last executing test programs: 1m39.095070494s ago: executing program 2 (id=1339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 1m38.617896749s ago: executing program 2 (id=1343): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 1m26.866701608s ago: executing program 2 (id=1343): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 1m2.508789081s ago: executing program 2 (id=1343): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 41.467028392s ago: executing program 2 (id=1343): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 18.172571928s ago: executing program 3 (id=1589): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0xc048880}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)}, 0x41) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='8', 0x1}], 0xfffffdef}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000b3ea27b44f3ec421e4992be29400", @ANYRES32=r8, @ANYBLOB="000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x4}, 0x10}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x3}}, 0x26) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130001000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) 17.563834298s ago: executing program 3 (id=1592): socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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"/280, 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf", 0x2c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab9", 0xc6}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fbb1e88e1f41a71002eb8121bf965623ce7f464c363d86743c9279b5eedf88704b6a459766bee3d50ae9f16e5653783d08bfba153d27baa1b721743cda3a1bb920780f9c522e35a37b5e0c28809f09c176c7b850753edf3b43d4e4a48ab2f932f7efea94eec44f6ce9f05082011cd49783f2a87d65315ad4fb87384295d2a51c143227c385fa", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f2", 0x22}, {&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd367694", 0x37}], 0x2}}, {{&(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x70fc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0x80}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x4bc}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}], 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 17.416830352s ago: executing program 3 (id=1595): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a", 0x23}, {0x0}], 0x2, 0x0, 0x0, 0xd2efff7f}, 0x0) 17.200085289s ago: executing program 3 (id=1596): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@nested={0x20, 0x0, 0x0, 0x1, [@generic="e649486a8eec4041", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x77, 0x7, 0x8, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x1, 0x101}}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000880)={@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x9, 0x0, 0x14, 0x200, r7}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x5, 0x1, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x0, 0xe25a, 0x7}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x7, 0xcd84d90982b72245}, {0x3, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='spmi_read_begin\x00', r9}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x200}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x20040001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020095}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 16.841680191s ago: executing program 3 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x16, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 16.666915439s ago: executing program 3 (id=1600): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 14.821507535s ago: executing program 2 (id=1343): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 11.275285006s ago: executing program 4 (id=1613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) socket(0x2, 0x3, 0x100000001) (async) r2 = socket(0x2, 0x3, 0x100000001) setsockopt(r2, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 10.650739731s ago: executing program 4 (id=1615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0xc048880}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)}, 0x41) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='8', 0x1}], 0xfffffdef}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000b3ea27b44f3ec421e4992be29400", @ANYRES32=r8, @ANYBLOB="000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x4}, 0x10}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x3}}, 0x26) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) 10.403080776s ago: executing program 4 (id=1617): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.194433639s ago: executing program 4 (id=1619): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0xf, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 9.861259373s ago: executing program 4 (id=1620): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 6.514989334s ago: executing program 1 (id=1624): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0xf, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 6.1309883s ago: executing program 1 (id=1628): socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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"/280, 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf", 0x2c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab9", 0xc6}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fbb1e88e1f41a71002eb8121bf965623ce7f464c363d86743c9279b5eedf88704b6a459766bee3d50ae9f16e5653783d08bfba153d27baa1b721743cda3a1bb920780f9c522e35a37b5e0c28809f09c176c7b850753edf3b43d4e4a48ab2f932f7efea94eec44f6ce9f05082011cd49783f2a87d65315ad4fb87384295d2a51c143227c385fa", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f2", 0x22}, {&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd367694", 0x37}], 0x2}}, {{&(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x70fc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0x80}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x4bc}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}], 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 5.92201723s ago: executing program 1 (id=1629): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.654967514s ago: executing program 1 (id=1631): socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, 0x0, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000000)=""/120, 0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x44, 0x0, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r7, @ANYBLOB="6a00330050000000ffffffffffff080211000000505050505050"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x61}, {0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 4.921251186s ago: executing program 1 (id=1633): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0xda8c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000240)=0x4) 4.258974521s ago: executing program 1 (id=1635): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 2.891854155s ago: executing program 0 (id=1640): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0xc048880}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)}, 0x41) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='8', 0x1}], 0xfffffdef}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000b3ea27b44f3ec421e4992be29400", @ANYRES32=r8, @ANYBLOB="000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x4}, 0x10}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x3}}, 0x26) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000000000000700", @ANYRES32=r11, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) 2.417609593s ago: executing program 0 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.340082409s ago: executing program 0 (id=1642): socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, 0x0, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000000)=""/120, 0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x44, 0x0, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r7, @ANYBLOB="6a00330050000000ffffffffffff080211000000505050505050"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x61}, {0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 904.55198ms ago: executing program 0 (id=1643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000a00000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) 662.896906ms ago: executing program 0 (id=1644): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0xda8c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000240)=0x4) 383.195477ms ago: executing program 0 (id=1645): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x7, 0x4, 0x1}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="00082dbd7000fcdbdf251000000008000800d600000008000600350c00003c00018008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e310000000000000000000000140002006e657464657673696d3000000000000008000300070000004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100483359b6e08767cc3809b9f1527e5c25026e27a3dbd27cd7ab2da1f6f6a1ace9799bb2f8702bdb4d3f68a6de6a8b1e0909e97fdc168559984657be622a24f96527d60e4cbc5b3cf6b635d8a16db97f425d1938cf3c7af73d5c572fb1a695e3063227d7ad338cb4d2587374a5861510d9b7cc044b6d45c1803b56118d0274cbc20e3260fa78ffd76ff129977c9775994295381c589155c59073669ec2c11b644d437e192318d9ee352c09", @ANYRES32=r7, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000300000000000800030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4020804) 0s ago: executing program 4 (id=1646): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@nested={0x20, 0x0, 0x0, 0x1, [@generic="e649486a8eec4041", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000880)={@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x9, 0x0, 0x14, 0x200}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x5, 0x1, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x0, 0xe25a, 0x7}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x7, 0xcd84d90982b72245}, {0x3, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='spmi_read_begin\x00', r8}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x200}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x20040001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020095}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 391] vlan2: entered promiscuous mode [ 343.778366][T10413] rdma_rxe: rxe_newlink: failed to add lo [ 343.997265][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.007629][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.020019][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.042416][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.051156][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.058755][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.205333][T10415] lo speed is unknown, defaulting to 1000 [ 344.211462][ T52] wlan1: Trigger new scan to find an IBSS to join [ 344.585170][T10421] tun0: tun_chr_ioctl cmd 1074812117 [ 344.803049][T10423] FAULT_INJECTION: forcing a failure. [ 344.803049][T10423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.850490][T10423] CPU: 1 PID: 10423 Comm: syz.4.1349 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 344.860376][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 344.870468][T10423] Call Trace: [ 344.873767][T10423] [ 344.876736][T10423] dump_stack_lvl+0x241/0x360 [ 344.881468][T10423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.886780][T10423] ? __pfx__printk+0x10/0x10 [ 344.891393][T10423] ? __pfx_lock_release+0x10/0x10 [ 344.896466][T10423] should_fail_ex+0x3b0/0x4e0 [ 344.901198][T10423] _copy_from_iter+0x1f6/0x1960 [ 344.906076][T10423] ? __virt_addr_valid+0x183/0x530 [ 344.911216][T10423] ? __pfx_lock_release+0x10/0x10 [ 344.916264][T10423] ? __alloc_skb+0x28f/0x440 [ 344.920869][T10423] ? __pfx__copy_from_iter+0x10/0x10 [ 344.926169][T10423] ? __virt_addr_valid+0x183/0x530 [ 344.931449][T10423] ? __virt_addr_valid+0x183/0x530 [ 344.936575][T10423] ? __virt_addr_valid+0x45f/0x530 [ 344.941705][T10423] ? __check_object_size+0x49c/0x900 [ 344.947004][T10423] netlink_sendmsg+0x73d/0xcb0 [ 344.951798][T10423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.957207][T10423] ? __import_iovec+0x536/0x820 [ 344.962084][T10423] ? aa_sock_msg_perm+0x91/0x160 [ 344.967053][T10423] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 344.972383][T10423] ? security_socket_sendmsg+0x87/0xb0 [ 344.977869][T10423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.983171][T10423] __sock_sendmsg+0x221/0x270 [ 344.987876][T10423] ____sys_sendmsg+0x525/0x7d0 [ 344.992761][T10423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.998077][T10423] __sys_sendmsg+0x2b0/0x3a0 [ 345.002689][T10423] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.007818][T10423] ? vfs_write+0x7c4/0xc90 [ 345.012664][T10423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.019024][T10423] ? do_syscall_64+0x100/0x230 [ 345.023819][T10423] ? do_syscall_64+0xb6/0x230 [ 345.028779][T10423] do_syscall_64+0xf3/0x230 [ 345.033340][T10423] ? clear_bhb_loop+0x35/0x90 [ 345.038040][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.043954][T10423] RIP: 0033:0x7f95cb175f19 [ 345.048389][T10423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.068013][T10423] RSP: 002b:00007f95cbf79048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.076440][T10423] RAX: ffffffffffffffda RBX: 00007f95cb305f60 RCX: 00007f95cb175f19 [ 345.084425][T10423] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 345.092414][T10423] RBP: 00007f95cbf790a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.100414][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.108393][T10423] R13: 000000000000000b R14: 00007f95cb305f60 R15: 00007ffd46727378 [ 345.116562][T10423] [ 345.450625][T10427] tipc: Enabling of bearer rejected, failed to enable media [ 345.574551][T10415] chnl_net:caif_netlink_parms(): no params data found [ 345.931034][T10415] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.938237][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.973420][T10415] bridge_slave_0: entered allmulticast mode [ 345.991705][T10415] bridge_slave_0: entered promiscuous mode [ 346.018749][T10415] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.059838][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.073111][T10415] bridge_slave_1: entered allmulticast mode [ 346.101508][T10415] bridge_slave_1: entered promiscuous mode [ 346.130211][ T4500] Bluetooth: hci0: command tx timeout [ 346.235072][ T9470] wlan1: Trigger new scan to find an IBSS to join [ 346.248469][T10415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.281993][T10415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.508723][T10415] team0: Port device team_slave_0 added [ 346.537351][T10415] team0: Port device team_slave_1 added [ 346.682653][T10415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.713197][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.777052][T10415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.808141][T10415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.839973][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.931401][T10415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.118024][T10415] hsr_slave_0: