last executing test programs: 4m10.989243676s ago: executing program 2 (id=48): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2502000000340001801400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000003400018008000300020000001400020076657468305f6d6163767461700000001400020000000000000000000000000000000000180001801400020067656e65766531000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x40808c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m10.420277407s ago: executing program 3 (id=33): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xd3f6d0f02400391a}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xa, 0x85, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000108000000000000000081"], 0x1c}}, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4(r6, 0x0, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 4m9.854768674s ago: executing program 1 (id=224): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m56.787729398s ago: executing program 2 (id=48): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2502000000340001801400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000003400018008000300020000001400020076657468305f6d6163767461700000001400020000000000000000000000000000000000180001801400020067656e65766531000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x40808c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m55.385597967s ago: executing program 3 (id=33): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xd3f6d0f02400391a}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xa, 0x85, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000108000000000000000081"], 0x1c}}, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4(r6, 0x0, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 3m54.725652178s ago: executing program 1 (id=224): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m42.556793619s ago: executing program 2 (id=48): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2502000000340001801400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000003400018008000300020000001400020076657468305f6d6163767461700000001400020000000000000000000000000000000000180001801400020067656e65766531000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x40808c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m40.200612162s ago: executing program 1 (id=224): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m37.549073922s ago: executing program 3 (id=33): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xd3f6d0f02400391a}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xa, 0x85, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000108000000000000000081"], 0x1c}}, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4(r6, 0x0, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 3m28.795392387s ago: executing program 2 (id=48): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2502000000340001801400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="5800018014000200766c616e3000000000000000000000001400020076657468315f746f5f746561cb7aa5c49c4dea1c6d61637365633000000000000000000008000100d2fe8410b2bda3e7c9f8531f1edffaed39b8be6d70d84902f1a6b3e67e5574c3c4bd12d6e0a6900b1f9c27f6656726e700b3f4763914789442b8c2cb2f223d8c4fc428cda25526df23fc2e45d6722f981b94799bf6b04719300276b623bb7061e89c8dc03d04b23ea13bbce71eb5f565a628ac36b27017569785c46810503ee5a004f1a0c07da292e94d08185c5a1dd33a3d54e9ad7e72fb9bd1c30641533330b2c628360561d91fc321e531bc29a2b6a98183db502321a7", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000003400018008000300020000001400020076657468305f6d6163767461700000001400020000000000000000000000000000000000180001801400020067656e65766531000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x40808c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m27.145869781s ago: executing program 1 (id=224): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m23.28454559s ago: executing program 3 (id=33): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xd3f6d0f02400391a}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xa, 0x85, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000108000000000000000081"], 0x1c}}, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4(r6, 0x0, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 3m12.338266647s ago: executing program 2 (id=48): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2502000000340001801400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000003400018008000300020000001400020076657468305f6d6163767461700000001400020000000000000000000000000000000000180001801400020067656e65766531000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x40808c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m11.540362606s ago: executing program 1 (id=224): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m9.94154121s ago: executing program 3 (id=33): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xd3f6d0f02400391a}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xa, 0x85, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000108000000000000000081"], 0x1c}}, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4(r6, 0x0, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 2m57.631661071s ago: executing program 2 (id=48): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2502000000340001801400020064766d72703000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000003400018008000300020000001400020076657468305f6d6163767461700000001400020000000000000000000000000000000000180001801400020067656e65766531000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x40808c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m55.932052083s ago: executing program 3 (id=33): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0xbe7, 0xb2dd9dee314639a6, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x10, 0x700, 0x5, 0x8}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xd3f6d0f02400391a}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xa, 0x85, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x57fc554e, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000108000000000000000081"], 0x1c}}, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4(r6, 0x0, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 2m55.547750574s ago: executing program 1 (id=224): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m50.550705001s ago: executing program 0 (id=629): socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @loopback}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x50, {0x2, 0x4e21, @multicast2}, 'syzkaller1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_delrule={0x6c, 0x21, 0x20, 0x70bd29, 0x25dfdbfb, {0xa, 0x14, 0x14, 0x2, 0x7, 0x0, 0x0, 0x2, 0x3}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pimreg\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}}, @FRA_SRC={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) r5 = accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x0) connect$bt_l2cap(r5, &(0x7f00000003c0)={0x1f, 0x2, @none, 0x3, 0x2}, 0xe) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xd, 0x0, r4, 0x6a9, '\x00', r0, r3, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FREEZING\x00', 0x9) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x400c000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), r8) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_type(r3, &(0x7f00000006c0), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f0000000700)}, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r6) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r10, 0x33c51b7748ac54b3, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}}, 0x0) shutdown(r3, 0x1) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xff\xff\xff\xff\xff\xff'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'secondname\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x404a55b4f4432881}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r11, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r12, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c40)={0x4c8, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x735360f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1572bd3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4061ac9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53d102f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13532af5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x375c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4186815d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x447e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8c9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd70d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2149}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cfa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14a85405}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d5410}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8735}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1280c8f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d8a7fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9aef}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x194, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x632af5f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ff7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68741b18}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa424}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x101}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e5ec2c4}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaec3435}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x825f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x156c258d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x701d1614}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa14438a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a5cc34f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17159811}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3502fd9}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fe82735}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1678dc95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x441e4880}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6dc97535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e7b7172}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x109e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4b6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34049d98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148efaba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5db7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf62d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d259e2}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33a7dc31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64297ae9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5125f96e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x707b47a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfab0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x450e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43c797b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf11f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e1cee1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8962}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6038}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd80}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13972665}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70b21c55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55553f95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63efe68a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb88f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60b1073f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x630a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bc2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c002321}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16da37bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50300e83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f94c3bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54f10292}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa419}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9532}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x992d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1469dcf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a43}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44fe6add}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a971061}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e7dc085}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eba343a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc57db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fef7dd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63b3d00a}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 2m50.37368167s ago: executing program 0 (id=632): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20004840) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) unshare(0x2040400) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000280), &(0x7f0000000300)='%+9llu \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0x10, 0xffffffffffffffff, 0x88da5000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd60c33a1000a63afffe8000000000000000000000000000bbff020000000000f5d247e70de8ae033293437dd30000000000000000018900907800000000ff03000000000000000000000000000100000000000000000000000000000000190f98084cd9b3be1047fe7b68cad2d482437115114dbd7e"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) poll(&(0x7f0000000300)=[{r2, 0x404}], 0x1, 0x1) close(0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m49.841854096s ago: executing program 0 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x800, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 2m48.815576275s ago: executing program 0 (id=635): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newsa={0x154, 0x10, 0x713, 0x80000000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@local, {}, {0x4}, {0xfffffff8}, 0xfffffffe, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e22, @in=@empty}}]}, 0x154}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000002000000140001800600010002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb03001800"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r5, 0x29, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000000600)=ANY=[@ANYBLOB="1800f3ffffff0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000000000018290000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000c7b9feff04000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ec0800008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r7, &(0x7f0000000300)=""/235, 0xeb) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa014102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@rand_addr=0x64010101, 0x10000}, {@broadcast, 0x88000}, {@multicast1, 0xc}, {@rand_addr=0x64010100}, {@rand_addr=0x64010101, 0x400}, {@private=0xa010102}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2m48.546769874s ago: executing program 4 (id=638): pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 2m48.429961853s ago: executing program 4 (id=639): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000080)={@remote, @rand_addr=0x64010102, @rand_addr=0x64010100}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0) 2m48.276878406s ago: executing program 4 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_activate_work\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2m48.120814619s ago: executing program 4 (id=641): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={@local, 0x0, 0x0, 0x90, 0x0, [{@loopback}, {@remote}, {@local}, {@dev}, {@multicast1}, {@loopback}, {@initdev}, {@initdev}, {@multicast1}]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0xf7, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@llc_tr={0x11, {@snap={0x55, 0x0, "42f8", '\x00', 0x883e, "4db68c2c1e69ac12cb07e338982ed1635d388e8fc487797d59cd9ba29c3f6da9b1c82ccb8f6212989123ac03c227abea3009457424ff0685e9d179c38cf2b44f832999a7d5150c0059513e4ec1f2e4baac37df8b9d8ad927cd5f363edbb5a63419e08e6c9db331133cceb16ffd7e65a3adab9b0e3ce82b5da2a2f904f38134fe27d9bf972516d337764b0f70b4d7c95495d7f05eb2577e808b9bcdd3b3d3b6da787101771419f8b9ff3bebc872c094c04ee3590dba4a403ece1d11dc9b7221ec8436e4054351d31a2c5c48b98ce6d4a11f0321f4689047a3eeb7b1c21f97016a"}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100656e61626c6564000000000000000000000000000003000000000000000000000900030006", @ANYBLOB], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) 2m47.81168438s ago: executing program 0 (id=642): socket$inet6(0xa, 0x800, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0xa3, 0x8, 0x200]}, &(0x7f0000000100)=0x44) r2 