3c65f454209109d5064b119e0af178084559032c42d1cfcac29873a722f66124e2a88b852e2edcf84d94bda9e7fa8e5b851919b19b328d3f6085d28b99e0a35e7ac9a2b95c8e32d73bd2ee774a285652d0434c36fde7d9dd7bb94f3d202a66f1385b8d41e9d2791c7b2c0966e74769451901bd8ecf5dec78b1d39f6b8387fb02c1c06900b8e120e81b934018171436"}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "43675c10cf8ad068f2a5c173c3bc89b5512dfbce6f3214e1667aaf54cb14b3dc2960e2b721fb13a030ec0fd2cd6f238b06deef0686b6ad6c355046c69a1fcc4fb688b5dcb19a48fa7b253e9de774fca2bdd511038cb68055b9258a3a9294cc6ce8602961eac94087d1f34738c5095d8822e9a5f3b8d3e02fd48ccc538a751c0fae63ef5a73daedfa03a6b697d2a97685fb50aa6711a2eee09034e68bb4df4da60ae5433703f5849da1802fe1ab2f4e1f32682734c52b846a85ac2f86ba170a002ca5a18e4d9b407ba3e7afc439c79eb8762d70"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'N:^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x298b}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa2^\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x8091}, 0x880) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x4, 0x6, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8000, 0x1, 0x9, 0xfffffe00}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xcc, r2, 0x30c, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000a40)={0x1f, 0x0, @fixed}, &(0x7f0000000a80)=0xe, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40081}, 0x800) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000c40), 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x9c, r8, 0x41d9da5b42953292, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5cd9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5b3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80c4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000815}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r10, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x6c, r11, 0x328, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x20040010) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, r12, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8, 0x1, r9}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400d4}, 0x20000014) (async) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000001280)={0x2, [0x101, 0x5]}, &(0x7f00000012c0)=0x8) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), r10) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r15, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$inet(r14, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)="5af606c3b80743f5f0bff8296fc722a44ccb4773487053bf3e42301af4ebe446abfcd0ece5a820d5b65e869a8effa5526aa428022047411c3525359105fcfa93290085002b79e220a7efca6e2340fcf23813f8c799a488a738d3e8ae96a2007d9ed0bbd61cd490c720cd791612c4751c98bee8f92fe8797652e12e5d112676e55f1af298131868870824e6401ed570edfbb3cd7718ca53195d410d295a3b9d1a07edaa", 0xa3}], 0x1}, 0x20000000) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x78}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) 3.266281831s ago: executing program 0 (id=3511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x56a, 0x5, {{0x22, 0x4, 0x3, 0x9, 0x88, 0x68, 0x0, 0xc, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x5, [{@private=0xa010101, 0x1}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}}]}, @timestamp={0x44, 0x1c, 0x6f, 0x0, 0xf, [0x6b0, 0x1, 0x1, 0x1e54, 0x10, 0x5862]}, @timestamp_prespec={0x44, 0xc, 0x75, 0x3, 0x6, [{@multicast2, 0x3}]}, @timestamp={0x44, 0x8, 0xd8, 0x0, 0x4, [0x7]}, @lsrr={0x83, 0x7, 0x7, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x13, 0x2, [{0x0, 0x3, "b2"}, {0x7, 0xa, "1ff04586449d9dff"}]}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x6, [0x4]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x6, 0x9, 0x21, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x10, 0x1270, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x0, 0x96b, {{0x2e, 0x4, 0x3, 0x0, 0xb8, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0x0, [{@remote, 0x1000}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@rand_addr=0x64010101, 0x8}]}, @rr={0x7, 0xb, 0x1c, [@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @end, @noop, @timestamp={0x44, 0x1c, 0xa3, 0x0, 0x0, [0x1, 0x37, 0x0, 0x75, 0x101, 0x5b32ac1b]}, @end, @timestamp_prespec={0x44, 0x54, 0xf2, 0x3, 0x8, [{@local, 0x8}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x775bd788}, {@private=0xa010102, 0x35c}, {@empty, 0x10000}, {@private=0xa010101, 0xbc}, {@local, 0x30}, {@multicast1, 0x1}, {@private=0xa010101, 0x7}, {@multicast1, 0x8}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa802}, 0xc, &(0x7f0000001240)={&(0x7f0000000780)={0xabc, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x298, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "c456b221073d277326b7a051603c1b1f"}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "4165d2b8c0c0713b4c1f39003450bc2e41090616d2c52366c1d99e8f31125dfb79414af3d723a6851e297d3aebdda5c7282e81ff38a771856587d3b8b894b7672cc3876eced6580be90cd508a0531d3139444cc1b5fbf629406549e2765d785d3f3a0cef99662a6e5c326c1d9669c6f4fc083fa33693b8804a5c2a15eea83f02077a2ec9425b41d66e0354f7ac8e6cc66da7115b1edc99f7298efd47dd96798e31a1c05833b13752f054c54b091c5c13be"}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "3cd17673d994e27ab3dd844085de75850384be30981d737ae6d90056f5e4a2203ceadafe51600f37c84f2429dbd05efac58864fdf27e973675f7e276afbfc4de14e4c1ac21"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x8c, 0x5, "30eda67c43910232504d6cd41895b45c6b278fdf7c221ea8ad72b08fea7ff2fa1fc8ca7c6f1c83fe0eb67080991621d9c298c08cce8bc6c63cbca86caa1a51472bf0f5e207d1c6d2594c0e897f93d78f4e53fc37f68d9fe3897b7eefdb0b31eda558353d7d307f9234370329f9b1f7eafb3735ea5ce9ef5d4723fb7313cf05f1f896625f16e25b5f"}, @ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "d2df8b454e28e0233d702e27cc59d86444b06e1538bf9e42de59cc4d22d4fbf43125582354a686461daf64385a09e7ba6f5e120926d241e5c09bc40feb4f7ce5dbda86cf0bf8ff45b0e769f3470a4720bd69ede55d349466f52d5e7f9239d49ca7dd81ce0b5a6fca5060feb1e62eded57845ff1ff690a3df241775a61b5b78b55457cdc40e133a823350c002f867c7a0e11ee414d51fa7368a4872631c9ad3fcf38969584e34a711131bc5e9357e905d6cd3facad6e700f44266189cf8c48bb6a1fa758ba13647da8a8793cb885ba9b8930be00b823e41fca371a8ad"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "e3c7a1fe5d19dde82704b8a860fae688be85b0fd8e229d502a367730b1baece47232a976886d2ce4f26c24510cbf2146bb0ee77378faaa3278bff6bb7e066712c88f1f1751aec6e954431cb9a46512d05d07510c2d4c6fae02f705e65953d1dd8869f39679a010a1cfc403ea709844689bff67748ed554be29df96d2828e9ae7b1fadee1ca82de8d282643edb7a452ae0d287ad3d415e464028dfba9a019a94e71ca48abe713907817f3e13ee241c5f1422e1cdc2443d0125aa76d28a4ffd1ee7221a0cd45171ec1d3dfa4fd1a403d7edcb1ccde2adf8837cfcceb180a3b293fd1e71b07e5c84a0cdbd4ffa0"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x254, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x63, 0x5, "a551e4583cccbebb74ba2aca7fc2cc02c6320d265b56387450ae7b882ecce8dfa425e4ad24527b4c2eb3ae7a920560e870aa764401af44917b32c62fe16d150c0f6d6dea142d18f00eec134324f0a8793c67afc320b530fe520effc409743b"}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "cc736a03c8f369b0220fa7cfce27bfb3fc3525b069cdb71c769cdd81d0f6905cc2d4ddf5d6b0382612d0b4ae8b76026acd77bfbf40d44e846811a08df161804cd57213b1c0164e4c14bad5802912784a2685f583d441d641aa2dc478e10a3aeb8603ff2fde278b50708b39fe70da39a6fd41a6ae70402dfb3c10687ec084c6d2dcefb9827efba85d820a039fad75e846"}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "f52e4168fb9bccddcc676741d27cfa13088f9134eba817b400f20fc9b245dd1278ff27d4df1d8c1c43a5ebb3a5484b78516f2ec12b46bdc1dc71b0091c46a33e4fb0dadfeb6f0376fe9faa68d89d5b3d486d226ab97eb71b4f2adda7b4520fef67f2a4b7ccd1f2426ce5732d1ce11aaffd22235224c527ea209f8ab3fc298878f1f7d2c060d2054557716de81998e312443f89a380d0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(+:$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3af}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1dc, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd1d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, './%]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-!,&\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '(N,#^^[}]+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x719}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&^!{+\x1d\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',\x90,!.$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&#(\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\\:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\-\\\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae18}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "5480a0d410037a1146a235b85ae5d228e6b58d1ecf9300937c8eb58563c1aabe3aed4937ebff7b0f3caa68e8b6ee7e0a462fc6ba52baa6b6020eec3eb6a40b9f7c2edca0f8cd7298c47071621477251ae36d3fb8c0d857acf42d4b148a2d043ffe76e370102e45a6abbc87a4dad1e6b49076ee65872a3e5a3d7786b7f661a637be3836887f40"}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'hash:net,port\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\')],(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':.-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}]}]}]}, 0xabc}, 0x1, 0x0, 0x0, 0x40001}, 0x24000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="05d5859a26f0848e71a1405dc2f6c22bcebcd63cbd6485fb68941271c26eae9a92bd7e636be09e7ec1029e47765b7a9bc871cdcbfac7e2128c0cdad377f73113e984f2f89186039e008af5764d9d861015d3a3da75b00b756bae811b2d0a1e424bd93514186449dbab04e9263dd912d1e887a1e77487dbb24e799ec5be0b7e7a01c5da07b9417f733c7aade8999733cf352cea164d5ff646afefd1c729f053536c7e4514ba879a75b54b7f59dd87b1ab1c925ed71caaa049f1103147c81ff0d2d87a4e68cef0fad9c21b42e8f1", @ANYBLOB="01b7b0c0dc00fddbdf25070300", @ANYRES32=r2, @ANYRESDEC=r8], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044894) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$inet_sctp(0x2, 0x1, 0x84) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r15, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x600c0c0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.200025425s ago: executing program 2 (id=3512): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="131800010000000000000000001d01090004000080000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'caif0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) socket(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) (async) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="131800010000000000000000001d01090004000080000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'caif0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) (async) 965.154759ms ago: executing program 0 (id=3513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x6, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100), 0x6) getsockname(r4, 0x0, &(0x7f0000002100)) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000280)=0x3, &(0x7f0000000300)=0x2) r5 = socket(0x10, 0x803, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000000)={r9, 0x1}, 0x8) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0x3}, {0x9, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {}, {0x5, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000700000042dbd7000ffdbdf2507000000", @ANYRES32=r10, @ANYBLOB="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"/352], 0x58}, 0x1, 0x0, 0x0, 0x405c}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 909.422021ms ago: executing program 2 (id=3515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)}, 0xff03}], 0x2, 0x801) 857.215624ms ago: executing program 2 (id=3516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x9, 0x8, 0x3, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040081}, 0x200080b4) ioctl$int_out(r0, 0x0, &(0x7f00000002c0)) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000000300)=@vsock, 0x80, &(0x7f0000001740)=[{&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/171, 0xab}, {&(0x7f0000001540)=""/227, 0xe3}, {&(0x7f0000001640)=""/237, 0xed}], 0x5, &(0x7f00000017c0)=""/230, 0xe6}, 0x40002000) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001900), 0x800) recvmmsg(r3, &(0x7f0000004580)=[{{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000002c40)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/147, 0x93}, {&(0x7f0000002a80)=""/166, 0xa6}, {&(0x7f0000002b40)=""/50, 0x32}, {&(0x7f0000002b80)=""/81, 0x51}, {&(0x7f0000002c00)=""/20, 0x14}], 0x6, &(0x7f0000002cc0)=""/17, 0x11}, 0x8}, {{&(0x7f0000002d00)=@l2, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/86, 0x56}, {&(0x7f0000002e00)=""/140, 0x8c}], 0x2, &(0x7f0000002f00)=""/191, 0xbf}, 0x10000}, {{&(0x7f0000002fc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003040)=""/6, 0x6}, {&(0x7f0000003080)=""/32, 0x20}, {&(0x7f00000030c0)=""/136, 0x88}, {&(0x7f0000003180)=""/1, 0x1}, {&(0x7f00000031c0)=""/237, 0xed}, {&(0x7f00000032c0)=""/52, 0x34}, {&(0x7f0000003300)=""/210, 0xd2}, {&(0x7f0000003400)=""/48, 0x30}, {&(0x7f0000003440)=""/16, 0x10}, {&(0x7f0000003480)=""/4096, 0x1000}], 0xa, &(0x7f0000004540)=""/55, 0x37}, 0x953}], 0x3, 0x0, &(0x7f0000004640)={0x77359400}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000004680)=0x9f352c5c, 0x4) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000046c0)={{r3}, {@void, @max}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000004740), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x1c, r6, 0x601, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x8040) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000004840)={0x0, 0x3a, "29e24967af85c0932b839430beb364c09bfc8887498298a20bfaf16b71fa61939ab904cfba3325a0bc46a929eefb60e5ee6869058f5bd3560798"}, &(0x7f00000048c0)=0x42) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000004900)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004980), r0) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000004a80)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x48, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xd945}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x55c6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'pim6reg\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4008005) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004b00), r8) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000004c00)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b40)={0x64, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffe}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x5000}, 0x814) recvmsg(r5, &(0x7f0000004e80)={&(0x7f0000004c40)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004cc0)=""/98, 0x62}, {&(0x7f0000004d40)=""/175, 0xaf}], 0x2, &(0x7f0000004e40)=""/36, 0x24}, 0x100) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0xb545a4bdfe39baae}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f00)={0x74, 0x1402, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x20041800) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005040), r8) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000005300)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x202001}, 0xc, &(0x7f00000052c0)={&(0x7f0000005080)={0x204, r12, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8deb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @local, 0x10}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb849}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x9c1d8bb64f3532bc}, 0x8001) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000005340)={0xd751, 0xadf2, 0x6e, 0x5}, 0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000005380)={0x0, @in6={{0xa, 0x4e22, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2d2e}}}, 0x84) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000005440)) 856.287578ms ago: executing program 1 (id=3517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0xffffffff, @private0}, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x0, {[0x5, 0xa, 0x5, 0xfffffff7, 0xf, 0xf, 0xfffff001, 0x3d70e528]}}, 0x5c) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x20008801) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c010000", @ANYRES32=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="aa0054f0802375e1ddee20541c222d9d89936179bcdf974c31e1c9099288515af08be9a1aa51d4412ee22761b8119adc8a0e4e5fd620c12289e9f836e372d91d287f0e541250841ccd3339065ef581518799805623061d23c4dfda615a7f34270020e97c65a1ab1b9bf0296a482f7c08ddabc36bf476e9661031bdc3ae9b7abc4d7f503dbf3f1111c15bd93c05785476e94826dd2c4543b90dbfad415c168c11f71785a8b897", 0xa6}, {&(0x7f0000000240)="4b43d55ca84e806621ec119ba774a38be03ffa9ce1932606c61a0cb8b04c275fce6ebf14d9401d9187d024268ab0d90d26d21e6b854867196823698beebeb19c333f694d986355b986acd2cb2700231b3b38e5158e1f417ceb892c5b142ac1bb588bda528ffd90c6f2311a14ee6c3f87ee5648f6cbdcbf9c2d18a52a12f9880441e00b1918f978f56495310d8d7b95806ca95d9457b5a3494089de6b6ec4b0aa5d93f08ec8254e72264f3320c9f27c1747d322e26d5e4403e1a7b514f0520960f4b08304f684cae7e875a63aba6cde6f55a6a3ab56d5cd18911756657e8f98464c8e4dae0a78ece5712d2050b5594de3e43689b43338", 0xf6}, {&(0x7f0000000340)="8cf703092f49fe1fad63674bb750b7f5ef94e4a1c89e4b2fe1c70b011beef144f091a89a275fc17bc9be17af858ceb03a56db241d88a61684a53d71553813b0b1f0cb2617c17f91eee8b027205e475331af90f6ced3a00e8f3674cd10f4f73f483898b086f212d6931414c4d0e9c32207d9f2202347ef3086e1cc31a21f321c0312558ffd3b3d47f340f1a1b1f6d2eda0c651f2c2d453bc256dcf4a3775c1d1bf3fce87993605281fe6c2a58b492", 