entered promiscuous mode [ 347.136474][T10415] hsr_slave_1: entered promiscuous mode [ 347.164916][T10415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.183327][T10415] Cannot create hsr debugfs directory [ 347.464588][T10462] netlink: 'syz.1.1360': attribute type 4 has an invalid length. [ 347.640710][T10462] netlink: 'syz.1.1360': attribute type 4 has an invalid length. [ 347.863461][T10466] __nla_validate_parse: 3 callbacks suppressed [ 347.863485][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 348.049990][T10415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.225700][ T1110] wlan1: Trigger new scan to find an IBSS to join [ 348.228637][ T4500] Bluetooth: hci0: command tx timeout [ 348.304725][T10415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.534745][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 348.572851][T10415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.673800][T10415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.075501][T10415] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.116760][T10415] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.140667][ T1110] wlan1: Creating new IBSS network, BSSID 9a:88:77:d5:fe:cc [ 349.173518][T10415] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.181480][ T52] wlan1: Trigger new scan to find an IBSS to join [ 349.231964][T10415] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.640925][T10415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.723558][T10415] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.814161][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.821512][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.856885][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.864130][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.290933][ T4500] Bluetooth: hci0: command tx timeout [ 350.405269][T10491] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 350.434963][T10491] team0: Port device netdevsim0 added [ 350.517603][T10415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.681565][T10415] veth0_vlan: entered promiscuous mode [ 350.735133][T10415] veth1_vlan: entered promiscuous mode [ 350.853023][T10415] veth0_macvtap: entered promiscuous mode [ 350.908003][T10415] veth1_macvtap: entered promiscuous mode [ 350.982395][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.009880][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.040830][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.059667][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.075112][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.091046][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 351.111559][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 351.129634][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.139499][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.170076][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.186194][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.211717][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.229334][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.240601][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.270847][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.292528][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.316766][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.341221][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.363021][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.386590][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.422638][T10415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.500870][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.520623][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.544976][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.561543][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.588830][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.629660][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.650334][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.671334][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.689617][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.716051][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.736480][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.760074][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.784925][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.837232][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.864641][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.886703][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.917880][T10415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.941434][T10415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.967535][T10415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.024673][T10415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.045238][T10415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.067673][T10415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.086365][T10415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.221209][ T82] wlan1: Trigger new scan to find an IBSS to join [ 352.345868][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.372666][ T4500] Bluetooth: hci0: command tx timeout [ 352.372878][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.446924][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.471726][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.813193][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 352.862854][T10521] bond_slave_0: entered promiscuous mode [ 352.868631][T10521] bond_slave_1: entered promiscuous mode [ 352.892640][T10521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 353.110276][ T9470] wlan1: Creating new IBSS network, BSSID 0a:d5:c1:e3:83:4d [ 354.240629][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.251811][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.260571][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.275630][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.285520][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.296023][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.447720][T10542] lo speed is unknown, defaulting to 1000 [ 354.787819][ T2889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.396867][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.408915][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.417710][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.432099][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.441754][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 355.459935][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.590865][ T2889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.644122][T10542] chnl_net:caif_netlink_parms(): no params data found [ 355.744038][ T2889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.750228][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 355.872668][ T2889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.956921][T10564] lo speed is unknown, defaulting to 1000 [ 356.229154][T10542] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.254348][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.277706][T10542] bridge_slave_0: entered allmulticast mode [ 356.315647][T10542] bridge_slave_0: entered promiscuous mode [ 356.343424][T10542] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.363340][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.372394][ T4500] Bluetooth: hci0: command tx timeout [ 356.395646][T10542] bridge_slave_1: entered allmulticast mode [ 356.449391][T10542] bridge_slave_1: entered promiscuous mode [ 356.761227][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.771336][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.779449][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.804952][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.822244][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.832499][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.893326][T10542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.963712][T10542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.127600][T10542] team0: Port device team_slave_0 added [ 357.154641][T10542] team0: Port device team_slave_1 added [ 357.186397][ T2889] bridge_slave_1: left allmulticast mode [ 357.192788][ T2889] bridge_slave_1: left promiscuous mode [ 357.198846][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.241488][ T2889] bridge_slave_0: left allmulticast mode [ 357.247205][ T2889] bridge_slave_0: left promiscuous mode [ 357.260035][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.571123][ T4500] Bluetooth: hci3: command tx timeout [ 357.708959][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 357.718458][T10603] nbd: couldn't find a device at index 0 [ 358.027120][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.043551][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.059048][ T2889] bond0 (unregistering): Released all slaves [ 358.270183][T10542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.277191][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.314889][T10542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.442057][T10588] lo speed is unknown, defaulting to 1000 [ 358.448809][T10542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.465996][ T4500] Bluetooth: hci0: command tx timeout [ 358.514825][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.634969][T10542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.901986][T10542] hsr_slave_0: entered promiscuous mode [ 358.917937][T10542] hsr_slave_1: entered promiscuous mode [ 358.930382][ T4500] Bluetooth: hci4: command tx timeout [ 358.937266][T10542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.959786][T10542] Cannot create hsr debugfs directory [ 359.055025][T10637] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 359.296682][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 359.528995][ T2889] hsr_slave_0: left promiscuous mode [ 359.544688][ T2889] hsr_slave_1: left promiscuous mode [ 359.568218][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.589907][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.614771][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.640028][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.650279][ T4500] Bluetooth: hci3: command tx timeout [ 359.705899][ T2889] veth1_macvtap: left promiscuous mode [ 359.723248][ T2889] veth0_macvtap: left promiscuous mode [ 359.729440][ T2889] veth1_vlan: left promiscuous mode [ 359.738392][ T2889] veth0_vlan: left promiscuous mode [ 360.309468][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 360.358701][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 360.541925][ T4500] Bluetooth: hci0: command tx timeout [ 360.911193][T10564] chnl_net:caif_netlink_parms(): no params data found [ 361.011550][ T4500] Bluetooth: hci4: command tx timeout [ 361.221793][T10668] netlink: 'syz.4.1415': attribute type 10 has an invalid length. [ 361.282314][T10668] team0: Port device netdevsim0 added [ 361.593159][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.615445][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.638417][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1418'. [ 361.649038][T10564] bridge_slave_0: entered allmulticast mode [ 361.662723][T10564] bridge_slave_0: entered promiscuous mode [ 361.671890][T10688] nbd: couldn't find a device at index 0 [ 361.693550][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.721408][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.730465][ T4500] Bluetooth: hci3: command tx timeout [ 361.746312][T10564] bridge_slave_1: entered allmulticast mode [ 361.768195][T10564] bridge_slave_1: entered promiscuous mode [ 361.818593][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 361.887303][T10542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.095495][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.163749][T10542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.218287][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.341392][T10542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.382672][T10564] team0: Port device team_slave_0 added [ 362.389138][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1425'. [ 362.450182][T10564] team0: Port device team_slave_1 added [ 362.472534][T10542] tipc: Resetting bearer [ 362.558376][T10542] bond0: (slave netdevsim0): Releasing backup interface [ 362.586189][T10542] tipc: Resetting bearer [ 362.609968][ T4500] Bluetooth: hci0: command tx timeout [ 362.613904][T10542] tipc: Disabling bearer [ 362.644838][T10542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.688411][T10588] chnl_net:caif_netlink_parms(): no params data found [ 362.782472][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.800267][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.846859][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.908585][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.926023][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.985367][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.091688][ T4500] Bluetooth: hci4: command tx timeout [ 363.170693][ T2889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.382624][ T2889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.451516][T10564] hsr_slave_0: entered promiscuous mode [ 363.498667][T10564] hsr_slave_1: entered promiscuous mode [ 363.530188][T10564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.559836][T10564] Cannot create hsr debugfs directory [ 363.720089][ T2889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.816382][ T4500] Bluetooth: hci3: command tx timeout [ 363.998376][ T2889] bond0: (slave netdevsim0): Releasing backup interface [ 364.023639][ T2889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.118646][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.132454][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.141017][T10588] bridge_slave_0: entered allmulticast mode [ 364.157043][T10588] bridge_slave_0: entered promiscuous mode [ 364.166021][T10542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.189491][T10542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.212283][ T9470] wlan1: Trigger new scan to find an IBSS to join [ 364.247417][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.258555][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.276514][T10588] bridge_slave_1: entered allmulticast mode [ 364.294334][T10588] bridge_slave_1: entered promiscuous mode [ 364.316279][T10542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.398954][T10542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.655593][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.763884][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.888771][ T2889] bridge_slave_1: left allmulticast mode [ 364.902394][ T2889] bridge_slave_1: left promiscuous mode [ 364.927874][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.974302][ T2889] bridge_slave_0: left allmulticast mode [ 364.991581][ T2889] bridge_slave_0: left promiscuous mode [ 365.020861][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.112351][ T2889] bond_slave_0: left promiscuous mode [ 365.117988][ T2889] bond_slave_1: left promiscuous mode [ 365.170242][ T4500] Bluetooth: hci4: command tx timeout [ 366.136015][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.180382][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.203369][ T2889] bond0 (unregistering): Released all slaves [ 366.293697][T10588] team0: Port device team_slave_0 added [ 366.512958][T10588] team0: Port device team_slave_1 added [ 366.800044][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.807037][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.842935][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.868847][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.886383][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.913318][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.170203][ T82] wlan1: Trigger new scan to find an IBSS to join [ 367.188228][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 367.198870][T10777] FAULT_INJECTION: forcing a failure. [ 367.198870][T10777] name failslab, interval 1, probability 0, space 0, times 0 [ 367.220042][T10777] CPU: 0 PID: 10777 Comm: syz.4.1436 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 367.229900][T10777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 367.239985][T10777] Call Trace: [ 367.243287][T10777] [ 367.246244][T10777] dump_stack_lvl+0x241/0x360 [ 367.250968][T10777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.256203][T10777] ? __pfx__printk+0x10/0x10 [ 367.260838][T10777] ? __pfx___might_resched+0x10/0x10 [ 367.266168][T10777] should_fail_ex+0x3b0/0x4e0 [ 367.270882][T10777] ? __kernfs_new_node+0xd8/0x870 [ 367.275943][T10777] should_failslab+0x9/0x20 [ 367.280485][T10777] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 367.285909][T10777] __kernfs_new_node+0xd8/0x870 [ 367.290808][T10777] ? mark_lock+0x9a/0x350 [ 367.295179][T10777] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.300703][T10777] kernfs_new_node+0x137/0x240 [ 367.305515][T10777] __kernfs_create_file+0x49/0x2e0 [ 367.310688][T10777] sysfs_add_file_mode_ns+0x24a/0x310 [ 367.316106][T10777] internal_create_group+0x7a7/0x11d0 [ 367.321532][T10777] ? __pfx_internal_create_group+0x10/0x10 [ 367.327397][T10777] sysfs_create_groups+0x56/0x120 [ 367.332464][T10777] device_add_attrs+0xe5/0x600 [ 367.337270][T10777] ? __pfx_device_add_attrs+0x10/0x10 [ 367.342682][T10777] device_add+0x576/0xbf0 [ 367.347028][T10777] ? device_initialize+0x266/0x460 [ 367.352159][T10777] netdev_register_kobject+0x17e/0x320 [ 367.357636][T10777] register_netdevice+0x12c5/0x1b00 [ 367.362866][T10777] ? __pfx_register_netdevice+0x10/0x10 [ 367.368428][T10777] ? dev_addr_mod+0xbd/0x330 [ 367.373052][T10777] macvlan_common_newlink+0x1189/0x1930 [ 367.378611][T10777] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 367.384186][T10777] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 367.390090][T10777] ? rtnl_create_link+0x91c/0xc20 [ 367.395129][T10777] ? __pfx_macvlan_newlink+0x10/0x10 [ 367.400424][T10777] rtnl_newlink+0x1591/0x20a0 [ 367.405131][T10777] ? __pfx_rtnl_newlink+0x10/0x10 [ 367.410162][T10777] ? do_raw_spin_unlock+0x13c/0x8b0 [ 367.415376][T10777] ? __mutex_lock+0x9a5/0xd70 [ 367.420091][T10777] ? __mutex_lock+0x527/0xd70 [ 367.424795][T10777] ? __pfx_rtnl_newlink+0x10/0x10 [ 367.429832][T10777] rtnetlink_rcv_msg+0x73f/0xcf0 [ 367.434796][T10777] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 367.439925][T10777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 367.445401][T10777] ? ref_tracker_free+0x643/0x7e0 [ 367.450444][T10777] netlink_rcv_skb+0x1e3/0x430 [ 367.455235][T10777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 367.460705][T10777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.466020][T10777] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.471230][T10777] netlink_unicast+0x7f0/0x990 [ 367.476118][T10777] ? __pfx_netlink_unicast+0x10/0x10 [ 367.481425][T10777] ? __virt_addr_valid+0x183/0x530 [ 367.486558][T10777] ? __check_object_size+0x49c/0x900 [ 367.491855][T10777] ? bpf_lsm_netlink_send+0x9/0x10 [ 367.496983][T10777] netlink_sendmsg+0x8e4/0xcb0 [ 367.501773][T10777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.507072][T10777] ? __import_iovec+0x536/0x820 [ 367.511932][T10777] ? aa_sock_msg_perm+0x91/0x160 [ 367.516898][T10777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 367.522192][T10777] ? security_socket_sendmsg+0x87/0xb0 [ 367.527670][T10777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.532971][T10777] __sock_sendmsg+0x221/0x270 [ 367.537671][T10777] ____sys_sendmsg+0x525/0x7d0 [ 367.542456][T10777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.547773][T10777] __sys_sendmsg+0x2b0/0x3a0 [ 367.552374][T10777] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.557508][T10777] ? vfs_write+0x7c4/0xc90 [ 367.561977][T10777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 367.568318][T10777] ? do_syscall_64+0x100/0x230 [ 367.573093][T10777] ? do_syscall_64+0xb6/0x230 [ 367.577783][T10777] do_syscall_64+0xf3/0x230 [ 367.582302][T10777] ? clear_bhb_loop+0x35/0x90 [ 367.587025][T10777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.592929][T10777] RIP: 0033:0x7f95cb175f19 [ 367.597353][T10777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.616965][T10777] RSP: 002b:00007f95cbf79048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.625391][T10777] RAX: ffffffffffffffda RBX: 00007f95cb305f60 RCX: 00007f95cb175f19 [ 367.633370][T10777] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000010 [ 367.641344][T10777] RBP: 00007f95cbf790a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.649404][T10777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.657389][T10777] R13: 000000000000000b R14: 00007f95cb305f60 R15: 00007ffd46727378 [ 367.665378][T10777] [ 367.912967][T10588] hsr_slave_0: entered promiscuous mode [ 367.927520][T10588] hsr_slave_1: entered promiscuous mode [ 367.935431][T10588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.949636][T10588] Cannot create hsr debugfs directory [ 367.973102][T10781] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 367.999034][T10782] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 368.139103][T10781] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 368.175382][T10781] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.359772][ T2889] hsr_slave_0: left promiscuous mode [ 368.390641][ T2889] hsr_slave_1: left promiscuous mode [ 368.410124][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.417649][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.441962][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.450087][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.504675][ T2889] veth1_macvtap: left promiscuous mode [ 368.521108][ T2889] veth0_macvtap: left promiscuous mode [ 368.526826][ T2889] veth1_vlan: left promiscuous mode [ 368.560038][ T2889] veth0_vlan: left promiscuous mode [ 369.545993][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 369.659485][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 369.786012][T10793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1441'. [ 370.228659][T10795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1441'. [ 370.406294][T10564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.413600][T10799] rdma_rxe: rxe_newlink: failed to add lo [ 370.518322][T10564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.533094][T10564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.560555][T10542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.577311][T10564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.831542][T10542] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.903583][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.910834][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.056408][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.063673][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.170046][ T52] wlan1: Trigger new scan to find an IBSS to join [ 371.385382][T10564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.514072][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 371.648516][T10564] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.737447][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.744701][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.827191][T10588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.905881][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.913125][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.177682][ T2889] wlan1: Creating new IBSS network, BSSID ce:99:9c:45:70:f4 [ 372.191001][T10588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.233375][T10588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.261903][T10588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.511771][T10542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.832679][T10542] veth0_vlan: entered promiscuous mode [ 372.921033][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.986916][T10542] veth1_vlan: entered promiscuous mode [ 373.018919][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.080224][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.087424][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.167950][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.175248][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.303545][T10564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.393582][T10542] veth0_macvtap: entered promiscuous mode [ 373.444106][T10542] veth1_macvtap: entered promiscuous mode [ 373.585019][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.606529][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.647250][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.667908][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.678773][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.690762][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.719579][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.744812][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.765072][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.788447][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.808775][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.841717][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.862045][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.884493][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.906422][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.931225][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.956155][T10542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.025949][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.069658][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.094299][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.115586][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.139781][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.159593][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.179567][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.203567][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.236737][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.250827][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.263520][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.284656][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.305353][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.326317][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.352985][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.373407][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.401656][T10542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.484792][T10542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.494689][T10542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.510682][T10542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.521016][T10542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.603719][T10564] veth0_vlan: entered promiscuous mode [ 374.646278][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.715120][T10564] veth1_vlan: entered promiscuous mode [ 374.945269][T10564] veth0_macvtap: entered promiscuous mode [ 375.018718][T10588] veth0_vlan: entered promiscuous mode [ 375.096972][T10564] veth1_macvtap: entered promiscuous mode [ 375.150758][T10588] veth1_vlan: entered promiscuous mode [ 375.192222][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.209623][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.294545][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.339596][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.361649][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.382278][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.402479][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.429645][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.449843][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.477786][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.498002][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.518816][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.542474][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.563340][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.587053][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.608582][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.629277][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.659685][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.680622][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.701428][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.723946][T10564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.783827][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 