last executing test programs: 1m10.803212592s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) (async) 1m8.862529886s ago: executing program 2 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x4, 0xe8d) ppoll(&(0x7f0000000c80)=[{r1}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8000}, 0x20) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="cf0400000000fd4e819a0000000000000000aa83881973d76def70270610d171856e2e5bd88d4806d7b9986e6952c4ebb4091fa7e11d2815938269087f41c748bd3fd6a4f66d8e69cf18ebf1d98c935019e0ccc63995a404d9ef50cc68ab8c8b3c37a26cbf99619420f7aeee5b3d4ea72db3efadd6e0dbf4a82bd0140ffda6e8185e359c452f111a54b0b757167618c129c45d40a0ef2eebbefc83a690312a0313aefbd5b080980a92b648525ab64ae6a547f6ae3a5323c49f220e5bed4f5a0ba47f705f8b7ad2aa", @ANYRES32=r4, @ANYBLOB="0f0013008cb09201b65e0918a45b14964460c9708ab40300000006000802110000000000"], 0x38}}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket(0x80000000000001e, 0x80000, 0x81) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r9 = socket(0x22, 0x80000, 0x5) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r10 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) close(r10) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x9, 0x10000, 0x3, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES16=r7, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000084) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000004, 0x13012, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000900)=""/192, 0xc0}}], 0x1, 0x40000101, &(0x7f0000000a00)={0x77359400}) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="89f680e2", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 58.88372788s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) (async) 58.393079192s ago: executing program 2 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x4, 0xe8d) ppoll(&(0x7f0000000c80)=[{r1}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8000}, 0x20) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="cf0400000000fd4e819a0000000000000000aa83881973d76def70270610d171856e2e5bd88d4806d7b9986e6952c4ebb4091fa7e11d2815938269087f41c748bd3fd6a4f66d8e69cf18ebf1d98c935019e0ccc63995a404d9ef50cc68ab8c8b3c37a26cbf99619420f7aeee5b3d4ea72db3efadd6e0dbf4a82bd0140ffda6e8185e359c452f111a54b0b757167618c129c45d40a0ef2eebbefc83a690312a0313aefbd5b080980a92b648525ab64ae6a547f6ae3a5323c49f220e5bed4f5a0ba47f705f8b7ad2aa", @ANYRES32=r4, @ANYBLOB="0f0013008cb09201b65e0918a45b14964460c9708ab40300000006000802110000000000"], 0x38}}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket(0x80000000000001e, 0x80000, 0x81) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r9 = socket(0x22, 0x80000, 0x5) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r10 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) close(r10) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x9, 0x10000, 0x3, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES16=r7, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000084) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000004, 0x13012, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000900)=""/192, 0xc0}}], 0x1, 0x40000101, &(0x7f0000000a00)={0x77359400}) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="89f680e2", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="01002abd7000ffdbdf25120000002800078008000200aabcec020c000300020000000000000008000100000020000800010005000000a0000180160001006574683a76657468305f74d18e7465616d00000038000400200001000a004e230000000200000000000000000000000000000001070000001000020002004e23e00000020000000000000000140002800800030062030000080004000000000038000400200001000a004e2300000009fc000000000000000000000000000001dd0a00001400020002004e246401010000000000000000006c00028014000380080001000900000008000200080000004c000380080001000c000000080002000500000008000100070000000800010000000080080002009e11df78080001000300000008000200010000000800010004000000080002000100008004000400040004000c00028008000100010000002400098008000100fffdff7f080001000600000008000100020000000800020003000000"], 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 47.336350648s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) (async) 45.344174383s ago: executing program 2 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x4, 0xe8d) ppoll(&(0x7f0000000c80)=[{r1}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8000}, 0x20) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="cf0400000000fd4e819a0000000000000000aa83881973d76def70270610d171856e2e5bd88d4806d7b9986e6952c4ebb4091fa7e11d2815938269087f41c748bd3fd6a4f66d8e69cf18ebf1d98c935019e0ccc63995a404d9ef50cc68ab8c8b3c37a26cbf99619420f7aeee5b3d4ea72db3efadd6e0dbf4a82bd0140ffda6e8185e359c452f111a54b0b757167618c129c45d40a0ef2eebbefc83a690312a0313aefbd5b080980a92b648525ab64ae6a547f6ae3a5323c49f220e5bed4f5a0ba47f705f8b7ad2aa", @ANYRES32=r4, @ANYBLOB="0f0013008cb09201b65e0918a45b14964460c9708ab40300000006000802110000000000"], 0x38}}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket(0x80000000000001e, 0x80000, 0x81) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r9 = socket(0x22, 0x80000, 0x5) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r10 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) close(r10) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x9, 0x10000, 0x3, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES16=r7, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000084) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000004, 0x13012, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000900)=""/192, 0xc0}}], 0x1, 0x40000101, &(0x7f0000000a00)={0x77359400}) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="89f680e2", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 35.688837061s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) (async) 34.359637282s ago: executing program 2 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x4, 0xe8d) ppoll(&(0x7f0000000c80)=[{r1}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8000}, 0x20) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="cf0400000000fd4e819a0000000000000000aa83881973d76def70270610d171856e2e5bd88d4806d7b9986e6952c4ebb4091fa7e11d2815938269087f41c748bd3fd6a4f66d8e69cf18ebf1d98c935019e0ccc63995a404d9ef50cc68ab8c8b3c37a26cbf99619420f7aeee5b3d4ea72db3efadd6e0dbf4a82bd0140ffda6e8185e359c452f111a54b0b757167618c129c45d40a0ef2eebbefc83a690312a0313aefbd5b080980a92b648525ab64ae6a547f6ae3a5323c49f220e5bed4f5a0ba47f705f8b7ad2aa", @ANYRES32=r4, @ANYBLOB="0f0013008cb09201b65e0918a45b14964460c9708ab40300000006000802110000000000"], 0x38}}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket(0x80000000000001e, 0x80000, 0x81) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r9 = socket(0x22, 0x80000, 0x5) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r10 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) close(r10) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x9, 0x10000, 0x3, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES16=r7, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000084) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000004, 0x13012, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000900)=""/192, 0xc0}}], 0x1, 0x40000101, &(0x7f0000000a00)={0x77359400}) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="89f680e2", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 23.922448637s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) (async) 23.565795237s ago: executing program 2 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x4, 0xe8d) ppoll(&(0x7f0000000c80)=[{r1}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8000}, 0x20) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="cf0400000000fd4e819a0000000000000000aa83881973d76def70270610d171856e2e5bd88d4806d7b9986e6952c4ebb4091fa7e11d2815938269087f41c748bd3fd6a4f66d8e69cf18ebf1d98c935019e0ccc63995a404d9ef50cc68ab8c8b3c37a26cbf99619420f7aeee5b3d4ea72db3efadd6e0dbf4a82bd0140ffda6e8185e359c452f111a54b0b757167618c129c45d40a0ef2eebbefc83a690312a0313aefbd5b080980a92b648525ab64ae6a547f6ae3a5323c49f220e5bed4f5a0ba47f705f8b7ad2aa", @ANYRES32=r4, @ANYBLOB="0f0013008cb09201b65e0918a45b14964460c9708ab40300000006000802110000000000"], 0x38}}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket(0x80000000000001e, 0x80000, 0x81) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r9 = socket(0x22, 0x80000, 0x5) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r10 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) close(r10) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x9, 0x10000, 0x3, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES16=r7, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000084) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000004, 0x13012, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000900)=""/192, 0xc0}}], 0x1, 0x40000101, &(0x7f0000000a00)={0x77359400}) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="89f680e2", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="01002abd7000ffdbdf25120000002800078008000200aabcec020c000300020000000000000008000100000020000800010005000000a0000180160001006574683a76657468305f74d18e7465616d00000038000400200001000a004e230000000200000000000000000000000000000001070000001000020002004e23e00000020000000000000000140002800800030062030000080004000000000038000400200001000a004e2300000009fc000000000000000000000000000001dd0a00001400020002004e246401010000000000000000006c00028014000380080001000900000008000200080000004c000380080001000c000000080002000500000008000100070000000800010000000080080002009e11df78080001000300000008000200010000000800010004000000080002000100008004000400040004000c00028008000100010000002400098008000100fffdff7f080001000600000008000100020000000800020003000000"], 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 10.298857201s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x26, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x8003, 0x8e}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@mcast1, 0x4e23, 0x9, 0x4e20, 0x3, 0xa, 0x20, 0x100, 0x1, r1, 0xee01}, {0x0, 0x7ff, 0x1, 0x9, 0x95, 0x8, 0xffffffff00000001}, {0x3, 0x3, 0x1, 0x9}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x1, 0x2, 0x5, 0x8, 0x1000}}, 0xe8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000e01000a7cc4a372eaf541d222092100000d4bc3a220c0ecea426a9fca1c506fd7689e2f2aa349294c30525eefbe9d4ba01c0009d4961bf873d84513b96996440d011acc96a9fbcc791452128039f77bbdcbed4da1630c21f1da07e24f671b1cad4bd305fd0c842b746dd6eb466ea00ec36a3dd0917b03f8c1488dc61afc0694a8a7debc363900f052df1347c6006b9e5c1cee3dad5413f3d683c0bee64d55c6ff4846cf19ff736b22214a59344968a256497c7ca744d50b7f01de2ac65b1e72296574be1cf3507925de61b256bf08a8f64ccbbd06d7d3500ddf02a395e95b1f4a0e5a5fe53c83033ed41cc3a", @ANYRES32=r4, @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x4000) (async) 9.269425692s ago: executing program 2 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x4, 0xe8d) ppoll(&(0x7f0000000c80)=[{r1}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8000}, 