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400000000fedbdf2500000000", @ANYRESDEC=r2, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001b000400000005001d000200000008000200", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m47.810518345s ago: executing program 4 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xa9d3f5d3779418f6}, 0x4080) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000240)=0xe, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0xc001) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @local}, 0x40, 0x0, 0x0, 0x0, 0xf0e, &(0x7f0000000440)='vlan0\x00', 0x1, 0xfffffffffffffffa, 0x8}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'vlan1\x00', 0x2}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0xd10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x30ee, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001700), 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001880)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001940)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000001a80)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, &(0x7f0000001b00)=0xc) r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001b40), 0x2, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b80), 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001bc0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001c00)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000001d00)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0, 0x0}, &(0x7f0000001d80)=0xc) sendmsg$unix(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1, &(0x7f0000001dc0)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r2, r7, r4]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x34, 0x1, 0x1, [r0, r2, r3, r2, r2, r3, r14, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r15, r16]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0x108, 0x50}, 0x84) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) 2m47.521568665s ago: executing program 4 (id=644): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES64=0x0, @ANYBLOB="fe"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400400c0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m47.431184966s ago: executing program 0 (id=645): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r2, 0x1, 0x0, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9f66647d05bf9c0fcf066505acb612f691f3bf3508ab001be6eeb89c44eb4ecbf76b05006de3", 0x39}], 0x1}, 0x24004010) 2m31.153960356s ago: executing program 32 (id=645): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r2, 0x1, 0x0, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9f66647d05bf9c0fcf066505acb612f691f3bf3508ab001be6eeb89c44eb4ecbf76b05006de3", 0x39}], 0x1}, 0x24004010) 2m29.949861683s ago: executing program 33 (id=644): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES64=0x0, @ANYBLOB="fe"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400400c0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 0s ago: executing program 5 (id=646): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8992, &(0x7f0000000040)={'gre0\x00', 0x400}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='mm_vmscan_write_folio\x00', r1, 0x0, 0xb}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): t+0x10/0x10 [ 156.587008][ T7704] ? __pfx_lock_acquire+0x10/0x10 [ 156.592038][ T7704] ? aa_sock_opt_perm+0x79/0x120 [ 156.596980][ T7704] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.602185][ T7704] do_sock_setsockopt+0x3af/0x720 [ 156.607220][ T7704] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.612769][ T7704] ? __fget_files+0x395/0x410 [ 156.617448][ T7704] ? __fget_files+0x2a/0x410 [ 156.622047][ T7704] __x64_sys_setsockopt+0x1ee/0x280 [ 156.627249][ T7704] do_syscall_64+0xf3/0x230 [ 156.631756][ T7704] ? clear_bhb_loop+0x35/0x90 [ 156.636440][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.642331][ T7704] RIP: 0033:0x7f3aefd85d19 [ 156.646747][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.666368][ T7704] RSP: 002b:00007f3af0ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.674788][ T7704] RAX: ffffffffffffffda RBX: 00007f3aeff75fa0 RCX: 00007f3aefd85d19 [ 156.682758][ T7704] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 156.690728][ T7704] RBP: 00007f3aefe01a20 R08: 0000000000000020 R09: 0000000000000000 [ 156.698696][ T7704] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 156.706670][ T7704] R13: 0000000000000000 R14: 00007f3aeff75fa0 R15: 00007ffe4cf70508 [ 156.714653][ T7704] [ 156.759352][ T1328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.780059][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.419'. [ 156.801803][ T7653] team0: Port device team_slave_0 added [ 156.819711][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.844496][ T7653] team0: Port device team_slave_1 added [ 156.865955][ T5145] Bluetooth: hci3: command tx timeout [ 157.022428][ T1328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.126342][ T7642] team0: Port device team_slave_0 added [ 157.139982][ T7642] team0: Port device team_slave_1 added [ 157.158273][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.194619][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.205058][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.240982][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.264648][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.273478][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.300347][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.345292][ T5145] Bluetooth: hci4: command tx timeout [ 157.379126][ T1328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.576082][ T1328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.590737][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.605720][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.630421][ T7725] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 157.632001][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.655650][ T5145] Bluetooth: hci1: command tx timeout [ 157.688214][ T7725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.699317][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.707646][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.427'. [ 157.712814][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.744077][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.770867][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 157.785389][ T7727] bond4: (slave batadv1): making interface the new active one [ 157.802906][ T7727] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 157.821916][ T7653] hsr_slave_0: entered promiscuous mode [ 157.831523][ T7653] hsr_slave_1: entered promiscuous mode [ 157.846003][ T7653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.853606][ T7653] Cannot create hsr debugfs directory [ 157.907805][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 157.918341][ T7732] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 157.986763][ T7642] hsr_slave_0: entered promiscuous mode [ 157.994849][ T7642] hsr_slave_1: entered promiscuous mode [ 158.015383][ T7642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.024273][ T7642] Cannot create hsr debugfs directory [ 158.084801][ T7734] bridge3: entered promiscuous mode [ 158.090380][ T7734] bridge3: entered allmulticast mode [ 158.230207][ T1328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.273526][ T7743] tipc: Enabling of bearer rejected, failed to enable media [ 158.309100][ T7743] netlink: 80 bytes leftover after parsing attributes in process `syz.4.431'. [ 158.529796][ T1328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.563551][ T7746] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.598864][ T7622] veth0_vlan: entered promiscuous mode [ 158.609963][ T7746] netlink: 104 bytes leftover after parsing attributes in process `syz.4.432'. [ 158.637251][ T1328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.674196][ T7622] veth1_vlan: entered promiscuous mode [ 158.713064][ T7746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.750581][ T1328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.799317][ T7746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.892640][ T7746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.922741][ T7622] veth0_macvtap: entered promiscuous mode [ 158.936414][ T5145] Bluetooth: hci3: command tx timeout [ 158.987314][ T7746] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.035454][ T7622] veth1_macvtap: entered promiscuous mode [ 159.057618][ T1328] bridge_slave_1: left allmulticast mode [ 159.063588][ T1328] bridge_slave_1: left promiscuous mode [ 159.076602][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.096524][ T1328] bridge_slave_0: left allmulticast mode [ 159.102219][ T1328] bridge_slave_0: left promiscuous mode [ 159.127615][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.143797][ T1328] bridge_slave_1: left allmulticast mode [ 159.159880][ T1328] bridge_slave_1: left promiscuous mode [ 159.174908][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.195856][ T1328] bridge_slave_0: left allmulticast mode [ 159.201554][ T1328] bridge_slave_0: left promiscuous mode [ 159.207580][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.415549][ T5145] Bluetooth: hci4: command tx timeout [ 159.742313][ T5145] Bluetooth: hci1: command tx timeout [ 160.294736][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.313926][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.330725][ T1328] bond0 (unregistering): Released all slaves [ 160.588263][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.606721][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.626673][ T1328] bond0 (unregistering): Released all slaves [ 160.857606][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.869653][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.880174][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.891171][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.901429][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.912193][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.922091][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.945406][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.957074][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.973801][ T7746] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.013058][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.024556][ T5145] Bluetooth: hci3: command tx timeout [ 161.031478][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.041650][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.052545][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.063706][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.074452][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.085981][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.103493][ T7746] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.119669][ T7746] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.175077][ T7653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.216918][ T7746] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.259582][ T7653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.289057][ T7653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.354480][ T7622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.364275][ T7622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.376906][ T7622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.385882][ T7622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.407571][ T7653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.507508][ T5145] Bluetooth: hci4: command tx timeout [ 161.661445][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.676707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.847866][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.116048][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.154285][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.161518][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.193389][ T7753] syzkaller1: entered promiscuous mode [ 162.212116][ T7753] syzkaller1: entered allmulticast mode [ 162.405739][ T7642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.424167][ T1328] hsr_slave_0: left promiscuous mode [ 162.430420][ T1328] hsr_slave_1: left promiscuous mode [ 162.440010][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.447636][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.456373][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.464469][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.474246][ T1328] hsr_slave_0: left promiscuous mode [ 162.486607][ T1328] hsr_slave_1: left promiscuous mode [ 162.492821][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.500512][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.509853][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.517487][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.553791][ T1328] veth1_macvtap: left promiscuous mode [ 162.559541][ T1328] veth0_macvtap: left promiscuous mode [ 162.565341][ T1328] veth1_vlan: left promiscuous mode [ 162.570738][ T1328] veth0_vlan: left promiscuous mode [ 162.579775][ T1328] veth1_macvtap: left promiscuous mode [ 162.587352][ T1328] veth0_macvtap: left promiscuous mode [ 162.593357][ T1328] veth1_vlan: left promiscuous mode [ 162.601337][ T1328] veth0_vlan: left promiscuous mode [ 163.100927][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 163.140141][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 163.878708][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 163.917674][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 164.299561][ T7642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.318258][ T7642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.334417][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.341572][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.353008][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.360187][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.392588][ T7642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.476073][ T7771] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 164.689167][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.759895][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.806373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.813512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.828696][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.835874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.914789][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.016329][ T7653] veth0_vlan: entered promiscuous mode [ 165.028789][ T7653] veth1_vlan: entered promiscuous mode [ 165.092259][ T7653] veth0_macvtap: entered promiscuous mode [ 165.114143][ T7653] veth1_macvtap: entered promiscuous mode [ 165.131244][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.143170][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.153343][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.164122][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.174182][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.186504][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.197701][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.235255][ T1328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.260941][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.271842][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.282723][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.294305][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.305569][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.330165][ T1328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.350713][ T7653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.359746][ T7653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.370600][ T7653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.379655][ T7653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.419942][ T1328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.451612][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.490928][ T1328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.516995][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.524833][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.609209][ T7642] veth0_vlan: entered promiscuous mode [ 165.652475][ T7642] veth1_vlan: entered promiscuous mode [ 165.661225][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.680990][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.732388][ T1328] bridge_slave_1: left allmulticast mode [ 165.756137][ T1328] bridge_slave_1: left promiscuous mode [ 165.761910][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.806238][ T1328] bridge_slave_0: left allmulticast mode [ 165.811938][ T1328] bridge_slave_0: left promiscuous mode [ 