375.794202][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.815359][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.839873][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.859726][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.890073][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.927125][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.948894][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.978270][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.006686][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.029619][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.039490][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.069059][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.101631][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.132530][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.169925][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.195559][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.219637][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.249598][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.266316][T10564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.287553][T10564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.311825][T10564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.323939][T10564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.333185][T10564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.366963][T10588] veth0_macvtap: entered promiscuous mode [ 376.411436][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.419318][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.454190][T10588] veth1_macvtap: entered promiscuous mode [ 376.527761][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.570776][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.590566][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.607511][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.627894][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.648974][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.669441][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.690842][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.718080][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.741193][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.759552][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.779605][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.806522][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.827475][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.853588][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.885046][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.916217][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.931269][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.942144][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.953076][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.981505][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.083447][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.139650][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.179214][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.204821][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.220201][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.267242][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.290267][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.308968][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.329103][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.360053][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.389660][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.418871][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.440409][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.469639][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.501745][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.517047][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.537290][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.558658][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.578913][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.601950][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.615869][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.745200][T10588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.780457][T10588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.789229][T10588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.810185][T10588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.944210][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.964370][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.973966][T10958] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1463'. [ 377.994879][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 378.021291][T10958] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1463'. [ 378.059630][T10958] netlink: 'syz.1.1463': attribute type 3 has an invalid length. [ 378.089763][T10958] netlink: 'syz.1.1463': attribute type 2 has an invalid length. [ 378.119183][T10958] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1463'. [ 378.361508][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.404328][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.552191][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.576684][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.584586][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 378.850414][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.885495][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.940882][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.948706][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.083112][ C0] eth0: bad gso: type: 1, size: 1408 [ 379.211443][T10997] openvswitch: netlink: Missing key (keys=40, expected=80) [ 379.303396][ T1039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.507861][ T1039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.788881][ T1039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.844529][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 379.887244][T11010] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 380.004245][ T1039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.160882][T11019] FAULT_INJECTION: forcing a failure. [ 380.160882][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 380.216900][T11019] CPU: 1 PID: 11019 Comm: syz.1.1476 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 380.226786][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 380.236892][T11019] Call Trace: [ 380.240191][T11019] [ 380.243145][T11019] dump_stack_lvl+0x241/0x360 [ 380.247884][T11019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.253135][T11019] ? __pfx__printk+0x10/0x10 [ 380.257769][T11019] ? __pfx___might_resched+0x10/0x10 [ 380.263111][T11019] should_fail_ex+0x3b0/0x4e0 [ 380.267829][T11019] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 380.274098][T11019] should_failslab+0x9/0x20 [ 380.278636][T11019] __kmalloc_noprof+0xd8/0x400 [ 380.283444][T11019] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 380.289561][T11019] genl_rcv_msg+0x802/0xec0 [ 380.294095][T11019] ? mark_lock+0x9a/0x350 [ 380.298479][T11019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.303578][T11019] ? __pfx_lock_acquire+0x10/0x10 [ 380.308635][T11019] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 380.314087][T11019] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 380.319588][T11019] ? __pfx_nl80211_post_doit+0x10/0x10 [ 380.325091][T11019] ? __pfx___might_resched+0x10/0x10 [ 380.330431][T11019] netlink_rcv_skb+0x1e3/0x430 [ 380.335239][T11019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.340311][T11019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.345656][T11019] ? __netlink_deliver_tap+0x77e/0x7c0 [ 380.351178][T11019] genl_rcv+0x28/0x40 [ 380.355211][T11019] netlink_unicast+0x7f0/0x990 [ 380.360030][T11019] ? __pfx_netlink_unicast+0x10/0x10 [ 380.365627][T11019] ? __virt_addr_valid+0x183/0x530 [ 380.370800][T11019] ? __check_object_size+0x49c/0x900 [ 380.376128][T11019] ? bpf_lsm_netlink_send+0x9/0x10 [ 380.381288][T11019] netlink_sendmsg+0x8e4/0xcb0 [ 380.386109][T11019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.391527][T11019] ? __import_iovec+0x536/0x820 [ 380.396420][T11019] ? aa_sock_msg_perm+0x91/0x160 [ 380.396486][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.401377][T11019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 380.401410][T11019] ? security_socket_sendmsg+0x87/0xb0 [ 380.401448][T11019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.401477][T11019] __sock_sendmsg+0x221/0x270 [ 380.401511][T11019] ____sys_sendmsg+0x525/0x7d0 [ 380.401559][T11019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.401614][T11019] __sys_sendmsg+0x2b0/0x3a0 [ 380.401640][T11019] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.401674][T11019] ? vfs_write+0x7c4/0xc90 [ 380.413078][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.414065][T11019] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.421138][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.424913][T11019] ? do_syscall_64+0x100/0x230 [ 380.432012][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.434335][T11019] ? do_syscall_64+0xb6/0x230 [ 380.445286][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 380.449478][T11019] do_syscall_64+0xf3/0x230 [ 380.454717][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.460817][T11019] ? clear_bhb_loop+0x35/0x90 [ 380.460861][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.460898][T11019] RIP: 0033:0x7fb247575f19 [ 380.460921][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.543717][T11019] RSP: 002b:00007fb246fff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.552172][T11019] RAX: ffffffffffffffda RBX: 00007fb247705f60 RCX: 00007fb247575f19 [ 380.560180][T11019] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 380.568184][T11019] RBP: 00007fb246fff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 380.576200][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.584200][T11019] R13: 000000000000000b R14: 00007fb247705f60 R15: 00007ffed3f314d8 [ 380.592228][T11019] [ 380.884986][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 380.906851][T11024] lo speed is unknown, defaulting to 1000 [ 381.021016][ T1039] bridge_slave_1: left allmulticast mode [ 381.026745][ T1039] bridge_slave_1: left promiscuous mode [ 381.034067][T11032] sctp: [Deprecated]: syz.3.1478 (pid 11032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.034067][T11032] Use struct sctp_sack_info instead [ 381.080567][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.119043][ T1039] bridge_slave_0: left allmulticast mode [ 381.138673][ T1039] bridge_slave_0: left promiscuous mode [ 381.163047][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.249932][ T1110] wlan1: Trigger new scan to find an IBSS to join [ 382.312159][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.344619][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.374830][ T1039] bond0 (unregistering): Released all slaves [ 382.404849][T11032] bridge_slave_1: left allmulticast mode [ 382.428671][T11032] bridge_slave_1: left promiscuous mode [ 382.454022][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.483694][ T4500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.495254][ T4500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.503503][ T4500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.513669][ T4500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.528297][ T4500] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.535418][ T5110] Bluetooth: hci3: command tx timeout [ 382.546986][ T4500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.557094][T11038] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 382.581648][T11038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1478'. [ 382.597328][T11038] batman_adv: batadv0: Adding interface: virt_wifi0 [ 382.604704][T11038] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.650733][T11038] batman_adv: batadv0: Interface activated: virt_wifi0 [ 383.122227][T11054] lo speed is unknown, defaulting to 1000 [ 383.292968][T11074] tipc: Enabling of bearer rejected, failed to enable media [ 383.342717][T11082] syz.0.1489[11082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.342893][T11082] syz.0.1489[11082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.817282][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 383.948785][T11089] "syz.0.1489" (11089) uses obsolete ecb(arc4) skcipher [ 384.295005][T11024] chnl_net:caif_netlink_parms(): no params data found [ 384.388046][ T1039] hsr_slave_0: left promiscuous mode [ 384.394423][ T1039] hsr_slave_1: left promiscuous mode [ 384.413208][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.429739][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.448115][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.456127][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.496645][ T1039] veth1_macvtap: left promiscuous mode [ 384.502442][ T1039] veth0_macvtap: left promiscuous mode [ 384.508211][ T1039] veth1_vlan: left promiscuous mode [ 384.513719][ T1039] veth0_vlan: left promiscuous mode [ 384.585609][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1494'. [ 384.610159][ T4500] Bluetooth: hci3: command tx timeout [ 384.610182][ T5124] Bluetooth: hci1: command tx timeout [ 385.394161][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 385.488533][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 386.213213][ T2889] wlan1: Trigger new scan to find an IBSS to join [ 386.344916][T11113] netlink: 'syz.1.1494': attribute type 4 has an invalid length. [ 386.363493][T11113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.695266][ T5124] Bluetooth: hci3: command tx timeout [ 386.702596][ T4500] Bluetooth: hci1: command tx timeout [ 386.937995][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.986806][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.011411][T11024] bridge_slave_0: entered allmulticast mode [ 387.028273][T11024] bridge_slave_0: entered promiscuous mode [ 387.135378][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.161983][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.169333][T11024] bridge_slave_1: entered allmulticast mode [ 387.219783][T11024] bridge_slave_1: entered promiscuous mode [ 387.412465][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.460469][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.497846][T11054] chnl_net:caif_netlink_parms(): no params data found [ 387.715960][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 387.757809][T11024] team0: Port device team_slave_0 added [ 387.801470][T11024] team0: Port device team_slave_1 added [ 388.085692][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.099611][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.195296][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.301364][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1503'. [ 388.340367][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.371269][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.420908][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.491043][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.510057][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.532143][T11054] bridge_slave_0: entered allmulticast mode [ 388.552130][T11054] bridge_slave_0: entered promiscuous mode [ 