0x20) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="cf0400000000fd4e819a0000000000000000aa83881973d76def70270610d171856e2e5bd88d4806d7b9986e6952c4ebb4091fa7e11d2815938269087f41c748bd3fd6a4f66d8e69cf18ebf1d98c935019e0ccc63995a404d9ef50cc68ab8c8b3c37a26cbf99619420f7aeee5b3d4ea72db3efadd6e0dbf4a82bd0140ffda6e8185e359c452f111a54b0b757167618c129c45d40a0ef2eebbefc83a690312a0313aefbd5b080980a92b648525ab64ae6a547f6ae3a5323c49f220e5bed4f5a0ba47f705f8b7ad2aa", @ANYRES32=r4, @ANYBLOB="0f0013008cb09201b65e0918a45b14964460c9708ab40300000006000802110000000000"], 0x38}}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket(0x80000000000001e, 0x80000, 0x81) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r9 = socket(0x22, 0x80000, 0x5) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r10 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) close(r10) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x9, 0x10000, 0x3, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES16=r7, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000084) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000004, 0x13012, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000900)=""/192, 0xc0}}], 0x1, 0x40000101, &(0x7f0000000a00)={0x77359400}) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="89f680e2", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 1.656775176s ago: executing program 1 (id=1480): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r1, @ANYBLOB="0c000200"], 0x28}}, 0x48000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000), 0x4) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @rand_addr=0x64010100}, {0x306}, 0x22, {0x2, 0x4e23, @remote}, 'team0\x00'}) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000440)=0x4, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001580)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r7, 0x7}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000002b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendto$inet6(r8, &(0x7f0000000000)="de", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r8, 0x29, 0x1c, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="b5b5", 0x2, 0x20040010, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r11) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r12, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000280)=@gcm_256={{0x304}, "532383c48e6ac55f", "1852348cb36a75cf7816c20b1b34cdf7643673c01b6bd9f71cc97a2706939eed", "79849591", "b6c48ff3daa84271"}, 0x38) 1.540770671s ago: executing program 0 (id=1481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffd28, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_ALPHA={0x8}, @TCA_PIE_LIMIT={0x0, 0x2, 0x3}]}}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x160}}], 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000028002702000000000000000006000002040003000c0001"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.33852141s ago: executing program 0 (id=1484): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201200001c0012800900010062800000"], 0x3c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22ffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) 1.15281105s ago: executing program 0 (id=1486): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) accept4(r2, 0x0, &(0x7f0000000000), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r2, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)=""/20, 0x14}], 0x1}, 0x9}], 0x1, 0x40002041, 0x0) getsockopt$inet6_buf(r2, 0x29, 0xd2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.014077855s ago: executing program 0 (id=1488): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffe9, 0x11, 0x0, 0x27) 900.972351ms ago: executing program 4 (id=1489): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 851.020698ms ago: executing program 0 (id=1490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x5c}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000b280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f000000b340)={0x0, 0x0, &(0x7f000000b300)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x4010) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x3}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 805.872367ms ago: executing program 4 (id=1491): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x100000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x3, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0) bind$netlink(r1, 0x0, 0x0) syz_emit_ethernet(0x2da, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 733.019811ms ago: executing program 1 (id=1492): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'veth1_to_hsr\x00', @broadcast}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\r\x00+'], 0x30}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) 570.933007ms ago: executing program 1 (id=1493): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) r2 = socket(0x80000000000000a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x2, 0x8db, {{0x16, 0x4, 0x0, 0x2f, 0x58, 0x65, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @remote, {[@rr={0x7, 0x13, 0x68, [@private=0xa010101, @loopback, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x65, [@multicast2, @multicast1, @broadcast, @multicast1]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x12, "a5b235c117c71e1d955b7e2bc4341662"}]}, @generic={0x82, 0x6, "dafee8b8"}]}}}}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x2, 0x3ff, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x66, 0x0, 0xa, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0xf1a3, 0x7, {{0x13, 0x4, 0x3, 0x3a, 0x4c, 0x66, 0x0, 0x4b, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x13, 0xf7, [@remote, @empty, @rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x23, 0xf8, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @multicast1]}]}}}}}) getpeername$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56461, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x204, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20040880}, 0x24008000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x8001, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) close(r2) 468.146296ms ago: executing program 4 (id=1494): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x1d, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x68e5146a316f26b4, 0x5f]}}, &(0x7f00000001c0)=""/111, 0x48, 0x6f, 0x0, 0xfffffffe, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0xfffffffe}}, 0x2, 0x400}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x2c, 0x3, 0x40) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r2, 0x2f, 0x8, 0x4, @void, @value}, 0x20) 382.888022ms ago: executing program 0 (id=1495): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000001500000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffc}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x4000041) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000100002000000000000000000ac1414300000000000000000e5ff0000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000fc010000000000000000000000000002fdffffffffffffff0000000000000000800000000000000000000000000000000000000000000000020000000000800000000000000000000000000000001000feffffffffffffff00000000000000000000000000000000fcffffffffffffff0000000000008000000000002cbd7000000000000200030016000000000000004c001400686d616328736861312d6e656f6e2900"/244], 0x13c}, 0x1, 0x0, 0x0, 0x40801}, 0x4854) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_gettime(0xfffffff2, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xfff1, 0xffff}, {0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x36767a45}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 310.598862ms ago: executing program 4 (id=1496): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80005e1100fc000000000000000000000000000000ff02000000000000000000000000000100004e22005e90"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40201}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 236.506706ms ago: executing program 1 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r4, 0x71e4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 153.726088ms ago: executing program 4 (id=1498): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@dstopts={0x62, 0x1d, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xb3, "f623ee415262ef2ae83ff1fcce36c80bd88bd5f373df91c593ce7d5d55456125a5c0a9b4be1a9d89df2e940322cbb7f3018e39bf509a3948eb851ffd25fcc552ed30bf164ea64463e949dfa7fb939fa6cb356b224d26ba333411bcb4b6f9fc30cb5b87da629edb1e5e811437986a850ab02e5d8ba58b2880d6ceeae36cf5569d9ce686867c69263c02e7caac210980a0fd2ff7c086df6a198cb24d4dec563a23c26d1ad05c74ff6e231e155e8cd9c01ba81d14"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x51}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x8001}]}, 0xf8) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) 86.325688ms ago: executing program 1 (id=1499): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100005800c000680080001"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='syz_tun\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x122, &(0x7f0000000480)={@remote, @local, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}, {0x3}], @ipv6=@icmpv6={0xf, 0x6, "0f4f03", 0xdc, 0x3a, 0x0, @loopback, @empty, {[@hopopts={0x2c, 0xf, '\x00', [@ra={0x5, 0x2, 0x197}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0x0, [0x8000, 0x7, 0x6, 0xfffffffffffffffe, 0x10000, 0xfffffffffffffffb, 0xe]}}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x7f, [0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x75}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x600c}]}, @dstopts={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @ra]}, @routing={0x62, 0x2, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}], @mlv2_query={0x82, 0x0, 0x0, 0x5, 0x91c0, @remote, 0x0, 0x0, 0x6, 0x9, 0x1, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xd9c, 0x7c6, 0xde1, 0xaf1]}) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb0800", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x800, 0x0, 0x40}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffefb6", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100005800c000680080001"], 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='syz_tun\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) syz_emit_ethernet(0x122, &(0x7f0000000480)={@remote, @local, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}, {0x3}], @ipv6=@icmpv6={0xf, 0x6, "0f4f03", 0xdc, 0x3a, 0x0, @loopback, @empty, {[@hopopts={0x2c, 0xf, '\x00', [@ra={0x5, 0x2, 0x197}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0x0, [0x8000, 0x7, 0x6, 0xfffffffffffffffe, 0x10000, 0xfffffffffffffffb, 0xe]}}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x7f, [0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x75}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x600c}]}, @dstopts={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @ra]}, @routing={0x62, 0x2, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}], @mlv2_query={0x82, 0x0, 0x0, 0x5, 0x91c0, @remote, 0x0, 0x0, 0x6, 0x9, 0x1, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xd9c, 0x7c6, 0xde1, 0xaf1]}) (async) listen(r4, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb0800", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x800, 