last executing test programs: 4.340107901s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x22020400) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 3.676923683s ago: executing program 2: socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x48330557, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) 3.553061617s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10004, 0x6}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000014000000000000000011000d0001006d13a20d015dc921e40000000000000000797bb98b57d346857aa415a5db82ee05ff478f6f9a90744c6ef764796330041d22dd"], 0x24}, 0x1, 0x0, 0x0, 0x4000055}, 0x20000000) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x2, 0x580, 0xf8, 0x1f0, 0xf8, 0x2e8, 0x2e8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0\x00', 'ip6gre0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@remote, @private1, [0x0, 0xffff00], [], 'nr0\x00', 'team_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "04f8"}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "58ee"}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=ANY=[@ANYBLOB="80010000100001000000000000000000e00000020000000000000000e0b40000fe8000000000000000000000000000aa00000000fa0000000a0000bfed5fcd0d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc010000000000000000000000000000000000006c000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x180}}, 0x1) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) syz_emit_ethernet(0x66, &(0x7f0000005f80)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303a00fe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) socket(0x15, 0x5, 0x0) 3.370391972s ago: executing program 0: bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 3.278269358s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x1, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in6=@dev, 0x3503, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@remote}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x2, 0x0, 0x7}]}]}, 0x1bc}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3e}, {0x6}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a3ff2002006"], 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/144, 0x90, 0x40000000, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x8, 0x7}, @sack_perm, @sack_perm, @window={0x3, 0xffff}, @mss], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) r4 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711095000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.263522383s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'bond_slave_1\x00'}) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="080026008f0980000800b7"], 0x2c}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @local, @local, {[@ssrr={0x89, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x13, r7, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) clock_gettime(0xb, &(0x7f0000003a40)) bpf$MAP_LOOKUP_ELEM(0x1d, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet(0x2, 0x3, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) 2.85436607s ago: executing program 1: socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x48330557, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) 2.765078862s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000000800000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r0}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MTU={0x8}]}, 0x4c}, 0x9}, 0x0) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa140006"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xa0, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x41) r8 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000280), 0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x400000, 'lc\x00'}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) close(r8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x0, 0x148, 0xd0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x20000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r11, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) 2.623686039s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket(0x80000000000000a, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000288563"], 0xffdd) write$cgroup_devices(r3, &(0x7f0000000640)=ANY=[], 0xffdd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000040), 0x76dc) socket$can_raw(0x1d, 0x3, 0x1) 2.549839324s ago: executing program 1: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x80000001}}, @enum={0x10, 0x8, 0x0, 0x6, 0x4, [{0xa, 0xfffffff9}, {0x10, 0x6}, {0xb, 0xff}, {0x2, 0x18000000}, {0x4, 0x1}, {0x4, 0x73d9e5e3}, {0xa, 0x9}, {0x5, 0x6}]}, @union={0x0, 0x3, 0x0, 0x5, 0x1, 0x6, [{0xe, 0x0, 0xac}, {0xf, 0x3, 0x1}, {0x2, 0x0, 0x47768074}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x6}}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000000980)=""/4096, 0xe1, 0x1000, 0x1, 0xfffffff7}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, 0x0, &(0x7f0000000040)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) 2.533702094s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)) close(r9) connect$unix(r8, &(0x7f0000000140)=@abs, 0x6e) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) r10 = accept(r6, &(0x7f0000000300)=@xdp, &(0x7f0000000140)=0x80) sendmmsg$alg(r10, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='q', 0x1}], 0x1, &(0x7f0000000400)=[@iv={0xd0, 0x117, 0x2, 0xb9, "5c757a97602c2ddfb58b485fd9b206f81ce110bb7ea9dea944d2102510947ab0c0f9c360ed8bf050333fc6f2592ad51c132d784a59b878f54dada8217dec7bdadd86cbad952d9cde36d4d3786fae0569f47c5e4eefd566807fbfa5e647eb01dd9199aa7dcaa6fbf2a4452695fbb526f23025a03f872fef1945c6743b27558e76202fd55d40307e5ead69b64a6072217b7c81a35a9eb6a6254d38cc497517878dfa5a0981b7b01c2d42aeed7604ae3319247ce2344901aa4ce2"}], 0xd0}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.504250261s ago: executing program 0: bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 2.363034892s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 2.244023348s ago: executing program 2: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x80000001}}, @enum={0x10, 0x8, 0x0, 0x6, 0x4, [{0xa, 0xfffffff9}, {0x10, 0x6}, {0xb, 0xff}, {0x2, 0x18000000}, {0x4, 0x1}, {0x4, 0x73d9e5e3}, {0xa, 0x9}, {0x5, 0x6}]}, @union={0x0, 0x3, 0x0, 0x5, 0x1, 0x6, [{0xe, 0x0, 0xac}, {0xf, 0x3, 0x1}, {0x2, 0x0, 0x47768074}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x6}}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000000980)=""/4096, 0xe1, 0x1000, 0x1, 0xfffffff7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, 0x0, &(0x7f0000000040)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) 2.135206172s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac14140008000200000000000c0002800500010000000000240002801400018008000100ac141400080002007f0000010c0002800500010000000000080007400000000024000e8014000180080001007f000001080002000a0101010c0002800500010084000000d7ce9847956e67cb51dd9b2bb7c492290e641f1b211cec7ba80bedff8dc6f01f38767c651866197d8715f4441daefa4b528f"], 0x88}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x80000001, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000780)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0x7f, 0x4) recvfrom$l2tp(r2, 0x0, 0x0, 0x10060, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300087986a9a00002f0e0f7551005b5beaa53763028b0036", @ANYRES32=r7, @ANYBLOB="08000100ac1e010108000a00020000000800090000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44054}, 0x24008004) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x6, 0x0, 0x1, 0x2, 0x6, @random="151e22501e1e"}, 0x14) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x50}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0) 2.120290684s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.059945853s ago: executing program 4: socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x48330557, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) 1.995098411s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) unshare(0x4000400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000400000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000002f41000000009500000000000000"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x200007) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000000c0)=0xeb47, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0xffff, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd9, &(0x7f0000000080), &(0x7f0000000000)=0x4) 1.974614562s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x1, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in6=@dev, 0x3503, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@remote}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x2, 0x0, 0x7}]}]}, 0x1bc}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3e}, {0x6}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a3ff2002006"], 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/144, 0x90, 0x40000000, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x8, 0x7}, @sack_perm, @sack_perm, @window={0x3, 0xffff}, @mss], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) r3 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(r4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711095000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.943480212s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffc, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) 1.885726658s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x7000000, &(0x7f0000000040), 0x76dc) 1.850198967s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback={0xfec0ffff00000000}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000071797a5f74756e0000000000f1ff080000000300000000000508020000000000"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000027e0c562d8c6ae7ec8632340684d3d5bffed32c9d4419696d5468fd4850e4f000000000000008005b91b6debce95a0ec7c38497225117dcc08fea2a9c390f56a79801e3f0e0da8641deb65a85679dc412815d72b2d08f40cd579c6f77f550fe8515d92de469d64541dffde14d24eea52dfcdf5c3269cedf48a", @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf2501000000040003000400030004000300"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='rxrpc_call\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x8, 0x8, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x80) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.790564996s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) 1.75184678s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, 0x0, &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, &(0x7f0000001800), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 1.686462151s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000004600000008000b00180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r2], 0xc) 1.6521848s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.549459805s ago: executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 1.529615421s ago: executing program 1: socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendto$rose(0xffffffffffffffff, &(0x7f0000000080)="1520a08310fb1e4d935512527a3e762252a7e475f83338d4f7babc45e21667d03718201de8c7ae7f5b9bdbaf9f8275a7d672e63b3af698d807430e24fdf95e997dd76fd8a5b39315342d816cde6794", 0x4f, 0x21050, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) unshare(0x20040600) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES64=r2], 0x40}}, 0x0) 158.797518ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x82, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x90) 0s ago: executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0xc4, 0x10, 0x503, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x14711, 0x1204}, [@IFLA_VF_PORTS={0x80, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x64}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d5fd604a8ff6e28f8c99c8168651128a"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x464}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "70bbf473f5056fc89619e266e1ddb63b"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f5c9ef6421c8f1ec9922dde04c0e9b38"}]}]}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0xc4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. 