388.580599][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.599746][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.607093][T11054] bridge_slave_1: entered allmulticast mode [ 388.625635][T11054] bridge_slave_1: entered promiscuous mode [ 388.769776][ T5124] Bluetooth: hci3: command tx timeout [ 388.777574][ T4500] Bluetooth: hci1: command tx timeout [ 388.872152][T11024] hsr_slave_0: entered promiscuous mode [ 388.894749][T11024] hsr_slave_1: entered promiscuous mode [ 388.902081][T11024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.919748][T11024] Cannot create hsr debugfs directory [ 388.930422][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.008978][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.249855][ T82] wlan1: Trigger new scan to find an IBSS to join [ 389.380281][T11054] team0: Port device team_slave_0 added [ 389.442671][T11054] team0: Port device team_slave_1 added [ 389.732981][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.750151][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.833735][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.922638][T11192] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 389.986674][T11192] team0: Port device netdevsim0 added [ 390.050965][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.091267][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.160914][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.525485][T11054] hsr_slave_0: entered promiscuous mode [ 390.580206][T11054] hsr_slave_1: entered promiscuous mode [ 390.636820][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.669604][T11054] Cannot create hsr debugfs directory [ 390.849962][ T5124] Bluetooth: hci1: command tx timeout [ 390.985135][T11213] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1517'. [ 391.237165][T11216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.264434][T11216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.844423][T11054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.057019][T11246] netlink: 105108 bytes leftover after parsing attributes in process `syz.3.1526'. [ 392.090521][T11054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.104016][T11246] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 392.146193][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 392.210385][ T82] wlan1: Trigger new scan to find an IBSS to join [ 392.275566][T11054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.431881][T11054] team0: Port device netdevsim0 removed [ 392.470412][T11054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.843970][T11024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.880932][T11024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.930157][T11024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.953483][T11024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.116593][ T82] wlan1: Creating new IBSS network, BSSID 7e:ef:12:eb:db:0d [ 393.220909][T11054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.269658][T11054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.306224][T11054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.369726][T11054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.646557][T11024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.845748][T11024] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.871264][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.906222][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.913501][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.001479][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.008811][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.156208][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.214102][T11277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1531'. [ 394.296964][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.304211][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.376382][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.383630][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.036382][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.073663][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 395.296469][T11024] veth0_vlan: entered promiscuous mode [ 395.405136][T11024] veth1_vlan: entered promiscuous mode [ 395.584187][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.618825][T11024] veth0_macvtap: entered promiscuous mode [ 395.691434][T11024] veth1_macvtap: entered promiscuous mode [ 395.824993][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.879094][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.919688][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.949645][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.980371][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.009668][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.026647][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.047459][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.067925][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.089113][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.110543][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.159617][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.189602][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.213165][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.229936][ T4556] udevd[4556]: worker [5526] /devices/virtual/block/nbd5 is taking a long time [ 396.241602][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.259598][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.290087][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.320994][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.349567][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.380213][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.411767][T11024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.483660][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.540651][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.574037][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.623006][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.656633][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.678906][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.721839][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.742956][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.774453][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.809877][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.841850][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.879668][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.909776][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.951879][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.964585][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.006712][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.039722][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.077484][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.097931][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.127506][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.151080][T11024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.290827][T11024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.319825][T11024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.328594][T11024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.378547][T11024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.403373][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 397.439676][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 397.489049][T11054] veth0_vlan: entered promiscuous mode [ 397.597507][T11054] veth1_vlan: entered promiscuous mode [ 397.845296][T11054] veth0_macvtap: entered promiscuous mode [ 397.912079][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.915006][T11054] veth1_macvtap: entered promiscuous mode [ 397.943928][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.057392][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.099844][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.131206][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.162345][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.192931][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.230864][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.270094][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.301230][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.331774][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.362894][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.399546][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.439673][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.480274][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.504654][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.525165][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.549060][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.572748][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.604108][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.646908][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.672337][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.704904][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.741902][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.778627][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.815328][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.846567][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.882458][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.930707][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.950732][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.978427][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.993167][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.017370][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.029028][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.040317][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.060508][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.079570][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.113395][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.139892][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.164419][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.180100][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.209738][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.240863][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.269665][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.309666][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.336251][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.362640][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.379655][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.399655][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.442674][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 399.456697][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.533584][T11054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.561852][T11054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.577595][T11054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.599783][T11054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.052613][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.072488][T11024] syz-executor (11024) used greatest stack depth: 18416 bytes left [ 400.074605][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.305569][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.451107][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.459002][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.601884][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.775778][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.892629][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.070834][T11385] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1480'. [ 401.140716][T11385] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1480'. [ 401.212564][T11385] IPVS: Error connecting to the multicast addr [ 401.369963][ T82] bridge_slave_1: left allmulticast mode [ 401.377422][ T82] bridge_slave_1: left promiscuous mode [ 401.440636][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.504001][ T82] bridge_slave_0: left allmulticast mode [ 401.529974][ T82] bridge_slave_0: left promiscuous mode [ 401.551239][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.737594][ T4500] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.748489][ T4500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.757139][ T4500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.771035][ T4500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.778893][ T4500] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 401.799954][ T4500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.192534][ T2477] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.931593][ T4500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.943615][ T4500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.951698][ T4500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.975542][ T4500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.983732][ T4500] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 403.000570][ T4500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 403.067849][ T4500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 403.089133][ T4500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 403.110264][ T4500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 403.139306][ T4500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 403.179846][ T4500] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 403.201095][ T4500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 403.453992][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.482385][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.519230][ T82] bond0 (unregistering): Released all slaves [ 403.543074][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 403.580239][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 403.683567][T11417] lo speed is unknown, defaulting to 1000 [ 403.760303][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 403.833300][T11426] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1554'. [ 403.861147][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 403.879608][T11426] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1554'. [ 403.888593][T11426] netlink: 'syz.4.1554': attribute type 3 has an invalid length. [ 403.892545][ T5124] Bluetooth: hci3: command tx timeout [ 403.925397][T11426] netlink: 'syz.4.1554': attribute type 2 has an invalid length. [ 403.935007][T11426] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1554'. [ 404.063551][T11420] lo speed is unknown, defaulting to 1000 [ 404.719018][T11397] lo speed is unknown, defaulting to 1000 [ 404.865667][T11417] chnl_net:caif_netlink_parms(): no params data found [ 405.090079][ T4500] Bluetooth: hci5: command tx timeout [ 405.250414][ T4500] Bluetooth: hci6: command tx timeout [ 405.587509][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.598273][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.607571][T11417] bridge_slave_0: entered allmulticast mode [ 405.639718][T11417] bridge_slave_0: entered promiscuous mode [ 405.669090][T11420] chnl_net:caif_netlink_parms(): no params data found [ 405.761053][ T82] hsr_slave_0: left promiscuous mode [ 405.776028][ T82] hsr_slave_1: left promiscuous mode [ 405.793058][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.807480][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.830916][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.838400][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.899099][ T82] veth1_macvtap: left promiscuous mode [ 405.919694][ T82] veth0_macvtap: left promiscuous mode [ 405.925431][ T82] veth1_vlan: left promiscuous mode [ 405.940277][ T82] veth0_vlan: left promiscuous mode [ 405.969751][ T4500] Bluetooth: hci3: command tx timeout [ 406.891124][ T82] team0 (unregistering): Port device team_slave_1 removed [ 406.947634][ T82] team0 (unregistering): Port device team_slave_0 removed [ 407.180028][ T4500] Bluetooth: hci5: command tx timeout [ 407.330722][ T4500] Bluetooth: hci6: command tx timeout [ 407.807830][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.824258][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.850329][T11417] bridge_slave_1: entered allmulticast mode [ 407.858008][T11417] bridge_slave_1: entered promiscuous mode [ 407.982888][T11417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.052066][T11476] xt_bpf: check failed: parse error [ 408.059739][ T4500] Bluetooth: hci3: command tx timeout [ 408.070832][T11417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.272181][T11417] team0: Port device team_slave_0 added [ 408.322726][T11417] team0: Port device team_slave_1 added [ 408.556051][T11417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.569537][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.608654][T11417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.625150][T11417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.632589][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.685300][T11417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.746996][ T4556] udevd[4556]: worker [5121] /devices/virtual/block/nbd6 is taking a long time [ 408.764159][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.780769][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.788602][T11420] bridge_slave_0: entered allmulticast mode [ 408.797031][T11420] bridge_slave_0: entered promiscuous mode [ 408.830585][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.843047][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.861739][T11420] bridge_slave_1: entered allmulticast mode [ 408.870420][T11420] bridge_slave_1: entered promiscuous mode [ 409.220456][T11417] hsr_slave_0: entered promiscuous mode [ 409.241043][T11417] hsr_slave_1: entered promiscuous mode [ 409.250091][T11417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.260675][ T4500] Bluetooth: hci5: command tx timeout [ 409.281303][T11417] Cannot create hsr debugfs directory [ 409.337772][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.404647][T11397] chnl_net:caif_netlink_parms(): no params data found [ 409.419637][ T4500] Bluetooth: hci6: command tx timeout [ 409.442389][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.646503][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.851761][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.932361][T11420] team0: Port device team_slave_0 added [ 410.005839][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 410.036604][T11420] team0: Port device team_slave_1 added [ 410.107083][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.129922][ T4500] Bluetooth: hci3: command tx timeout [ 410.479388][ T82] team0: Port device netdevsim0 removed [ 410.503622][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.563066][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.600047][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.670480][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.705243][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.723133][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.822000][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.850088][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.857403][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.884079][T11397] bridge_slave_0: entered allmulticast mode [ 410.912506][T11397] bridge_slave_0: entered promiscuous mode [ 410.922106][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.929465][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.950125][T11397] bridge_slave_1: entered allmulticast mode [ 410.969912][T11397] bridge_slave_1: entered promiscuous mode [ 411.330003][ T4500] Bluetooth: hci5: command tx timeout [ 411.342069][T11420] hsr_slave_0: entered promiscuous mode [ 411.360039][T11420] hsr_slave_1: entered promiscuous mode [ 411.366729][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.374922][T11420] Cannot create hsr debugfs directory [ 411.456162][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.484125][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.499685][ T4500] Bluetooth: hci6: command tx timeout [ 411.745265][T11397] team0: Port device team_slave_0 added [ 411.773613][T11397] team0: Port device team_slave_1 added [ 412.033480][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.050864][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.115704][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.152457][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.159469][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.196155][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.217003][ T82] bridge_slave_1: left allmulticast mode [ 412.223728][ T82] bridge_slave_1: left promiscuous mode [ 412.234485][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.251943][ T82] bridge_slave_0: left allmulticast mode [ 412.257733][ T82] bridge_slave_0: left promiscuous mode [ 412.263713][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.712655][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.726420][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.744719][ T82] bond0 (unregistering): Released all slaves [ 412.780550][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 412.823757][T11530] macvlan2: entered promiscuous mode [ 412.829122][T11530] macvlan2: entered allmulticast mode [ 412.854569][T11530] bridge0: entered promiscuous mode [ 412.869027][T11530] bridge0: entered allmulticast mode [ 412.893046][T11530] team0: Port device macvlan2 added [ 413.057901][T11536] syz_tun: entered promiscuous mode [ 413.066654][T11536] syz_tun: left promiscuous mode [ 413.259677][T11397] hsr_slave_0: entered promiscuous mode [ 413.274159][T11397] hsr_slave_1: entered promiscuous mode [ 413.290822][T11397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.298440][T11397] Cannot create hsr debugfs directory [ 413.389693][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1570'. [ 413.417295][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 413.891342][T11551] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 413.944429][T11551] team0: Port device netdevsim0 added [ 414.039921][ T82] hsr_slave_0: left promiscuous mode [ 414.052083][ T82] hsr_slave_1: left promiscuous mode [ 414.077659][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.099466][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.119241][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.134878][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.197199][ T82] veth1_macvtap: left promiscuous mode [ 414.209130][ T82] veth0_macvtap: left promiscuous mode [ 414.228346][ T82] veth1_vlan: left promiscuous mode [ 414.240020][ T82] veth0_vlan: left promiscuous mode [ 415.395100][ T82] team0 (unregistering): Port device team_slave_1 removed [ 415.493081][ T82] team0 (unregistering): Port device team_slave_0 removed [ 416.225334][ T1039] wlan1: Trigger new scan to find an IBSS to join [ 416.683168][T11417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.789419][T11420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.829858][T11417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.890248][T11417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.945711][T11417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.022434][T11420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.178869][T11420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.339719][T11420] team0: Port device netdevsim0 removed [ 417.385684][T11420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.865000][T11417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.041832][T11417] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.057851][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.065122][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.228115][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.235389][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.261455][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 418.491943][T11609] tipc: Enabling of bearer rejected, failed to enable media [ 418.795649][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 418.826494][T11397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.856567][T11397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.912112][T11397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.973492][T11397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 419.260160][T11417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.312600][T11420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.360954][T11420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.396269][T11420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.415433][T11420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.657291][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.672722][T11417] veth0_vlan: entered promiscuous mode [ 419.757532][T11417] veth1_vlan: entered promiscuous mode [ 419.819001][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.863518][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.870753][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.944651][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.951947][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.061194][T11417] veth0_macvtap: entered promiscuous mode [ 420.143193][T11417] veth1_macvtap: entered promiscuous mode [ 420.294114][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.344701][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.370779][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.389649][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.410454][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.440101][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.459950][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.493094][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.521699][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.544534][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.565758][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.587854][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.608912][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.649281][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.679653][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.709795][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.737290][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.764499][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.787224][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.808202][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.825070][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.862341][T11417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.938448][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.990047][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.020733][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.044953][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.065282][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.096212][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.116528][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.144511][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.164895][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.183981][ T1110] wlan1: Trigger new scan to find an IBSS to join [ 421.186184][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.219919][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.250162][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.265514][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.287068][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.304914][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.315993][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.327541][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.341217][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.353899][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.366624][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.379477][T11417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.423438][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.532821][T11417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.569419][T11417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.592830][T11417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.609644][T11417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.661436][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.668727][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.694261][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.701593][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.836310][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.092685][T11397] veth0_vlan: entered promiscuous mode [ 422.129110][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.163077][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.238880][T11397] veth1_vlan: entered promiscuous mode [ 422.381816][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.411630][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.463607][T11397] veth0_macvtap: entered promiscuous mode [ 422.533613][T11397] veth1_macvtap: entered promiscuous mode [ 422.617396][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.679640][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.709602][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.734303][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 