165.823810][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.088238][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.113379][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.125627][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.144132][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.157211][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.167167][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.337877][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.349907][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.360364][ T1328] bond0 (unregistering): Released all slaves [ 166.379872][ T7642] veth0_macvtap: entered promiscuous mode [ 166.418318][ T7642] veth1_macvtap: entered promiscuous mode [ 166.697298][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.725368][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.740865][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.752871][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.764065][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.783291][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.815673][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.840701][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.879831][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.997649][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.008223][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.019250][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.031776][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.041958][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.052747][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.064502][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.075075][ T7642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.094577][ T7642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.107009][ T7642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.123266][ T7642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.297536][ T1328] hsr_slave_0: left promiscuous mode [ 167.303526][ T1328] hsr_slave_1: left promiscuous mode [ 167.309802][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.317359][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.325085][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.341668][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.367263][ T1328] veth1_macvtap: left promiscuous mode [ 167.372843][ T1328] veth0_macvtap: left promiscuous mode [ 167.378578][ T1328] veth1_vlan: left promiscuous mode [ 167.383896][ T1328] veth0_vlan: left promiscuous mode [ 167.933070][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 167.977756][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 168.073045][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.087040][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.101570][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.112586][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.130122][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.139903][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.230453][ T5145] Bluetooth: hci1: command tx timeout [ 168.551981][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.586411][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.689220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.689662][ T7799] chnl_net:caif_netlink_parms(): no params data found [ 168.735804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.098011][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.115421][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.122632][ T7799] bridge_slave_0: entered allmulticast mode [ 169.137893][ T7799] bridge_slave_0: entered promiscuous mode [ 169.160943][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.180492][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.194574][ T7799] bridge_slave_1: entered allmulticast mode [ 169.207665][ T7799] bridge_slave_1: entered promiscuous mode [ 169.279348][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.291122][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.359408][ T7799] team0: Port device team_slave_0 added [ 169.372128][ T7799] team0: Port device team_slave_1 added [ 169.519883][ T7871] tipc: Enabled bearer , priority 0 [ 169.557250][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.576625][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.620393][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.703489][ T1328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.723078][ T7880] tipc: Disabling bearer [ 169.734088][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.745536][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.772302][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.833019][ T1328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.861348][ T7799] hsr_slave_0: entered promiscuous mode [ 169.872630][ T7799] hsr_slave_1: entered promiscuous mode [ 169.899845][ T1328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.916664][ T7833] chnl_net:caif_netlink_parms(): no params data found [ 169.999332][ T1328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.078545][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.086220][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.093471][ T7833] bridge_slave_0: entered allmulticast mode [ 170.100370][ T7833] bridge_slave_0: entered promiscuous mode [ 170.109039][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.116317][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.123558][ T7833] bridge_slave_1: entered allmulticast mode [ 170.130998][ T7833] bridge_slave_1: entered promiscuous mode [ 170.179393][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.192011][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.215808][ T5145] Bluetooth: hci4: command tx timeout [ 170.258558][ T7833] team0: Port device team_slave_0 added [ 170.292492][ T7833] team0: Port device team_slave_1 added [ 170.305881][ T5145] Bluetooth: hci1: command tx timeout [ 170.344357][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.351521][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.383460][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.519496][ T1328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.541991][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.555810][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.583052][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.636257][ T7892] geneve2: entered promiscuous mode [ 170.641719][ T7892] geneve2: entered allmulticast mode [ 170.664096][ T7894] bridge0: entered promiscuous mode [ 170.672313][ T7894] macsec1: entered promiscuous mode [ 170.689635][ T7894] macsec1: entered allmulticast mode [ 170.695056][ T7894] bridge0: entered allmulticast mode [ 170.706672][ T7894] bridge0: port 3(macsec1) entered blocking state [ 170.713298][ T7894] bridge0: port 3(macsec1) entered disabled state [ 170.722489][ T7894] bridge0: left allmulticast mode [ 170.727979][ T7894] bridge0: left promiscuous mode [ 170.774548][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.787674][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.803898][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.812063][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.821747][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.830255][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.830451][ T1328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.904952][ T7833] hsr_slave_0: entered promiscuous mode [ 170.911603][ T7833] hsr_slave_1: entered promiscuous mode [ 170.917779][ T7833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.936392][ T7833] Cannot create hsr debugfs directory [ 170.989478][ T1328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.186917][ T1328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.396684][ T7799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.397988][ T7913] netlink: 152 bytes leftover after parsing attributes in process `syz.4.467'. [ 171.418087][ T7799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.440050][ T7799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.485062][ T7799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.577100][ T1328] bridge_slave_1: left allmulticast mode [ 171.582771][ T1328] bridge_slave_1: left promiscuous mode [ 171.590563][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.601481][ T1328] bridge_slave_0: left allmulticast mode [ 171.607680][ T1328] bridge_slave_0: left promiscuous mode [ 171.613386][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.624277][ T1328] bridge_slave_1: left allmulticast mode [ 171.630592][ T1328] bridge_slave_1: left promiscuous mode [ 171.640714][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.650367][ T1328] bridge_slave_0: left allmulticast mode [ 171.657337][ T1328] bridge_slave_0: left promiscuous mode [ 171.663002][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.206686][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.221060][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.232595][ T1328] bond0 (unregistering): Released all slaves [ 172.300504][ T5145] Bluetooth: hci4: command tx timeout [ 172.380044][ T5145] Bluetooth: hci1: command tx timeout [ 172.418164][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.433792][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.444245][ T1328] bond0 (unregistering): Released all slaves [ 172.470699][ T7919] tipc: Enabled bearer , priority 10 [ 172.787525][ T7939] netlink: 124 bytes leftover after parsing attributes in process `syz.0.471'. [ 172.813651][ T7898] chnl_net:caif_netlink_parms(): no params data found [ 172.856252][ T5145] Bluetooth: hci3: command tx timeout [ 173.103158][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.208844][ T7833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.224678][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.234022][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.241406][ T7898] bridge_slave_0: entered allmulticast mode [ 173.250507][ T7898] bridge_slave_0: entered promiscuous mode [ 173.262394][ T7833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.281592][ T7833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.311190][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.318662][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.326397][ T7898] bridge_slave_1: entered allmulticast mode [ 173.333273][ T7898] bridge_slave_1: entered promiscuous mode [ 173.341992][ T7833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.439532][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.510048][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.603463][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.733864][ T1328] hsr_slave_0: left promiscuous mode [ 173.750118][ T1328] hsr_slave_1: left promiscuous mode [ 173.765075][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.772642][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.781828][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.789497][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.802061][ T1328] hsr_slave_0: left promiscuous mode [ 173.808245][ T1328] hsr_slave_1: left promiscuous mode [ 173.814902][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.823053][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.831417][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.839926][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.869690][ T1328] veth1_macvtap: left promiscuous mode [ 173.875401][ T1328] veth0_macvtap: left promiscuous mode [ 173.881054][ T1328] veth1_vlan: left promiscuous mode [ 173.886656][ T1328] veth0_vlan: left promiscuous mode [ 173.893503][ T1328] veth1_macvtap: left promiscuous mode [ 173.899398][ T1328] veth0_macvtap: left promiscuous mode [ 173.904947][ T1328] veth1_vlan: left promiscuous mode [ 173.910294][ T1328] veth0_vlan: left promiscuous mode [ 174.375313][ T5145] Bluetooth: hci4: command tx timeout [ 174.455493][ T5145] Bluetooth: hci1: command tx timeout [ 174.478931][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 174.523841][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 174.940231][ T5145] Bluetooth: hci3: command tx timeout [ 175.230822][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 175.268659][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 175.657535][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.664659][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.687868][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.695024][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.759772][ T7799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.784947][ T7799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.801875][ T7898] team0: Port device team_slave_0 added [ 175.817021][ T7898] team0: Port device team_slave_1 added [ 175.914012][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.927472][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.964205][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.991811][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.005248][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.049493][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.153166][ T7898] hsr_slave_0: entered promiscuous mode [ 176.186343][ T7898] hsr_slave_1: entered promiscuous mode [ 176.197021][ T7898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.204619][ T7898] Cannot create hsr debugfs directory [ 176.429115][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.446091][ T7833] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.465232][ T5145] Bluetooth: hci4: command tx timeout [ 176.481825][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.507886][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.515036][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.524461][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.531657][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.684647][ T7799] veth0_vlan: entered promiscuous mode [ 176.705047][ T7799] veth1_vlan: entered promiscuous mode [ 176.767551][ T7833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.986649][ T7799] veth0_macvtap: entered promiscuous mode [ 177.015933][ T5145] Bluetooth: hci3: command tx timeout [ 177.054323][ T7799] veth1_macvtap: entered promiscuous mode [ 177.114491][ T7799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.126121][ T7799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.138277][ T7799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.151271][ T7799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.163458][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.180722][ T7799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.196850][ T7799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.208541][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.312277][ T7898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.339201][ T7799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.358835][ T7799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.369803][ T7799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.378683][ T7799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.392565][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.401488][ T7898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.419772][ T7898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.442624][ T7898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.547929][ T7833] veth0_vlan: entered promiscuous mode [ 177.628332][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.629482][ T7833] veth1_vlan: entered promiscuous mode [ 177.645249][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.741194][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.769960][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.782605][ T7833] veth0_macvtap: entered promiscuous mode [ 177.831420][ T7833] veth1_macvtap: entered promiscuous mode [ 177.854439][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.057858][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.080033][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.087224][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.124856][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.165245][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.175386][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.186250][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.196276][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.215351][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.226504][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.244929][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.252163][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.451278][ T1328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.469779][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.480625][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.491043][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.504605][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.522946][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.601108][ T1328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.636236][ T7833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.647192][ T7833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.658000][ T7833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.667695][ T7833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.725949][ T1328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.826864][ T1328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.934388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.943374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.010517][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.034603][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.055503][ T1328] bridge_slave_1: left allmulticast mode [ 179.061256][ T1328] bridge_slave_1: left promiscuous mode [ 179.067292][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.095607][ T5145] Bluetooth: hci3: command tx timeout [ 179.103788][ T1328] bridge_slave_0: left allmulticast mode [ 179.110461][ T1328] bridge_slave_0: left promiscuous mode [ 179.116881][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.653741][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.675243][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.682694][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.693214][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.702662][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.704081][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.719642][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.722878][ T1328] bond0 (unregistering): Released all slaves [ 179.733120][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.838942][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.156342][ T7898] veth0_vlan: entered promiscuous mode [ 180.179259][ T7898] veth1_vlan: entered promiscuous mode [ 180.276864][ T7898] veth0_macvtap: entered promiscuous mode [ 180.306989][ T7898] veth1_macvtap: entered promiscuous mode [ 180.324402][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.351751][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.361888][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.372499][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.382704][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.393693][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.403853][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.414633][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.431388][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.444439][ T8019] chnl_net:caif_netlink_parms(): no params data found [ 180.459879][ T1328] hsr_slave_0: left promiscuous mode [ 180.466094][ T1328] hsr_slave_1: left promiscuous mode [ 180.471938][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.482497][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.491027][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.498720][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.514794][ T1328] veth1_macvtap: left promiscuous mode [ 180.520531][ T1328] veth0_macvtap: left promiscuous mode [ 180.526190][ T1328] veth1_vlan: left promiscuous mode [ 180.531461][ T1328] veth0_vlan: left promiscuous mode [ 181.110591][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.142039][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.151180][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.178750][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.178815][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 181.201049][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.215907][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.251791][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 181.701666][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.713400][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.723559][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.732926][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.743023][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.752254][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.761845][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.772150][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.781552][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.791003][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.806026][ T8030] infiniband syz1: set active [ 181.815595][ T5145] Bluetooth: hci1: command tx timeout [ 181.822239][ T8035] vcan0: Master is either lo or non-ether device [ 181.873750][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.897095][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.926303][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.937170][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.950261][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.035010][ T7898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.056821][ T7898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.075235][ T7898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.083984][ T7898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.344822][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.367750][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.375010][ T8019] bridge_slave_0: entered allmulticast mode [ 182.404695][ T8019] bridge_slave_0: entered promiscuous mode [ 182.420512][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.434332][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.443780][ T8019] bridge_slave_1: entered allmulticast mode [ 182.455804][ T8019] bridge_slave_1: entered promiscuous mode [ 182.489143][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.513891][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.639333][ T8019] team0: Port device team_slave_0 added [ 182.659886][ T8019] team0: Port device team_slave_1 added [ 182.721192][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.728516][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.762990][ T8019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.803715][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.812691][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.839420][ T8019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.877426][ T1328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.911743][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.929826][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.964283][ T1328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.087486][ T1328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.101921][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.120059][ T8019] hsr_slave_0: entered promiscuous mode [ 183.126096][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.134526][ T8019] hsr_slave_1: entered promiscuous mode [ 183.204557][ T1328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.313231][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 183.336198][ T5145] Bluetooth: hci4: command tx timeout [ 183.544723][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.552382][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.565720][ T8039] bridge_slave_0: entered allmulticast mode [ 183.583159][ T8039] bridge_slave_0: entered promiscuous mode [ 183.600078][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.614441][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.622187][ T8039] bridge_slave_1: entered allmulticast mode [ 183.629457][ T8039] bridge_slave_1: entered promiscuous mode [ 183.700946][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.895999][ T5145] Bluetooth: hci1: command tx timeout [ 183.949723][ T1328] bridge_slave_1: left allmulticast mode [ 183.955752][ T1328] bridge_slave_1: left promiscuous mode [ 183.961461][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.970083][ T1328] bridge_slave_0: left allmulticast mode [ 183.976975][ T1328] bridge_slave_0: left promiscuous mode [ 183.982767][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.343696][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.354258][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.364300][ T1328] bond0 (unregistering): Released all slaves [ 184.386793][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.502520][ T8039] team0: Port device team_slave_0 added [ 184.554722][ T8039] team0: Port device team_slave_1 added [ 184.587981][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.594972][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.625430][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.656947][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.663908][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.690784][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.980341][ T8039] hsr_slave_0: entered promiscuous mode [ 185.006069][ T8039] hsr_slave_1: entered promiscuous mode [ 185.033240][ T8039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.044934][ T8039] Cannot create hsr debugfs directory [ 185.218505][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.228855][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.245681][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.269417][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.278750][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.288030][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.353084][ T1328] hsr_slave_0: left promiscuous mode [ 185.361080][ T1328] hsr_slave_1: left promiscuous mode [ 185.371373][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.378986][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.388104][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.395682][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.415364][ T5145] Bluetooth: hci4: command tx timeout [ 185.427081][ T1328] veth1_macvtap: left promiscuous mode [ 185.432741][ T1328] veth0_macvtap: left promiscuous mode [ 185.438705][ T1328] veth1_vlan: left promiscuous mode [ 185.444150][ T1328] veth0_vlan: left promiscuous mode [ 185.880917][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 185.932711][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 185.979028][ T5145] Bluetooth: hci1: command tx timeout [ 186.360894][ T8019] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.420900][ T8019] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.446644][ T8019] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.500023][ T8019] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.694293][ T8104] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 186.728094][ T8101] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 186.882958][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.051980][ T8092] chnl_net:caif_netlink_parms(): no params data found [ 187.111576][ T1328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.136291][ T8116] batadv3: entered promiscuous mode [ 187.142537][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 187.221805][ T1328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.242436][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.259839][ T8118] tun0: tun_chr_ioctl cmd 1074025677 [ 187.266315][ T8118] tun0: linktype set to 773 [ 187.277364][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.284524][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.345761][ T5145] Bluetooth: hci3: command tx timeout [ 187.367537][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.374752][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.421751][ T1328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.493810][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.501034][ T5145] Bluetooth: hci4: command tx timeout [ 187.511841][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.521370][ T8092] bridge_slave_0: entered allmulticast mode [ 187.529111][ T8092] bridge_slave_0: entered promiscuous mode [ 187.572773][ T1328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.620731][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.630368][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.639595][ T8092] bridge_slave_1: entered allmulticast mode [ 187.647544][ T8092] bridge_slave_1: entered promiscuous mode [ 187.699206][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.716736][ T8039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.740961][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.751099][ T8039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.770246][ T8039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.848524][ T8039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.863721][ T8019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.890487][ T8092] team0: Port device team_slave_0 added [ 187.946044][ T8092] team0: Port device team_slave_1 added [ 188.031102][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.055401][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.055825][ T5145] Bluetooth: hci1: command tx timeout [ 188.098511][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.165769][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.172771][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.217797][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.245295][ T1328] bridge_slave_1: left allmulticast mode [ 188.251094][ T1328] bridge_slave_1: left promiscuous mode [ 188.261446][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.282183][ T1328] bridge_slave_0: left allmulticast mode [ 188.288135][ T1328] bridge_slave_0: left promiscuous mode [ 188.295989][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.653849][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.664617][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.674953][ T1328] bond0 (unregistering): Released all slaves [ 188.728101][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.988748][ T8092] hsr_slave_0: entered promiscuous mode [ 189.004967][ T8092] hsr_slave_1: entered promiscuous mode [ 189.039689][ T8092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.050083][ T8092] Cannot create hsr debugfs directory [ 189.081125][ T8181] x_tables: duplicate underflow at hook 1 [ 189.176145][ T8186] netlink: 'syz.4.523': attribute type 2 has an invalid length. [ 189.366945][ T8019] veth0_vlan: entered promiscuous mode [ 189.399150][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.421641][ T5846] Bluetooth: hci3: command tx timeout [ 189.459685][ T1328] hsr_slave_0: left promiscuous mode [ 189.472779][ T1328] hsr_slave_1: left promiscuous mode [ 189.479519][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.487483][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.495783][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.503421][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.522176][ T1328] veth1_macvtap: left promiscuous mode [ 189.528143][ T1328] veth0_macvtap: left promiscuous mode [ 189.533767][ T1328] veth1_vlan: left promiscuous mode [ 189.539165][ T1328] veth0_vlan: left promiscuous mode [ 189.575398][ T5846] Bluetooth: hci4: command tx timeout [ 189.995784][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 190.063379][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 190.173865][ T8196] __nla_validate_parse: 72 callbacks suppressed [ 190.173884][ T8196] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'. [ 190.561784][ T8019] veth1_vlan: entered promiscuous mode [ 190.649325][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.720531][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.727697][ T2133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.771845][ T8201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.529'. [ 190.772630][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.787899][ T2133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.811951][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 190.825185][ T8201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.529'. [ 190.888222][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 190.929351][ T8039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.950911][ T8039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.066133][ T8019] veth0_macvtap: entered promiscuous mode [ 191.122908][ T8204] syzkaller0: entered promiscuous mode [ 191.129173][ T8204] syzkaller0: entered allmulticast mode [ 191.282146][ T8216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.532'. [ 191.503607][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 191.510166][ T5830] Bluetooth: hci3: command tx timeout [ 192.785672][ T8019] veth1_macvtap: entered promiscuous mode [ 192.923648][ T8092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.939623][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.965553][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.980942][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.991762][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.014566][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.047618][ T8092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.153623][ T8092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.240441][ T8092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.311295][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.331007][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.355562][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.366388][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.384016][ T8019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.394815][ T8019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.415001][ T8019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.423873][ T8019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.575606][ T5145] Bluetooth: hci3: command tx timeout [ 193.593234][ T8039] veth0_vlan: entered promiscuous mode [ 193.612920][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.645286][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.704124][ T8039] veth1_vlan: entered promiscuous mode [ 193.743251][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.768096][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.819626][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.834945][ T8092] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.866473][ T8092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.876951][ T8092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.900740][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.907943][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.962501][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.969671][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.026821][ T8039] veth0_macvtap: entered promiscuous mode [ 194.044162][ T8262] ip6gretap0: entered promiscuous mode [ 194.051743][ T8262] batadv_slave_0: entered promiscuous mode [ 194.062419][ T8262] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 194.081779][ T8262] Cannot create hsr debugfs directory [ 194.152500][ T8039] veth1_macvtap: entered promiscuous mode [ 194.242336][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.262379][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.277136][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.288430][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.300427][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.311161][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.322441][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.342341][ T8274] syzkaller1: entered promiscuous mode [ 194.356104][ T8274] syzkaller1: entered allmulticast mode [ 194.385155][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.405536][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.442102][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.456210][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.478164][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.506501][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.540758][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.555416][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.633944][ T8021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.668402][ T8039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.678895][ T8039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.688397][ T8039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.697967][ T8039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.750133][ T8021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.802335][ T8092] veth0_vlan: entered promiscuous mode [ 194.833111][ T8092] veth1_vlan: entered promiscuous mode [ 194.839059][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.849396][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.869963][ T8021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.916007][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.923953][ T8092] veth0_macvtap: entered promiscuous mode [ 194.924300][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.957116][ T8021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.971683][ T8092] veth1_macvtap: entered promiscuous mode [ 194.997525][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.008522][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.020123][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.030828][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.040799][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.051574][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.061472][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.072088][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.083912][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.099698][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.110964][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.120851][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.132195][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.142234][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.152790][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.163863][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.196853][ T8092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.205993][ T8092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.214730][ T8092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.224271][ T8092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.299857][ T8021] bridge_slave_1: left allmulticast mode [ 195.305878][ T8021] bridge_slave_1: left promiscuous mode [ 195.311600][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.320077][ T8021] bridge_slave_0: left allmulticast mode [ 195.326360][ T8021] bridge_slave_0: left promiscuous mode [ 195.332263][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.833330][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.850852][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.864623][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.879774][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.887467][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.894745][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.902368][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.917012][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.926962][ T8021] bond0 (unregistering): Released all slaves [ 196.077647][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.103145][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.165020][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.184700][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.351875][ T8280] chnl_net:caif_netlink_parms(): no params data found [ 196.489119][ T8021] hsr_slave_0: left promiscuous mode [ 196.545694][ T8021] hsr_slave_1: left promiscuous mode [ 196.566180][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.573900][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.595953][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.615034][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.685240][ T8021] veth1_macvtap: left promiscuous mode [ 196.695670][ T8021] veth0_macvtap: left promiscuous mode [ 196.701305][ T8021] veth1_vlan: left promiscuous mode [ 196.727541][ T8021] veth0_vlan: left promiscuous mode [ 196.801329][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.811272][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.819734][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.829486][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.837294][ T5145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 196.844642][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.630393][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 197.708423][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 197.975239][ T5846] Bluetooth: hci1: command tx timeout [ 198.239854][ T8292] netlink: 288 bytes leftover after parsing attributes in process `syz.0.549'. [ 198.251225][ T8312] netlink: 'syz.4.554': attribute type 21 has an invalid length. [ 198.265462][ T8312] netlink: 128 bytes leftover after parsing attributes in process `syz.4.554'. [ 198.280795][ T8312] netlink: 3 bytes leftover after parsing attributes in process `syz.4.554'. [ 198.497550][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.504793][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.520856][ T8280] bridge_slave_0: entered allmulticast mode [ 198.528142][ T8280] bridge_slave_0: entered promiscuous mode [ 198.537183][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.544315][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.551629][ T8280] bridge_slave_1: entered allmulticast mode [ 198.558929][ T8280] bridge_slave_1: entered promiscuous mode [ 198.604708][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.614576][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.635746][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.676805][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.697066][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.704714][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.712406][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.730716][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.816102][ T8328] syz.4.557 uses old SIOCAX25GETINFO [ 198.837398][ T8280] team0: Port device team_slave_0 added [ 198.860868][ T8280] team0: Port device team_slave_1 added [ 198.936446][ T5846] Bluetooth: hci3: command tx timeout [ 199.035961][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.069191][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.095575][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.116820][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.144240][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.190998][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.564237][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 199.570577][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 199.701193][ T8021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.774030][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 199.808618][ T8280] hsr_slave_0: entered promiscuous mode [ 199.822416][ T8280] hsr_slave_1: entered promiscuous mode [ 199.963235][ T8021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.055535][ T5846] Bluetooth: hci1: command tx timeout [ 200.142712][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.563'. [ 200.202492][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 200.247667][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 200.278668][ T8021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.306001][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'. [ 200.420027][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'. [ 200.482580][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 200.525386][ T8382] netlink: 'syz.0.565': attribute type 25 has an invalid length. [ 200.624672][ T8021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.735254][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.742418][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.776110][ T5846] Bluetooth: hci4: command tx timeout [ 200.791604][ T8302] bridge_slave_0: entered allmulticast mode [ 200.814623][ T8302] bridge_slave_0: entered promiscuous mode [ 200.822693][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.829925][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.837336][ T8302] bridge_slave_1: entered allmulticast mode [ 200.846090][ T8302] bridge_slave_1: entered promiscuous mode [ 200.997885][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.012367][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.020831][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.028572][ T5846] Bluetooth: hci3: command tx timeout [ 201.038608][ T8321] bridge_slave_0: entered allmulticast mode [ 201.047008][ T8321] bridge_slave_0: entered promiscuous mode [ 201.055081][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.062476][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.069908][ T8321] bridge_slave_1: entered allmulticast mode [ 201.077294][ T8321] bridge_slave_1: entered promiscuous mode [ 201.091671][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.137972][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.188966][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.254717][ T8302] team0: Port device team_slave_0 added [ 201.282642][ T8321] team0: Port device team_slave_0 added [ 201.293748][ T8302] team0: Port device team_slave_1 added [ 201.338171][ T8321] team0: Port device team_slave_1 added [ 201.395922][ T8021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.443078][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.450446][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.481745][ T8302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.494905][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.502446][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.529386][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.560734][ T8021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.585300][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.592344][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.619747][ T8302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.632986][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.640427][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.669825][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.707164][ T8021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.823751][ T8021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.880068][ T8321] hsr_slave_0: entered promiscuous mode [ 201.891831][ T8321] hsr_slave_1: entered promiscuous mode [ 201.901696][ T8321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.914681][ T8321] Cannot create hsr debugfs directory [ 201.942327][ T8302] hsr_slave_0: entered promiscuous mode [ 201.956488][ T8302] hsr_slave_1: entered promiscuous mode [ 201.966015][ T8302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.973604][ T8302] Cannot create hsr debugfs directory [ 202.136854][ T5846] Bluetooth: hci1: command tx timeout [ 202.342780][ T8419] netlink: 'syz.0.575': attribute type 12 has an invalid length. [ 202.364003][ T8021] bridge_slave_1: left allmulticast mode [ 202.370782][ T8419] netlink: 'syz.0.575': attribute type 11 has an invalid length. [ 202.372529][ T8021] bridge_slave_1: left promiscuous mode [ 202.387400][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.400156][ T8021] bridge_slave_0: left allmulticast mode [ 202.406040][ T8021] bridge_slave_0: left promiscuous mode [ 202.413223][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.428214][ T8021] bridge_slave_1: left allmulticast mode [ 202.433907][ T8021] bridge_slave_1: left promiscuous mode [ 202.440199][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.450006][ T8021] bridge_slave_0: left allmulticast mode [ 202.456212][ T8021] bridge_slave_0: left promiscuous mode [ 202.461866][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.855638][ T5846] Bluetooth: hci4: command tx timeout [ 203.013882][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.025044][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.037096][ T8021] bond0 (unregistering): Released all slaves [ 203.105358][ T5846] Bluetooth: hci3: command tx timeout [ 203.160022][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.170474][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.181225][ T8021] bond0 (unregistering): Released all slaves [ 203.204989][ T8280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.362531][ T8280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.438686][ T8280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.476695][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.524708][ T8280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.996389][ T8441] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 204.004185][ T8441] __nla_validate_parse: 5 callbacks suppressed [ 204.004202][ T8441] netlink: 224 bytes leftover after parsing attributes in process `syz.0.580'. [ 204.081370][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.187726][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.215224][ T5846] Bluetooth: hci1: command tx timeout [ 204.248732][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.255948][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.312685][ T8021] hsr_slave_0: left promiscuous mode [ 204.333580][ T8448] FAULT_INJECTION: forcing a failure. [ 204.333580][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 204.347372][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.4.582 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 204.358285][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 204.368386][ T8448] Call Trace: [ 204.371687][ T8448] [ 204.372952][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 204.374614][ T8448] dump_stack_lvl+0x241/0x360 [ 204.388135][ T8448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.393334][ T8448] ? __pfx__printk+0x10/0x10 [ 204.397922][ T8448] ? __kmalloc_noprof+0xb5/0x4c0 [ 204.402847][ T8448] ? __pfx___might_resched+0x10/0x10 [ 204.408150][ T8448] should_fail_ex+0x3b0/0x4e0 [ 204.412852][ T8448] should_failslab+0xac/0x100 [ 204.417542][ T8448] __kmalloc_noprof+0xdd/0x4c0 [ 204.422314][ T8448] ? bpf_ctx_init+0xb1/0x1b0 [ 204.426908][ T8448] bpf_ctx_init+0xb1/0x1b0 [ 204.431321][ T8448] bpf_prog_test_run_flow_dissector+0x2e1/0x7f0 [ 204.437565][ T8448] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 204.444330][ T8448] ? __pfx___might_resched+0x10/0x10 [ 204.449614][ T8448] ? __fget_files+0x395/0x410 [ 204.454290][ T8448] ? __fget_files+0x2a/0x410 [ 204.458888][ T8448] ? fput+0x21b/0x290 [ 204.462867][ T8448] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 204.469631][ T8448] bpf_prog_test_run+0x2e4/0x360 [ 204.474568][ T8448] __sys_bpf+0x48d/0x810 [ 204.478826][ T8448] ? __pfx___sys_bpf+0x10/0x10 [ 204.483591][ T8448] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.489568][ T8448] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.495902][ T8448] ? do_syscall_64+0x100/0x230 [ 204.500667][ T8448] __x64_sys_bpf+0x7c/0x90 [ 204.505113][ T8448] do_syscall_64+0xf3/0x230 [ 204.509625][ T8448] ? clear_bhb_loop+0x35/0x90 [ 204.514303][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.520207][ T8448] RIP: 0033:0x7f3aefd85d19 [ 204.524616][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.544219][ T8448] RSP: 002b:00007f3af0ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.552657][ T8448] RAX: ffffffffffffffda RBX: 00007f3aeff75fa0 RCX: 00007f3aefd85d19 [ 204.560625][ T8448] RDX: 0000000000000050 RSI: 0000000020000440 RDI: 000000000000000a [ 204.568597][ T8448] RBP: 00007f3af0ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.576564][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.584526][ T8448] R13: 0000000000000000 R14: 00007f3aeff75fa0 R15: 00007ffe4cf70508 [ 204.592506][ T8448] [ 204.614660][ T8021] hsr_slave_1: left promiscuous mode [ 204.622381][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.645040][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.653346][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.661215][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.683516][ T8021] hsr_slave_0: left promiscuous mode [ 204.692948][ T8021] hsr_slave_1: left promiscuous mode [ 204.706374][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.713841][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.740218][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.748052][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.786045][ T8021] veth1_macvtap: left promiscuous mode [ 204.791637][ T8021] veth0_macvtap: left promiscuous mode [ 204.797480][ T8021] veth1_vlan: left promiscuous mode [ 204.802801][ T8021] veth0_vlan: left promiscuous mode [ 204.809640][ T8021] veth1_macvtap: left promiscuous mode [ 204.815279][ T8021] veth0_macvtap: left promiscuous mode [ 204.821146][ T8021] veth1_vlan: left promiscuous mode [ 204.828531][ T8021] veth0_vlan: left promiscuous mode [ 204.935281][ T5846] Bluetooth: hci4: command tx timeout [ 205.185470][ T5846] Bluetooth: hci3: command tx timeout [ 205.370563][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 205.414277][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 206.151325][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 206.194042][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 206.665754][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.672890][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.716269][ T8321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.759087][ T8321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.787986][ T8321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.849369][ T8302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.927223][ T8321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.952667][ T8302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.980522][ T8302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.015543][ T5846] Bluetooth: hci4: command tx timeout [ 207.034317][ T8302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.073542][ T8280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.106201][ T8280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.302340][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 207.344133][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.360482][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.386312][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 207.431427][ T8302] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.459520][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.480313][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.487514][ T8475] netlink: 'syz.0.588': attribute type 11 has an invalid length. [ 207.487575][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.527837][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.534962][ T8024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.579448][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.586652][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.602122][ T8485] sctp: [Deprecated]: syz.0.590 (pid 8485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.602122][ T8485] Use struct sctp_sack_info instead [ 207.612860][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.654864][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 207.750568][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.757797][ T8024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.916390][ T8280] veth0_vlan: entered promiscuous mode [ 207.935576][ T8280] veth1_vlan: entered promiscuous mode [ 207.966429][ T8321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.019992][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 208.044435][ T8280] veth0_macvtap: entered promiscuous mode [ 208.081559][ T8280] veth1_macvtap: entered promiscuous mode [ 208.113382][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.133094][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.176196][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.186277][ T8503] FAULT_INJECTION: forcing a failure. [ 208.186277][ T8503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.205229][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.208997][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.4.593 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 208.225666][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 208.226947][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.235806][ T8503] Call Trace: [ 208.235817][ T8503] [ 208.235827][ T8503] dump_stack_lvl+0x241/0x360 [ 208.235859][ T8503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.235882][ T8503] ? __pfx__printk+0x10/0x10 [ 208.235911][ T8503] ? snprintf+0xda/0x120 [ 208.235937][ T8503] should_fail_ex+0x3b0/0x4e0 [ 208.235969][ T8503] _copy_to_user+0x31/0xb0 [ 208.235995][ T8503] simple_read_from_buffer+0xca/0x150 [ 208.236022][ T8503] proc_fail_nth_read+0x1e9/0x250 [ 208.236044][ T8503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.236069][ T8503] ? rw_verify_area+0x55e/0x6f0 [ 208.236085][ T8503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.236105][ T8503] vfs_read+0x1fc/0xb70 [ 208.236129][ T8503] ? __pfx___mutex_lock+0x10/0x10 [ 208.236148][ T8503] ? __pfx_vfs_read+0x10/0x10 [ 208.236170][ T8503] ? __fget_files+0x2a/0x410 [ 208.236195][ T8503] ? __fget_files+0x395/0x410 [ 208.236216][ T8503] ? __fget_files+0x2a/0x410 [ 208.236249][ T8503] ksys_read+0x18f/0x2b0 [ 208.236270][ T8503] ? __pfx_ksys_read+0x10/0x10 [ 208.236289][ T8503] ? do_syscall_64+0x100/0x230 [ 208.260707][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.264140][ T8503] ? do_syscall_64+0xb6/0x230 [ 208.279619][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.282819][ T8503] do_syscall_64+0xf3/0x230 [ 208.374629][ T8503] ? clear_bhb_loop+0x35/0x90 [ 208.379340][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.385346][ T8503] RIP: 0033:0x7f3aefd8472c [ 208.389776][ T8503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.409490][ T8503] RSP: 002b:00007f3af0ad6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.418003][ T8503] RAX: ffffffffffffffda RBX: 00007f3aeff75fa0 RCX: 00007f3aefd8472c [ 208.425974][ T8503] RDX: 000000000000000f RSI: 00007f3af0ad60a0 RDI: 0000000000000004 [ 208.434114][ T8503] RBP: 00007f3af0ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 208.442097][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.450170][ T8503] R13: 0000000000000000 R14: 00007f3aeff75fa0 R15: 00007ffe4cf70508 [ 208.458165][ T8503] [ 208.510380][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.538867][ T8280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.550933][ T8280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.559755][ T8280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.568685][ T8280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.596886][ T8511] netlink: 'syz.4.595': attribute type 11 has an invalid length. [ 208.609070][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.595'. [ 208.670742][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.769540][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.786727][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.803761][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.823795][ T8302] veth0_vlan: entered promiscuous mode [ 208.837217][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.842784][ T8302] veth1_vlan: entered promiscuous mode [ 208.852136][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.938511][ T8302] veth0_macvtap: entered promiscuous mode [ 208.994587][ T8302] veth1_macvtap: entered promiscuous mode [ 209.007096][ T8321] veth0_vlan: entered promiscuous mode [ 209.039298][ T8321] veth1_vlan: entered promiscuous mode [ 209.060248][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.073849][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.084633][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.095227][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.106116][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.116747][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.144538][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.176922][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.199250][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.213039][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.226854][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.239741][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.276090][ T8321] veth0_macvtap: entered promiscuous mode [ 209.286589][ T8321] veth1_macvtap: entered promiscuous mode [ 209.305822][ T8302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.315982][ T8302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.325329][ T8302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.334333][ T8302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.382068][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.400571][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.411946][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.426695][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.436927][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.447897][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.475452][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.495148][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.506973][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.604252][ T2133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.636357][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.648686][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.660721][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.671565][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.681537][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.692936][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.703885][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.788723][ T2133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.813199][ T8321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.823263][ T8321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.832270][ T8321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.841079][ T8321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.872331][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.886787][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.899215][ T2133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.992265][ T8024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.000409][ T8024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.008764][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.017880][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.040384][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.070996][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.091952][ T2133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.556324][ T2133] bridge_slave_1: left allmulticast mode [ 210.562010][ T2133] bridge_slave_1: left promiscuous mode [ 210.569584][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.578519][ T2133] bridge_slave_0: left allmulticast mode [ 210.584166][ T2133] bridge_slave_0: left promiscuous mode [ 210.590078][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.837112][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 211.228231][ T2133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.244179][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.257114][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.284281][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.292379][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.300706][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.314565][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.333419][ T2133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.372829][ T2133] bond0 (unregistering): Released all slaves [ 211.890976][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.910890][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.943577][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.006579][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.014221][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.021733][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.043023][ T2133] hsr_slave_0: left promiscuous mode [ 212.049559][ T2133] hsr_slave_1: left promiscuous mode [ 212.060770][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.070238][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.078086][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.085607][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.102636][ T2133] veth1_macvtap: left promiscuous mode [ 212.108296][ T2133] veth0_macvtap: left promiscuous mode [ 212.113818][ T2133] veth1_vlan: left promiscuous mode [ 212.119304][ T2133] veth0_vlan: left promiscuous mode [ 212.536637][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.607'. [ 212.555252][ T8567] netlink: 'syz.0.607': attribute type 1 has an invalid length. [ 212.574227][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 212.709039][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.719227][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.727676][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.750603][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.760286][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.775967][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.833673][ T2133] team0 (unregistering): Port device team_slave_1 removed [ 212.884235][ T2133] team0 (unregistering): Port device team_slave_0 removed [ 213.415479][ T5846] Bluetooth: hci1: command tx timeout [ 213.486764][ T8547] chnl_net:caif_netlink_parms(): no params data found [ 213.738240][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.795866][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.803156][ T8547] bridge_slave_0: entered allmulticast mode [ 213.838334][ T8547] bridge_slave_0: entered promiscuous mode [ 213.846576][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.853717][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.861174][ T8547] bridge_slave_1: entered allmulticast mode [ 213.869108][ T8547] bridge_slave_1: entered promiscuous mode [ 213.961093][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.016208][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.055553][ T5846] Bluetooth: hci3: command tx timeout [ 214.146059][ T8547] team0: Port device team_slave_0 added [ 214.211547][ T8547] team0: Port device team_slave_1 added [ 214.264408][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.281515][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.357361][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.502375][ T2133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.533149][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.541938][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.569959][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.572639][ T8602] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 214.618763][ T8569] chnl_net:caif_netlink_parms(): no params data found [ 214.626088][ T8606] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 214.650190][ T2133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.672000][ T8547] hsr_slave_0: entered promiscuous mode [ 214.679483][ T8547] hsr_slave_1: entered promiscuous mode [ 214.773603][ T2133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.856386][ T5846] Bluetooth: hci4: command tx timeout [ 214.913509][ T2133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.950740][ T8559] chnl_net:caif_netlink_parms(): no params data found [ 215.001558][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.020318][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.038355][ T8569] bridge_slave_0: entered allmulticast mode [ 215.045699][ T8569] bridge_slave_0: entered promiscuous mode [ 215.207631][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.226891][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.248827][ T8569] bridge_slave_1: entered allmulticast mode [ 215.271512][ T8569] bridge_slave_1: entered promiscuous mode [ 215.383340][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.401335][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.535287][ T5846] Bluetooth: hci1: command tx timeout [ 215.547126][ T8642] dccp_invalid_packet: pskb_may_pull failed [ 215.554735][ T8642] netlink: 22 bytes leftover after parsing attributes in process `syz.4.622'. [ 215.643880][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.666312][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.673670][ T8559] bridge_slave_0: entered allmulticast mode [ 215.704126][ T8559] bridge_slave_0: entered promiscuous mode [ 215.731015][ T8569] team0: Port device team_slave_0 added [ 215.781238][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.797145][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.804342][ T8559] bridge_slave_1: entered allmulticast mode [ 215.822031][ T8559] bridge_slave_1: entered promiscuous mode [ 215.896940][ T8569] team0: Port device team_slave_1 added [ 215.964901][ T2133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.059488][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.071773][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.104540][ T2133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.132151][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.144401][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.169982][ T5846] Bluetooth: hci3: command tx timeout [ 216.170676][ T8569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.188613][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.195782][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.222059][ T8569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.320094][ T2133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.390782][ T8559] team0: Port device team_slave_0 added [ 216.420152][ T8559] team0: Port device team_slave_1 added [ 216.577098][ T2133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.680222][ T8569] hsr_slave_0: entered promiscuous mode [ 216.701398][ T8569] hsr_slave_1: entered promiscuous mode [ 216.711957][ T8569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.713022][ T8678] netlink: 72 bytes leftover after parsing attributes in process `syz.4.631'. [ 216.727418][ T8569] Cannot create hsr debugfs directory [ 216.752356][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.784037][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.822540][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.858939][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.885287][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.935301][ T5846] Bluetooth: hci4: command tx timeout [ 216.940887][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.012468][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.633'. [ 217.134703][ T8559] hsr_slave_0: entered promiscuous mode [ 217.147036][ T8559] hsr_slave_1: entered promiscuous mode [ 217.159116][ T8559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.175300][ T8559] Cannot create hsr debugfs directory [ 217.241032][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 217.266102][ T2133] bridge_slave_1: left allmulticast mode [ 217.271994][ T2133] bridge_slave_1: left promiscuous mode [ 217.278042][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.287542][ T2133] bridge_slave_0: left allmulticast mode [ 217.293249][ T2133] bridge_slave_0: left promiscuous mode [ 217.299987][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.312930][ T2133] bridge_slave_1: left allmulticast mode [ 217.318897][ T2133] bridge_slave_1: left promiscuous mode [ 217.324710][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.334122][ T2133] bridge_slave_0: left allmulticast mode [ 217.341905][ T2133] bridge_slave_0: left promiscuous mode [ 217.348823][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.579532][ T5846] Bluetooth: hci1: command tx timeout [ 217.992674][ T2133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.004330][ T2133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.014408][ T2133] bond0 (unregistering): Released all slaves [ 218.151460][ T2133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.162559][ T2133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.172547][ T2133] bond0 (unregistering): Released all slaves [ 218.188374][ T8547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.203933][ T8547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.217734][ T5846] Bluetooth: hci3: command tx timeout [ 218.385072][ T8703] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 218.393434][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.404286][ T8547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.498293][ T8547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.684128][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.639'. [ 218.847724][ T8716] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.988942][ T8718] netlink: 'syz.4.641': attribute type 3 has an invalid length. [ 219.019295][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 219.045544][ T5846] Bluetooth: hci4: command tx timeout [ 219.052718][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.081742][ T8718] netlink: 'syz.4.641': attribute type 3 has an invalid length. [ 219.104653][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 219.173193][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.230386][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.237568][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.276876][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.284014][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.392165][ T8725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.642'. [ 219.419187][ T8547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.655294][ T5846] Bluetooth: hci1: command tx timeout [ 219.665344][ T2133] hsr_slave_0: left promiscuous mode [ 219.688649][ T2133] hsr_slave_1: left promiscuous mode [ 219.702276][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.724030][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.742281][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.759232][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.781548][ T2133] hsr_slave_0: left promiscuous mode [ 219.791545][ T2133] hsr_slave_1: left promiscuous mode [ 219.801726][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.820690][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.862280][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.872451][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.965996][ T2133] veth1_macvtap: left promiscuous mode [ 219.977763][ T2133] veth0_macvtap: left promiscuous mode [ 219.989789][ T2133] veth1_vlan: left promiscuous mode [ 220.004500][ T2133] veth0_vlan: left promiscuous mode [ 220.016139][ T2133] veth1_macvtap: left promiscuous mode [ 220.021965][ T2133] veth0_macvtap: left promiscuous mode [ 220.034382][ T2133] veth1_vlan: left promiscuous mode [ 220.046439][ T2133] veth0_vlan: left promiscuous mode [ 220.330690][ T5846] Bluetooth: hci3: command tx timeout [ 220.800485][ T2133] team0 (unregistering): Port device team_slave_1 removed [ 220.896834][ T2133] team0 (unregistering): Port device team_slave_0 removed [ 221.103185][ T5846] Bluetooth: hci4: command tx timeout [ 227.484657][ C0] sched: DL replenish lagged too much [ 244.510687][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.541894][ T5145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.576898][ T5145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.588769][ T5145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.597073][ T5145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.604660][ T5145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 244.612387][ T5145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.734243][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.743410][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.752730][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.762401][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.778773][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.706030][ T5833] Bluetooth: hci6: command tx timeout [ 247.975632][ T5833] Bluetooth: hci5: command tx timeout [ 248.921452][ T5833] Bluetooth: hci6: command tx timeout [ 250.065665][ T5833] Bluetooth: hci5: command tx timeout [ 251.001788][ T5833] Bluetooth: hci6: command tx timeout [ 252.145541][ T5833] Bluetooth: hci5: command tx timeout [ 253.015702][ T5846] Bluetooth: hci6: command tx timeout [ 254.215795][ T5846] Bluetooth: hci5: command tx timeout [ 256.013888][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.806162][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.817242][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.828450][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.837866][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.845747][ T5833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.861773][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.206334][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.219321][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.227960][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.238389][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.295503][ T5846] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 276.302850][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 277.311201][ T5846] Bluetooth: hci7: command tx timeout [ 278.376059][ T5846] Bluetooth: hci8: command tx timeout [ 279.345607][ T5846] Bluetooth: hci7: command tx timeout [ 280.276424][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 280.353998][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 280.366281][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 280.420950][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 280.428953][ T5833] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 280.436784][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 280.514520][ T5846] Bluetooth: hci8: command tx timeout [ 281.435954][ T5833] Bluetooth: hci7: command tx timeout [ 282.625429][ T5833] Bluetooth: hci9: command tx timeout [ 282.631743][ T5833] Bluetooth: hci8: command tx timeout [ 283.496182][ T5833] Bluetooth: hci7: command tx timeout [ 284.715763][ T5833] Bluetooth: hci8: command tx timeout [ 284.721227][ T5833] Bluetooth: hci9: command tx timeout [ 284.999561][ T2133] team0 (unregistering): Port device team_slave_1 removed [ 286.775732][ T5833] Bluetooth: hci9: command tx timeout [ 287.415327][ T2133] team0 (unregistering): Port device team_slave_0 removed [ 288.938850][ T5833] Bluetooth: hci9: command tx timeout [ 310.949436][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 310.961084][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 310.969967][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 310.979519][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 310.987646][ T5846] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 310.998718][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 311.293849][ T5833] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 311.304558][ T5833] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 311.464781][ T5833] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 311.474050][ T5833] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 311.527259][ T5833] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 311.576159][ T5833] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 313.095607][ T5833] Bluetooth: hci10: command tx timeout [ 314.032028][ T5833] Bluetooth: hci11: command tx timeout [ 314.881145][ T8729] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.889887][ T8729] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.898419][ T8729] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.907025][ T8729] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.161843][ T8569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.295634][ T5833] Bluetooth: hci10: command tx timeout [ 316.056520][ T5833] Bluetooth: hci11: command tx timeout [ 327.095561][ T5833] Bluetooth: hci10: command tx timeout [ 327.101104][ T5833] Bluetooth: hci11: command tx timeout [ 327.150868][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.556016][ T5846] Bluetooth: hci11: command tx timeout [ 329.561563][ T5846] Bluetooth: hci10: command tx timeout [ 334.960791][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 346.482379][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.494183][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.508357][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.524963][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.659530][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.667193][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.732578][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.783458][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.791218][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.800563][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.808768][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.816823][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.881758][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.934750][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.942800][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.950730][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.960024][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.114550][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.185655][ T5833] Bluetooth: hci1: command tx timeout [ 349.185774][ T5145] Bluetooth: hci2: command tx timeout [ 349.625945][ T5145] Bluetooth: hci0: command tx timeout [ 351.264606][ T5145] Bluetooth: hci2: command tx timeout [ 351.270437][ T5833] Bluetooth: hci1: command tx timeout [ 351.656038][ T5833] Bluetooth: hci0: command tx timeout [ 353.353601][ T5833] Bluetooth: hci1: command tx timeout [ 353.359395][ T5145] Bluetooth: hci2: command tx timeout [ 353.775300][ T5145] Bluetooth: hci0: command tx timeout [ 355.455514][ T5145] Bluetooth: hci2: command tx timeout [ 355.460987][ T5145] Bluetooth: hci1: command tx timeout [ 355.828883][ T5145] Bluetooth: hci0: command tx timeout [ 378.846039][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.355252][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.675561][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.205336][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 383.395425][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.696126][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.987458][ T8778] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 388.868363][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.315271][ T5145] Bluetooth: hci4: Opcode 0x0c25 failed: -110 [ 404.646631][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 408.235809][ T8779] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 415.375404][ T5846] Bluetooth: hci9: command 0x0406 tx timeout [ 415.381485][ T5846] Bluetooth: hci8: command 0x0406 tx timeout [ 415.566178][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.729934][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.739230][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.879535][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.887579][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 415.898359][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.135454][ T5846] Bluetooth: hci5: command tx timeout [ 521.055150][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 521.062207][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8780/1:b..l P8759/1:b..l [ 521.071743][ C0] rcu: (detected by 0, t=10503 jiffies, g=42441, q=128 ncpus=2) [ 521.079489][ C0] task:syz-executor state:R running task stack:22912 pid:8759 tgid:8759 ppid:1 flags:0x00004006 [ 521.092412][ C0] Call Trace: [ 521.095801][ C0] [ 521.098758][ C0] __schedule+0x1850/0x4c30 [ 521.103302][ C0] ? __lock_acquire+0x1397/0x2100 [ 521.108370][ C0] ? __pfx___schedule+0x10/0x10 [ 521.113252][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.119435][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 521.124740][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 521.129869][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 521.135624][ C0] irqentry_exit+0x5e/0x90 [ 521.140061][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.146060][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 521.151359][ C0] Code: 2b 00 74 08 4c 89 f7 e8 aa 24 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 521.170992][ C0] RSP: 0018:ffffc90003e9ed40 EFLAGS: 00000206 [ 521.177084][ C0] RAX: 0000000000000001 RBX: 1ffff920007d3db4 RCX: ffff88802e6d28d8 [ 521.185069][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aa960 RDI: ffffffff8c5f9780 [ 521.193063][ C0] RBP: ffffc90003e9ee90 R08: ffffffff942b4887 R09: 1ffffffff2856910 [ 521.201047][ C0] R10: dffffc0000000000 R11: fffffbfff2856911 R12: 1ffff920007d3db0 [ 521.209031][ C0] R13: dffffc0000000000 R14: ffffc90003e9eda0 R15: 0000000000000246 [ 521.217051][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 521.222094][ C0] ? deref_stack_reg+0x17c/0x210 [ 521.227055][ C0] ? stack_trace_save+0x118/0x1d0 [ 521.233331][ C0] ? unwind_next_frame+0x18e6/0x22d0 [ 521.238647][ C0] ? deref_stack_reg+0x17c/0x210 [ 521.243631][ C0] ? preempt_count_add+0x93/0x190 [ 521.248698][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 521.254889][ C0] is_bpf_text_address+0x46/0x2a0 [ 521.259936][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 521.265164][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 521.270404][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 521.277103][ C0] kernel_text_address+0xa7/0xe0 [ 521.282068][ C0] __kernel_text_address+0xd/0x40 [ 521.287117][ C0] unwind_get_return_address+0x4d/0x90 [ 521.292595][ C0] arch_stack_walk+0xfd/0x150 [ 521.297313][ C0] stack_trace_save+0x118/0x1d0 [ 521.302177][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 521.307562][ C0] ? stack_trace_save+0x118/0x1d0 [ 521.312599][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 521.317989][ C0] ? mark_lock+0x9a/0x360 [ 521.322344][ C0] kasan_save_track+0x3f/0x80 [ 521.327036][ C0] ? kasan_save_track+0x3f/0x80 [ 521.331905][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 521.336681][ C0] ? __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 521.343287][ C0] ? kstrdup+0x39/0xb0 [ 521.347379][ C0] ? __kernfs_new_node+0x9d/0x870 [ 521.352415][ C0] ? kernfs_new_node+0x137/0x240 [ 521.357366][ C0] ? __kernfs_create_file+0x49/0x2e0 [ 521.362672][ C0] ? sysfs_add_file_mode_ns+0x24a/0x310 [ 521.368255][ C0] ? internal_create_group+0x782/0x12d0 [ 521.373832][ C0] ? sysfs_create_groups+0x56/0x120 [ 521.379046][ C0] ? ib_setup_port_attrs+0x16a4/0x2440 [ 521.384548][ C0] ? add_one_compat_dev+0x51a/0x710 [ 521.389774][ C0] ? rdma_dev_init_net+0x1f1/0x280 [ 521.394909][ C0] ? ops_init+0x31e/0x590 [ 521.399253][ C0] ? setup_net+0x287/0x9e0 [ 521.403688][ C0] ? copy_net_ns+0x33f/0x570 [ 521.408301][ C0] ? create_new_namespaces+0x425/0x7b0 [ 521.413778][ C0] ? unshare_nsproxy_namespaces+0x124/0x180 [ 521.419693][ C0] ? ksys_unshare+0x57d/0xa70 [ 521.424384][ C0] ? __x64_sys_unshare+0x38/0x40 [ 521.429332][ C0] ? do_syscall_64+0xf3/0x230 [ 521.434021][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.440140][ C0] __kasan_kmalloc+0x98/0xb0 [ 521.444750][ C0] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 521.451188][ C0] ? __kernfs_new_node+0x9d/0x870 [ 521.456232][ C0] kstrdup+0x39/0xb0 [ 521.460150][ C0] __kernfs_new_node+0x9d/0x870 [ 521.465023][ C0] ? up_write+0x1a9/0x590 [ 521.469374][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 521.474850][ C0] ? __pfx_up_write+0x10/0x10 [ 521.479558][ C0] kernfs_new_node+0x137/0x240 [ 521.484338][ C0] __kernfs_create_file+0x49/0x2e0 [ 521.489469][ C0] sysfs_add_file_mode_ns+0x24a/0x310 [ 521.494885][ C0] internal_create_group+0x782/0x12d0 [ 521.500554][ C0] ? kobject_add_internal+0x5fb/0x8d0 [ 521.505965][ C0] ? __kasan_kmalloc_large+0x8a/0xa0 [ 521.511280][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 521.517111][ C0] ? rcu_is_watching+0x15/0xb0 [ 521.521905][ C0] sysfs_create_groups+0x56/0x120 [ 521.526982][ C0] ib_setup_port_attrs+0x16a4/0x2440 [ 521.532321][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 521.537997][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 521.544015][ C0] ? device_add+0x460/0xbf0 [ 521.548540][ C0] add_one_compat_dev+0x51a/0x710 [ 521.553589][ C0] rdma_dev_init_net+0x1f1/0x280 [ 521.558544][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 521.564036][ C0] ops_init+0x31e/0x590 [ 521.568207][ C0] ? lockdep_init_map_type+0xa1/0x910 [ 521.573601][ C0] setup_net+0x287/0x9e0 [ 521.577863][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 521.583428][ C0] ? __pfx_setup_net+0x10/0x10 [ 521.588224][ C0] copy_net_ns+0x33f/0x570 [ 521.592669][ C0] create_new_namespaces+0x425/0x7b0 [ 521.597995][ C0] unshare_nsproxy_namespaces+0x124/0x180 [ 521.603741][ C0] ksys_unshare+0x57d/0xa70 [ 521.608270][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 521.613308][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 521.619661][ C0] ? do_syscall_64+0x100/0x230 [ 521.624443][ C0] __x64_sys_unshare+0x38/0x40 [ 521.629229][ C0] do_syscall_64+0xf3/0x230 [ 521.633743][ C0] ? clear_bhb_loop+0x35/0x90 [ 521.638435][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.644342][ C0] RIP: 0033:0x7fbcc5987517 [ 521.648783][ C0] RSP: 002b:00007fff94949448 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 521.657214][ C0] RAX: ffffffffffffffda RBX: 00007fbcc5b75f40 RCX: 00007fbcc5987517 [ 521.665373][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 521.673356][ C0] RBP: 00007fbcc5b76738 R08: 0000000000000000 R09: 0000000000000000 [ 521.681335][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 521.689316][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 521.697318][ C0] [ 521.700346][ C0] task:syz-executor state:R running task stack:26448 pid:8780 tgid:8779 ppid:8777 flags:0x00004000 [ 521.712116][ C0] Call Trace: [ 521.715404][ C0] [ 521.718348][ C0] __schedule+0x1850/0x4c30 [ 521.722903][ C0] ? __pfx___schedule+0x10/0x10 [ 521.727783][ C0] ? mark_lock+0x9a/0x360 [ 521.732148][ C0] ? preempt_schedule+0xe1/0xf0 [ 521.737024][ C0] preempt_schedule_common+0x84/0xd0 [ 521.742337][ C0] preempt_schedule+0xe1/0xf0 [ 521.747035][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 521.752440][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 521.758391][ C0] preempt_schedule_thunk+0x1a/0x30 [ 521.763639][ C0] _raw_spin_unlock+0x3e/0x50 [ 521.768453][ C0] unmap_page_range+0x36c3/0x4040 [ 521.773508][ C0] ? __lock_acquire+0x1397/0x2100 [ 521.778586][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 521.783991][ C0] ? mas_next_slot+0xdc6/0xea0 [ 521.788782][ C0] ? uprobe_munmap+0x183/0x460 [ 521.793579][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 521.798630][ C0] unmap_vmas+0x3cc/0x5f0 [ 521.802991][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 521.807883][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 521.813357][ C0] exit_mmap+0x275/0xc20 [ 521.817625][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 521.822414][ C0] ? __pfx_exit_aio+0x10/0x10 [ 521.827118][ C0] ? uprobe_clear_state+0x271/0x290 [ 521.832334][ C0] ? mm_update_next_owner+0xa4/0x810 [ 521.837632][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 521.842846][ C0] __mmput+0x115/0x3c0 [ 521.846936][ C0] exit_mm+0x220/0x310 [ 521.851022][ C0] ? __pfx_exit_mm+0x10/0x10 [ 521.855628][ C0] ? taskstats_exit+0x326/0xa60 [ 521.860501][ C0] do_exit+0x9b2/0x28e0 [ 521.864679][ C0] ? __pfx_do_exit+0x10/0x10 [ 521.869282][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 521.874666][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.880663][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 521.887005][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 521.892150][ C0] do_group_exit+0x207/0x2c0 [ 521.896764][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.901985][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 521.907209][ C0] get_signal+0x16b2/0x1750 [ 521.911754][ C0] ? __pfx_get_signal+0x10/0x10 [ 521.916754][ C0] ? __fget_files+0x2a/0x410 [ 521.921370][ C0] arch_do_signal_or_restart+0x96/0x860 [ 521.926943][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 521.933118][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.939130][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 521.944878][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 521.950448][ C0] do_syscall_64+0x100/0x230 [ 521.955049][ C0] ? clear_bhb_loop+0x35/0x90 [ 521.959744][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.965654][ C0] RIP: 0033:0x7f6684b8472c [ 521.970080][ C0] RSP: 002b:00007f66831f6bc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.978511][ C0] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f6684b8472c [ 521.986498][ C0] RDX: 0000000000000400 RSI: 00007f66831f6cf0 RDI: 00000000000000ca [ 521.994478][ C0] RBP: 00007f66831f6d00 R08: 0000000000000000 R09: 00007fff5d0e5097 [ 522.002464][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f66831f6cf0 [ 522.010979][ C0] R13: 000600046003fd00 R14: 00007fff5d0e4fb0 R15: 00007fff5d0e5098 [ 522.018984][ C0] [ 522.022015][ C0] rcu: rcu_preempt kthread starved for 10570 jiffies! g42441 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 522.033219][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 522.043199][ C0] rcu: RCU grace-period kthread stack dump: [ 522.049093][ C0] task:rcu_preempt state:R running task stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 522.060876][ C0] Call Trace: [ 522.064172][ C0] [ 522.067117][ C0] __schedule+0x1850/0x4c30 [ 522.071671][ C0] ? __pfx___schedule+0x10/0x10 [ 522.076981][ C0] ? __pfx_lock_release+0x10/0x10 [ 522.082027][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.088371][ C0] ? schedule+0x90/0x320 [ 522.092627][ C0] schedule+0x14b/0x320 [ 522.096801][ C0] schedule_timeout+0x15a/0x290 [ 522.101667][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 522.107064][ C0] ? __pfx_process_timeout+0x10/0x10 [ 522.112372][ C0] ? prepare_to_swait_event+0x330/0x350 [ 522.117938][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 522.122807][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 522.128032][ C0] ? rcu_gp_init+0x1256/0x1630 [ 522.132817][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 522.137768][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 522.143676][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 522.148978][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.154895][ C0] ? finish_swait+0xd4/0x1e0 [ 522.159499][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 522.164108][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 522.169324][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.175237][ C0] ? __kthread_parkme+0x169/0x1d0 [ 522.180278][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 522.185490][ C0] kthread+0x2f0/0x390 [ 522.189572][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 522.194781][ C0] ? __pfx_kthread+0x10/0x10 [ 522.199388][ C0] ret_from_fork+0x4b/0x80 [ 522.203819][ C0] ? __pfx_kthread+0x10/0x10 [ 522.208426][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.213212][ C0] [ 522.216245][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 522.222576][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 522.233173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 522.243236][ C0] RIP: 0010:loopback_xmit+0x4a/0x6b0 [ 522.248541][ C0] Code: 00 fc ff df e8 47 7b 22 fb 49 8d bd d0 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 38 00 74 05 e8 8d dc 88 fb 49 8b ad d0 00 00 00 <49> 8d 9d cc 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f [ 522.268163][ C0] RSP: 0018:ffffc900001571b8 EFLAGS: 00000246 [ 522.274244][ C0] RAX: 1ffff1100dc43e42 RBX: ffff888063170000 RCX: ffff88801cec5a00 [ 522.282229][ C0] RDX: 0000000000000100 RSI: ffff888063170000 RDI: ffff88806e21f210 [ 522.290216][ C0] RBP: ffff88806eacd800 R08: ffffffff89949289 R09: ffffffff8994a063 [ 522.298195][ C0] R10: 0000000000000003 R11: ffffffff867ce2d0 R12: ffff888029613800 [ 522.306175][ C0] R13: ffff88806e21f140 R14: 0000000100000000 R15: dffffc0000000000 [ 522.314158][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 522.323098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.329697][ C0] CR2: 00007f87bf176038 CR3: 000000000e736000 CR4: 00000000003526f0 [ 522.337686][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 522.345664][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 522.353909][ C0] Call Trace: [ 522.357200][ C0] [ 522.360070][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 522.366432][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 522.372096][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 522.377946][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 522.384208][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 522.389607][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 522.395284][ C0] ? update_process_times+0x242/0x2f0 [ 522.400686][ C0] ? tick_nohz_handler+0x37c/0x500 [ 522.405818][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 522.411300][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 522.416716][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 522.422457][ C0] ? sched_clock+0x4a/0x70 [ 522.426896][ C0] ? read_tsc+0x9/0x20 [ 522.430972][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 522.437061][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 522.442211][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 522.448381][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 522.454206][ C0] [ 522.457161][ C0] [ 522.460115][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.466297][ C0] ? __pfx_loopback_xmit+0x10/0x10 [ 522.471521][ C0] ? do_xdp_generic+0x8f3/0xd30 [ 522.476401][ C0] ? generic_xdp_tx+0x119/0x3b0 [ 522.481287][ C0] ? loopback_xmit+0x4a/0x6b0 [ 522.485985][ C0] ? loopback_xmit+0x29/0x6b0 [ 522.490685][ C0] ? netdev_core_pick_tx+0x1b3/0x320 [ 522.496006][ C0] generic_xdp_tx+0x198/0x3b0 [ 522.500704][ C0] do_xdp_generic+0x952/0xd30 [ 522.505406][ C0] ? __pfx_do_xdp_generic+0x10/0x10 [ 522.510655][ C0] __netif_receive_skb_core+0x1ce9/0x4690 [ 522.516407][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 522.521630][ C0] ? mark_lock+0x9a/0x360 [ 522.525981][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 522.532073][ C0] ? mark_lock+0x9a/0x360 [ 522.536426][ C0] ? __lock_acquire+0x1397/0x2100 [ 522.541489][ C0] __netif_receive_skb+0x12f/0x650 [ 522.546622][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 522.551659][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 522.557307][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 522.563302][ C0] ? __pfx_lock_release+0x10/0x10 [ 522.568339][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 522.573484][ C0] process_backlog+0x662/0x15b0 [ 522.578355][ C0] ? process_backlog+0x33b/0x15b0 [ 522.583403][ C0] ? __pfx_process_backlog+0x10/0x10 [ 522.588708][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 522.594703][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.601048][ C0] __napi_poll+0xcb/0x490 [ 522.605398][ C0] net_rx_action+0x89b/0x1240 [ 522.610124][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 522.615267][ C0] ? rcu_qs+0xf1/0x190 [ 522.619366][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.625739][ C0] handle_softirqs+0x2d4/0x9b0 [ 522.630571][ C0] ? run_ksoftirqd+0xca/0x130 [ 522.635272][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 522.640584][ C0] run_ksoftirqd+0xca/0x130 [ 522.645099][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 522.650232][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 522.655355][ C0] smpboot_thread_fn+0x544/0xa30 [ 522.660307][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 522.665347][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 522.670816][ C0] kthread+0x2f0/0x390 [ 522.674900][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 522.680369][ C0] ? __pfx_kthread+0x10/0x10 [ 522.684972][ C0] ret_from_fork+0x4b/0x80 [ 522.689398][ C0] ? __pfx_kthread+0x10/0x10 [ 522.694004][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.698793][ C0]