0xae}, {&(0x7f0000000400)="9e9c7f97df60089e8c18206fd04ec616cf5796aacf6b389cef44100be7d8645b", 0x20}], 0x4}, 0x200048a4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='netdevsim0\x00') 657.778232ms ago: executing program 1 (id=3518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0xffffffffffffffe2, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x0) 458.529625ms ago: executing program 1 (id=3519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800001e0c87080000000000000001c572490be15299d2eeceaaf76ca35dee625c01c9a0c33e3e7f5fcf2c1a452dcffcbc47d5a2cbc33e6301867e159e09ebd49200bde8c6985f657f5cf5782127c4c0e46f82585258330994adbe396d878f9f820f86d6a5d5c55b2b043d2fe542c36ba5bac597ec9a743be605018f06e808740989cee0fd8bc64bcda9d9cb9c6f3a7e566a30584b017e94521560cd4395b91733d43c98855900558c7531b3511fd9693d92e9e83568e25016fbe98fb636df176d1daecabc60cf971e69a36f5d1de778c0f77545b1d7d0b7fa32ab8b0df2797f06672ecf85ef2e949a892f1b752f7820bca749d73e68998e0293d97e201eac98a46c2b19be29ea716ddf98d4b75f53dfaad004b96b26df7bd00eaf1fbf5c574c7bf1a566a5b4fcad20563b304a97c804ed5ad5af49c7471a433ab0f8ed98d8c74c35c3af2e919ac4df"], 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001140)) sendto$inet(r4, &(0x7f00000008c0)="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", 0x1000, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40000f000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x9, &(0x7f00000000c0)=0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) 454.772262ms ago: executing program 2 (id=3520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 342.509064ms ago: executing program 1 (id=3521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a320000000009000100"], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xb, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x40802) 295.128065ms ago: executing program 2 (id=3522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_to_batadv\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x3c}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x24000004) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 134.635787ms ago: executing program 1 (id=3523): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x40f00, 0x0, '\x00', r3, @fallback=0x4, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 35.956443ms ago: executing program 0 (id=3524): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000000000031"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='htcp\x00', 0x5) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89fe, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 1 (id=3525): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r6, 0x801}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000006c2d2180165990a10008000300", @ANYRES32=r10], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x17, 0x59}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x64d}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x7, 0x6, 0x0, 0xe]}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540080b6e66f93efe70fc0152df9d42e00", @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540080b6e66f93efe70fc0152df9d42e00", @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ac7fd5d244d88a843008100150086dd603f00e700182c00fe8000000000000000000000000000aa20010000000000fb00000000000000000000fffd0018907804000000090000000700000000000000"], 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010100}}, 0x24) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000000c0)=0x19) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x19) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x410, 0x24, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@nested={0x124, 0xae, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="a871066437cb3e98677eaa22c51b89008c78f380d1a8538c305dd4855170899f04d2242785d9ca1a41c9cb89c7feb8b1488ae87d1c1859249c5561fbde61b617151011247ef56da11f7c2e5022c532d902f2bd3d704caffd5f6a22b759eb5541f4c6276476c1485b9e467ec16a23280b387e1523afaba08cfcbf7dbbc0ef1245cc7f311a5e59a99663c8d020a2976de68c3784eb8537e52779b8fc257fdbb315310d191905638c507f02be838324ad47511c254f80e59c0e205696397078f7a05bf52edb7c18b2e21df0e2d3cdcb5b271d0a156428", @typed={0x8, 0xc2, 0x0, 0x0, @pid}, @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @typed={0x7, 0xec, 0x0, 0x0, @str='}:\x00'}, @generic="0ed4681ec1ca4fb2b124e2e254643eee40099858ec94a9b5960cea", @typed={0x8, 0x41, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x9c, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0xf9, 0x0, 0x0, @uid=r12}, @typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="a565495e1d7fc590b9953312a09f922022d60873058857122b4181f6410ae429c36e72d5aa7a23f47050d250df353f4a001271644e0b99040356e10ba3cdaefd09477415fdb5f7da62d203393c393e93cda82b6860ea2a5787e6abe6ed2d0548a170079298047e6a413688dd9c1ade5f2d5cf22ef2", @generic="eba795490f439cc3d87f5bb646c16d4c4fb255ff03e2831893fe4f1d09e9bc225d241c4618a616d769ee44e7220110f9c0fccbba24bfa2bd2bbe9ad62cb317434ede841d2669e5d3304c0fd308e533c27c5ac38cdb98811d9d4ac32f8a01323e0a8b5afc49c9b1bd5de354a1", @generic="a51c6eae2ce9a8f28078306dd1b463005c45", @generic="c3598df3dbbe829ea9c1a9e186b203b0b51fe43d745d1691e905fce1a813b9cf68029b7182d9ee1d8316add60898e3a072705b07eff64874c767b79440204d32ba02ec98355654652a767010c54cb17f51228f19213252ad9312d8a785035e00f9baf5ff83e0eef8e7920489b1307d0fafbd4da7e00f5694c91def04a2275d019598405e3ae071233b0b09ddd078f8144bcdc61fe885c6add36c10ee31ebc17555991bf3908b9faa1337c4383b10073937fb79e4a2c51561f2376538aec989284a1404540d", @typed={0x102, 0x13a, 0x0, 0x0, @binary="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"}]}, 0x410}, 0x1, 0x0, 0x0, 0x8005}, 0x400c5) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x9d, &(0x7f00000002c0), &(0x7f0000000080)=0x4) (async) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x9d, &(0x7f00000002c0), &(0x7f0000000080)=0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000680)={0xe3, 0x4, 0x2}, 0xc) listen(r1, 0x1) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$NL80211_CMD_PROBE_CLIENT(r13, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 1 - 0 [ 396.575475][T17662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.592482][T17662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.637293][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.637845][ T5238] Bluetooth: hci2: command tx timeout [ 396.675174][T17662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.725851][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.749431][T17662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.756429][T17662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.786640][T17662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.952041][T17662] hsr_slave_0: entered promiscuous mode [ 396.962095][T17662] hsr_slave_1: entered promiscuous mode [ 396.975665][T17662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.992857][T17662] Cannot create hsr debugfs directory [ 397.234655][ T53] bridge_slave_1: left allmulticast mode [ 397.247907][ T53] bridge_slave_1: left promiscuous mode [ 397.253668][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.266644][ T53] bridge_slave_0: left allmulticast mode [ 397.274347][ T53] bridge_slave_0: left promiscuous mode [ 397.286507][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.687337][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.843508][ T5238] Bluetooth: hci3: command tx timeout [ 397.902244][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.915176][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.938790][ T53] bond0 (unregistering): Released all slaves [ 397.999735][T17795] netlink: 'syz.1.3076': attribute type 10 has an invalid length. [ 398.026577][T17795] team0: Device hsr_slave_0 failed to register rx_handler [ 398.475330][T17828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3087'. [ 398.531113][T17724] chnl_net:caif_netlink_parms(): no params data found [ 398.573862][T17828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3087'. [ 398.717554][ T5238] Bluetooth: hci2: command tx timeout [ 398.718054][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.287901][ T53] hsr_slave_0: left promiscuous mode [ 399.313882][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 399.331187][ T53] hsr_slave_1: left promiscuous mode [ 399.348800][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.356657][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.377104][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.385291][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.424823][ T53] veth1_macvtap: left promiscuous mode [ 399.462776][ T53] veth0_macvtap: left promiscuous mode [ 399.468642][ T53] veth1_vlan: left promiscuous mode [ 399.473945][ T53] veth0_vlan: left promiscuous mode [ 399.763318][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.917571][ T5238] Bluetooth: hci3: command tx timeout [ 400.041414][ T53] team0 (unregistering): Port device team_slave_1 removed [ 400.103953][ T53] team0 (unregistering): Port device team_slave_0 removed [ 400.619478][T17724] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.639873][T17724] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.653936][T17724] bridge_slave_0: entered allmulticast mode [ 400.688596][T17724] bridge_slave_0: entered promiscuous mode [ 400.718970][T17724] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.726232][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.747580][T17724] bridge_slave_1: entered allmulticast mode [ 400.761726][T17724] bridge_slave_1: entered promiscuous mode [ 400.807259][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.807510][ T5238] Bluetooth: hci2: command tx timeout [ 400.864572][T17724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.894497][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 400.938188][T17894] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3101'. [ 400.957778][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 400.966820][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 400.984790][T17894] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3101'. [ 401.002713][T17888] netlink: 'syz.2.3100': attribute type 10 has an invalid length. [ 401.026537][T17888] bond0: (slave team0): Enslaving as an active interface with an up link [ 401.039951][T12469] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 401.053375][T17889] netlink: 'syz.2.3100': attribute type 10 has an invalid length. [ 401.064095][T17889] bond0: (slave team0): Releasing backup interface [ 401.090150][T17724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.125067][T17896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3103'. [ 401.307094][T17724] team0: Port device team_slave_0 added [ 401.349346][T17724] team0: Port device team_slave_1 added [ 401.459857][T17724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.473885][T17724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.503937][T17724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.524199][T17724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.531537][T17724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.576298][T17724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.770633][T17724] hsr_slave_0: entered promiscuous mode [ 401.787902][T17724] hsr_slave_1: entered promiscuous mode [ 401.808189][T17724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.817053][T17724] Cannot create hsr debugfs directory [ 401.832372][T17662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.847263][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.863073][T17662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.888115][T17662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.948211][T17662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.001062][ T5238] Bluetooth: hci3: command tx timeout [ 402.041051][T17933] nlmon0: entered promiscuous mode [ 402.046404][T17933] vlan0: entered promiscuous mode [ 402.074214][T17933] nlmon0: left promiscuous mode [ 402.121095][T17662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.211218][T17662] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.359986][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.367186][ T6492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.388843][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.396196][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.458463][T17662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.470226][T17662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.553943][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3116'. [ 402.863769][T17960] syz.0.3119: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.887311][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.919080][T17960] CPU: 0 UID: 0 PID: 17960 Comm: syz.0.3119 Not tainted 6.12.0-rc1-syzkaller-00173-g08c8acc9d8f3 #0 [ 402.929913][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.940014][T17960] Call Trace: [ 402.943330][T17960] [ 402.946289][T17960] dump_stack_lvl+0x241/0x360 [ 402.951029][T17960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.956291][T17960] ? __pfx__printk+0x10/0x10 [ 402.960955][T17960] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 402.967425][T17960] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 402.974004][T17960] warn_alloc+0x278/0x410 [ 402.978387][T17960] ? stack_depot_save_flags+0x29/0x830 [ 402.983999][T17960] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 402.990135][T17960] ? __pfx_warn_alloc+0x10/0x10 [ 402.995035][T17960] ? kasan_save_track+0x3f/0x80 [ 402.999928][T17960] ? __kasan_kmalloc+0x98/0xb0 [ 403.004753][T17960] ? xsk_setsockopt+0x4ea/0x950 [ 403.009663][T17960] ? do_sock_setsockopt+0x3af/0x720 [ 403.014910][T17960] ? __sys_setsockopt+0x1a2/0x250 [ 403.019981][T17960] ? __x64_sys_setsockopt+0xb5/0xd0 [ 403.025211][T17960] ? do_syscall_64+0xf3/0x230 [ 403.029922][T17960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.036042][T17960] __vmalloc_node_range_noprof+0x126/0x13f0 [ 403.041985][T17960] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 403.048514][T17960] ? __kasan_kmalloc+0x98/0xb0 [ 403.053301][T17960] ? xskq_create+0x54/0x170 [ 403.057847][T17960] vmalloc_user_noprof+0x74/0x80 [ 403.062817][T17960] ? xskq_create+0xb6/0x170 [ 403.067343][T17960] xskq_create+0xb6/0x170 [ 403.071717][T17960] xsk_init_queue+0xa1/0x100 [ 403.076344][T17960] xsk_setsockopt+0x4ea/0x950 [ 403.081050][T17960] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.086271][T17960] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.091135][T17960] ? __pfx_lock_acquire+0x10/0x10 [ 403.096181][T17960] ? aa_sock_opt_perm+0x79/0x120 [ 403.101140][T17960] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.106362][T17960] do_sock_setsockopt+0x3af/0x720 [ 403.111409][T17960] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 403.116965][T17960] ? __fget_files+0x29/0x470 [ 403.121620][T17960] ? __fget_files+0x3f3/0x470 [ 403.126316][T17960] ? __fget_files+0x29/0x470 [ 403.130934][T17960] __sys_setsockopt+0x1a2/0x250 [ 403.136066][T17960] __x64_sys_setsockopt+0xb5/0xd0 [ 403.141109][T17960] do_syscall_64+0xf3/0x230 [ 403.145646][T17960] ? clear_bhb_loop+0x35/0x90 [ 403.150358][T17960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.156290][T17960] RIP: 0033:0x7f9f7df7dff9 [ 403.160730][T17960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.180362][T17960] RSP: 002b:00007f9f7ee64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.188793][T17960] RAX: ffffffffffffffda RBX: 00007f9f7e135f80 RCX: 00007f9f7df7dff9 [ 403.196776][T17960] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 403.204847][T17960] RBP: 00007f9f7dff0296 R08: 0000000000000004 R09: 0000000000000000 [ 403.212832][T17960] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.220813][T17960] R13: 0000000000000000 R14: 00007f9f7e135f80 R15: 00007ffe9d408a88 [ 403.228809][T17960] [ 403.299000][T17960] Mem-Info: [ 403.302194][T17960] active_anon:6158 inactive_anon:0 isolated_anon:0 [ 403.302194][T17960] active_file:1419 inactive_file:38381 isolated_file:0 [ 403.302194][T17960] unevictable:768 dirty:56 writeback:0 [ 403.302194][T17960] slab_reclaimable:10048 slab_unreclaimable:109345 [ 403.302194][T17960] mapped:20906 shmem:1230 pagetables:769 [ 403.302194][T17960] sec_pagetables:0 bounce:0 [ 403.302194][T17960] kernel_misc_reclaimable:0 [ 403.302194][T17960] free:1351297 free_pcp:336 free_cma:0 [ 403.306773][T17970] netlink: 'syz.1.3121': attribute type 10 has an invalid length. [ 403.357097][T17960] Node 0 active_anon:24632kB inactive_anon:0kB active_file:5676kB inactive_file:153452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83724kB dirty:224kB writeback:0kB shmem:3384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no [ 403.404529][T17960] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 403.444889][T17970] macvlan0: entered promiscuous mode [ 403.456196][T17970] macvlan0: entered allmulticast mode [ 403.465913][T17960] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.530125][T17960] lowmem_reserve[]: 0 2465 2466 0 0 [ 