422.749818][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.776865][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.812656][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.849965][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.876704][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.904533][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.936531][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.957396][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.987199][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.008565][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.034600][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.055532][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.077541][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.106706][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.128811][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.154156][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.183778][ T9470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.201307][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.222834][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.246298][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.296288][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.380534][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.429944][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.469813][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.505261][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.539895][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.580002][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.609737][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.631333][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.649915][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.673498][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.691375][T11699] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 423.697057][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.713976][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 423.735178][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.755757][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.778795][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.789190][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.803077][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.815515][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.826279][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.844255][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.864794][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.884643][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.896844][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.912145][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.923286][T11695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1589'. [ 423.948051][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1590'. [ 424.040482][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.084568][T11397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.119615][T11397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.128928][T11397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.159241][T11397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.276948][T11719] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 424.573946][T11420] veth0_vlan: entered promiscuous mode [ 424.683982][T11420] veth1_vlan: entered promiscuous mode [ 424.702555][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 424.785355][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.818733][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.966950][ T9470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.975180][T11420] veth0_macvtap: entered promiscuous mode [ 425.006354][ T9470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.061381][T11420] veth1_macvtap: entered promiscuous mode [ 425.147087][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.216148][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.249535][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.280847][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.301623][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.322583][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.359692][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.387219][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.411873][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.440932][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.469629][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.484476][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.507271][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.556046][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.586751][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.617930][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.636554][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.657853][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.669202][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.679923][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.689811][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.700467][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.710443][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.739762][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.763831][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.938596][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.962428][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.989980][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.020103][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.056090][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.087370][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.128561][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.169720][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.190713][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.229774][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.257018][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.281123][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.324486][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.345463][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.382855][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.414340][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.446287][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.472920][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.493775][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.528599][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.549449][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.589958][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.619692][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.646093][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.684940][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.709252][T11759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1602'. [ 426.903055][ T1039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.992862][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 427.017531][T11420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.046894][T11420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.069789][T11420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.096613][T11420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.225876][ T1039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.250067][ T52] wlan1: Trigger new scan to find an IBSS to join [ 427.256722][ T52] wlan1: Trigger new scan to find an IBSS to join [ 427.422813][ T1039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.563171][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.589806][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.694324][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.712602][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.802782][ T1039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.370886][T11805] netlink: 'syz.1.1607': attribute type 10 has an invalid length. [ 428.475405][T11805] team0: Port device netdevsim0 added [ 428.496184][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.512276][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.521868][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.535273][ T1039] bridge_slave_1: left allmulticast mode [ 428.541427][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.557061][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.565025][ T1039] bridge_slave_1: left promiscuous mode [ 428.573035][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.600909][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.703880][ T1039] bridge_slave_0: left allmulticast mode [ 428.726566][ T1039] bridge_slave_0: left promiscuous mode [ 428.743148][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.962241][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.999170][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.025033][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 430.053382][ T1039] bond0 (unregistering): Released all slaves [ 430.091369][T11811] netlink: 'syz.0.1608': attribute type 21 has an invalid length. [ 430.212377][ T52] wlan1: Trigger new scan to find an IBSS to join [ 430.212569][ T9470] wlan1: Trigger new scan to find an IBSS to join [ 430.307276][T11808] lo speed is unknown, defaulting to 1000 [ 430.690179][ T4500] Bluetooth: hci2: command tx timeout [ 431.038905][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 431.249382][ T52] wlan1: Creating new IBSS network, BSSID 2e:1b:90:d5:6a:f5 [ 431.474149][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 431.706900][ T1039] hsr_slave_0: left promiscuous mode [ 431.731580][ T1039] hsr_slave_1: left promiscuous mode [ 431.800908][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.808441][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.888085][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.929770][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.018179][ T1039] veth1_macvtap: left promiscuous mode [ 432.055463][ T1039] veth0_macvtap: left promiscuous mode [ 432.079906][ T1039] veth1_vlan: left promiscuous mode [ 432.092358][ T1039] veth0_vlan: left promiscuous mode [ 432.770291][ T4500] Bluetooth: hci2: command tx timeout [ 433.169832][ T2848] wlan1: Creating new IBSS network, BSSID ea:85:0b:9e:4f:43 [ 433.218792][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.705390][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 433.801592][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 434.212240][ T2889] wlan1: Trigger new scan to find an IBSS to join [ 434.853451][ T4500] Bluetooth: hci2: command tx timeout [ 435.192644][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 435.623263][T11895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1627'. [ 435.875672][T11808] chnl_net:caif_netlink_parms(): no params data found [ 436.060739][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.072714][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.080775][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.107450][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.117525][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 436.130578][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.345055][T11918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 436.857539][T11808] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.890603][T11808] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.915986][T11808] bridge_slave_0: entered allmulticast mode [ 436.930837][ T4500] Bluetooth: hci2: command tx timeout [ 436.953609][T11808] bridge_slave_0: entered promiscuous mode [ 437.136078][ T1039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.224074][T11808] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.250532][T11808] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.257901][T11808] bridge_slave_1: entered allmulticast mode [ 437.311305][T11808] bridge_slave_1: entered promiscuous mode [ 437.431609][T11909] lo speed is unknown, defaulting to 1000 [ 437.485305][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.564096][ T1039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.656430][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.828341][ T1039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.946965][T11808] team0: Port device team_slave_0 added [ 438.027171][ T1039] team0: Port device netdevsim0 removed [ 438.027581][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 438.058652][ T1039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.120336][T11808] team0: Port device team_slave_1 added [ 438.210448][ T4500] Bluetooth: hci3: command tx timeout [ 438.253545][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.279724][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.378149][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.419999][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.427001][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.500317][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.561449][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 438.907158][T11808] hsr_slave_0: entered promiscuous mode [ 438.955090][T11808] hsr_slave_1: entered promiscuous mode [ 438.981017][T11808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.019888][T11808] Cannot create hsr debugfs directory [ 439.163289][ T1039] bridge_slave_0: left allmulticast mode [ 439.169087][ T1039] bridge_slave_0: left promiscuous mode [ 439.186803][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.249904][ T2848] wlan1: Trigger new scan to find an IBSS to join [ 440.170519][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.205430][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.216583][ T9470] wlan1: Trigger new scan to find an IBSS to join [ 440.226301][ T2477] wlan1: Creating new IBSS network, BSSID b6:b9:cf:b3:2d:2b [ 440.247619][ T1039] bond0 (unregistering): Released all slaves [ 440.289740][ T4500] Bluetooth: hci3: command tx timeout [ 440.386278][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.392781][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.314329][T11909] chnl_net:caif_netlink_parms(): no params data found [ 441.650214][ T30] INFO: task udevd:5526 blocked for more than 143 seconds. [ 441.662639][ T30] Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 441.679643][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.702855][ T30] task:udevd state:D stack:21400 pid:5526 tgid:5526 ppid:4556 flags:0x00004002 [ 441.739565][ T30] Call Trace: [ 441.747916][ T30] [ 441.779865][ T30] __schedule+0x1800/0x4a60 [ 441.821022][ T30] ? __pfx___schedule+0x10/0x10 [ 441.842323][ T30] ? __blk_flush_plug+0x449/0x500 [ 441.847435][ T30] ? __pfx_lock_release+0x10/0x10 [ 441.871766][ T30] ? __asan_memset+0x23/0x50 [ 