0x0, 0x40}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffefb6", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) 84.677554ms ago: executing program 4 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}}, 0x0) 0s ago: executing program 1 (id=1501): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): 03136][ T9023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.037106][ T9023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.050511][ T5847] Bluetooth: hci2: command tx timeout [ 132.050848][ T9023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.138480][ T9098] hsr_slave_0: entered promiscuous mode [ 132.147690][ T9098] hsr_slave_1: entered promiscuous mode [ 132.161295][ T9098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.169217][ T9098] Cannot create hsr debugfs directory [ 132.199036][ T5847] Bluetooth: hci3: command tx timeout [ 132.274457][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 132.284419][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 132.385498][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.416975][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.489869][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.497041][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.529643][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.536802][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.620552][ T9241] ebt_limit: overflow, try lower: 570423552/2483027968 [ 132.699398][ T9098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.715328][ T9098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.730438][ T9098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.751320][ T9098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.811200][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.920131][ T9023] veth0_vlan: entered promiscuous mode [ 132.941343][ T9023] veth1_vlan: entered promiscuous mode [ 133.000773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016110][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.033948][ T9023] veth0_macvtap: entered promiscuous mode [ 133.055655][ T9023] veth1_macvtap: entered promiscuous mode [ 133.069261][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.086382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.093566][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.122929][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.137448][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.148218][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.159066][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.182583][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.194626][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.201802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.222825][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.234057][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.246579][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.257665][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.270792][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.306402][ T9023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.327254][ T9023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.336817][ T9023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.346451][ T9023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.366088][ T9268] hsr0: entered promiscuous mode [ 133.376378][ T9098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.526689][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'. [ 133.539619][ T9276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.991'. [ 133.570667][ T9277] bond0: Removing last ns target with arp_interval on [ 133.793653][ T7490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.817688][ T7490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.893568][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.912875][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.992045][ T9295] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 134.050523][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.084396][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.124744][ T5847] Bluetooth: hci2: command tx timeout [ 134.146349][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 134.180846][ T9305] openvswitch: netlink: Message has 8 unknown bytes. [ 134.228557][ T9098] veth0_vlan: entered promiscuous mode [ 134.241860][ T9098] veth1_vlan: entered promiscuous mode [ 134.281209][ T9098] veth0_macvtap: entered promiscuous mode [ 134.301865][ T9098] veth1_macvtap: entered promiscuous mode [ 134.347431][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.369240][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.383742][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.402156][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.413729][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.430956][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.443118][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.453486][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 134.485801][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.504709][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.516434][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.530885][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.541440][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.552239][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.564254][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.580959][ T9098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.589797][ T9098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.600199][ T9098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.609180][ T9098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.685498][ T9322] sctp: [Deprecated]: syz.0.1004 (pid 9322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.685498][ T9322] Use struct sctp_sack_info instead [ 134.732841][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.748676][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.789949][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.800658][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.946398][ T9328] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1008'. [ 135.009913][ T7493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.580288][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1010'. [ 135.742654][ T7493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.771520][ T9347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1012'. [ 135.808616][ T9346] netlink: 'syz.4.1013': attribute type 3 has an invalid length. [ 135.918911][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.927536][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.935657][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.944341][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.959359][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.967337][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.008315][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.082025][ T7493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.173602][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.195957][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.232572][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.253587][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.262925][ T7493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.274173][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.302600][ T9369] netlink: 'syz.0.1019': attribute type 3 has an invalid length. [ 136.314251][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1019'. [ 136.327635][ T9371] netlink: 'syz.0.1019': attribute type 3 has an invalid length. [ 136.514574][ T9389] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 136.548995][ T9389] openvswitch: netlink: Message has 1 unknown bytes. [ 136.563237][ T9389] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.637144][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 136.717579][ T7493] bridge_slave_1: left allmulticast mode [ 136.728666][ T7493] bridge_slave_1: left promiscuous mode [ 136.734462][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.743909][ T7493] bridge_slave_0: left allmulticast mode [ 136.749974][ T7493] bridge_slave_0: left promiscuous mode [ 136.761203][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.143003][ T7493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.155235][ T7493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.167690][ T7493] bond0 (unregistering): Released all slaves [ 137.217331][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.224645][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.345562][ T9423] ebt_limit: overflow, try lower: 570423552/2483027968 [ 137.469903][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.493377][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.511857][ T9354] bridge_slave_0: entered allmulticast mode [ 137.520736][ T9354] bridge_slave_0: entered promiscuous mode [ 137.629757][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.636916][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.664249][ T9354] bridge_slave_1: entered allmulticast mode [ 137.669198][ T9446] __nla_validate_parse: 1 callbacks suppressed [ 137.669214][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'. [ 137.677559][ T9354] bridge_slave_1: entered promiscuous mode [ 137.801098][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.832128][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.916644][ T7493] hsr_slave_0: left promiscuous mode [ 137.933030][ T7493] hsr_slave_1: left promiscuous mode [ 137.951006][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.959048][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.967117][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.981632][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.007005][ T7493] veth1_macvtap: left promiscuous mode [ 138.015529][ T7493] veth0_macvtap: left promiscuous mode [ 138.021832][ T7493] veth1_vlan: left promiscuous mode [ 138.027285][ T7493] veth0_vlan: left promiscuous mode [ 138.038509][ T5152] Bluetooth: hci2: command tx timeout [ 138.366759][ T5152] Bluetooth: hci3: command tx timeout [ 138.561686][ T9469] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 138.808484][ T7493] team0 (unregistering): Port device team_slave_1 removed [ 138.850584][ T7493] team0 (unregistering): Port device team_slave_0 removed [ 139.246579][ T9354] team0: Port device team_slave_0 added [ 139.304975][ T9354] team0: Port device team_slave_1 added [ 139.378958][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.386358][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.443486][ T9354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.457455][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.466623][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.526219][ T9354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.575696][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 139.575999][ T9356] chnl_net:caif_netlink_parms(): no params data found [ 139.734717][ T9354] hsr_slave_0: entered promiscuous mode [ 139.742797][ T9354] hsr_slave_1: entered promiscuous mode [ 139.770333][ T9354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.785567][ T9354] Cannot create hsr debugfs directory [ 139.966708][ T9511] tipc: Started in network mode [ 139.978407][ T9511] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.991986][ T9511] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 140.003296][ T9511] tipc: Enabled bearer , priority 10 [ 140.039087][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.046686][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.063287][ T9356] bridge_slave_0: entered allmulticast mode [ 140.071617][ T9356] bridge_slave_0: entered promiscuous mode [ 140.118691][ T5152] Bluetooth: hci2: command tx timeout [ 140.183852][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.191057][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.201208][ T9356] bridge_slave_1: entered allmulticast mode [ 140.208643][ T9356] bridge_slave_1: entered promiscuous mode [ 140.258263][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.270718][ T9536] xt_limit: Overflow, try lower: 2147483649/128 [ 140.289095][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1060'. [ 140.299117][ T9529] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 140.323018][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.339708][ T9535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1061'. [ 140.438866][ T5152] Bluetooth: hci3: command tx timeout [ 140.493995][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.527354][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.665148][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.701228][ T9559] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 140.733527][ T9356] team0: Port device team_slave_0 added [ 140.820207][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.861301][ T9356] team0: Port device team_slave_1 added [ 140.941496][ T9569] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1070'. [ 140.961995][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.987095][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.063911][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.098916][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.105877][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.136648][ T5854] tipc: Node number set to 1 [ 141.177781][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.311204][ T9356] hsr_slave_0: entered promiscuous mode [ 141.325479][ T9356] hsr_slave_1: entered promiscuous mode [ 141.339043][ T9356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.346616][ T9356] Cannot create hsr debugfs directory [ 141.461437][ T1086] bridge_slave_1: left allmulticast mode [ 141.474923][ T1086] bridge_slave_1: left promiscuous mode [ 141.483082][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.504629][ T1086] bridge_slave_0: left allmulticast mode [ 141.515551][ T1086] bridge_slave_0: left promiscuous mode [ 141.524534][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.063709][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.087196][ T9612] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1076'. [ 142.108318][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.146711][ T1086] bond0 (unregistering): Released all slaves [ 142.198002][ T5848] Bluetooth: hci2: command tx timeout [ 142.212651][ T9626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1078'. [ 142.316610][ T9354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.474270][ T9354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.484470][ T9354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.502925][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 142.525359][ T5848] Bluetooth: hci3: command tx timeout [ 142.693004][ T9636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.709625][ T9636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.725614][ T9636] bond0 (unregistering): Released all slaves [ 142.741047][ T9638] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 142.749165][ T9354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.181861][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 143.315602][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.396831][ T1086] hsr_slave_0: left promiscuous mode [ 143.406665][ T1086] hsr_slave_1: left promiscuous mode [ 143.424701][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.433824][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.443727][ T9677] x_tables: unsorted underflow at hook 2 [ 143.450467][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.462040][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.482738][ T1086] veth1_macvtap: left promiscuous mode [ 143.488518][ T1086] veth0_macvtap: left promiscuous mode [ 143.494045][ T1086] veth1_vlan: left promiscuous mode [ 143.499466][ T1086] veth0_vlan: left promiscuous mode [ 143.983482][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 144.032355][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 144.278222][ T5848] Bluetooth: hci2: command tx timeout [ 144.586501][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.598131][ T5848] Bluetooth: hci3: command 0x0419 tx timeout [ 144.649081][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.656291][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.665717][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.672983][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.913812][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.988337][ T9354] veth0_vlan: entered promiscuous mode [ 145.010680][ T9354] veth1_vlan: entered promiscuous mode [ 145.046458][ T9354] veth0_macvtap: entered promiscuous mode [ 145.071021][ T9354] veth1_macvtap: entered promiscuous mode [ 145.095761][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.119200][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.138189][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.156288][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.179826][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.197066][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.225400][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.254484][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.278237][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.289701][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.409870][ T9354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.448086][ T9354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.467110][ T9354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.489762][ T9354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.583547][ T9356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.593515][ T9356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.659573][ T9356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.714360][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1100'. [ 145.724596][ T9356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.764653][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 145.778560][ T9720] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1100'. [ 145.916293][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.927466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.962797][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.977077][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.978922][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.022213][ T9726] nbd: device at index 1 is going down [ 146.026910][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.080478][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.102998][ T9723] batadv_slave_1: entered promiscuous mode [ 146.114292][ T9723] batadv_slave_1: entered allmulticast mode [ 146.171609][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.178787][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.217542][ T9730] netlink: 'syz.4.1104': attribute type 1 has an invalid length. [ 146.247125][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.254322][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.340870][ T9356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.678457][ T5152] Bluetooth: hci3: command 0x0419 tx timeout [ 146.703316][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.740490][ T9760] 8021q: VLANs not supported on lo [ 146.754403][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.804130][ T9356] veth0_vlan: entered promiscuous mode [ 146.825148][ T9356] veth1_vlan: entered promiscuous mode [ 146.851628][ T9356] veth0_macvtap: entered promiscuous mode [ 146.862940][ T9356] veth1_macvtap: entered promiscuous mode [ 146.878586][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.889137][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.899965][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.910548][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.920948][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.931558][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.943547][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.956400][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.967516][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.977734][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.988430][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.000514][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.016095][ T9356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.025315][ T9356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.034669][ T9356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.043618][ T9356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.106904][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.116869][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.138055][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.173065][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.182632][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.298842][ T9767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 147.338591][ T9772] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 147.378605][ T9775] lo: entered promiscuous mode [ 147.404557][ T9775] tunl0: entered promiscuous mode [ 147.441349][ T9775] gre0: entered promiscuous mode [ 147.455851][ T9779] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 147.487206][ T9775] gretap0: entered promiscuous mode [ 147.496827][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 147.543003][ T9775] erspan0: entered promiscuous mode [ 147.578521][ T9775] ip_vti0: entered promiscuous mode [ 147.591050][ T9775] ip6_vti0: entered promiscuous mode [ 147.615849][ T9775] sit0: entered promiscuous mode [ 147.628690][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.642709][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.652481][ T9775] ip6tnl0: entered promiscuous mode [ 147.652602][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.666553][ T9775] ip6gre0: entered promiscuous mode [ 