403.530483][T17970] veth1_vlan: entered allmulticast mode [ 403.536490][T17960] Node 0 DMA32 free:1458728kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:24292kB inactive_anon:0kB active_file:5676kB inactive_file:152616kB unevictable:1536kB writepending:220kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:1948kB local_pcp:952kB free_cma:0kB [ 403.544031][T17970] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 403.602852][T17960] lowmem_reserve[]: 0 0 0 0 0 [ 403.623672][T17724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.628604][T17960] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.668095][T17662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.705609][T17662] veth0_vlan: entered promiscuous mode [ 403.717443][T17662] veth1_vlan: entered promiscuous mode [ 403.745323][T17662] veth0_macvtap: entered promiscuous mode [ 403.757019][T17662] veth1_macvtap: entered promiscuous mode [ 403.773371][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.784005][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.793931][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.804435][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.814406][T17960] lowmem_reserve[]: 0 0 0 0 0 [ 403.816020][T17662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.820142][T17960] Node 1 [ 403.830666][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.836112][T17960] Normal free:3930728kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.844238][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.844258][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.844283][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.845656][T17662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.914111][T17724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.921158][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 403.933511][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 403.935996][T17960] lowmem_reserve[]: 0 0 0 0 0 [ 403.949730][T17960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 403.963974][T17960] Node 0 DMA32: 95*4kB (UME) 102*8kB (UME) 58*16kB (UME) 219*32kB (UME) 244*64kB (UME) 247*128kB (UME) 352*256kB (UM) 283*512kB (UM) 191*1024kB (UME) 8*2048kB (UME) 233*4096kB (UM) = 1457708kB [ 403.984062][T17960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 403.997501][T17960] Node 1 Normal: 166*4kB (UE) 46*8kB (UME) 40*16kB (UME) 187*32kB (UME) 80*64kB (UME) 23*128kB (UME) 17*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 952*4096kB (M) = 3930728kB [ 404.016215][T17960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.031462][T17662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.040887][T17662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.051054][T17662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.060253][T17960] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.069708][T17662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.080748][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3124'. [ 404.087863][ T5238] Bluetooth: hci3: command tx timeout [ 404.090067][T17960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.121236][T17960] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.142883][T17960] 41031 total pagecache pages [ 404.152362][T17724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.158387][T17960] 0 pages in swap cache [ 404.163263][T17960] Free swap = 124756kB [ 404.168283][T17960] Total swap = 124996kB [ 404.172493][T17960] 2097051 pages RAM [ 404.209075][T17724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.222389][T17960] 0 pages HighMem/MovableOnly [ 404.233602][T17960] 427075 pages reserved [ 404.239349][T17960] 0 pages cma reserved [ 404.401622][T17995] netlink: 'syz.2.3127': attribute type 2 has an invalid length. [ 404.409988][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 404.436117][T12469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.448450][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 404.458012][T12469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.467636][T17992] netlink: 'syz.1.3126': attribute type 10 has an invalid length. [ 404.512557][T17992] team0: Device veth0_macvtap failed to register rx_handler [ 404.661930][T17998] block nbd0: must specify backend [ 404.740857][ T6492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.758130][ T6492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.862311][T18009] netlink: 5304 bytes leftover after parsing attributes in process `syz.1.3129'. [ 404.895186][T17724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.957300][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.173070][T17724] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.203372][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.210629][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.291151][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.298380][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.372904][T18038] netlink: 'syz.2.3132': attribute type 29 has an invalid length. [ 405.381219][T18045] netlink: 484 bytes leftover after parsing attributes in process `syz.1.3134'. [ 405.409595][T18044] netlink: 'syz.2.3132': attribute type 29 has an invalid length. [ 405.449409][T18035] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3132'. [ 405.462651][T17724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.492946][T17724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.537884][T18035] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3132'. [ 405.895920][ T1109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.997409][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.031503][ T1109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.129099][T17724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.269916][ T1109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.532723][ T1109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.571264][T17724] veth0_vlan: entered promiscuous mode [ 406.590150][T17724] veth1_vlan: entered promiscuous mode [ 406.695120][T17724] veth0_macvtap: entered promiscuous mode [ 406.705818][T17724] veth1_macvtap: entered promiscuous mode [ 406.721731][ T1109] bridge_slave_1: left allmulticast mode [ 406.728006][ T1109] bridge_slave_1: left promiscuous mode [ 406.735639][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.750539][ T1109] bridge_slave_0: left allmulticast mode [ 406.756252][ T1109] bridge_slave_0: left promiscuous mode [ 406.762628][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.039686][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.455329][T18124] Cannot find del_set index 2 as target [ 407.508001][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.518895][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.526862][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.535805][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.555926][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.566080][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.576068][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.623007][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.653873][T18132] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 407.658892][ T1109] bond0 (unregistering): Released all slaves [ 407.679329][T18132] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.3140'. [ 407.749214][T17724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.765021][T17724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.775563][T17724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.786589][T17724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.797510][T17724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.808288][T17724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.820204][T17724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.830113][T17724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.841097][T17724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.851674][T17724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.862500][T17724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.873070][T17724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.884732][T17724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.897495][T17724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.909526][T17724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.918414][T17724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.927317][T17724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.936251][T17724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.080447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.355179][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.393412][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.439588][T18125] lo speed is unknown, defaulting to 1000 [ 408.448262][T18158] netlink: 'syz.2.3148': attribute type 3 has an invalid length. [ 408.456061][T18158] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3148'. [ 408.532568][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.567492][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.923983][T18176] tipc: Enabling of bearer rejected, already enabled [ 409.117533][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.384539][ T1109] hsr_slave_0: left promiscuous mode [ 409.396101][ T1109] hsr_slave_1: left promiscuous mode [ 409.403833][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.413092][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.421262][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.429046][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.452721][ T1109] veth1_macvtap: left promiscuous mode [ 409.463585][ T1109] veth0_macvtap: left promiscuous mode [ 409.470720][ T1109] veth1_vlan: left promiscuous mode [ 409.476061][ T1109] veth0_vlan: left promiscuous mode [ 409.603583][ T5238] Bluetooth: hci2: command tx timeout [ 409.956477][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 410.004936][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 410.162304][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.516252][T18125] chnl_net:caif_netlink_parms(): no params data found [ 410.692163][T18125] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.705850][T18125] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.713545][T18125] bridge_slave_0: entered allmulticast mode [ 410.729839][T18125] bridge_slave_0: entered promiscuous mode [ 410.759731][T18125] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.766972][T18125] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.785708][T18125] bridge_slave_1: entered allmulticast mode [ 410.793162][T18125] bridge_slave_1: entered promiscuous mode [ 410.852138][T18125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.901566][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.926280][T18125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.044590][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.085938][T18125] team0: Port device team_slave_0 added [ 411.131773][T18125] team0: Port device team_slave_1 added [ 411.213289][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.245850][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.344512][T18125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.369738][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.399781][T18125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.412455][T18222] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 411.451681][T18232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3158'. [ 411.483170][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.511171][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.522685][T18125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.529996][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.565127][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.574902][T18125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.576354][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.614263][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.623335][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.631554][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.678195][ T5238] Bluetooth: hci2: command tx timeout [ 411.740891][T18125] hsr_slave_0: entered promiscuous mode [ 411.753899][T18125] hsr_slave_1: entered promiscuous mode [ 411.773314][T18125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.789899][T18125] Cannot create hsr debugfs directory [ 412.101516][ T1109] bridge_slave_1: left allmulticast mode [ 412.121187][ T1109] bridge_slave_1: left promiscuous mode [ 412.144273][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.247320][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.264959][ T1109] bridge_slave_0: left allmulticast mode [ 412.276377][ T1109] bridge_slave_0: left promiscuous mode [ 412.283336][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.873173][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.892410][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.904709][ T1109] bond0 (unregistering): Released all slaves [ 412.942854][T18275] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3163'. [ 412.968230][T18235] lo speed is unknown, defaulting to 1000 [ 412.968292][T18268] netlink: 'syz.1.3162': attribute type 10 has an invalid length. [ 413.277277][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.687506][ T5238] Bluetooth: hci3: command tx timeout [ 413.757866][ T5238] Bluetooth: hci2: command tx timeout [ 413.766304][T18298] openvswitch: netlink: Actions may not be safe on all matching packets [ 413.831654][T18304] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 413.941291][T18308] netlink: 'syz.0.3173': attribute type 10 has an invalid length. [ 413.954855][T18308] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.3173'. [ 413.967813][T18308] openvswitch: netlink: Flow key attr not present in new flow. [ 413.976799][T18308] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 413.992918][T18306] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3172'. [ 414.089506][T18308] syz_tun: entered promiscuous mode [ 414.111683][T18308] syz_tun: left promiscuous mode [ 414.294082][T18313] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 414.317389][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.338887][T18235] chnl_net:caif_netlink_parms(): no params data found [ 414.381268][T18313] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 414.389369][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 414.428696][T18315] veth1_to_team: entered allmulticast mode [ 414.548531][T18325] netlink: 'syz.2.3177': attribute type 1 has an invalid length. [ 414.558699][T18325] openvswitch: netlink: Actions may not be safe on all matching packets [ 414.596534][ T1109] hsr_slave_0: left promiscuous mode [ 414.607989][ T1109] hsr_slave_1: left promiscuous mode [ 414.642390][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.654162][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.689321][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.711976][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.762026][ T1109] veth1_macvtap: left promiscuous mode [ 414.781997][ T1109] veth0_macvtap: left promiscuous mode [ 414.795045][ T1109] veth1_vlan: left promiscuous mode [ 414.801885][ T1109] veth0_vlan: left promiscuous mode [ 415.361237][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.411751][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 415.466179][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 415.757558][ T5238] Bluetooth: hci3: command tx timeout [ 415.837985][ T5238] Bluetooth: hci2: command tx timeout [ 415.941926][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 416.177907][T18235] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.188967][T18235] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.196270][T18235] bridge_slave_0: entered allmulticast mode [ 416.231161][T18235] bridge_slave_0: entered promiscuous mode [ 416.265040][T18235] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.293670][T18235] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.301280][T18235] bridge_slave_1: entered allmulticast mode [ 416.311203][T18235] bridge_slave_1: entered promiscuous mode [ 416.378592][T18353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3180'. [ 416.407264][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.485698][T18125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.508779][T18235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.546751][T18235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.571486][ T43] block nbd0: Possible stuck request ffff888025200000: control (read@0,2048B). Runtime 300 seconds [ 416.574697][T18125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.612678][T18125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.626707][T18125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.736420][T18235] team0: Port device team_slave_0 added [ 416.786599][T18235] team0: Port device team_slave_1 added [ 