2024/06/17 22:44:01 fuzzer started 2024/06/17 22:44:01 dialing manager at 10.128.0.169:30018 [ 67.116767][ T5094] cgroup: Unknown subsys name 'net' [ 67.307749][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/06/17 22:44:03 starting 5 executor processes [ 68.724908][ T5099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.668205][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.700166][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.709218][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.717484][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.718091][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.726320][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.734496][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.746804][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.746824][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.747738][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.764312][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.769996][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.775059][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.790541][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.800144][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.803365][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.807622][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.815340][ T5130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.822395][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.828501][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.836701][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.852174][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.853347][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.859770][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.867504][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.880996][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.891986][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.895864][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.906750][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.914690][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.474452][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 70.631102][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 70.655050][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 70.763977][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.771742][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.779258][ T5115] bridge_slave_0: entered allmulticast mode [ 70.786463][ T5115] bridge_slave_0: entered promiscuous mode [ 70.810145][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.817531][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.824825][ T5115] bridge_slave_1: entered allmulticast mode [ 70.831879][ T5115] bridge_slave_1: entered promiscuous mode [ 70.900761][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 70.947466][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.981775][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.989184][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.997990][ T5114] bridge_slave_0: entered allmulticast mode [ 71.005517][ T5114] bridge_slave_0: entered promiscuous mode [ 71.015564][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.060882][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 71.084194][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.091387][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.099588][ T5114] bridge_slave_1: entered allmulticast mode [ 71.107580][ T5114] bridge_slave_1: entered promiscuous mode [ 71.134649][ T5115] team0: Port device team_slave_0 added [ 71.191608][ T5115] team0: Port device team_slave_1 added [ 71.219465][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.226917][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.234752][ T5125] bridge_slave_0: entered allmulticast mode [ 71.241733][ T5125] bridge_slave_0: entered promiscuous mode [ 71.250312][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.257806][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.265125][ T5125] bridge_slave_1: entered allmulticast mode [ 71.272160][ T5125] bridge_slave_1: entered promiscuous mode [ 71.281416][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.365068][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.400150][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.407544][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.434276][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.491111][ T5114] team0: Port device team_slave_0 added [ 71.497562][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.505136][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.512551][ T5116] bridge_slave_0: entered allmulticast mode [ 71.520574][ T5116] bridge_slave_0: entered promiscuous mode [ 71.532340][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.535225][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.539148][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.547014][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.559739][ T5116] bridge_slave_1: entered allmulticast mode [ 71.567716][ T5116] bridge_slave_1: entered promiscuous mode [ 71.576267][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.583484][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.609747][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.645255][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.656544][ T5114] team0: Port device team_slave_1 added [ 71.665205][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.791457][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.799726][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.807624][ T5118] bridge_slave_0: entered allmulticast mode [ 71.815237][ T5118] bridge_slave_0: entered promiscuous mode [ 71.824401][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.831604][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.838919][ T5118] bridge_slave_1: entered allmulticast mode [ 71.847577][ T5118] bridge_slave_1: entered promiscuous mode [ 71.855082][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.862039][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.888329][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.902836][ T5125] team0: Port device team_slave_0 added [ 71.912219][ T5125] team0: Port device team_slave_1 added [ 71.918076][ T5131] Bluetooth: hci1: command tx timeout [ 71.923088][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.924074][ T5122] Bluetooth: hci0: command tx timeout [ 71.942582][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.987986][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.996068][ T5131] Bluetooth: hci2: command tx timeout [ 71.996093][ T5130] Bluetooth: hci3: command tx timeout [ 72.003468][ T5122] Bluetooth: hci4: command tx timeout [ 72.008719][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.038760][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.105211][ T5115] hsr_slave_0: entered promiscuous mode [ 72.111897][ T5115] hsr_slave_1: entered promiscuous mode [ 72.122014][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.136080][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.150319][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.162441][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.189345][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.204786][ T5116] team0: Port device team_slave_0 added [ 72.211352][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.218868][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.245195][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.286643][ T5116] team0: Port device team_slave_1 added [ 72.297396][ T5118] team0: Port device team_slave_0 added [ 72.343787][ T5118] team0: Port device team_slave_1 added [ 72.416523][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.424372][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.450613][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.482464][ T5114] hsr_slave_0: entered promiscuous mode [ 72.489216][ T5114] hsr_slave_1: entered promiscuous mode [ 72.496498][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.505153][ T5114] Cannot create hsr debugfs directory [ 72.520626][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.527752][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.554886][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.567190][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.574473][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.601100][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.662604][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.670049][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.696039][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.735106][ T5125] hsr_slave_0: entered promiscuous mode [ 72.741637][ T5125] hsr_slave_1: entered promiscuous mode [ 72.748598][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.756226][ T5125] Cannot create hsr debugfs directory [ 72.864244][ T5116] hsr_slave_0: entered promiscuous mode [ 72.870617][ T5116] hsr_slave_1: entered promiscuous mode [ 72.877621][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.885335][ T5116] Cannot create hsr debugfs directory [ 72.968862][ T5118] hsr_slave_0: entered promiscuous mode [ 72.975703][ T5118] hsr_slave_1: entered promiscuous mode [ 72.981907][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.990083][ T5118] Cannot create hsr debugfs directory [ 73.388592][ T5115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.422442][ T5115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.441285][ T5115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.460839][ T5115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.515748][ T5114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.530650][ T5114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.541665][ T5114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.566149][ T5114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.660696][ T5125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.701231][ T5125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.730398][ T5125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.741891][ T5125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.816931][ T5116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.856365][ T5116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.870520][ T5116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.881753][ T5116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.988559][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.995989][ T5122] Bluetooth: hci0: command tx timeout [ 73.996041][ T5131] Bluetooth: hci1: command tx timeout [ 74.035743][ T5118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.047032][ T5118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.059134][ T5118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.071583][ T5118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.078538][ T5131] Bluetooth: hci4: command tx timeout [ 74.078587][ T5131] Bluetooth: hci3: command tx timeout [ 74.083418][ T5131] Bluetooth: hci2: command tx timeout [ 74.136258][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.147233][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.186901][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.207040][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.214480][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.241604][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.248768][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.303049][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.310206][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.351453][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.358741][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.407880][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.519908][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.590627][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.648241][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.655487][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.684539][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.691826][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.790696][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.822413][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.862558][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.869893][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.889033][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.896263][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.974419][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.021207][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.051986][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.100635][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.107933][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.126594][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.164894][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.173298][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.307371][ T5115] veth0_vlan: entered promiscuous mode [ 75.345347][ T5114] veth0_vlan: entered promiscuous mode [ 75.361672][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.385059][ T5115] veth1_vlan: entered promiscuous mode [ 75.399069][ T5114] veth1_vlan: entered promiscuous mode [ 75.582737][ T5125] veth0_vlan: entered promiscuous mode [ 75.607900][ T5115] veth0_macvtap: entered promiscuous mode [ 75.627948][ T5114] veth0_macvtap: entered promiscuous mode [ 75.641673][ T5125] veth1_vlan: entered promiscuous mode [ 75.657789][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.670925][ T5114] veth1_macvtap: entered promiscuous mode [ 75.680939][ T5115] veth1_macvtap: entered promiscuous mode [ 75.735833][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.784837][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.796006][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.807985][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.826363][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.859587][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.870680][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.882824][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.902572][ T5125] veth0_macvtap: entered promiscuous mode [ 75.914544][ T5115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.924066][ T5115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.932791][ T5115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.942092][ T5115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.968932][ T5114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.977924][ T5114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.989597][ T5114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.999782][ T5114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.020733][ T5125] veth1_macvtap: entered promiscuous mode [ 76.042732][ T5116] veth0_vlan: entered promiscuous mode [ 76.074196][ T5131] Bluetooth: hci0: command tx timeout [ 76.077987][ T5122] Bluetooth: hci1: command tx timeout [ 76.128690][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.139577][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.150747][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.161812][ T5122] Bluetooth: hci2: command tx timeout [ 76.161858][ T5122] Bluetooth: hci3: command tx timeout [ 76.161894][ T5122] Bluetooth: hci4: command tx timeout [ 76.169667][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.190832][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.202088][ T5116] veth1_vlan: entered promiscuous mode [ 76.218996][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.273098][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.311224][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.322506][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.333056][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.345644][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.387415][ T5125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.406789][ T5125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.415729][ T5125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.424560][ T5125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.456830][ T5116] veth0_macvtap: entered promiscuous mode [ 76.536115][ T5116] veth1_macvtap: entered promiscuous mode [ 76.548556][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.574578][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.650757][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.661283][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.744282][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.755765][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.766845][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.777362][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.788182][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.802436][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.825377][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.841358][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.854434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892706][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.916071][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.933810][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.949686][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.961848][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.973078][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.991950][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.085643][ T5116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.101334][ T5116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.111259][ T5116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.122390][ T5116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.165881][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.176569][ T5118] veth0_vlan: entered promiscuous mode [ 77.188868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.199085][ T2816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.212295][ T2816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.255347][ T5118] veth1_vlan: entered promiscuous mode [ 77.382515][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.396851][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.534032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.541912][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.661823][ T5118] veth0_macvtap: entered promiscuous mode [ 77.668510][ T5205] Zero length message leads to an empty skb [ 77.695090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.709667][ T5118] veth1_macvtap: entered promiscuous mode [ 77.724827][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.744528][ T5208] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.816160][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.829484][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.848900][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.859862][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.870257][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.885470][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.909253][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.932414][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.960601][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.970000][ T5212] xt_TCPMSS: Only works on TCP SYN packets [ 78.012447][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.024132][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.039214][ T5212] rdma_op ffff88807a8c01f0 conn xmit_rdma 0000000000000000 [ 78.042282][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.082728][ T5212] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.090694][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.123385][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.143326][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.155114][ T5122] Bluetooth: hci1: command tx timeout [ 78.160789][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.171748][ T5122] Bluetooth: hci0: command tx timeout [ 78.177446][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.192191][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.236037][ T5122] Bluetooth: hci4: command tx timeout [ 78.243821][ T5122] Bluetooth: hci3: command tx timeout [ 78.249500][ T5122] Bluetooth: hci2: command tx timeout [ 78.299028][ T5218] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.357746][ T5118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.369164][ T5118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379116][ T5118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.388783][ T5118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.716716][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.738595][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.822892][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.837404][ T5229] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 78.847325][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.894062][ T5229] bridge0: port 2(bridge_slave_1) entered listening state [ 79.206428][ T5243] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.488061][ T5253] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 79.786587][ T5266] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 79.840507][ T5266] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 79.862473][ T5266] gretap1: entered promiscuous mode [ 79.868844][ T5266] gretap1: entered allmulticast mode [ 79.974069][ T5274] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.081969][ T5277] bridge0: port 2(bridge_slave_1) entered listening state [ 80.316009][ T5291] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 80.337891][ T5291] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.440703][ T5297] vlan2: entered promiscuous mode [ 80.452473][ T5297] bond0: entered promiscuous mode [ 80.460920][ T5297] bond_slave_0: entered promiscuous mode [ 80.472525][ T5297] bond_slave_1: entered promiscuous mode [ 80.489493][ T5297] bond0: left promiscuous mode [ 80.494688][ T5297] bond_slave_0: left promiscuous mode [ 80.500500][ T5297] bond_slave_1: left promiscuous mode [ 80.827310][ T5312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.926665][ T5314] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 80.935576][ T5314] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.284499][ T5324] xt_TCPMSS: Only works on TCP SYN packets [ 81.297709][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.309978][ T5324] rdma_op ffff8880605ab1f0 conn xmit_rdma 0000000000000000 [ 81.337851][ T5325] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 81.353501][ T5325] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.362939][ T5325] NCSI netlink: No device for ifindex 0 [ 81.381314][ T5324] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.484260][ T5328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.764521][ T45] cfg80211: failed to load regulatory.db [ 82.099373][ T5349] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 82.159594][ T5353] vlan2: entered promiscuous mode [ 82.165858][ T5353] bond0: entered promiscuous mode [ 82.170922][ T5353] bond_slave_0: entered promiscuous mode [ 82.177869][ T5353] bond_slave_1: entered promiscuous mode [ 82.185218][ T5353] bond0: left promiscuous mode [ 82.233927][ T5353] bond_slave_0: left promiscuous mode [ 82.253475][ T5353] bond_slave_1: left promiscuous mode [ 82.614962][ T5373] xt_TCPMSS: Only works on TCP SYN packets [ 82.655912][ T5373] rdma_op ffff88802d33b1f0 conn xmit_rdma 0000000000000000 [ 82.784229][ T5377] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 82.799445][ T5377] __nla_validate_parse: 5 callbacks suppressed [ 82.799471][ T5377] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.830090][ T5373] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.899925][ T5379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.017614][ T5382] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 83.322512][ T5393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.596087][ T5404] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.671000][ T5408] tipc: Started in network mode [ 83.711419][ T5408] tipc: Node identity e0000002, cluster identity 4711 [ 83.743871][ T5408] tipc: Enabling of bearer rejected, failed to enable media [ 83.832771][ T5413] IPVS: length: 96 != 8 [ 83.850493][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.970430][ T5419] vlan2: entered promiscuous mode [ 83.998331][ T5419] bond0: entered promiscuous mode [ 84.013448][ T5419] bond_slave_0: entered promiscuous mode [ 84.046449][ T5419] bond_slave_1: entered promiscuous mode [ 84.067591][ T5419] bond0: left promiscuous mode [ 84.079294][ T5419] bond_slave_0: left promiscuous mode [ 84.094834][ T5419] bond_slave_1: left promiscuous mode [ 84.169675][ T5424] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 84.499387][ T5438] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.562224][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.652362][ T5442] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 84.684708][ T5442] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.717341][ T5442] NCSI netlink: No device for ifindex 0 [ 84.824768][ T5451] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.930974][ T5454] IPVS: length: 96 != 8 [ 84.961188][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.965287][ T5457] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.044530][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.102100][ T5457] Bluetooth: MGMT ver 1.22 [ 85.282029][ T5464] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.580888][ T29] audit: type=1804 audit(1718664260.396:2): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir549149817/syzkaller.L5Ueat/22/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 85.854790][ T5491] bridge0: port 2(bridge_slave_1) entered listening state [ 86.111064][ T5497] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 86.276100][ T5501] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 86.535560][ T5514] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 86.819182][ T29] audit: type=1804 audit(1718664261.636:3): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir549149817/syzkaller.L5Ueat/25/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 87.711432][ T5535] IPVS: length: 96 != 8 [ 87.966380][ T5546] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 88.123777][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.135853][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.144811][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.162487][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.173447][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.180992][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.360296][ T5557] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 88.403310][ T5557] __nla_validate_parse: 4 callbacks suppressed [ 88.403330][ T5557] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.469676][ T5559] batadv0: entered promiscuous mode [ 88.535269][ T5562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.565873][ T5570] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 89.057174][ T5552] chnl_net:caif_netlink_parms(): no params data found [ 89.436241][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 89.525165][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.556947][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.602939][ T5552] bridge_slave_0: entered allmulticast mode [ 89.627209][ T5552] bridge_slave_0: entered promiscuous mode [ 89.644801][ T5607] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 89.691577][ T5604] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.721980][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.751964][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.759959][ T5552] bridge_slave_1: entered allmulticast mode [ 89.768643][ T5552] bridge_slave_1: entered promiscuous mode [ 89.918511][ T5617] batadv0: entered promiscuous mode [ 89.970047][ T5552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.017197][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.052834][ T5552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.075760][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 90.134941][ T29] audit: type=1804 audit(1718664264.946:4): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3509807825/syzkaller.iCEKvx/23/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 90.217920][ T5623] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 90.233551][ T5130] Bluetooth: hci2: command tx timeout [ 90.246641][ T5623] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.301668][ T5623] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.372789][ T5552] team0: Port device team_slave_0 added [ 90.500103][ T5552] team0: Port device team_slave_1 added [ 90.715508][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 90.765365][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.772379][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.831779][ T5552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.854778][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.878202][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.937114][ T5552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.971915][ T5647] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 91.062359][ T5649] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.297498][ T5552] hsr_slave_0: entered promiscuous mode [ 91.340960][ T5552] hsr_slave_1: entered promiscuous mode [ 91.357340][ T5552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.376341][ T5552] Cannot create hsr debugfs directory [ 91.447922][ T5658] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 91.620117][ T5671] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 91.653805][ T5671] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.859784][ T5552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.986250][ T5552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.032243][ T5685] batadv0: entered promiscuous mode [ 92.065773][ T5687] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 92.146321][ T5688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.196996][ T5552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.238426][ T5692] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.313618][ T5130] Bluetooth: hci2: command tx timeout [ 92.342512][ T5552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.381476][ T5699] macvlan2: entered promiscuous mode [ 92.387755][ T5699] vlan1: entered promiscuous mode [ 92.403055][ T5699] team0: Port device macvlan2 added [ 92.530196][ T5704] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 92.563293][ T5704] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.589719][ T5703] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 92.721102][ T5552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.748571][ T5552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.780100][ T5552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.828771][ T5552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.117241][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.168666][ T5552] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.182090][ T5727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 93.283632][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.290899][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.311241][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.318466][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.397510][ T5732] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.660004][ T5746] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 93.696224][ T5746] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.813950][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.981370][ T5552] veth0_vlan: entered promiscuous mode [ 94.018882][ T5552] veth1_vlan: entered promiscuous mode [ 94.159109][ T5552] veth0_macvtap: entered promiscuous mode [ 94.202128][ T5552] veth1_macvtap: entered promiscuous mode [ 94.237288][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.250585][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.273900][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.293717][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.304555][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.316530][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.329942][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.340588][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.350604][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.361531][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.377218][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.393522][ T5130] Bluetooth: hci2: command tx timeout [ 94.417226][ T5773] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.481753][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.517557][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.538177][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.559709][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.577306][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.590948][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.601032][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.612997][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.628612][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.640015][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.655993][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.664908][ T5775] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 94.735329][ T5552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.752653][ T5782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.766159][ T5552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.788425][ T5552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.826833][ T5552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.851479][ T5782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.963898][ T5790] bridge0: port 2(bridge_slave_1) entered listening state [ 95.165575][ T2816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.183838][ T2816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.276678][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.311616][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.356497][ T5807] validate_nla: 1 callbacks suppressed [ 95.356519][ T5807] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 95.472780][ T5813] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.684830][ T5821] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 95.705602][ T5821] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.864134][ T5826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 96.098766][ T29] audit: type=1804 audit(1718664270.916:5): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3882247718/syzkaller.WdKfxi/53/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 96.145168][ T5837] bridge0: port 2(bridge_slave_1) entered listening state [ 96.181117][ T29] audit: type=1804 audit(1718664270.926:6): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3882247718/syzkaller.WdKfxi/53/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 96.243771][ T29] audit: type=1804 audit(1718664270.936:7): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3882247718/syzkaller.WdKfxi/53/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 96.473977][ T5130] Bluetooth: hci2: command tx timeout [ 96.629714][ T5854] bridge0: port 2(bridge_slave_1) entered listening state [ 96.916650][ T5875] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.954009][ T5874] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 97.030010][ T5883] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 97.069227][ T5879] bridge0: port 2(bridge_slave_1) entered listening state [ 97.671091][ T5907] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 97.704619][ T5907] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.845374][ T5916] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 97.863959][ T5916] netlink: 112848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.889487][ T5916] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 97.920829][ T5921] bond0: option miimon: invalid value (18446744073072082944) [ 97.953344][ T5921] bond0: option miimon: allowed values 0 - 2147483647 [ 98.207003][ T5929] bridge0: port 2(bridge_slave_1) entered listening state [ 98.665511][ T5935] Bluetooth: MGMT ver 1.22 [ 98.862872][ T5953] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 98.900111][ T5953] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.041623][ T5962] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 99.412262][ T5972] bridge0: port 2(bridge_slave_1) entered listening state [ 99.525155][ T5980] netlink: 112848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.577837][ T5980] bond0: option miimon: invalid value (18446744073072082944) [ 99.592534][ T5980] bond0: option miimon: allowed values 0 - 2147483647 [ 99.622305][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.833329][ T5999] netlink: 612 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.876168][ T5997] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.680176][ T6028] bridge0: port 2(bridge_slave_1) entered listening state [ 101.043595][ T6049] validate_nla: 4 callbacks suppressed [ 101.043615][ T6049] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 101.043670][ T6045] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 101.134657][ T6045] netlink: 112848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.154095][ T6045] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 101.163079][ T6054] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 101.177441][ T6054] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.217713][ T6045] bond0: option miimon: invalid value (18446744073072082944) [ 101.228402][ T6045] bond0: option miimon: allowed values 0 - 2147483647 [ 101.557088][ T6070] bridge0: port 2(bridge_slave_1) entered listening state [ 101.784290][ T6080] Illegal XDP return value 65536 on prog (id 127) dev N/A, expect packet loss! [ 102.009643][ T6091] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 102.015191][ T6093] netlink: set zone limit has 8 unknown bytes [ 102.798330][ T6135] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.808240][ T6135] netlink: 112848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.819959][ T6135] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.839458][ T6138] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 102.888963][ T6135] bond0: option miimon: invalid value (18446744073072082944) [ 102.904571][ T6135] bond0: option miimon: allowed values 0 - 2147483647 [ 103.942239][ T6173] bridge0: port 2(bridge_slave_1) entered listening state [ 103.975171][ T6176] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.609864][ T6199] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 104.629092][ T6199] netlink: 112848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.656106][ T6199] bond0: option miimon: invalid value (18446744073072082944) [ 104.681913][ T6199] bond0: option miimon: allowed values 0 - 2147483647 [ 104.795520][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 105.242029][ T6214] bridge0: port 2(bridge_slave_1) entered listening state [ 105.433835][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.074325][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 106.234999][ T6250] validate_nla: 3 callbacks suppressed [ 106.235019][ T6250] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 106.297605][ T6251] bridge0: port 2(bridge_slave_1) entered listening state [ 107.301659][ T6292] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 107.574206][ T6300] No such timeout policy "syz0" [ 107.618946][ T6300] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.627377][ T6302] batman_adv: batadv0: Adding interface: macsec1 [ 107.642905][ T6302] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.693410][ T6302] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 107.740795][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.783306][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.814824][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.856064][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.901151][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.930971][ T6305] batman_adv: batadv0: Removing interface: macsec1 [ 108.272551][ T6329] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 108.297192][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.436304][ T6337] bridge0: port 2(bridge_slave_1) entered listening state [ 108.646193][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 108.677792][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.700037][ T6346] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 108.881822][ T6356] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 108.899938][ T6356] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.209422][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.229434][ T6373] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 109.463571][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.491833][ T6385] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 109.664110][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.170127][ T6418] batman_adv: batadv0: Adding interface: macsec1 [ 110.184025][ T6418] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.217733][ T6418] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 110.231970][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.249451][ T6422] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 110.279798][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.292293][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.307301][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.333954][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.356989][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.374547][ T6424] batman_adv: batadv0: Removing interface: macsec1 [ 110.438329][ T6429] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 110.468273][ T6429] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.805367][ T6442] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 110.840649][ T6442] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 111.235046][ T6470] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 111.245588][ T6471] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.263404][ T6470] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.400247][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.412130][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.421033][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.441939][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.626132][ T6488] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 112.252300][ T6516] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 112.283979][ T6513] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 112.430489][ T6523] veth0_vlan: entered allmulticast mode [ 112.501623][ T6526] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 112.701993][ T6539] batman_adv: batadv0: Adding interface: macsec1 [ 112.726705][ T6539] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.757779][ T6539] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 112.776707][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.787171][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.797530][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.806997][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.817978][ T6544] batman_adv: batadv0: Removing interface: macsec1 [ 112.968618][ T6548] bridge0: port 2(bridge_slave_1) entered listening state [ 113.030181][ T6552] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 113.311326][ T6561] veth0_vlan: entered allmulticast mode [ 113.585591][ T6579] bridge0: port 2(bridge_slave_1) entered listening state [ 113.593834][ T6581] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 113.673421][ T5130] Bluetooth: hci2: command tx timeout [ 114.230263][ T6615] bridge0: port 2(bridge_slave_1) entered listening state [ 114.278347][ T6618] tipc: Enabling of bearer rejected, failed to enable media [ 114.527228][ T6625] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 114.800413][ T6638] __nla_validate_parse: 21 callbacks suppressed [ 114.800434][ T6638] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.036998][ T6648] bridge0: port 2(bridge_slave_1) entered listening state [ 115.092137][ T6646] tipc: Enabling of bearer rejected, failed to enable media [ 115.438510][ T6662] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.522527][ T6675] bridge0: port 2(bridge_slave_1) entered listening state [ 115.797350][ T6686] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 115.843043][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 115.974323][ T6694] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 116.003005][ T6694] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.134313][ T6704] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.354485][ T6714] bridge0: port 2(bridge_slave_1) entered listening state [ 116.418746][ T6722] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 116.440185][ T6722] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.118502][ T6765] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 117.127162][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.171421][ T6768] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 117.803939][ T6804] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 117.829930][ T6804] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.908280][ T6810] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.839710][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.881894][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.985225][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.191764][ T6882] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 119.562177][ T6902] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 120.153320][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 120.948036][ T6951] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 120.961640][ T6951] __nla_validate_parse: 3 callbacks suppressed [ 120.961662][ T6951] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.433294][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 123.993301][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 132.961563][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968059][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.513228][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.793213][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.353451][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.414050][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420404][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.473207][ T5130] Bluetooth: hci1: command 0x0406 tx timeout [ 196.483278][ T5122] Bluetooth: hci3: command 0x0406 tx timeout [ 196.489392][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 196.495602][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 237.443218][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 255.835905][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.842376][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.833315][ T30] INFO: task kworker/1:2:58 blocked for more than 143 seconds. [ 271.863226][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 271.883122][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.891844][ T30] task:kworker/1:2 state:D stack:23856 pid:58 tgid:58 ppid:2 flags:0x00004000 [ 271.923122][ T30] Workqueue: events switchdev_deferred_process_work [ 271.929824][ T30] Call Trace: [ 271.943110][ T30] [ 271.946178][ T30] __schedule+0x17e8/0x4a20 [ 271.950744][ T30] ? __pfx___schedule+0x10/0x10 [ 271.973096][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.979126][ T30] ? __pfx_lock_release+0x10/0x10 [ 271.993095][ T30] ? kick_pool+0x45c/0x620 [ 271.997565][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 272.002975][ T30] ? schedule+0x90/0x320 [ 272.024296][ T30] schedule+0x14b/0x320 [ 272.028510][ T30] schedule_preempt_disabled+0x13/0x30 [ 272.044209][ T30] __mutex_lock+0x6a4/0xd70 [ 272.048773][ T30] ? __mutex_lock+0x527/0xd70 [ 272.066589][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 272.072718][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 272.093150][ T30] ? process_scheduled_works+0x945/0x1830 [ 272.098925][ T30] switchdev_deferred_process_work+0xe/0x20 [ 272.116600][ T30] process_scheduled_works+0xa2c/0x1830 [ 272.122229][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.143102][ T30] ? assign_work+0x364/0x3d0 [ 272.149394][ T30] worker_thread+0x86d/0xd70 [ 272.163116][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.169064][ T30] ? __kthread_parkme+0x169/0x1d0 [ 272.183095][ T30] ? __pfx_worker_thread+0x10/0x10 [ 272.188249][ T30] kthread+0x2f0/0x390 [ 272.192355][ T30] ? __pfx_worker_thread+0x10/0x10 [ 272.215272][ T30] ? __pfx_kthread+0x10/0x10 [ 272.219916][ T30] ret_from_fork+0x4b/0x80 [ 272.224420][ T30] ? __pfx_kthread+0x10/0x10 [ 272.229044][ T30] ret_from_fork_asm+0x1a/0x30 [ 272.234050][ T30] [ 272.237263][ T30] INFO: task syz-executor.0:6963 blocked for more than 143 seconds. [ 272.249774][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 272.267789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.276902][ T30] task:syz-executor.0 state:D stack:26800 pid:6963 tgid:6960 ppid:5552 flags:0x00000006 [ 272.290642][ T30] Call Trace: [ 272.293987][ T30] [ 272.296945][ T30] __schedule+0x17e8/0x4a20 [ 272.301515][ T30] ? __pfx___schedule+0x10/0x10 [ 272.309960][ T30] ? __pfx_lock_release+0x10/0x10 [ 272.315263][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 272.320782][ T30] ? schedule+0x90/0x320 [ 272.330896][ T30] schedule+0x14b/0x320 [ 272.335221][ T30] schedule_preempt_disabled+0x13/0x30 [ 272.340714][ T30] __mutex_lock+0x6a4/0xd70 [ 272.345475][ T30] ? __mutex_lock+0x527/0xd70 [ 272.351435][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 272.377648][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 272.382743][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 272.403098][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 272.408441][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.423127][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.429160][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.463223][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 272.468644][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 272.483124][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 272.488553][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 272.503116][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 272.508276][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 272.523132][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 272.528298][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 272.543146][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 272.548312][ T30] ? ref_tracker_free+0x643/0x7e0 [ 272.573128][ T30] netlink_rcv_skb+0x1e3/0x430 [ 272.577991][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.593136][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.598509][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.613147][ T30] netlink_unicast+0x7ea/0x980 [ 272.617970][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 272.633219][ T30] ? __virt_addr_valid+0x183/0x520 [ 272.638381][ T30] ? __check_object_size+0x49c/0x900 [ 272.653114][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 272.660551][ T30] netlink_sendmsg+0x8db/0xcb0 [ 272.683114][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.688461][ T30] ? __import_iovec+0x536/0x820 [ 272.703367][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 272.708363][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.733207][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 272.738745][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.753080][ T30] __sock_sendmsg+0x221/0x270 [ 272.757809][ T30] ____sys_sendmsg+0x525/0x7d0 [ 272.773126][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.778488][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 272.793156][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.798378][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.813104][ T30] ? do_syscall_64+0x100/0x230 [ 272.817921][ T30] ? do_syscall_64+0xb6/0x230 [ 272.822628][ T30] do_syscall_64+0xf3/0x230 [ 272.843130][ T30] ? clear_bhb_loop+0x35/0x90 [ 272.847866][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.853850][ T30] RIP: 0033:0x7f354607cf29 [ 272.858302][ T30] RSP: 002b:00007f3546d500c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.867894][ T30] RAX: ffffffffffffffda RBX: 00007f35461b3f80 RCX: 00007f354607cf29 [ 272.876063][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 272.895244][ T30] RBP: 00007f35460ec074 R08: 0000000000000000 R09: 0000000000000000 [ 272.913123][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.921127][ T30] R13: 000000000000000b R14: 00007f35461b3f80 R15: 00007ffe12d97b58 [ 272.943131][ T30] [ 272.954281][ T30] INFO: task syz-executor.1:6971 blocked for more than 144 seconds. [ 272.962299][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 272.983103][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.991811][ T30] task:syz-executor.1 state:D stack:23800 pid:6971 tgid:6970 ppid:5115 flags:0x00000006 [ 273.026890][ T30] Call Trace: [ 273.030215][ T30] [ 273.036654][ T30] __schedule+0x17e8/0x4a20 [ 273.041232][ T30] ? __pfx___schedule+0x10/0x10 [ 273.063132][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.072177][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 273.093251][ T30] ? schedule+0x90/0x320 [ 273.097540][ T30] schedule+0x14b/0x320 [ 273.101739][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.123125][ T30] __mutex_lock+0x6a4/0xd70 [ 273.127695][ T30] ? __mutex_lock+0x527/0xd70 [ 273.132406][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 273.153126][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.158226][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 273.173098][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 273.178442][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.203150][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.209185][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.223197][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 273.228612][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 273.243150][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 273.248566][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 273.273207][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 273.278384][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.293094][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 273.298340][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 273.313118][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 273.318285][ T30] ? ref_tracker_free+0x643/0x7e0 [ 273.333130][ T30] netlink_rcv_skb+0x1e3/0x430 [ 273.337958][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.355149][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.360522][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.383108][ T30] netlink_unicast+0x7ea/0x980 [ 273.387944][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 273.403086][ T30] ? __virt_addr_valid+0x183/0x520 [ 273.408253][ T30] ? __check_object_size+0x49c/0x900 [ 273.423106][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 273.428292][ T30] netlink_sendmsg+0x8db/0xcb0 [ 273.434258][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.439602][ T30] ? __import_iovec+0x536/0x820 [ 273.444657][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 273.449663][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.455073][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 273.460575][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.468160][ T30] __sock_sendmsg+0x221/0x270 [ 273.472896][ T30] ____sys_sendmsg+0x525/0x7d0 [ 273.478926][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.484330][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 273.488992][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.494218][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.500585][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.505460][ T30] ? trace_sys_enter+0x1f/0xd0 [ 273.510269][ T30] do_syscall_64+0xf3/0x230 [ 273.515055][ T30] ? clear_bhb_loop+0x35/0x90 [ 273.519780][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.525746][ T30] RIP: 0033:0x7f6fbd27cf29 [ 273.530186][ T30] RSP: 002b:00007f6fbdf930c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.538679][ T30] RAX: ffffffffffffffda RBX: 00007f6fbd3b3f80 RCX: 00007f6fbd27cf29 [ 273.551279][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000b [ 273.559692][ T30] RBP: 00007f6fbd2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 273.571386][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.588205][ T30] R13: 000000000000000b R14: 00007f6fbd3b3f80 R15: 00007ffe6ccfc6a8 [ 273.598584][ T30] [ 273.601654][ T30] INFO: task syz-executor.3:6972 blocked for more than 145 seconds. [ 273.613418][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 273.621099][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.632161][ T30] task:syz-executor.3 state:D stack:24672 pid:6972 tgid:6972 ppid:5125 flags:0x00000006 [ 273.644090][ T30] Call Trace: [ 273.647397][ T30] [ 273.650359][ T30] __schedule+0x17e8/0x4a20 [ 273.673117][ T30] ? __pfx___schedule+0x10/0x10 [ 273.678024][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.693398][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 273.705265][ T30] ? schedule+0x90/0x320 [ 273.709568][ T30] schedule+0x14b/0x320 [ 273.723109][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.728603][ T30] __mutex_lock+0x6a4/0xd70 [ 273.743146][ T30] ? __mutex_lock+0x527/0xd70 [ 273.747958][ T30] ? raw_release+0x1b8/0x8a0 [ 273.752579][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.773100][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 273.778355][ T30] ? __down_write_common+0x162/0x200 [ 273.793099][ T30] raw_release+0x1b8/0x8a0 [ 273.797565][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.802982][ T30] sock_close+0xbc/0x240 [ 273.833091][ T30] ? __pfx_sock_close+0x10/0x10 [ 273.838099][ T30] __fput+0x406/0x8b0 [ 273.842127][ T30] task_work_run+0x24f/0x310 [ 273.853094][ T30] ? __pfx_task_work_run+0x10/0x10 [ 273.858346][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 273.873093][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 273.878780][ T30] do_syscall_64+0x100/0x230 [ 273.903119][ T30] ? clear_bhb_loop+0x35/0x90 [ 273.907853][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.913994][ T30] RIP: 0033:0x7f1a1ee7cf29 [ 273.918434][ T30] RSP: 002b:00007ffe27373198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 273.929632][ T30] RAX: 0000000000000000 RBX: 00007f1a1efb5980 RCX: 00007f1a1ee7cf29 [ 273.937675][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 273.948907][ T30] RBP: 00007f1a1efb5980 R08: 0000000000000000 R09: 0000000500000000 [ 273.956957][ T30] R10: 0000000080000000 R11: 0000000000000246 R12: 000000000001dd11 [ 273.968539][ T30] R13: 00007f1a1efb3f8c R14: 0000000000000032 R15: 00007f1a1efb5980 [ 273.976591][ T30] [ 273.979634][ T30] INFO: task syz-executor.3:6973 blocked for more than 145 seconds. [ 273.994074][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 274.001727][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.015074][ T30] task:syz-executor.3 state:D stack:26800 pid:6973 tgid:6972 ppid:5125 flags:0x00000006 [ 274.027638][ T30] Call Trace: [ 274.030932][ T30] [ 274.037670][ T30] __schedule+0x17e8/0x4a20 [ 274.042250][ T30] ? __pfx___schedule+0x10/0x10 [ 274.049534][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.055858][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 274.061376][ T30] ? schedule+0x90/0x320 [ 274.068024][ T30] schedule+0x14b/0x320 [ 274.072216][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.096177][ T30] __mutex_lock+0x6a4/0xd70 [ 274.100749][ T30] ? __mutex_lock+0x527/0xd70 [ 274.106692][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 274.111945][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.126582][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 274.131658][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 274.153265][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.158784][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.183086][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.189476][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 274.213104][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 274.218372][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 274.233174][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 274.238509][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 274.257888][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.263724][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 274.268868][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 274.276671][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 274.281831][ T30] ? ref_tracker_free+0x643/0x7e0 [ 274.290857][ T30] netlink_rcv_skb+0x1e3/0x430 [ 274.298780][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.307811][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.313297][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.318532][ T30] netlink_unicast+0x7ea/0x980 [ 274.333136][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 274.338467][ T30] ? __virt_addr_valid+0x183/0x520 [ 274.356517][ T30] ? __check_object_size+0x49c/0x900 [ 274.361835][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 274.388930][ T30] netlink_sendmsg+0x8db/0xcb0 [ 274.393930][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.400374][ T30] ? __import_iovec+0x536/0x820 [ 274.423103][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 274.428101][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.443149][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 274.448669][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.463148][ T30] __sock_sendmsg+0x221/0x270 [ 274.467877][ T30] ____sys_sendmsg+0x525/0x7d0 [ 274.472713][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.495210][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 274.501113][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.506372][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.512741][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.517595][ T30] ? trace_sys_enter+0x1f/0xd0 [ 274.522405][ T30] do_syscall_64+0xf3/0x230 [ 274.527031][ T30] ? clear_bhb_loop+0x35/0x90 [ 274.531750][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.537823][ T30] RIP: 0033:0x7f1a1ee7cf29 [ 274.542266][ T30] RSP: 002b:00007f1a1fca00c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.554339][ T30] RAX: ffffffffffffffda RBX: 00007f1a1efb3f80 RCX: 00007f1a1ee7cf29 [ 274.562356][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 274.571911][ T30] RBP: 00007f1a1eeec074 R08: 0000000000000000 R09: 0000000000000000 [ 274.582401][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.591858][ T30] R13: 000000000000000b R14: 00007f1a1efb3f80 R15: 00007ffe273730b8 [ 274.606524][ T30] [ 274.609597][ T30] INFO: task syz-executor.4:6977 blocked for more than 146 seconds. [ 274.619844][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 274.631154][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.642728][ T30] task:syz-executor.4 state:D stack:26800 pid:6977 tgid:6976 ppid:5118 flags:0x00000006 [ 274.656413][ T30] Call Trace: [ 274.659737][ T30] [ 274.662693][ T30] __schedule+0x17e8/0x4a20 [ 274.683300][ T30] ? __pfx___schedule+0x10/0x10 [ 274.688204][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.703091][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 274.723197][ T30] ? schedule+0x90/0x320 [ 274.727501][ T30] schedule+0x14b/0x320 [ 274.731689][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.753129][ T30] __mutex_lock+0x6a4/0xd70 [ 274.757704][ T30] ? __mutex_lock+0x527/0xd70 [ 274.762415][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 274.783136][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.788268][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 274.803118][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 274.824151][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.829765][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.843102][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.849476][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 274.873117][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 274.878382][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 274.893088][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 274.898426][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 274.913103][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.918883][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 274.933120][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 274.938379][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 274.954386][ T30] ? ref_tracker_free+0x643/0x7e0 [ 274.959470][ T30] netlink_rcv_skb+0x1e3/0x430 [ 274.976385][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.981890][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.003130][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.008395][ T30] netlink_unicast+0x7ea/0x980 [ 275.020645][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 275.026064][ T30] ? __virt_addr_valid+0x183/0x520 [ 275.031221][ T30] ? __check_object_size+0x49c/0x900 [ 275.042152][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 275.047392][ T30] netlink_sendmsg+0x8db/0xcb0 [ 275.052214][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.057710][ T30] ? __import_iovec+0x536/0x820 [ 275.062952][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 275.067965][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 275.073345][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 275.078858][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.084240][ T30] __sock_sendmsg+0x221/0x270 [ 275.088959][ T30] ____sys_sendmsg+0x525/0x7d0 [ 275.093881][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.099221][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 275.105194][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.110409][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.119036][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.123910][ T30] ? trace_sys_enter+0x1f/0xd0 [ 275.128707][ T30] do_syscall_64+0xf3/0x230 [ 275.133308][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.138020][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.145214][ T30] RIP: 0033:0x7f0e4547cf29 [ 275.149675][ T30] RSP: 002b:00007f0e462ca0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.158197][ T30] RAX: ffffffffffffffda RBX: 00007f0e455b3f80 RCX: 00007f0e4547cf29 [ 275.167433][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 275.177743][ T30] RBP: 00007f0e454ec074 R08: 0000000000000000 R09: 0000000000000000 [ 275.186976][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.197676][ T30] R13: 000000000000000b R14: 00007f0e455b3f80 R15: 00007ffc18ad35d8 [ 275.206993][ T30] [ 275.210072][ T30] [ 275.210072][ T30] Showing all locks held in the system: [ 275.226879][ T30] 3 locks held by kworker/u8:0/11: [ 275.232031][ T30] #0: ffff888028987948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 275.243865][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 275.262376][ T30] #2: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 275.272483][ T30] 1 lock held by khungtaskd/30: [ 275.281074][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 275.291116][ T30] 3 locks held by kworker/1:2/58: [ 275.299915][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 275.311061][ T30] #1: ffffc90001387d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 275.346670][ T30] #2: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 275.373168][ T30] 2 locks held by getty/4852: [ 275.377887][ T30] #0: ffff888028ef00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 