147.668343][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.681975][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.692334][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.761204][ T9775] ip6gretap0: entered promiscuous mode [ 147.790013][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.797481][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.810898][ T9775] bridge0: entered promiscuous mode [ 147.826504][ T9775] vcan0: entered promiscuous mode [ 147.839698][ T9775] team0: entered promiscuous mode [ 147.844738][ T9775] team_slave_0: entered promiscuous mode [ 147.852139][ T9775] team_slave_1: entered promiscuous mode [ 147.859013][ T9775] dummy0: entered promiscuous mode [ 147.876787][ T9775] nlmon0: entered promiscuous mode [ 147.895558][ T9775] caif0: entered promiscuous mode [ 147.902029][ T9775] veth0: entered promiscuous mode [ 147.918082][ T9775] veth1: entered promiscuous mode [ 147.938425][ T9775] wg0: entered promiscuous mode [ 147.956180][ T9775] wg1: entered promiscuous mode [ 147.977203][ T9775] wg2: entered promiscuous mode [ 147.993051][ T9775] veth0_to_bridge: entered promiscuous mode [ 148.019515][ T9775] veth1_to_bridge: entered promiscuous mode [ 148.045747][ T9775] veth0_to_bond: entered promiscuous mode [ 148.074289][ T9775] bond_slave_0: entered promiscuous mode [ 148.082773][ T9775] veth1_to_bond: entered promiscuous mode [ 148.096638][ T9775] bond_slave_1: entered promiscuous mode [ 148.112014][ T9775] veth0_to_team: entered promiscuous mode [ 148.140086][ T9775] veth1_to_team: entered promiscuous mode [ 148.168887][ T9775] veth0_to_batadv: entered promiscuous mode [ 148.190190][ T9775] batadv_slave_0: entered promiscuous mode [ 148.205615][ T9775] veth1_to_batadv: entered promiscuous mode [ 148.225317][ T9775] batadv_slave_1: entered promiscuous mode [ 148.244161][ T9775] xfrm0: entered promiscuous mode [ 148.259325][ T9775] veth1_to_hsr: entered promiscuous mode [ 148.298605][ T9775] veth1_virt_wifi: entered promiscuous mode [ 148.314775][ T9775] veth0_virt_wifi: entered promiscuous mode [ 148.332876][ T9775] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 148.395318][ T9775] vlan0: entered promiscuous mode [ 148.405444][ T9775] vlan1: entered promiscuous mode [ 148.413456][ T9775] macvlan0: entered promiscuous mode [ 148.429150][ T9775] macvlan1: entered promiscuous mode [ 148.446205][ T9775] ipvlan0: entered promiscuous mode [ 148.454654][ T9775] ipvlan1: entered promiscuous mode [ 148.482835][ T9775] macvtap0: entered promiscuous mode [ 148.523459][ T9775] macsec0: entered promiscuous mode [ 148.547391][ T9775] geneve0: entered promiscuous mode [ 148.573851][ T9775] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.593110][ T9775] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.612217][ T9775] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.624670][ T9775] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.639718][ T9775] geneve1: entered promiscuous mode [ 148.659594][ T9775] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 148.681960][ T9775] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 148.699003][ T9775] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 148.712159][ T9775] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 148.733734][ T9775] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 148.756197][ T9775] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 148.768380][ T9775] bridge1: entered promiscuous mode [ 148.773735][ T9775] xfrm1: left allmulticast mode [ 148.780071][ T9775] sit1: entered promiscuous mode [ 148.792938][ T9775] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 148.800989][ T9775] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 148.808312][ T9775] mac80211_hwsim hwsim15 wlan3: entered promiscuous mode [ 148.815433][ T9775] batadv1: entered promiscuous mode [ 148.821037][ T9775] veth2: entered promiscuous mode [ 148.826117][ T9775] veth3: entered promiscuous mode [ 148.831797][ T9775] bridge2: entered promiscuous mode [ 148.845559][ T9775] bridge3: entered promiscuous mode [ 148.851707][ T9775] macsec1: entered promiscuous mode [ 148.856997][ T9775] veth4: entered promiscuous mode [ 148.862177][ T9775] veth5: entered promiscuous mode [ 148.867325][ T9775] veth6: entered promiscuous mode [ 148.872624][ T9775] veth7: entered promiscuous mode [ 148.877718][ T9775] bridge5: entered promiscuous mode [ 148.883350][ T9775] veth8: entered promiscuous mode [ 148.888771][ T9775] veth9: entered promiscuous mode [ 148.893860][ T9775] gretap1: entered promiscuous mode [ 148.899319][ T9775] bridge6: entered promiscuous mode [ 148.904992][ T9775] macvlan2: entered promiscuous mode [ 148.910720][ T9775] macvlan3: entered promiscuous mode [ 148.916974][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.947486][ T9781] infiniband syz2: set active [ 149.011399][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.156648][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.355117][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'. [ 149.493968][ T12] bridge_slave_1: left allmulticast mode [ 149.500029][ T12] bridge_slave_1: left promiscuous mode [ 149.505774][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.535599][ T12] bridge_slave_0: left allmulticast mode [ 149.537013][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1121'. [ 149.547996][ T12] bridge_slave_0: left promiscuous mode [ 149.556567][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.566432][ T9807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1121'. [ 149.575743][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 149.575926][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.606898][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.615142][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.633693][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.643512][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.650992][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.714001][ T9818] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.784229][ T9820] syz.4.1123 (9820) used greatest stack depth: 16688 bytes left [ 149.808731][ T5848] Bluetooth: hci2: command tx timeout [ 150.097063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.109115][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.122223][ T12] bond0 (unregistering): Released all slaves [ 150.140618][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 150.253283][ T9832] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 150.282544][ T9832] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1128'. [ 150.297946][ T9832] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1128'. [ 150.352595][ T9839] xt_l2tp: missing protocol rule (udp|l2tpip) [ 150.419858][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 150.746838][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.764210][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.774632][ T9784] bridge_slave_0: entered allmulticast mode [ 150.788404][ T9784] bridge_slave_0: entered promiscuous mode [ 150.819560][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.833613][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.842482][ T9784] bridge_slave_1: entered allmulticast mode [ 150.863516][ T9784] bridge_slave_1: entered promiscuous mode [ 150.966258][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 150.992726][ T9874] sctp: [Deprecated]: syz.0.1139 (pid 9874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.992726][ T9874] Use struct sctp_sack_info instead [ 151.002563][ T9868] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1138'. [ 151.019383][ T9874] sctp: [Deprecated]: syz.0.1139 (pid 9874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.019383][ T9874] Use struct sctp_sack_info instead [ 151.051554][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.065071][ T12] hsr_slave_0: left promiscuous mode [ 151.071945][ T12] hsr_slave_1: left promiscuous mode [ 151.083924][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.092514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.103749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.112692][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.135218][ T12] veth1_macvtap: left promiscuous mode [ 151.143401][ T12] veth0_macvtap: left promiscuous mode [ 151.150432][ T12] veth1_vlan: left promiscuous mode [ 151.156004][ T12] veth0_vlan: left promiscuous mode [ 151.543026][ T12] team0 (unregistering): Port device team_slave_1 removed [ 151.584750][ T12] team0 (unregistering): Port device team_slave_0 removed [ 151.721309][ T5848] Bluetooth: hci3: command tx timeout [ 151.893281][ T5848] Bluetooth: hci2: command tx timeout [ 152.025969][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.053635][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 152.152928][ T9784] team0: Port device team_slave_0 added [ 152.181549][ T9784] team0: Port device team_slave_1 added [ 152.271393][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.278667][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.305534][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.318980][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.325957][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.352290][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.381418][ T9810] chnl_net:caif_netlink_parms(): no params data found [ 152.450611][ T9784] hsr_slave_0: entered promiscuous mode [ 152.466187][ T9784] hsr_slave_1: entered promiscuous mode [ 152.473793][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.489416][ T9784] Cannot create hsr debugfs directory [ 152.622789][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.632669][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.640682][ T9810] bridge_slave_0: entered allmulticast mode [ 152.647285][ T9810] bridge_slave_0: entered promiscuous mode [ 152.676550][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.687804][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.703250][ T9810] bridge_slave_1: entered allmulticast mode [ 152.712087][ T9810] bridge_slave_1: entered promiscuous mode [ 152.747688][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.806271][ T9810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.858034][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.882131][ T9810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.980509][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.013429][ T9810] team0: Port device team_slave_0 added [ 153.037255][ T9810] team0: Port device team_slave_1 added [ 153.082880][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.169968][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.184519][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.214480][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.273933][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.297040][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.358779][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.506845][ T9810] hsr_slave_0: entered promiscuous mode [ 153.514555][ T9810] hsr_slave_1: entered promiscuous mode [ 153.525044][ T9810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.533129][ T9810] Cannot