416.929867][T18235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.945528][T18235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.027632][T18235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.043984][T18235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.061757][T18235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.093620][T18235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.283633][T18235] hsr_slave_0: entered promiscuous mode [ 417.293175][T18235] hsr_slave_1: entered promiscuous mode [ 417.300951][T18235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.309839][T18235] Cannot create hsr debugfs directory [ 417.437317][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.525338][T18125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.529932][T18435] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 417.549824][T18435] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3194'. [ 417.581743][T18433] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 417.604067][T18433] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 417.635809][T18433] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 417.655402][T18125] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.705792][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.713071][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.746867][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.754098][ T7829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.840164][ T5249] Bluetooth: hci3: command tx timeout [ 417.896467][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3196'. [ 417.907552][T18443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.915103][T18443] IPv6: NLM_F_CREATE should be set when creating new route [ 417.959868][T18125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.419209][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 418.454206][T18466] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3200'. [ 418.477272][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.522768][T18125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.548944][T18235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.599668][T18235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.631249][T18235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.673306][T18235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.793532][T18483] bridge_slave_0: default FDB implementation only supports local addresses [ 418.828683][T18485] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3205'. [ 418.848054][T18125] veth0_vlan: entered promiscuous mode [ 418.860132][T18125] veth1_vlan: entered promiscuous mode [ 418.887860][T18125] veth0_macvtap: entered promiscuous mode [ 418.897402][T18125] veth1_macvtap: entered promiscuous mode [ 418.913144][T18125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.923719][T18125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.933942][T18125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.944516][T18125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.955902][T18125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.966639][T18125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.977322][T18125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.987310][T18125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.998231][T18125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.016482][T18125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.027356][T18125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.036367][T18125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.045589][T18125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.054579][T18125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.421675][T12474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.457681][T12474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.458585][T18235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.518218][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.558941][T18517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3211'. [ 419.627907][T18513] netlink: 'syz.0.3211': attribute type 10 has an invalid length. [ 419.898437][T18235] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.929975][ T5249] Bluetooth: hci3: command tx timeout [ 419.947562][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.966015][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.030866][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.038359][T12474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.151002][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.158394][T12474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.213425][T18552] set match dimension is over the limit! [ 420.480122][T18235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.557414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.627423][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 420.687397][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3223'. [ 420.964011][T12474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.133011][T12474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.206988][T18235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.261233][T12474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.556926][T18235] veth0_vlan: entered promiscuous mode [ 421.581358][T18235] veth1_vlan: entered promiscuous mode [ 421.597270][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.621246][T12474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.685073][T18235] veth0_macvtap: entered promiscuous mode [ 421.711770][T18235] veth1_macvtap: entered promiscuous mode [ 421.748220][T18235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.759733][T18235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.770390][T18235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.781145][T18235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.791053][T18235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.802823][T18235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.813971][T18235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.825217][T18235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.836005][T18235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.848483][T18235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.859219][T18235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.869506][T18235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.880456][T18235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.891719][T18235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.955914][T18235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.966237][T18235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.976444][T18235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.985440][T18235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.022528][T12474] bridge_slave_1: left allmulticast mode [ 422.029993][T12474] bridge_slave_1: left promiscuous mode [ 422.035813][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.045570][T12474] bridge_slave_0: left allmulticast mode [ 422.051948][T12474] bridge_slave_0: left promiscuous mode [ 422.059121][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.461006][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.493054][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.633693][T18643] ieee802154 phy1 wpan1: encryption failed: -22 [ 422.640273][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.657476][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.666903][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.837406][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.846502][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.912502][T12474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.953052][T12474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.969121][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.983965][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.996190][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.997049][T12474] bond0 (unregistering): Released all slaves [ 423.018402][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.031219][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 423.041124][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.558951][T12475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.566798][T12475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.650816][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 423.663257][T18676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3233'. [ 423.679826][T12475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.679988][T18652] lo speed is unknown, defaulting to 1000 [ 423.687801][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.697387][T12475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.809928][T18684] netlink: 'syz.0.3234': attribute type 15 has an invalid length. [ 424.164120][T18699] Cannot find del_set index 4 as target [ 424.653623][T12474] hsr_slave_0: left promiscuous mode [ 424.659876][T12474] hsr_slave_1: left promiscuous mode [ 424.666656][T12474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.674692][T12474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.682995][T12474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.690697][T12474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.713378][T12474] veth1_macvtap: left promiscuous mode [ 424.719072][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.726270][T12474] veth0_macvtap: left promiscuous mode [ 424.732080][T12474] veth1_vlan: left promiscuous mode [ 424.739254][T12474] veth0_vlan: left promiscuous mode [ 425.130449][ T5249] Bluetooth: hci2: command tx timeout [ 425.228352][T12474] team0 (unregistering): Port device team_slave_1 removed [ 425.275969][T12474] team0 (unregistering): Port device team_slave_0 removed [ 425.757431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 425.775849][T18652] chnl_net:caif_netlink_parms(): no params data found [ 425.960588][T18652] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.973939][T18652] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.986533][T18652] bridge_slave_0: entered allmulticast mode [ 425.999764][T18652] bridge_slave_0: entered promiscuous mode [ 426.007708][T18652] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.017948][T18652] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.025187][T18652] bridge_slave_1: entered allmulticast mode [ 426.042215][T18652] bridge_slave_1: entered promiscuous mode [ 426.094160][T18652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.146270][T18652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.282983][T18652] team0: Port device team_slave_0 added [ 426.474845][T12474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.526917][T18652] team0: Port device team_slave_1 added [ 426.556127][T18745] macvlan1: entered promiscuous mode [ 426.596571][T18745] macvlan1: entered allmulticast mode [ 426.612836][T18744] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3243'. [ 426.626282][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.633917][T18744] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3243'. [ 426.646201][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.655324][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.669736][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.679349][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.693678][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.807282][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.880751][T12474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.946831][T18652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.954634][T18652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.974543][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 426.988218][T18652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.073227][T12474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.115065][T18652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.134312][T18652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.197549][T18652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.199131][ T5249] Bluetooth: hci2: command tx timeout [ 427.227024][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'. [ 427.296994][T12474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.396688][T18749] lo speed is unknown, defaulting to 1000 [ 427.541027][T18652] hsr_slave_0: entered promiscuous mode [ 427.559361][T18652] hsr_slave_1: entered promiscuous mode [ 427.566066][T18652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.584713][T18652] Cannot create hsr debugfs directory [ 427.837265][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.136815][T12474] bridge_slave_1: left allmulticast mode [ 428.151667][T12474] bridge_slave_1: left promiscuous mode [ 428.175444][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.206812][T12474] bridge_slave_0: left allmulticast mode [ 428.220245][T12474] bridge_slave_0: left promiscuous mode [ 428.226165][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.666920][T12474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.679766][T12474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.692486][T12474] bond0 (unregistering): Released all slaves [ 428.800075][ T5249] Bluetooth: hci3: command tx timeout [ 428.879151][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.948595][T18835] Bluetooth: MGMT ver 1.23 [ 429.277812][ T5249] Bluetooth: hci2: command tx timeout [ 429.404546][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 429.415312][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'. [ 429.466705][T18852] netlink: 'syz.2.3268': attribute type 13 has an invalid length. [ 429.749919][T18749] chnl_net:caif_netlink_parms(): no params data found [ 429.796487][T18857] team0: Device wg2 is of different type [ 429.838205][T18861] team0: Device wg2 is of different type [ 429.930885][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.037522][T12474] hsr_slave_0: left promiscuous mode [ 430.062769][T12474] hsr_slave_1: left promiscuous mode [ 430.085845][T12474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.113353][T12474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.136536][T12474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.163706][T12474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.243157][T12474] veth1_macvtap: left promiscuous mode [ 430.260705][T12474] veth0_macvtap: left promiscuous mode [ 430.270235][T12474] veth1_vlan: left promiscuous mode [ 430.285795][T12474] veth0_vlan: left promiscuous mode [ 430.344830][T18883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3273'. [ 430.877507][ T5249] Bluetooth: hci3: command tx timeout [ 430.959641][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.051388][T12474] team0 (unregistering): Port device team_slave_1 removed [ 431.100467][T12474] team0 (unregistering): Port device team_slave_0 removed [ 431.357492][ T5249] Bluetooth: hci2: command tx timeout [ 431.865037][T18749] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.872841][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.880391][T18749] bridge_slave_0: entered allmulticast mode [ 431.888276][T18749] bridge_slave_0: entered promiscuous mode [ 431.904353][T18749] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.911927][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.919908][T18749] bridge_slave_1: entered allmulticast mode [ 431.927070][T18749] bridge_slave_1: entered promiscuous mode [ 431.997240][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.051906][T18749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.125521][T18749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.243844][T18934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3284'. [ 432.258308][T18749] team0: Port device team_slave_0 added [ 432.267044][T18652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.337418][T18749] team0: Port device team_slave_1 added [ 432.344251][T18652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.410743][T18652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.458252][T18749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.465574][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.501214][T18943] x_tables: duplicate underflow at hook 2 [ 432.511273][T18749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.524098][T18652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.536155][T18749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.548691][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.596818][T18749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.663743][T18949] netlink: 'syz.1.3290': attribute type 1 has an invalid length. [ 432.672018][T18949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3290'. [ 432.702214][T18749] hsr_slave_0: entered promiscuous mode [ 432.709566][T18749] hsr_slave_1: entered promiscuous mode [ 432.715981][T18749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.723933][T18749] Cannot create hsr debugfs directory [ 432.957477][ T5249] Bluetooth: hci3: command tx timeout [ 433.047254][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.094769][T18973] netlink: 'syz.1.3298': attribute type 