441.876545][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 441.889566][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.896071][ T30] ? schedule+0x90/0x320 [ 441.903634][ T30] schedule+0x14b/0x320 [ 441.907859][ T30] schedule_timeout+0x1be/0x310 [ 441.913325][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 441.918756][ T30] ? __pfx_process_timeout+0x10/0x10 [ 441.930777][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 441.936345][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 441.941734][ T30] ? validate_chain+0x11e/0x5900 [ 441.946747][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 441.969613][ T30] ? __lock_acquire+0x137a/0x2040 [ 441.974733][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 441.990012][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 441.995657][ T30] ? sbitmap_get+0x289/0x3f0 [ 442.000885][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 442.007010][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 442.013433][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 442.020164][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 442.029357][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 442.037484][ T30] ? __pfx___might_resched+0x10/0x10 [ 442.044850][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 442.051276][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 442.056613][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 442.062304][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 442.067654][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 442.073824][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 442.080095][ T30] ? blk_mq_submit_bio+0x127e/0x22d0 [ 442.085438][ T30] __blk_flush_plug+0x420/0x500 [ 442.090933][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 442.096349][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 442.120134][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 442.127351][ T30] __submit_bio+0x422/0x560 [ 442.149712][ T30] ? __pfx___submit_bio+0x10/0x10 [ 442.154816][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 442.169579][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 442.176266][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 442.198101][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 442.204837][ T30] ? __pfx___might_resched+0x10/0x10 [ 442.211426][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 442.217665][ T30] block_read_full_folio+0x93b/0xcd0 [ 442.223555][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 442.231436][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 442.237300][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 442.243283][ T30] ? folio_add_lru+0x357/0xd70 [ 442.248105][ T30] ? folio_add_lru+0x58f/0xd70 [ 442.255635][ T30] filemap_read_folio+0x1a0/0x790 [ 442.261168][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 442.266685][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 442.273942][ T30] ? __filemap_get_folio+0x984/0xc10 [ 442.279289][ T30] do_read_cache_folio+0x134/0x820 [ 442.285625][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 442.294145][ T30] read_part_sector+0xb3/0x330 [ 442.299056][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 442.309983][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 442.314822][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 442.339643][ T30] ? snprintf+0xda/0x120 [ 442.343971][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 442.361612][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 442.366285][ T30] ? vsnprintf+0x184/0x1da0 [ 442.369634][ T4500] Bluetooth: hci3: command tx timeout [ 442.381120][ T30] ? __pfx_snprintf+0x10/0x10 [ 442.385863][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 442.399975][ T30] bdev_disk_changed+0x72c/0x13d0 [ 442.405088][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 442.427021][ T30] blkdev_get_whole+0x2d2/0x450 [ 442.434112][ T30] bdev_open+0x2d4/0xc60 [ 442.438430][ T30] blkdev_open+0x3e8/0x570 [ 442.460944][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 442.465965][ T30] do_dentry_open+0x970/0x1440 [ 442.479627][ T30] vfs_open+0x3e/0x330 [ 442.483783][ T30] path_openat+0x2b3e/0x3470 [ 442.488430][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 442.509715][ T30] ? __lock_acquire+0x137a/0x2040 [ 442.514847][ T30] ? __pfx_path_openat+0x10/0x10 [ 442.530096][ T30] do_filp_open+0x235/0x490 [ 442.534681][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 442.559719][ T30] ? _raw_spin_unlock+0x28/0x50 [ 442.564750][ T30] ? alloc_fd+0x5a1/0x640 [ 442.569130][ T30] do_sys_openat2+0x13e/0x1d0 [ 442.574691][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 442.582955][ T30] __x64_sys_openat+0x247/0x2a0 [ 442.587878][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 442.593873][ T30] ? do_syscall_64+0x100/0x230 [ 442.598695][ T30] ? do_syscall_64+0xb6/0x230 [ 442.604040][ T30] do_syscall_64+0xf3/0x230 [ 442.608589][ T30] ? clear_bhb_loop+0x35/0x90 [ 442.615625][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.622032][ T30] RIP: 0033:0x7fbaf65169a4 [ 442.626483][ T30] RSP: 002b:00007fffc03c2620 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.635491][ T30] RAX: ffffffffffffffda RBX: 00005599af746b70 RCX: 00007fbaf65169a4 [ 442.656495][ T30] RDX: 00000000000a0800 RSI: 00005599af7384a0 RDI: 00000000ffffff9c [ 442.669829][ T30] RBP: 00005599af7384a0 R08: 0000000000000001 R09: 7fffffffffffffff [ 442.677854][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 442.709785][ T30] R13: 00005599af7306f0 R14: 0000000000000001 R15: 00005599af71e910 [ 442.717851][ T30] [ 442.730866][ T30] [ 442.730866][ T30] Showing all locks held in the system: [ 442.738647][ T30] 3 locks held by kworker/0:1/9: [ 442.756438][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 442.768064][ T30] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 442.779804][ T30] #2: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 442.789050][ T30] 1 lock held by khungtaskd/30: [ 442.794550][ T30] #0: ffffffff8e336e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 442.804901][ T30] 4 locks held by kworker/u8:6/1039: [ 442.813129][ T30] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 442.824477][ T30] #1: ffffc90003977d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 442.836517][ T30] #2: ffffffff8f5f1b90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 442.848264][ T30] #3: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 442.879704][ T30] 2 locks held by kworker/u8:8/1110: [ 442.885079][ T30] 1 lock held by dhcpcd/4770: [ 442.899545][ T30] #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 442.908799][ T30] 2 locks held by getty/4861: [ 442.931019][ T30] #0: ffff88801dcd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 442.959754][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 442.979729][ T30] 3 locks held by udevd/5121: [ 442.984478][ T30] #0: ffff8880204384c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 442.994548][ T30] #1: ffff88801fd9de90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 443.004537][ T30] #2: ffff888020510180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 443.015032][ T30] 3 locks held by udevd/5526: [ 443.020209][ T30] #0: ffff88801fef74c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 443.029896][ T30] #1: ffff88801fa1ef90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 443.039902][ T30] #2: ffff8880204d0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 443.054295][ T30] 1 lock held by syz-executor/11808: [ 443.060022][ T30] #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 443.069928][ T30] 1 lock held by syz-executor/11909: [ 443.075255][ T30] #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 443.085458][ T30] 1 lock held by syz.1.1635/11957: [ 443.091006][ T30] 1 lock held by syz.4.1646/12018: [ 443.096151][ T30] #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 443.106260][ T30] 1 lock held by syz.4.1646/12022: [ 443.111897][ T30] #0: ffffffff8e33c1f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 443.123313][ T30] 2 locks held by syz.0.1647/12021: [ 443.128542][ T30] #0: ffffffff8f663e10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 443.145963][ T30] #1: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 443.170487][ T30] [ 443.172964][ T30] ============================================= [ 443.172964][ T30] [ 443.188646][ T1039] hsr_slave_0: left promiscuous mode [ 443.199643][ T30] NMI backtrace for cpu 0 [ 443.204021][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 443.213596][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 443.223683][ T30] Call Trace: [ 443.226988][ T30] [ 443.229947][ T30] dump_stack_lvl+0x241/0x360 [ 443.234669][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.239992][ T30] ? __pfx__printk+0x10/0x10 [ 443.244698][ T30] ? vprintk_emit+0x631/0x770 [ 443.249419][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 443.255022][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 443.260101][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 443.265598][ T30] ? _printk+0xd5/0x120 [ 443.269874][ T30] ? __pfx__printk+0x10/0x10 [ 443.274497][ T30] ? __wake_up_klogd+0xcc/0x110 [ 443.279464][ T30] ? __pfx__printk+0x10/0x10 [ 443.284082][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 443.289134][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.295148][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 443.301175][ T30] watchdog+0xfde/0x1020 [ 443.305458][ T30] ? watchdog+0x1ea/0x1020 [ 443.309916][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.314625][ T30] kthread+0x2f0/0x390 [ 443.318712][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.323405][ T30] ? __pfx_kthread+0x10/0x10 [ 443.328049][ T30] ret_from_fork+0x4b/0x80 [ 443.332523][ T30] ? __pfx_kthread+0x10/0x10 [ 443.337154][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.341965][ T30] [ 443.347068][ T30] Sending NMI from CPU 0 to CPUs 1: [ 443.353371][ C1] NMI backtrace for cpu 1 [ 443.353384][ C1] CPU: 1 PID: 2477 Comm: kworker/u8:9 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 443.353404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 443.353416][ C1] Workqueue: bat_events batadv_nc_worker [ 443.353440][ C1] RIP: 0010:mark_lock+0x14d/0x350 [ 443.353467][ C1] Code: 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6a 96 89 00 41 bc 01 00 00 00 44 85 33 74 16 44 89 e0 48 83 c4 10 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc e8 d4 3b ff ff 85 c0 0f 84 33 01 00 [ 443.353484][ C1] RSP: 0018:ffffc900088e78d0 EFLAGS: 00000086 [ 443.353498][ C1] RAX: 0000000000000001 RBX: ffffffff92d2bc30 RCX: ffffffff816fef2a [ 443.353512][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92ff0600 [ 443.353523][ C1] RBP: 0000000000000009 R08: ffffffff92ff0607 R09: 1ffffffff25fe0c0 [ 443.353536][ C1] R10: dffffc0000000000 R11: fffffbfff25fe0c1 R12: ffff888029e1bc00 [ 443.353555][ C1] R13: ffff888029e1c6d8 R14: 0000000000000200 R15: ffff888029e1c730 [ 443.353569][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 443.353583][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.353596][ C1] CR2: 0000000020c42030 CR3: 000000000e134000 CR4: 00000000003506f0 [ 443.353611][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.353621][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 443.353632][ C1] Call Trace: [ 443.353639][ C1] [ 443.353647][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 443.353673][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 443.353698][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 443.353733][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 443.353755][ C1] ? nmi_handle+0x14f/0x5a0 [ 443.353771][ C1] ? nmi_handle+0x2a/0x5a0 [ 443.353788][ C1] ? mark_lock+0x14d/0x350 [ 443.353811][ C1] ? default_do_nmi+0x63/0x160 [ 443.353838][ C1] ? exc_nmi+0x123/0x1f0 [ 443.353863][ C1] ? end_repeat_nmi+0xf/0x53 [ 443.353893][ C1] ? mark_lock+0x9a/0x350 [ 443.353917][ C1] ? mark_lock+0x14d/0x350 [ 443.353941][ C1] ? mark_lock+0x14d/0x350 [ 443.353973][ C1] ? mark_lock+0x14d/0x350 [ 443.353999][ C1] [ 443.354005][ C1] [ 443.354013][ C1] __lock_acquire+0xc35/0x2040 [ 443.354049][ C1] lock_acquire+0x1ed/0x550 [ 443.354074][ C1] ? batadv_nc_worker+0xcb/0x610 [ 443.354099][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 443.354127][ C1] ? batadv_nc_worker+0xcb/0x610 [ 443.354147][ C1] ? __pfx_lock_release+0x10/0x10 [ 443.354182][ C1] batadv_nc_worker+0xec/0x610 [ 443.354202][ C1] ? batadv_nc_worker+0xcb/0x610 [ 443.354222][ C1] ? batadv_nc_worker+0xcb/0x610 [ 443.354244][ C1] ? process_scheduled_works+0x945/0x1830 [ 443.354269][ C1] process_scheduled_works+0xa2c/0x1830 [ 443.354312][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.354343][ C1] ? assign_work+0x364/0x3d0 [ 443.354371][ C1] worker_thread+0x86d/0xd40 [ 443.354402][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 443.354436][ C1] ? __kthread_parkme+0x169/0x1d0 [ 443.354465][ C1] ? __pfx_worker_thread+0x10/0x10 [ 443.354491][ C1] kthread+0x2f0/0x390 [ 443.354519][ C1] ? __pfx_worker_thread+0x10/0x10 [ 443.354551][ C1] ? __pfx_kthread+0x10/0x10 [ 443.354579][ C1] ret_from_fork+0x4b/0x80 [ 443.354606][ C1] ? __pfx_kthread+0x10/0x10 [ 443.354635][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.354674][ C1] [ 443.365014][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 443.365034][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 443.365061][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 443.365076][ T30] Call Trace: [ 443.365086][ T30] [ 443.365095][ T30] dump_stack_lvl+0x241/0x360 [ 443.365136][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.365167][ T30] ? __pfx__printk+0x10/0x10 [ 443.365191][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.365232][ T30] ? vscnprintf+0x5d/0x90 [ 443.365268][ T30] panic+0x349/0x860 [ 443.365306][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 443.365343][ T30] ? __pfx_panic+0x10/0x10 [ 443.365368][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 443.365397][ T30] ? __irq_work_queue_local+0x137/0x410 [ 443.365431][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 443.365458][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 443.365492][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 443.365530][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 443.365569][ T30] watchdog+0x101d/0x1020 [ 443.365603][ T30] ? watchdog+0x1ea/0x1020 [ 443.365643][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.365673][ T30] kthread+0x2f0/0x390 [ 443.365707][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.365737][ T30] ? __pfx_kthread+0x10/0x10 [ 443.365772][ T30] ret_from_fork+0x4b/0x80 [ 443.365803][ T30] ? __pfx_kthread+0x10/0x10 [ 443.365837][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.365887][ T30] [ 443.374118][ T30] Kernel Offset: disabled [ 443.849502][ T30] Rebooting in 86400 seconds..