create hsr debugfs directory [ 153.624146][ T12] bridge_slave_1: left allmulticast mode [ 153.636884][ T12] bridge_slave_1: left promiscuous mode [ 153.649393][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.665741][ T12] bridge_slave_0: left allmulticast mode [ 153.680769][ T12] bridge_slave_0: left promiscuous mode [ 153.692212][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.802567][ T5848] Bluetooth: hci3: command tx timeout [ 153.958424][ T5848] Bluetooth: hci2: command tx timeout [ 154.063657][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.077724][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.090574][ T12] bond0 (unregistering): Released all slaves [ 154.108064][ T9957] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 154.190822][ T9974] ebtables: ebtables: counters copy to user failed while replacing table [ 154.232923][ T9970] netlink: 'syz.0.1164': attribute type 2 has an invalid length. [ 154.338655][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.355982][ T9977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.382567][ T9784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.465199][ T9784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.526043][ T9784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.539783][ T9990] __nla_validate_parse: 13 callbacks suppressed [ 154.539801][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 154.583925][ T9784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.757735][ T12] hsr_slave_0: left promiscuous mode [ 154.781440][ T12] hsr_slave_1: left promiscuous mode [ 154.787435][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.797494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.805939][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.813539][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.833913][ T12] veth1_macvtap: left promiscuous mode [ 154.839679][ T12] veth0_macvtap: left promiscuous mode [ 154.845219][ T12] veth1_vlan: left promiscuous mode [ 154.851261][ T12] veth0_vlan: left promiscuous mode [ 155.307193][ T12] team0 (unregistering): Port device team_slave_1 removed [ 155.360314][ T12] team0 (unregistering): Port device team_slave_0 removed [ 155.437790][T10006] netlink: 4088 bytes leftover after parsing attributes in process `syz.4.1173'. [ 155.453495][T10006] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.818246][T10000] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 155.884971][ T5848] Bluetooth: hci3: command tx timeout [ 155.926715][T10010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.941015][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.963266][ T9784] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.975585][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1176'. [ 155.987274][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.994455][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.007265][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.014463][ T7490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.038973][ T5848] Bluetooth: hci2: command tx timeout [ 156.100250][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 156.118539][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1176'. [ 156.275926][ T9784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.315939][ T9784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.338058][ T9810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.375564][ T9810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.401094][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 156.422147][ T9810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.431830][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1180'. [ 156.433967][ T9810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.627242][T10042] netlink: 'syz.0.1183': attribute type 7 has an invalid length. [ 156.656765][T10043] netlink: 'syz.0.1183': attribute type 7 has an invalid length. [ 156.689322][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.745255][ T9810] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.785217][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.792396][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.836589][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.843757][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.884392][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.995206][ T9810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.030931][ T9784] veth0_vlan: entered promiscuous mode [ 157.055170][ T9784] veth1_vlan: entered promiscuous mode [ 157.078636][ T9784] veth0_macvtap: entered promiscuous mode [ 157.089733][ T9784] veth1_macvtap: entered promiscuous mode [ 157.105250][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.115942][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.125899][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.137026][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.148313][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.158478][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.169042][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.179979][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.191561][ T9784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.200368][ T9784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.209162][ T9784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.218493][ T9784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.283658][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 157.409604][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.420528][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.437091][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.448537][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.512057][T10077] netlink: 'syz.1.1190': attribute type 2 has an invalid length. [ 157.525542][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.698057][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 157.763434][ T9810] veth0_vlan: entered promiscuous mode [ 157.793463][ T9810] veth1_vlan: entered promiscuous mode [ 157.865375][ T9810] veth0_macvtap: entered promiscuous mode [ 157.886694][ T9810] veth1_macvtap: entered promiscuous mode [ 157.916465][ T9810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.934053][ T9810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.944352][ T9810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.962903][ T5848] Bluetooth: hci3: command tx timeout [ 157.970991][ T9810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.990890][ T9810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.005172][ T9810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.024457][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.038548][ T9810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.049457][ T9810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.059411][ T9810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.072337][ T9810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.083583][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.103009][T10099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 158.114261][T10099] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 158.125396][T10099] gretap1: entered promiscuous mode [ 158.132367][T10099] gretap1: entered allmulticast mode [ 158.154933][ T9810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.178308][ T9810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.187054][ T9810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.222211][ T9810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.259445][T10107] netlink: 'syz.1.1200': attribute type 2 has an invalid length. [ 158.359671][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.441827][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.472561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.480584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.504849][ T7490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.514079][ T7490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.713630][ T2967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.014159][T10114] netlink: 'syz.1.1202': attribute type 3 has an invalid length. [ 159.043800][T10114] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 159.064816][T10114] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.1202'. [ 159.112374][ T2967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.396432][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.427029][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.448313][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.477294][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.488002][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.496406][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.505406][ T2967] bridge_slave_1: left allmulticast mode [ 159.554227][ T2967] bridge_slave_1: left promiscuous mode [ 159.576900][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.614506][ T2967] bridge_slave_0: left allmulticast mode [ 159.620358][ T2967] bridge_slave_0: left promiscuous mode [ 159.626066][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.930697][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.944957][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.955445][ T2967] bond0 (unregistering): Released all slaves [ 160.417701][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.429586][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.451958][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.488985][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.498355][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.505715][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.606761][ T2967] hsr_slave_0: left promiscuous mode [ 160.622311][ T2967] hsr_slave_1: left promiscuous mode [ 160.633396][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.642132][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.660861][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.669265][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.693900][ T2967] veth1_macvtap: left promiscuous mode [ 160.699737][ T2967] veth0_macvtap: left promiscuous mode [ 160.705292][ T2967] veth1_vlan: left promiscuous mode [ 160.710755][ T2967] veth0_vlan: left promiscuous mode [ 161.143066][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 161.187756][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 161.558004][ T5848] Bluetooth: hci2: command tx timeout [ 161.561308][T10137] chnl_net:caif_netlink_parms(): no params data found [ 161.815685][T10189] xt_hashlimit: size too large, truncated to 1048576 [ 161.864886][T10189] xt_hashlimit: max too large, truncated to 1048576 [ 161.898878][T10189] xt_hashlimit: overflow, try lower: 0/0 [ 161.930842][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.944447][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.973164][T10137] bridge_slave_0: entered allmulticast mode [ 161.986673][T10137] bridge_slave_0: entered promiscuous mode [ 161.997080][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.010530][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.017758][T10137] bridge_slave_1: entered allmulticast mode [ 162.025583][T10137] bridge_slave_1: entered promiscuous mode [ 162.160117][T10204] __nla_validate_parse: 1 callbacks suppressed [ 162.160135][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 162.193138][T10137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.205498][T10137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.426430][T10137] team0: Port device team_slave_0 added [ 162.462290][T10137] team0: Port device team_slave_1 added [ 162.490707][ T2967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.583448][ T2967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.598184][ T5848] Bluetooth: hci3: command tx timeout [ 162.599596][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 162.645086][T10137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.658546][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.687003][T10137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.707105][T10137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.714931][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.718636][T10222] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.1229'. [ 162.748796][T10137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.831420][ T2967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.844667][T10223] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1230'. [ 162.854601][T10223] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1230'. [ 162.927515][ T2967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.981805][T10137] hsr_slave_0: entered promiscuous mode [ 162.993906][T10137] hsr_slave_1: entered promiscuous mode [ 163.002516][T10137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.016031][T10137] Cannot create hsr debugfs directory [ 163.024871][T10160] chnl_net:caif_netlink_parms(): no params data found [ 163.035945][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1232'. [ 163.202725][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 163.409109][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.420007][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.427538][T10160] bridge_slave_0: entered allmulticast mode [ 163.438257][T10160] bridge_slave_0: entered promiscuous mode [ 163.446338][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.456768][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.477659][T10160] bridge_slave_1: entered allmulticast mode [ 163.485609][T10160] bridge_slave_1: entered promiscuous mode [ 163.521189][ T2967] bridge_slave_1: left allmulticast mode [ 163.526894][ T2967] bridge_slave_1: left promiscuous mode [ 163.532838][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.553726][ T2967] bridge_slave_0: left allmulticast mode [ 163.562539][ T2967] bridge_slave_0: left promiscuous mode [ 163.572690][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.622421][T10273] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 163.641349][ T5848] Bluetooth: hci2: command tx timeout [ 164.016236][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.030730][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.043953][ T2967] bond0 (unregistering): Released all slaves [ 164.064229][T10160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.083466][T10160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.096875][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 164.133461][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 164.311047][T10160] team0: Port device team_slave_0 added [ 164.341168][T10160] team0: Port device team_slave_1 added [ 164.475794][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 164.492486][T10160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.508175][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.535598][T10160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.549842][T10160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.556813][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.587133][T10160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.678093][ T5848] Bluetooth: hci3: command tx timeout [ 164.716557][T10323] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 164.728485][T10323] netlink: 'syz.1.1257': attribute type 2 has an invalid length. [ 164.812231][T10325] netlink: 'syz.0.1258': attribute type 3 has an invalid length. [ 164.850547][ T2967] hsr_slave_0: left promiscuous mode [ 164.856639][ T2967] hsr_slave_1: left promiscuous mode [ 164.871411][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.890538][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.902530][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.910151][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.936181][ T2967] veth1_macvtap: left promiscuous mode [ 164.944842][ T2967] veth0_macvtap: left promiscuous mode [ 164.950552][ T2967] veth1_vlan: left promiscuous mode [ 164.955975][ T2967] veth0_vlan: left promiscuous mode [ 165.364904][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 165.405041][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 165.722696][ T5848] Bluetooth: hci2: command tx timeout [ 165.836432][T10160] hsr_slave_0: entered promiscuous mode [ 165.844405][T10160] hsr_slave_1: entered promiscuous mode [ 165.850704][T10160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.861912][T10160] Cannot create hsr debugfs directory [ 166.227293][T10137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.271447][T10137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.298765][T10137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.337784][T10137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.492741][T10137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.512249][T10137] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.563506][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.570727][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.593361][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.600567][ T7490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.615762][T10371] netlink: 'syz.4.1271': attribute type 20 has an invalid length. [ 166.758985][ T5848] Bluetooth: hci3: command tx timeout [ 166.793783][T10160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.823827][T10160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.851106][T10160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.871534][T10160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.105271][T10160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.140123][T10137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.169903][T10401] bond0: entered promiscuous mode [ 167.174988][T10401] bond0: entered allmulticast mode [ 167.193731][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.410705][T10401] bond0 (unregistering): Released all slaves [ 167.480139][T10160] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.528151][T10422] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 167.545030][T10422] __nla_validate_parse: 4 callbacks suppressed [ 167.545049][T10422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1285'. [ 167.552872][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.567500][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.630505][T10137] veth0_vlan: entered promiscuous mode [ 167.651591][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.658759][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.736877][T10137] veth1_vlan: entered promiscuous mode [ 167.798766][ T5848] Bluetooth: hci2: command tx timeout [ 167.861087][T10137] veth0_macvtap: entered promiscuous mode [ 167.890800][T10137] veth1_macvtap: entered promiscuous mode [ 167.953487][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.970053][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.998003][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.017726][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.049196][T10137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.062378][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.065552][T10445] nbd: must specify an index to disconnect [ 168.072956][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.074199][T10137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.103785][T10137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.112704][T10137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.122352][T10137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.131466][T10137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.215995][T10456] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1295'. [ 168.300559][T10160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.379097][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.386965][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.449349][T10160] veth0_vlan: entered promiscuous mode [ 168.484935][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.502084][T10160] veth1_vlan: entered promiscuous mode [ 168.527949][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.611115][T10471] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1297'. [ 168.649965][T10473] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 168.685784][T10160] veth0_macvtap: entered promiscuous mode [ 168.701998][T10160] veth1_macvtap: entered promiscuous mode [ 168.717188][T10160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.728483][T10160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.738617][T10160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.749284][T10160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.760171][T10160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.771060][T10160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.786888][T10160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.843695][ T5848] Bluetooth: hci3: command tx timeout [ 168.864122][T10160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.876195][T10160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.892188][T10160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.904388][T10160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.920359][T10160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.955792][T10160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.965527][T10160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.976902][T10160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.985793][T10160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.096151][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.123823][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.174350][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.208208][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.250804][T10494] netlink: 'syz.0.1306': attribute type 13 has an invalid length. [ 169.259036][T10494] macvtap0: left promiscuous mode [ 169.264111][T10494] macvtap0: entered allmulticast mode [ 169.270951][T10494] macvtap0: refused to change device tx_queue_len [ 169.512763][T10503] FAULT_INJECTION: forcing a failure. [ 169.512763][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.528571][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.0.1307 