11 has an invalid length. [ 433.176615][T18652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.272764][T18652] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.288367][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.295630][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.357777][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.365018][T12469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.559805][T18988] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3304'. [ 433.604856][T18749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.634949][T18749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.673740][T18749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.718416][T18749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.794977][T19005] netlink: 5296 bytes leftover after parsing attributes in process `syz.0.3305'. [ 433.908124][T18652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.054075][T19013] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 434.077308][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.082465][T18652] veth0_vlan: entered promiscuous mode [ 434.145686][T18749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.165122][T18652] veth1_vlan: entered promiscuous mode [ 434.204541][T18749] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.258896][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.266217][T12469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.294067][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.301364][T12469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.340195][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 434.397556][T18652] veth0_macvtap: entered promiscuous mode [ 434.423072][T19027] bond0: (slave netdevsim0): Releasing backup interface [ 434.441584][T19027] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 434.472073][T19027] batman_adv: batadv1: Adding interface: netdevsim0 [ 434.507783][T19027] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.539007][T19027] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 434.552843][T18652] veth1_macvtap: entered promiscuous mode [ 434.571158][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 434.580808][T19033] batman_adv: batadv1: Removing interface: netdevsim0 [ 434.633817][T18652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.653991][T18652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.679697][T18652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.697384][T18652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.726351][T18652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.762049][T19041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'. [ 434.772381][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 434.975467][T18652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.998135][T18652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.026939][T18652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.067839][ T5249] Bluetooth: hci3: command tx timeout [ 435.078343][T18652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.091366][T18652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.121778][T19063] netlink: 'syz.1.3317': attribute type 3 has an invalid length. [ 435.130847][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.151673][T18652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.177359][T18652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.210249][T18652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.220037][T18652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.231499][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 435.233247][T19067] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3317'. [ 435.404038][T18749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.527969][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.535841][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.628524][T12474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.646173][T12474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.663294][T19083] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 436.015073][T19097] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3323'. [ 436.064920][T19106] netlink: 'syz.1.3324': attribute type 10 has an invalid length. [ 436.124084][T18749] veth0_vlan: entered promiscuous mode [ 436.157264][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.302792][T19115] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3325'. [ 436.313169][T12469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.336573][T19115] netlink: 696 bytes leftover after parsing attributes in process `syz.1.3325'. [ 436.420338][T18749] veth1_vlan: entered promiscuous mode [ 436.502675][T12469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.595885][T18749] veth0_macvtap: entered promiscuous mode [ 436.625275][T18749] veth1_macvtap: entered promiscuous mode [ 436.715099][T12469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.738599][T18749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.762051][T18749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.788308][T18749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.813662][T18749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.836085][T18749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.853943][T18749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.865684][T18749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.919684][T12469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.964364][T18749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.995312][T18749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.011647][T18749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.023688][T18749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.033859][T18749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.045773][T18749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.058572][T18749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.082417][T18749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.095115][T18749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.104081][T18749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.113959][T18749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.197336][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.280331][T12469] bridge_slave_1: left allmulticast mode [ 437.286131][T12469] bridge_slave_1: left promiscuous mode [ 437.292867][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.302439][T12469] bridge_slave_0: left allmulticast mode [ 437.309230][T12469] bridge_slave_0: left promiscuous mode [ 437.314897][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.664299][T12469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.676980][T12469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.693873][T12469] bond0 (unregistering): Released all slaves [ 437.715587][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.723951][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.796637][T12474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.805728][T12474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.226052][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.235691][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.247278][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.265743][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.274836][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.284220][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.291812][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.695234][T12469] hsr_slave_0: left promiscuous mode [ 438.710893][T12469] hsr_slave_1: left promiscuous mode [ 438.738226][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.765479][T12469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.825112][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.834318][T12469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.895890][T12469] veth1_macvtap: left promiscuous mode [ 438.905729][T12469] veth0_macvtap: left promiscuous mode [ 438.914553][T12469] veth1_vlan: left promiscuous mode [ 438.920961][T12469] veth0_vlan: left promiscuous mode [ 439.287327][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.495569][T12469] team0 (unregistering): Port device team_slave_1 removed [ 439.545124][T12469] team0 (unregistering): Port device team_slave_0 removed [ 439.991117][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 440.001832][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 440.033112][T19144] lo speed is unknown, defaulting to 1000 [ 440.240715][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.327269][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.401828][ T5238] Bluetooth: hci2: command tx timeout [ 440.491475][T19144] chnl_net:caif_netlink_parms(): no params data found [ 440.576324][T12469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.673063][T12469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.725394][T19144] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.739609][T19144] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.746896][T19144] bridge_slave_0: entered allmulticast mode [ 440.766799][T19144] bridge_slave_0: entered promiscuous mode [ 440.785046][T19189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 440.836784][T12469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.858246][T19191] netlink: 'syz.1.3333': attribute type 1 has an invalid length. [ 440.876808][T19144] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.885547][T19144] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.897705][T19144] bridge_slave_1: entered allmulticast mode [ 440.910303][T19144] bridge_slave_1: entered promiscuous mode [ 440.989331][T12469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.006639][T19196] tipc: Trying to set illegal importance in message [ 441.035662][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.049983][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.064300][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.074605][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.084354][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 441.094679][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.106981][T19144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.154533][T19144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.179744][T19196] bridge0: port 1(vlan3) entered blocking state [ 441.186197][T19196] bridge0: port 1(vlan3) entered disabled state [ 441.195526][T19196] vlan3: entered allmulticast mode [ 441.203574][T19196] vlan3: left allmulticast mode [ 441.250364][T19144] team0: Port device team_slave_0 added [ 441.328960][T19144] team0: Port device team_slave_1 added [ 441.357257][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.438152][T19144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.445347][T19144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.488010][T19144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.500403][T12469] bridge_slave_1: left allmulticast mode [ 441.506075][T12469] bridge_slave_1: left promiscuous mode [ 441.531725][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.540936][T12469] bridge_slave_0: left allmulticast mode [ 441.546606][T12469] bridge_slave_0: left promiscuous mode [ 441.553431][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.951885][T12469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.963988][T12469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.975016][T12469] bond0 (unregistering): Released all slaves [ 441.986355][T19144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.993752][T19144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.021114][T19144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.032830][T19197] lo speed is unknown, defaulting to 1000 [ 442.162546][T19144] hsr_slave_0: entered promiscuous mode [ 442.172426][T19144] hsr_slave_1: entered promiscuous mode [ 442.179755][T19144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.188216][T19144] Cannot create hsr debugfs directory [ 442.397282][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.483095][ T5249] Bluetooth: hci2: command tx timeout [ 442.528607][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.538419][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.549747][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.560070][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.567955][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 442.575446][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.176640][T12469] hsr_slave_0: left promiscuous mode [ 443.185891][T12469] hsr_slave_1: left promiscuous mode [ 443.197524][ T5238] Bluetooth: hci3: command tx timeout [ 443.206607][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.214477][T12469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.223060][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.230904][T12469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.254592][T12469] veth1_macvtap: left promiscuous mode [ 443.261935][T12469] veth0_macvtap: left promiscuous mode [ 443.267945][T12469] veth1_vlan: left promiscuous mode [ 443.273349][T12469] veth0_vlan: left promiscuous mode [ 443.343278][T19222] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 443.447405][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.782285][T12469] team0 (unregistering): Port device team_slave_1 removed [ 443.832563][T12469] team0 (unregistering): Port device team_slave_0 removed [ 444.281320][T19217] lo speed is unknown, defaulting to 1000 [ 444.341298][T19197] chnl_net:caif_netlink_parms(): no params data found [ 444.352628][T19238] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 444.477242][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.558032][ T5238] Bluetooth: hci2: command tx timeout [ 444.603030][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 444.642308][ T5238] Bluetooth: hci5: command tx timeout [ 444.664229][T19197] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.671685][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.680123][T19197] bridge_slave_0: entered allmulticast mode [ 444.687666][T19197] bridge_slave_0: entered promiscuous mode [ 444.704510][T19197] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.737482][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.754804][T19197] bridge_slave_1: entered allmulticast mode [ 444.772835][T19197] bridge_slave_1: entered promiscuous mode [ 444.936288][T19197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.981308][T19197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.061907][T19144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.080650][T19197] team0: Port device team_slave_0 added [ 445.099304][T19144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.126437][T19197] team0: Port device team_slave_1 added [ 445.164586][T19144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.205965][T19144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.218098][T19197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.225856][T19197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.240916][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3352'. [ 445.254910][T19197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.277909][ T5238] Bluetooth: hci3: command 0x041b tx timeout [ 445.283360][T19197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.291375][T19197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.317797][T19197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.496863][T19197] hsr_slave_0: entered promiscuous mode [ 445.507347][T19197] hsr_slave_1: entered promiscuous mode [ 445.514335][T19197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.522578][T19197] Cannot create hsr debugfs directory [ 445.527341][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.533023][T19217] chnl_net:caif_netlink_parms(): no params data found [ 445.768527][T19289] gtp1: entered promiscuous mode [ 445.773535][T19289] gtp1: entered allmulticast mode [ 445.860359][T19294] netlink: 'syz.1.3357': attribute type 15 has an invalid length. [ 445.876686][T19296] netlink: 'syz.0.3358': attribute type 14 has an invalid length. [ 445.896270][T19217] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.912696][T19217] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.928894][T19217] bridge_slave_0: entered allmulticast mode [ 445.939978][T19217] bridge_slave_0: entered promiscuous mode [ 445.960372][T19217] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.984568][T19217] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.993428][T19217] bridge_slave_1: entered allmulticast mode [ 446.002107][T19217] bridge_slave_1: entered promiscuous mode [ 446.111729][T19217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.135072][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3361'. [ 446.148879][T19217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.253342][T19217] team0: Port device team_slave_0 added [ 446.266827][T19217] team0: Port device team_slave_1 added [ 