275.416614][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 275.443126][ T30] 5 locks held by kworker/0:4/5167: [ 275.448391][ T30] #0: ffff8880b943e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 275.473161][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 275.493120][ T30] #2: ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 275.502687][ T30] #3: ffffffff94983d40 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 275.533157][ T30] #4: ffffffff94a327c0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 275.563125][ T30] 3 locks held by kworker/1:4/5168: [ 275.568378][ T30] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 275.595198][ T30] #1: ffffc90004767d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 275.623178][ T30] #2: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 [ 275.643133][ T30] 1 lock held by syz-executor.0/6963: [ 275.648550][ T30] #0: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 275.674440][ T30] 2 locks held by syz-executor.2/6962: [ 275.679976][ T30] 1 lock held by syz-executor.1/6971: [ 275.693088][ T30] #0: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 275.702750][ T30] 2 locks held by syz-executor.3/6972: [ 275.723102][ T30] #0: ffff88805ce7be10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 275.753219][ T30] #1: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8a0 [ 275.762368][ T30] 1 lock held by syz-executor.3/6973: [ 275.783087][ T30] #0: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 275.792686][ T30] 1 lock held by syz-executor.4/6977: [ 275.813085][ T30] #0: ffffffff8f5e7648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 275.822691][ T30] [ 275.827249][ T30] ============================================= [ 275.827249][ T30] [ 275.836904][ T30] NMI backtrace for cpu 0 [ 275.841266][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 275.851264][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 275.861337][ T30] Call Trace: [ 275.864640][ T30] [ 275.867604][ T30] dump_stack_lvl+0x241/0x360 [ 275.872310][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.877535][ T30] ? __pfx__printk+0x10/0x10 [ 275.882162][ T30] ? vprintk_emit+0x631/0x770 [ 275.886872][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 275.891935][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 275.896903][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 275.902366][ T30] ? _printk+0xd5/0x120 [ 275.906534][ T30] ? __pfx__printk+0x10/0x10 [ 275.911135][ T30] ? __wake_up_klogd+0xcc/0x110 [ 275.915998][ T30] ? __pfx__printk+0x10/0x10 [ 275.920603][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 275.925644][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.931632][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 275.937624][ T30] watchdog+0xfde/0x1020 [ 275.941870][ T30] ? watchdog+0x1ea/0x1020 [ 275.946304][ T30] ? __pfx_watchdog+0x10/0x10 [ 275.950998][ T30] kthread+0x2f0/0x390 [ 275.955087][ T30] ? __pfx_watchdog+0x10/0x10 [ 275.959784][ T30] ? __pfx_kthread+0x10/0x10 [ 275.964382][ T30] ret_from_fork+0x4b/0x80 [ 275.968810][ T30] ? __pfx_kthread+0x10/0x10 [ 275.973407][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.978194][ T30] [ 275.982033][ T30] Sending NMI from CPU 0 to CPUs 1: [ 275.987856][ C1] NMI backtrace for cpu 1 [ 275.987868][ C1] CPU: 1 PID: 6962 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 275.987887][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 275.987897][ C1] RIP: 0010:check_preemption_disabled+0x60/0x120 [ 275.987921][ C1] Code: 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b 24 25 00 d5 [ 275.987935][ C1] RSP: 0018:ffffc9000999e568 EFLAGS: 00000046 [ 275.987951][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 275.987962][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1ff680 [ 275.987974][ C1] RBP: ffffc9000999e6e8 R08: ffffffff92fb5587 R09: 1ffffffff25f6ab0 [ 275.987987][ C1] R10: dffffc0000000000 R11: fffffbfff25f6ab1 R12: 1ffff92001333cbc [ 275.988000][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 275.988011][ C1] FS: 00007f18212186c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 275.988026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.988037][ C1] CR2: 0000000001499240 CR3: 000000001f584000 CR4: 00000000003506f0 [ 275.988052][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.988061][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.988072][ C1] Call Trace: [ 275.988078][ C1] [ 275.988085][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 275.988112][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 275.988133][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 275.988163][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 275.988183][ C1] ? nmi_handle+0x14f/0x5a0 [ 275.988208][ C1] ? nmi_handle+0x2a/0x5a0 [ 275.988234][ C1] ? check_preemption_disabled+0x60/0x120 [ 275.988252][ C1] ? default_do_nmi+0x63/0x160 [ 275.988274][ C1] ? exc_nmi+0x123/0x1f0 [ 275.988294][ C1] ? end_repeat_nmi+0xf/0x53 [ 275.988320][ C1] ? check_preemption_disabled+0x60/0x120 [ 275.988338][ C1] ? check_preemption_disabled+0x60/0x120 [ 275.988359][ C1] ? check_preemption_disabled+0x60/0x120 [ 275.988377][ C1] [ 275.988383][ C1] [ 275.988391][ C1] lock_acquire+0x1fd/0x550 [ 275.988412][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 275.988429][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 275.988450][ C1] ? __pfx_lock_release+0x10/0x10 [ 275.988470][ C1] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 275.988492][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 275.988511][ C1] tcf_idr_check_alloc+0x12d/0x900 [ 275.988529][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 275.988551][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 275.988572][ C1] ? __nla_parse+0x40/0x60 [ 275.988597][ C1] tcf_police_init+0x29b/0x17c0 [ 275.988618][ C1] ? __sock_sendmsg+0x221/0x270 [ 275.988640][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 275.988665][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 275.988699][ C1] ? nla_memcpy+0x5d/0xc0 [ 275.988722][ C1] ? __asan_memcpy+0x40/0x70 [ 275.988742][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 275.988763][ C1] tcf_action_init_1+0x5d7/0x890 [ 275.988789][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 275.988821][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 275.988843][ C1] tcf_action_init+0x2e4/0x940 [ 275.988870][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 275.988920][ C1] ? apparmor_capable+0x138/0x1b0 [ 275.988950][ C1] tc_ctl_action+0x47d/0xcf0 [ 275.988971][ C1] ? __kernel_text_address+0xd/0x40 [ 275.988999][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 275.989035][ C1] ? trace_contention_end+0x3c/0x120 [ 275.989058][ C1] ? __mutex_lock+0x2ef/0xd70 [ 275.989087][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 275.989124][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 275.989145][ C1] rtnetlink_rcv_msg+0x89b/0x1180 [ 275.989170][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 275.989194][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.989219][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.989239][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.989259][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 275.989276][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 275.989302][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 275.989318][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 275.989335][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 275.989354][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 275.989374][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 275.989393][ C1] ? __dev_queue_xmit+0x16c9/0x3d30 [ 275.989418][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 275.989441][ C1] ? ref_tracker_free+0x643/0x7e0 [ 275.989465][ C1] netlink_rcv_skb+0x1e3/0x430 [ 275.989489][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.989513][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.989552][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.989576][ C1] netlink_unicast+0x7ea/0x980 [ 275.989621][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 275.989642][ C1] ? __virt_addr_valid+0x183/0x520 [ 275.989668][ C1] ? __check_object_size+0x49c/0x900 [ 275.989684][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 275.989712][ C1] netlink_sendmsg+0x8db/0xcb0 [ 275.989743][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.989769][ C1] ? __import_iovec+0x536/0x820 [ 275.989793][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 275.989813][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 275.989830][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 275.989857][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.989881][ C1] __sock_sendmsg+0x221/0x270 [ 275.989906][ C1] ____sys_sendmsg+0x525/0x7d0 [ 275.989930][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.989958][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 275.989977][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.990019][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.990039][ C1] ? do_syscall_64+0x100/0x230 [ 275.990057][ C1] ? do_syscall_64+0xb6/0x230 [ 275.990076][ C1] do_syscall_64+0xf3/0x230 [ 275.990097][ C1] ? clear_bhb_loop+0x35/0x90 [ 275.990118][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.990137][ C1] RIP: 0033:0x7f182047cf29 [ 275.990152][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 275.990166][ C1] RSP: 002b:00007f18212180c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.990183][ C1] RAX: ffffffffffffffda RBX: 00007f18205b3f80 RCX: 00007f182047cf29 [ 275.990196][ C1] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 275.990206][ C1] RBP: 00007f18204ec074 R08: 0000000000000000 R09: 0000000000000000 [ 275.990217][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.990227][ C1] R13: 000000000000000b R14: 00007f18205b3f80 R15: 00007ffeab023308 [ 275.990247][ C1] [ 276.012043][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 276.012058][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 276.012081][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 276.012094][ T30] Call Trace: [ 276.012103][ T30] [ 276.012112][ T30] dump_stack_lvl+0x241/0x360 [ 276.012142][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.012166][ T30] ? __pfx__printk+0x10/0x10 [ 276.012196][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.012228][ T30] ? vscnprintf+0x5d/0x90 [ 276.012255][ T30] panic+0x349/0x860 [ 276.012289][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 276.012317][ T30] ? __pfx_panic+0x10/0x10 [ 276.012350][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 276.012382][ T30] ? __irq_work_queue_local+0x137/0x410 [ 276.012407][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 276.012431][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 276.012456][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 276.012485][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 276.012515][ T30] watchdog+0x101d/0x1020 [ 276.012541][ T30] ? watchdog+0x1ea/0x1020 [ 276.012572][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.012596][ T30] kthread+0x2f0/0x390 [ 276.012621][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.012643][ T30] ? __pfx_kthread+0x10/0x10 [ 276.012670][ T30] ret_from_fork+0x4b/0x80 [ 276.012697][ T30] ? __pfx_kthread+0x10/0x10 [ 276.012723][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.012768][ T30] [ 276.018324][ T30] Kernel Offset: disabled [ 276.805019][ T30] Rebooting in 86400 seconds..