446.331298][T19144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.370908][T19217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.379083][T19217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.408004][T19217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.431574][T19217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.446358][T19217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.483305][T19217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.557247][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.636640][T19144] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.644354][ T43] block nbd0: Possible stuck request ffff888025200000: control (read@0,2048B). Runtime 330 seconds [ 446.656579][ T5238] Bluetooth: hci2: command tx timeout [ 446.683150][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.690373][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.711822][T19217] hsr_slave_0: entered promiscuous mode [ 446.717588][ T5238] Bluetooth: hci5: command tx timeout [ 446.735324][T19217] hsr_slave_1: entered promiscuous mode [ 446.787372][T19217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.794988][T19217] Cannot create hsr debugfs directory [ 446.923559][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.930730][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.157493][T19197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.205372][T19197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.232644][T19197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.301482][T19197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.360100][ T5238] Bluetooth: hci3: command 0x041b tx timeout [ 447.519051][T19197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.538224][T19197] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.597853][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.613693][T19217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.631783][T19217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.659216][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.666328][T12469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.711037][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.718350][T12469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.819487][T19217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.841148][T19217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.896051][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 447.914491][T19356] netlink: 'syz.0.3373': attribute type 1 has an invalid length. [ 447.925452][T19356] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3373'. [ 447.978531][T19217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.990049][T19217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.039378][T19144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.107000][T19217] bond0: (slave netdevsim0): Releasing backup interface [ 448.122541][T19217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.133139][T19217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.156289][T19369] netlink: 'syz.1.3377': attribute type 21 has an invalid length. [ 448.280407][T19144] veth0_vlan: entered promiscuous mode [ 448.330493][T19144] veth1_vlan: entered promiscuous mode [ 448.452036][T19144] veth0_macvtap: entered promiscuous mode [ 448.494583][T19217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.529785][T19144] veth1_macvtap: entered promiscuous mode [ 448.538264][T19217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.569947][T19217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.598092][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.627473][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.644049][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.647314][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.654858][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.673139][T19144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.684567][T19217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.721858][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.742624][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.752923][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.764798][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.778284][T19144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.800437][ T5238] Bluetooth: hci5: command tx timeout [ 448.819050][T19197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.830547][T19144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.844040][T19144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.857700][T19144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.866545][T19144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.996744][T19400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.043145][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 449.068827][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3385'. [ 449.116618][T19406] netlink: 'syz.0.3386': attribute type 29 has an invalid length. [ 449.191727][T19406] netlink: 'syz.0.3386': attribute type 29 has an invalid length. [ 449.252966][T19408] netlink: 'syz.0.3386': attribute type 29 has an invalid length. [ 449.309281][T19410] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 449.309836][T19217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.368768][T19197] veth0_vlan: entered promiscuous mode [ 449.378072][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.388207][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.412493][T19217] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.438915][ T5238] Bluetooth: hci3: command 0x041b tx timeout [ 449.462665][T12474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.471562][T12474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.479989][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.487087][T12475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.521403][T19197] veth1_vlan: entered promiscuous mode [ 449.560629][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.567820][T12475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.687266][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.739977][T19412] netlink: 'syz.0.3386': attribute type 29 has an invalid length. [ 449.796014][T19197] veth0_macvtap: entered promiscuous mode [ 449.883045][T19197] veth1_macvtap: entered promiscuous mode [ 450.012545][T12475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.161815][T12475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.186149][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.198605][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.215192][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.226993][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.244635][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.265576][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.278087][T19197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.308506][T12475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.334778][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.345567][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.362373][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.373198][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.383256][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.395030][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.407520][T19197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.433950][T12475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.451245][T19197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.461317][T19197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.470451][T19197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.493858][T19197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.525145][T19217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.717295][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.771026][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.796015][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.806763][T12475] bridge_slave_1: left allmulticast mode [ 450.821208][T12475] bridge_slave_1: left promiscuous mode [ 450.827004][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.846840][T12475] bridge_slave_0: left allmulticast mode [ 450.853277][T12475] bridge_slave_0: left promiscuous mode [ 450.867320][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.877703][ T5238] Bluetooth: hci5: command tx timeout [ 451.332263][T12475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.344095][T12475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.355403][T12475] bond0 (unregistering): Released all slaves [ 451.396433][ T7829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.405376][T19217] veth0_vlan: entered promiscuous mode [ 451.415770][ T7829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.445515][T19217] veth1_vlan: entered promiscuous mode [ 451.496583][T19217] veth0_macvtap: entered promiscuous mode [ 451.506783][T19217] veth1_macvtap: entered promiscuous mode [ 451.518073][ T5238] Bluetooth: hci3: command 0x041b tx timeout [ 451.671277][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.689769][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.727434][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.765577][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.767479][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.787422][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.817384][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.835072][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.846727][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.902442][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.903436][T19217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.933540][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.950430][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.963991][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.972612][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 451.989463][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.195449][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.214702][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.225248][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.236059][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.247621][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.265612][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.276506][T19217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.295048][T19217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.322512][T19217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.409992][T19217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.434975][T19217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.451644][T19217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.463034][T19217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.630893][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.652804][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.731150][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.750434][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.797605][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.862126][T12475] hsr_slave_0: left promiscuous mode [ 452.875340][T12475] hsr_slave_1: left promiscuous mode [ 452.900523][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.909907][T12475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.918329][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.926036][T12475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.949142][T12475] veth1_macvtap: left promiscuous mode [ 452.954678][T12475] veth0_macvtap: left promiscuous mode [ 452.960286][ T5249] Bluetooth: hci5: command tx timeout [ 452.960973][T12475] veth1_vlan: left promiscuous mode [ 452.971250][T12475] veth0_vlan: left promiscuous mode [ 453.468065][T12475] team0 (unregistering): Port device team_slave_1 removed [ 453.521162][T12475] team0 (unregistering): Port device team_slave_0 removed [ 453.842305][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.986964][T19438] lo speed is unknown, defaulting to 1000 [ 454.078559][ T5249] Bluetooth: hci2: command tx timeout [ 454.261920][T19438] chnl_net:caif_netlink_parms(): no params data found [ 454.321712][T12475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.374263][T19438] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.386670][T19438] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.394572][T19438] bridge_slave_0: entered allmulticast mode [ 454.403243][T19438] bridge_slave_0: entered promiscuous mode [ 454.426145][T12475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.440991][T19438] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.448356][T19438] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.455555][T19438] bridge_slave_1: entered allmulticast mode [ 454.468743][T19438] bridge_slave_1: entered promiscuous mode [ 454.547487][T19468] SET target dimension over the limit! [ 454.700100][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.730005][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.742806][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.753249][T12475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.771392][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.780018][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 454.785930][T19476] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 454.799539][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.852550][T19438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.865728][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3339'. [ 454.877270][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.919339][T12475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.938044][T19438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.026364][T19438] team0: Port device team_slave_0 added [ 455.035387][T19438] team0: Port device team_slave_1 added [ 455.037024][T19482] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3402'. [ 455.173657][T19438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.185581][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.234916][T19438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.253970][T19485] netlink: 'syz.0.3404': attribute type 1 has an invalid length. [ 455.285696][T19487] netlink: 'syz.0.3404': attribute type 21 has an invalid length. [ 455.296994][T19487] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3404'. [ 455.308062][T19487] netlink: 'syz.0.3404': attribute type 4 has an invalid length. [ 455.323024][T19487] netlink: 'syz.0.3404': attribute type 5 has an invalid length. [ 455.331940][T19487] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3404'. [ 455.342367][T19438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.349783][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.377396][T19438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.417901][T19490] xt_CT: No such helper "snmp" [ 455.453977][T19472] lo speed is unknown, defaulting to 1000 [ 455.484787][T19438] hsr_slave_0: entered promiscuous mode [ 455.514156][T19438] hsr_slave_1: entered promiscuous mode [ 455.553717][T19438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.578099][T19438] Cannot create hsr debugfs directory [ 455.603245][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'. [ 455.803473][T12475] bridge_slave_1: left allmulticast mode [ 455.834975][T12475] bridge_slave_1: left promiscuous mode [ 455.842093][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.870480][T12475] bridge_slave_0: left allmulticast mode [ 455.876192][T12475] bridge_slave_0: left promiscuous mode [ 455.886204][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.917270][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.116453][T19521] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.3412'. [ 456.162903][ T5249] Bluetooth: hci2: command tx timeout [ 456.549451][T12475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.570167][T12475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.589286][T12475] bond0 (unregistering): Released all slaves [ 456.690056][T19541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.826163][T19545] netlink: 'syz.0.3420': attribute type 3 has an invalid length. [ 456.893045][ T5249] Bluetooth: hci3: command tx timeout [ 456.957233][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.058337][T19553] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3422'. [ 457.352175][T19563] netlink: 'syz.1.3422': attribute type 3 has an invalid length. [ 457.366747][T19472] chnl_net:caif_netlink_parms(): no params data found [ 457.393962][T19563] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3422'. [ 457.517763][T12475] hsr_slave_0: left promiscuous mode [ 457.524197][T12475] hsr_slave_1: left promiscuous mode [ 457.530918][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.539611][T12475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.548351][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.555943][T12475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.585292][T12475] veth1_macvtap: left promiscuous mode [ 457.591150][T12475] veth0_macvtap: left promiscuous mode [ 457.596798][T12475] veth1_vlan: left promiscuous mode [ 457.602584][T12475] veth0_vlan: left promiscuous mode [ 457.999384][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.196427][T12475] team0 (unregistering): Port device team_slave_1 removed [ 458.248522][T12475] team0 (unregistering): Port device team_slave_0 removed [ 458.251982][ T5249] Bluetooth: hci2: command tx timeout [ 458.744650][T19568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3426'. [ 458.777088][T19573] netlink: 'syz.1.3427': attribute type 12 has an invalid length. [ 458.968566][ T5249] Bluetooth: hci3: command tx timeout [ 459.001759][T19438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 459.034825][T19583] netlink: 'syz.1.3430': attribute type 2 has an invalid length. [ 459.043286][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.065369][T19591] tls_set_device_offload_rx: netdev not found [ 459.117615][T19438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.141741][T19472] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.161657][T19472] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.193920][T19472] bridge_slave_0: entered allmulticast mode [ 459.204307][T19472] bridge_slave_0: entered promiscuous mode [ 459.233068][T19438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.256063][T19438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.297711][T19472] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.319640][T19472] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.340368][T19472] bridge_slave_1: entered allmulticast mode [ 459.359654][T19472] bridge_slave_1: entered promiscuous mode [ 459.404582][T19606] netlink: 'syz.1.3434': attribute type 13 has an invalid length. [ 459.442276][T19472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.460158][T19610] : renamed from bond0 [ 459.480893][T19472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.544526][T19472] team0: Port device team_slave_0 added [ 459.570560][T19472] team0: Port device team_slave_1 added [ 459.635269][T19610] netlink: 'syz.0.3435': attribute type 9 has an invalid length. [ 459.701621][T19472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.708905][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.735389][T19472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.788577][T19438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.861408][T19472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.870380][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.931185][T19472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.954921][T19438] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.968416][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.975552][T12475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.003079][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.010304][T12475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.077401][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.129570][T19472] hsr_slave_0: entered promiscuous mode [ 460.168009][T19472] hsr_slave_1: entered promiscuous mode [ 460.174479][T19472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.183637][T19472] Cannot create hsr debugfs directory [ 460.328244][ T5249] Bluetooth: hci2: command tx timeout [ 460.511716][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 460.523609][T19655] netlink: 'syz.2.3449': attribute type 3 has an invalid length. [ 460.625463][T19438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.654802][T19665] ipt_rpfilter: unknown options [ 460.786418][T19438] veth0_vlan: entered promiscuous mode [ 460.821369][T19674] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 460.857489][T19675] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 460.912912][T19438] veth1_vlan: entered promiscuous mode [ 460.928700][T19681] veth1_vlan: entered allmulticast mode [ 460.955948][T19675] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 461.038215][ T5249] Bluetooth: hci3: command tx timeout [ 461.063255][T19438] veth0_macvtap: entered promiscuous mode [ 461.117252][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.125417][T19438] veth1_macvtap: entered promiscuous mode [ 461.191398][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.228051][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.245986][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.256850][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.273073][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.284500][T19698] netlink: 'syz.0.3458': attribute type 7 has an invalid length. [ 461.284518][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.286127][T19438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.312010][T19698] netlink: 'syz.0.3458': attribute type 8 has an invalid length. [ 461.323297][T19701] netlink: 'syz.0.3458': attribute type 7 has an invalid length. [ 461.336116][T19701] netlink: 'syz.0.3458': attribute type 8 has an invalid length. [ 461.377909][T19696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3457'. [ 461.389240][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.407179][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.419014][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.434383][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.445040][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.456939][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.468747][T19438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.516312][T19438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.526171][T19438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.536943][T19438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.546528][T19438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.574450][T19472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.594199][T19472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.616581][T19472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.635293][T19472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.720905][T19472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.770385][T19472] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.786488][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.793740][T12469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.832946][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.840196][T12469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.946879][T19723] xt_hashlimit: invalid rate [ 461.990242][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.010700][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.124051][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.147541][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.157257][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.386060][T19472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.774598][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 463.007042][T19472] veth0_vlan: entered promiscuous mode [ 463.074194][T19472] veth1_vlan: entered promiscuous mode [ 463.124633][ T5249] Bluetooth: hci3: command tx timeout [ 463.204191][T19472] veth0_macvtap: entered promiscuous mode [ 463.207442][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.485668][T12469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.558833][T19472] veth1_macvtap: entered promiscuous mode [ 463.599874][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.627807][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.646490][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.657370][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.667575][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.681768][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.701056][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.714131][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.733026][T19472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.745814][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.756648][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.768630][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.780344][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.790453][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.803069][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.813168][T19472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.826290][T19472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.848058][T19472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.861574][T19472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.874650][T19472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.884335][T19472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.916481][T19472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.006234][T12469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.105939][T12469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.210775][T12469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.230600][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.238596][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.252133][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.283173][ T7829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.292262][ T7829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.443356][T12469] bridge_slave_1: left allmulticast mode [ 464.450907][T12469] bridge_slave_1: left promiscuous mode [ 464.456627][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.466919][T12469] bridge_slave_0: left allmulticast mode [ 464.473087][T12469] bridge_slave_0: left promiscuous mode [ 464.480189][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.871549][T12469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.883899][T12469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.897020][T12469] bond0 (unregistering): Released all slaves [ 465.261558][T19783] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 465.287220][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.381901][T19783] hsr_slave_0: left promiscuous mode [ 465.427659][T19783] hsr_slave_1: left promiscuous mode [ 465.714372][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.725098][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.734855][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.743596][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.752281][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 465.761759][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.815554][T12469] hsr_slave_0: left promiscuous mode [ 465.866421][T12469] hsr_slave_1: left promiscuous mode [ 465.873756][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.881397][T12469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.890654][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.898972][T12469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.923100][T12469] veth1_macvtap: left promiscuous mode [ 465.932927][T12469] veth0_macvtap: left promiscuous mode [ 465.939521][T12469] veth1_vlan: left promiscuous mode [ 465.944858][T12469] veth0_vlan: left promiscuous mode [ 466.323742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.437572][T12469] team0 (unregistering): Port device team_slave_1 removed [ 466.489356][T12469] team0 (unregistering): Port device team_slave_0 removed [ 467.056467][T19793] lo speed is unknown, defaulting to 1000 [ 467.264110][T19793] chnl_net:caif_netlink_parms(): no params data found [ 467.331276][T12469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.367215][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.400377][T12469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.413984][T19793] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.421587][T19793] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.429792][T19793] bridge_slave_0: entered allmulticast mode [ 467.436574][T19793] bridge_slave_0: entered promiscuous mode [ 467.444646][T19793] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.452054][T19793] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.462856][T19793] bridge_slave_1: entered allmulticast mode [ 467.472802][T19793] bridge_slave_1: entered promiscuous mode [ 467.504238][T12469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.530932][T19793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.542834][T19793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.584689][T12469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.612540][T19793] team0: Port device team_slave_0 added [ 467.625819][T19793] team0: Port device team_slave_1 added [ 467.652980][T19793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.660905][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.688189][T19793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.701794][T19793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.710994][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.787838][T19793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.838158][ T5238] Bluetooth: hci2: command tx timeout [ 468.012370][T19793] hsr_slave_0: entered promiscuous mode [ 468.037787][T19793] hsr_slave_1: entered promiscuous mode [ 468.060335][T19793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.077706][T19793] Cannot create hsr debugfs directory [ 468.135961][T19819] tipc: Started in network mode [ 468.151753][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.152418][T19819] tipc: Node identity ac148fef, cluster identity 4711 [ 468.162528][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.175055][T19819] tipc: Enabling of bearer rejected, failed to enable media [ 468.175407][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.192396][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.204418][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 468.214092][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.295341][T12469] bridge_slave_1: left allmulticast mode [ 468.311763][T12469] bridge_slave_1: left promiscuous mode [ 468.330119][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.341517][T12469] bridge_slave_0: left allmulticast mode [ 468.348208][T12469] bridge_slave_0: left promiscuous mode [ 468.355164][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.407337][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.562960][T19835] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.3487'. [ 469.153055][T12469] team0: Port device bridge3 removed [ 469.414800][T12469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.426000][T12469] bond0 (unregistering): Released all slaves [ 469.437452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.439312][T12469] bond1 (unregistering): Released all slaves [ 469.574251][T12469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.590960][T12469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.605518][T12469] bond0 (unregistering): Released all slaves [ 469.872239][T12469] tipc: Disabling bearer [ 469.882894][T12469] tipc: Left network mode [ 469.883272][T19824] lo speed is unknown, defaulting to 1000 [ 469.919618][ T5249] Bluetooth: hci2: command tx timeout [ 470.071893][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 470.087435][T19851] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 470.192991][T19856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3495'. [ 470.317931][ T5249] Bluetooth: hci3: command tx timeout [ 470.406937][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3497'. [ 470.565993][T19875] x_tables: duplicate underflow at hook 2 [ 470.572823][T19824] chnl_net:caif_netlink_parms(): no params data found [ 470.697562][T19883] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3501'. [ 470.710578][T19883] nbd: illegal input index 61504 [ 470.896007][T19889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3502'. [ 470.923639][T19889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3502'. [ 470.999773][T19824] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.006921][T19824] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.022119][T19824] bridge_slave_0: entered allmulticast mode [ 471.029868][T19824] bridge_slave_0: entered promiscuous mode [ 471.051218][T19898] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3504'. [ 471.066567][T19824] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.075288][T19898] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 471.093292][T19824] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.104626][T19824] bridge_slave_1: entered allmulticast mode [ 471.126474][T19824] bridge_slave_1: entered promiscuous mode [ 471.327757][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 471.498492][T19911] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 471.508925][T19824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.577897][T19824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.624487][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3507'. [ 471.678651][T19793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.787786][T19793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.898496][T19926] netlink: 'syz.1.3510': attribute type 10 has an invalid length. [ 471.919151][T19926] ieee802154 phy0 wpan0: entered promiscuous mode [ 471.955215][T12469] hsr_slave_0: left promiscuous mode [ 471.961634][T12469] hsr_slave_1: left promiscuous mode [ 471.997043][T12469] hsr_slave_0: left promiscuous mode [ 472.007675][ T5249] Bluetooth: hci2: command tx timeout [ 472.014494][T12469] hsr_slave_1: left promiscuous mode [ 472.022251][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.031541][T12469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.040731][T12469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.049141][T12469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.119305][T12469] veth1_vlan: left promiscuous mode [ 472.126645][T12469] veth1_macvtap: left promiscuous mode [ 472.133132][T12469] veth0_macvtap: left promiscuous mode [ 472.139770][T12469] veth1_vlan: left promiscuous mode [ 472.145188][T12469] veth0_vlan: left promiscuous mode [ 472.397235][ T5249] Bluetooth: hci3: command tx timeout [ 472.689159][T12469] team0 (unregistering): Port device team_slave_1 removed [ 472.740682][T12469] team0 (unregistering): Port device team_slave_0 removed [ 473.542545][T12469] team0 (unregistering): Port device team_slave_1 removed [ 473.590853][T12469] team0 (unregistering): Port device team_slave_0 removed [ 474.074304][T19793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 474.083392][ T5249] Bluetooth: hci2: command tx timeout [ 474.097839][T19824] team0: Port device team_slave_0 added [ 474.106911][T19824] team0: Port device team_slave_1 added [ 474.165332][T19793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 474.322581][T19947] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3513'. [ 474.350572][T19824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.364434][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.387641][T19947] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 474.410056][T19824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.442588][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3513'. [ 474.477526][ T5249] Bluetooth: hci3: command tx timeout [ 474.518684][T19824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.525873][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.563103][T19958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3518'. [ 474.565231][T19824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.675169][T19824] hsr_slave_0: entered promiscuous mode [ 474.691573][T19824] hsr_slave_1: entered promiscuous mode [ 474.700135][T19824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.716231][T19824] Cannot create hsr debugfs directory [ 474.733376][T19960] bridge_slave_0: default FDB implementation only supports local addresses [ 474.791797][T19962] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 475.057651][T19969] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3523'. [ 475.075279][T19969] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3523'. [ 475.171144][T19966] tipc: Enabled bearer , priority 0 [ 475.229322][T19966] tipc: Resetting bearer [ 475.235442][T19974] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3525'. [ 475.252034][T19965] tipc: Resetting bearer [ 475.259983][T19974] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 475.276501][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'. [ 475.438687][ T30] INFO: task udevd:5354 blocked for more than 143 seconds. [ 475.455457][ T30] Not tainted 6.12.0-rc1-syzkaller-00173-g08c8acc9d8f3 #0 [ 475.463353][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.472313][ T30] task:udevd state:D stack:20432 pid:5354 tgid:5354 ppid:4686 flags:0x00004006 [ 475.484424][ T30] Call Trace: [ 475.487856][ T30] [ 475.490825][ T30] __schedule+0x1895/0x4b30 [ 475.495434][ T30] ? __pfx___schedule+0x10/0x10 [ 475.500528][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.505620][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 475.511782][ T30] ? schedule+0x90/0x320 [ 475.516052][ T30] schedule+0x14b/0x320 [ 475.520421][ T30] io_schedule+0x8d/0x110 [ 475.524806][ T30] folio_wait_bit_common+0x882/0x12b0 [ 475.530357][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 475.536227][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 475.542166][ T30] ? __filemap_get_folio+0x730/0xbd0 [ 475.547619][ T30] do_read_cache_folio+0xc8/0x850 [ 475.552710][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 475.558928][ T30] read_part_sector+0xb3/0x330 [ 475.563778][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 475.570117][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 475.575718][ T30] ? snprintf+0xda/0x120 [ 475.580247][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 475.586271][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 475.593977][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 475.599686][ T30] ? vsnprintf+0x184/0x1da0 [ 475.604277][ T30] ? __pfx_snprintf+0x10/0x10 [ 475.609087][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 475.613899][ T30] bdev_disk_changed+0x72c/0x13f0 [ 475.619201][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 475.624802][ T30] ? wait_on_inode+0xc1/0x230 [ 475.629627][ T30] blkdev_get_whole+0x2d2/0x450 [ 475.634564][ T30] bdev_open+0x2d4/0xc50 [ 475.639022][ T30] blkdev_open+0x3d9/0x560 [ 475.643670][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 475.648790][ T30] do_dentry_open+0x978/0x1460 [ 475.653608][ T30] vfs_open+0x3e/0x330 [ 475.658427][ T30] path_openat+0x2c84/0x3590 [ 475.663101][ T30] ? __pfx_path_openat+0x10/0x10 [ 475.668214][ T30] do_filp_open+0x235/0x490 [ 475.672781][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 475.678369][ T30] ? _raw_spin_unlock+0x28/0x50 [ 475.683282][ T30] ? alloc_fd+0x5a1/0x640 [ 475.687794][ T30] do_sys_openat2+0x13e/0x1d0 [ 475.692530][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.700113][ T30] __x64_sys_openat+0x247/0x2a0 [ 475.705033][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 475.710562][ T30] ? do_syscall_64+0x100/0x230 [ 475.715366][ T30] ? do_syscall_64+0xb6/0x230 [ 475.720279][ T30] do_syscall_64+0xf3/0x230 [ 475.724824][ T30] ? clear_bhb_loop+0x35/0x90 [ 475.729756][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.735701][ T30] RIP: 0033:0x7fda6e3169a4 [ 475.740347][ T30] RSP: 002b:00007fffed546e40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.748913][ T30] RAX: ffffffffffffffda RBX: 000055cbf4e19380 RCX: 00007fda6e3169a4 [ 475.756931][ T30] RDX: 00000000000a0800 RSI: 000055cbf4e0dcb0 RDI: 00000000ffffff9c [ 475.765575][ T30] RBP: 000055cbf4e0dcb0 R08: 0000000000000001 R09: 7fffffffffffffff [ 475.773862][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 475.782184][ T30] R13: 000055cbf4e0ba70 R14: 0000000000000001 R15: 000055cbf4dfa910 [ 475.790385][ T30] [ 475.793549][ T30] [ 475.793549][ T30] Showing all locks held in the system: [ 475.812685][ T30] 1 lock held by khungtaskd/30: [ 475.817875][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 475.828136][ T30] 2 locks held by getty/4998: [ 475.832942][ T30] #0: ffff88814c11d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 475.843151][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 475.853539][ T30] 1 lock held by udevd/5354: [ 475.858244][ T30] #0: ffff888143b0e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc50 [ 475.868356][ T30] 5 locks held by kworker/u8:10/6492: [ 475.873764][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 475.883865][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 475.895469][ T30] #2: ffff8880b862a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 475.904939][ T30] #3: ffffffff9a5d1018 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 475.915537][ T30] #4: ffffe8ffffc660c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x199/0x770 [ 475.929767][ T30] 3 locks held by kworker/u8:11/6494: [ 475.935189][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 475.947005][ T30] #1: ffffc900047bfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 475.958295][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 475.967938][ T30] 4 locks held by kworker/u8:17/12469: [ 475.973524][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 475.984668][ T30] #1: ffffc9000308fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 475.995378][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 476.005527][ T30] #3: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 476.015644][ T30] 3 locks held by kworker/u8:21/12473: [ 476.021323][ T30] #0: ffff88814b9e7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 476.033062][ T30] #1: ffffc90002fefd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 476.047998][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 476.057714][ T30] 1 lock held by syz-executor/19793: [ 476.063109][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 476.073057][ T30] 7 locks held by syz-executor/19824: [ 476.081789][ T30] #0: ffff888032a76420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 476.091204][ T30] #1: ffff88806900f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 476.101355][ T30] #2: ffff888026d4a5a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 476.111787][ T30] #3: ffffffff8f56f848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 476.122523][ T30] #4: ffff8880609840e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 476.136314][ T30] #5: ffff888060983250 (&devlink->lock_key#38){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 476.152177][ T30] #6: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 476.163160][ T30] 2 locks held by syz.2.3522/19965: [ 476.168712][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 476.178226][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 476.189343][ T30] 1 lock held by syz.0.3524/19976: [ 476.194481][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 476.203471][ T30] 2 locks held by syz.1.3525/19974: [ 476.208842][ T30] #0: ffff88807a60c6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 476.219347][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 476.228438][ T30] 2 locks held by syz.1.3525/19975: [ 476.233657][ T30] #0: ffffffff8fd374b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 476.242575][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 476.252125][ T30] 1 lock held by syz.1.3525/19977: [ 476.257946][ T5284] tipc: Node number set to 2887028719 [ 476.258126][ T30] #0: ffff88807a60c6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 476.275600][ T30] [ 476.286802][ T30] ============================================= [ 476.286802][ T30] [ 476.303390][ T30] NMI backtrace for cpu 1 [ 476.307770][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00173-g08c8acc9d8f3 #0 [ 476.318299][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.328378][ T30] Call Trace: [ 476.331666][ T30] [ 476.334606][ T30] dump_stack_lvl+0x241/0x360 [ 476.339343][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.344639][ T30] ? __pfx__printk+0x10/0x10 [ 476.349288][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 476.354257][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 476.359740][ T30] ? _printk+0xd5/0x120 [ 476.363941][ T30] ? __pfx__printk+0x10/0x10 [ 476.368564][ T30] ? __wake_up_klogd+0xcc/0x110 [ 476.373431][ T30] ? __pfx__printk+0x10/0x10 [ 476.378038][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 476.383088][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.389226][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 476.395250][ T30] watchdog+0xff4/0x1040 [ 476.399531][ T30] ? watchdog+0x1ea/0x1040 [ 476.404005][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.408740][ T30] kthread+0x2f0/0x390 [ 476.412869][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.417586][ T30] ? __pfx_kthread+0x10/0x10 [ 476.422196][ T30] ret_from_fork+0x4b/0x80 [ 476.426637][ T30] ? __pfx_kthread+0x10/0x10 [ 476.431245][ T30] ret_from_fork_asm+0x1a/0x30 [ 476.436043][ T30] [ 476.439992][ T30] Sending NMI from CPU 1 to CPUs 0: [ 476.445256][ C0] NMI backtrace for cpu 0 [ 476.445272][ C0] CPU: 0 UID: 0 PID: 6492 Comm: kworker/u8:10 Not tainted 6.12.0-rc1-syzkaller-00173-g08c8acc9d8f3 #0 [ 476.445295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.445307][ C0] Workqueue: bat_events batadv_nc_worker [ 476.445337][ C0] RIP: 0010:__kasan_check_read+0xa/0x20 [ 476.445369][ C0] Code: db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 6f e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 476.445386][ C0] RSP: 0018:ffffc90004adf888 EFLAGS: 00000047 [ 476.445402][ C0] RAX: 0000000000000000 RBX: 0000000000000022 RCX: ffffffff81704f84 [ 476.445416][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c5800 [ 476.445429][ C0] RBP: 000000000000000a R08: 0000000000000022 R09: ffff88802ade64e0 [ 476.445441][ C0] R10: dffffc0000000000 R11: fffffbfff2039cf6 R12: ffff88802ade5a00 [ 476.445456][ C0] R13: 0000000000000022 R14: 0000000000020022 R15: 0000000000000000 [ 476.445469][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 476.445485][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.445499][ C0] CR2: 00007f03af4ead58 CR3: 000000002df8e000 CR4: 00000000003526f0 [ 476.445517][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.445528][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.445541][ C0] Call Trace: [ 476.445549][ C0] [ 476.445562][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 476.445586][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 476.445615][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 476.445645][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 476.445671][ C0] ? nmi_handle+0x14f/0x5a0 [ 476.445691][ C0] ? nmi_handle+0x2a/0x5a0 [ 476.445711][ C0] ? __kasan_check_read+0xa/0x20 [ 476.445751][ C0] ? default_do_nmi+0x63/0x160 [ 476.445774][ C0] ? exc_nmi+0x123/0x1f0 [ 476.445814][ C0] ? end_repeat_nmi+0xf/0x53 [ 476.445836][ C0] ? __lock_acquire+0x4d4/0x2050 [ 476.445864][ C0] ? __kasan_check_read+0xa/0x20 [ 476.445892][ C0] ? __kasan_check_read+0xa/0x20 [ 476.445921][ C0] ? __kasan_check_read+0xa/0x20 [ 476.445948][ C0] [ 476.445955][ C0] [ 476.445961][ C0] __lock_acquire+0x4d4/0x2050 [ 476.445997][ C0] lock_acquire+0x1ed/0x550 [ 476.446024][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 476.446054][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 476.446081][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 476.446106][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 476.446131][ C0] ? __pfx_lock_release+0x10/0x10 [ 476.446164][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 476.446192][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 476.446217][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 476.446246][ C0] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 476.446272][ C0] batadv_nc_process_nc_paths+0xd6/0x3a0 [ 476.446298][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 476.446324][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 476.446352][ C0] batadv_nc_worker+0x42a/0x610 [ 476.446378][ C0] ? process_scheduled_works+0x976/0x1850 [ 476.446404][ C0] process_scheduled_works+0xa63/0x1850 [ 476.446443][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.446473][ C0] ? assign_work+0x364/0x3d0 [ 476.446501][ C0] worker_thread+0x870/0xd30 [ 476.446533][ C0] ? __kthread_parkme+0x169/0x1d0 [ 476.446566][ C0] ? __pfx_worker_thread+0x10/0x10 [ 476.446592][ C0] kthread+0x2f0/0x390 [ 476.446610][ C0] ? __pfx_worker_thread+0x10/0x10 [ 476.446636][ C0] ? __pfx_kthread+0x10/0x10 [ 476.446654][ C0] ret_from_fork+0x4b/0x80 [ 476.446681][ C0] ? __pfx_kthread+0x10/0x10 [ 476.446700][ C0] ret_from_fork_asm+0x1a/0x30 [ 476.446732][ C0] [ 476.829788][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 476.836675][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00173-g08c8acc9d8f3 #0 [ 476.847202][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.857300][ T30] Call Trace: [ 476.860613][ T30] [ 476.863574][ T30] dump_stack_lvl+0x241/0x360 [ 476.868329][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.873565][ T30] ? __pfx__printk+0x10/0x10 [ 476.878178][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.884196][ T30] ? vscnprintf+0x5d/0x90 [ 476.888548][ T30] panic+0x349/0x880 [ 476.892555][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 476.898828][ T30] ? __pfx_panic+0x10/0x10 [ 476.903280][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 476.908694][ T30] ? __irq_work_queue_local+0x137/0x410 [ 476.914257][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 476.919643][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 476.925807][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 476.931985][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 476.938168][ T30] watchdog+0x1033/0x1040 [ 476.942545][ T30] ? watchdog+0x1ea/0x1040 [ 476.947007][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.951738][ T30] kthread+0x2f0/0x390 [ 476.955856][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.960558][ T30] ? __pfx_kthread+0x10/0x10 [ 476.965165][ T30] ret_from_fork+0x4b/0x80 [ 476.969601][ T30] ? __pfx_kthread+0x10/0x10 [ 476.974206][ T30] ret_from_fork_asm+0x1a/0x30 [ 476.979008][ T30] [ 476.982450][ T30] Kernel Offset: disabled [ 476.986873][ T30] Rebooting in 86400 seconds..