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 169.539377][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.549468][T10503] Call Trace: [ 169.552762][T10503] [ 169.555702][T10503] dump_stack_lvl+0x241/0x360 [ 169.560407][T10503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.565600][T10503] ? __pfx__printk+0x10/0x10 [ 169.570214][T10503] should_fail_ex+0x3b0/0x4e0 [ 169.574927][T10503] _copy_from_user+0x2f/0xc0 [ 169.579520][T10503] move_addr_to_kernel+0x82/0x150 [ 169.584545][T10503] __sys_connect+0xc1/0x300 [ 169.589067][T10503] ? __pfx___sys_connect+0x10/0x10 [ 169.594224][T10503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.600585][T10503] ? do_syscall_64+0x100/0x230 [ 169.605350][T10503] __x64_sys_connect+0x7a/0x90 [ 169.610132][T10503] do_syscall_64+0xf3/0x230 [ 169.614649][T10503] ? clear_bhb_loop+0x35/0x90 [ 169.619344][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.625255][T10503] RIP: 0033:0x7f3f2fb7e719 [ 169.629691][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.649339][T10503] RSP: 002b:00007f3f30932038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 169.657791][T10503] RAX: ffffffffffffffda RBX: 00007f3f2fd36058 RCX: 00007f3f2fb7e719 [ 169.665763][T10503] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000005 [ 169.673737][T10503] RBP: 00007f3f30932090 R08: 0000000000000000 R09: 0000000000000000 [ 169.681816][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.689799][T10503] R13: 0000000000000000 R14: 00007f3f2fd36058 R15: 00007ffe96c616a8 [ 169.697823][T10503] [ 169.793394][T10508] netlink: 'syz.4.1310': attribute type 9 has an invalid length. [ 169.803411][T10508] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1310'. [ 169.828359][T10515] lo speed is unknown, defaulting to 1000 [ 169.836474][T10515] lo speed is unknown, defaulting to 1000 [ 169.873338][T10515] lo speed is unknown, defaulting to 1000 [ 169.883695][T10515] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.921366][T10515] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 169.994955][T10515] lo speed is unknown, defaulting to 1000 [ 170.124692][T10515] lo speed is unknown, defaulting to 1000 [ 170.143160][T10515] lo speed is unknown, defaulting to 1000 [ 170.169759][T10515] lo speed is unknown, defaulting to 1000 [ 170.176522][T10515] lo speed is unknown, defaulting to 1000 [ 170.371345][ T2967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.453533][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.464185][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.472529][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.481813][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.490654][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.498854][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.583500][T10524] lo speed is unknown, defaulting to 1000 [ 170.662912][T10524] chnl_net:caif_netlink_parms(): no params data found [ 170.715839][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.723370][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.730865][T10524] bridge_slave_0: entered allmulticast mode [ 170.737526][T10524] bridge_slave_0: entered promiscuous mode [ 170.746947][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.754406][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.762454][T10524] bridge_slave_1: entered allmulticast mode [ 170.769383][T10524] bridge_slave_1: entered promiscuous mode [ 170.793833][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.805974][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.833270][T10524] team0: Port device team_slave_0 added [ 170.842327][T10524] team0: Port device team_slave_1 added [ 170.909897][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.916981][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.027272][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.076472][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.094241][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.141531][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 171.155857][T10549] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.1316'. [ 171.164134][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.177050][T10548] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1320'. [ 171.186660][T10549] netlink: 'syz.4.1316': attribute type 2 has an invalid length. [ 171.299215][T10524] hsr_slave_0: entered promiscuous mode [ 171.316063][T10524] hsr_slave_1: entered promiscuous mode [ 171.343428][T10524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.360164][T10524] Cannot create hsr debugfs directory [ 171.366497][T10558] FAULT_INJECTION: forcing a failure. [ 171.366497][T10558] name failslab, interval 1, probability 0, space 0, times 1 [ 171.386754][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.395170][T10558] CPU: 1 UID: 0 PID: 10558 Comm: syz.1.1322 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 171.405969][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.416046][T10558] Call Trace: [ 171.419345][T10558] [ 171.422291][T10558] dump_stack_lvl+0x241/0x360 [ 171.426992][T10558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.432203][T10558] ? __pfx__printk+0x10/0x10 [ 171.436801][T10558] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 171.442694][T10558] ? __pfx___might_resched+0x10/0x10 [ 171.447982][T10558] ? validate_chain+0x11e/0x5920 [ 171.452930][T10558] should_fail_ex+0x3b0/0x4e0 [ 171.457611][T10558] ? sock_alloc_inode+0x28/0xc0 [ 171.462461][T10558] should_failslab+0xac/0x100 [ 171.467150][T10558] ? sock_alloc_inode+0x28/0xc0 [ 171.472007][T10558] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 171.477726][T10558] sock_alloc_inode+0x28/0xc0 [ 171.482413][T10558] ? __pfx_sock_alloc_inode+0x10/0x10 [ 171.487784][T10558] alloc_inode+0x65/0x1a0 [ 171.492114][T10558] __sock_create+0x123/0x940 [ 171.496715][T10558] mptcp_subflow_create_socket+0x132/0xdf0 [ 171.502518][T10558] ? look_up_lock_class+0x77/0x170 [ 171.507633][T10558] ? register_lock_class+0x102/0x980 [ 171.512950][T10558] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 171.519279][T10558] ? __pfx_register_lock_class+0x10/0x10 [ 171.524910][T10558] ? mark_lock+0x9a/0x360 [ 171.529241][T10558] __mptcp_nmpc_sk+0x178/0x800 [ 171.534004][T10558] ? __lock_acquire+0x1384/0x2050 [ 171.539036][T10558] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 171.544322][T10558] mptcp_connect+0x71/0xb20 [ 171.549012][T10558] ? mark_lock+0x9a/0x360 [ 171.553334][T10558] __inet_stream_connect+0x262/0xf30 [ 171.558625][T10558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.564985][T10558] ? __local_bh_enable_ip+0x168/0x200 [ 171.570356][T10558] ? lockdep_hardirqs_on+0x99/0x150 [ 171.575549][T10558] ? __pfx___inet_stream_connect+0x10/0x10 [ 171.581371][T10558] ? __local_bh_enable_ip+0x168/0x200 [ 171.586754][T10558] ? inet_stream_connect+0x50/0xa0 [ 171.591870][T10558] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 171.597591][T10558] inet_stream_connect+0x65/0xa0 [ 171.602532][T10558] ? __pfx_inet_stream_connect+0x10/0x10 [ 171.608182][T10558] __sys_connect+0x2d1/0x300 [ 171.612787][T10558] ? __pfx___sys_connect+0x10/0x10 [ 171.617911][T10558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.624270][T10558] ? do_syscall_64+0x100/0x230 [ 171.628110][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.629039][T10558] __x64_sys_connect+0x7a/0x90 [ 171.639557][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.640750][T10558] do_syscall_64+0xf3/0x230 [ 171.640780][T10558] ? clear_bhb_loop+0x35/0x90 [ 171.648873][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.652187][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.652215][T10558] RIP: 0033:0x7fa844d7e719 [ 171.652233][T10558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.659145][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.663893][T10558] RSP: 002b:00007fa845af3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 171.663928][T10558] RAX: ffffffffffffffda RBX: 00007fa844f36058 RCX: 00007fa844d7e719 [ 171.663944][T10558] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000005 [ 171.671185][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.674213][T10558] RBP: 00007fa845af3090 R08: 0000000000000000 R09: 0000000000000000 [ 171.674231][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.674243][T10558] R13: 0000000000000000 R14: 00007fa844f36058 R15: 00007fff4bd91318 [ 171.674272][T10558] [ 171.777813][T10558] socket: no more sockets [ 171.787800][ T2967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.909641][T10564] sctp: [Deprecated]: syz.1.1324 (pid 10564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.909641][T10564] Use struct sctp_sack_info instead [ 171.980342][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'. [ 172.014232][ T2967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.173355][ T2967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.272450][T10555] lo speed is unknown, defaulting to 1000 [ 172.443113][T10524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.548435][ T5152] Bluetooth: hci2: command tx timeout [ 172.580608][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.623435][T10524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.746026][T10524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.793057][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1336'. [ 172.859690][T10610] FAULT_INJECTION: forcing a failure. [ 172.859690][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 172.880664][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.1.1335 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 172.891453][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.901577][T10610] Call Trace: [ 172.904850][T10610] [ 172.907779][T10610] dump_stack_lvl+0x241/0x360 [ 172.912470][T10610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.917677][T10610] ? __pfx__printk+0x10/0x10 [ 172.922263][T10610] ? fs_reclaim_acquire+0x93/0x130 [ 172.927384][T10610] ? __pfx___might_resched+0x10/0x10 [ 172.932720][T10610] should_fail_ex+0x3b0/0x4e0 [ 172.937407][T10610] ? security_inode_alloc+0x37/0x310 [ 172.942727][T10610] should_failslab+0xac/0x100 [ 172.947430][T10610] ? security_inode_alloc+0x37/0x310 [ 172.952724][T10610] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 172.958093][T10610] security_inode_alloc+0x37/0x310 [ 172.963208][T10610] inode_init_always_gfp+0x988/0xcd0 [ 172.968490][T10610] ? __pfx_sock_alloc_inode+0x10/0x10 [ 172.973863][T10610] alloc_inode+0x9f/0x1a0 [ 172.978199][T10610] __sock_create+0x123/0x940 [ 172.982811][T10610] mptcp_subflow_create_socket+0x132/0xdf0 [ 172.988610][T10610] ? look_up_lock_class+0x77/0x170 [ 172.993724][T10610] ? register_lock_class+0x102/0x980 [ 172.999031][T10610] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 173.005351][T10610] ? __pfx_register_lock_class+0x10/0x10 [ 173.010978][T10610] ? mark_lock+0x9a/0x360 [ 173.015299][T10610] __mptcp_nmpc_sk+0x178/0x800 [ 173.020055][T10610] ? __lock_acquire+0x1384/0x2050 [ 173.025165][T10610] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 173.030468][T10610] mptcp_connect+0x71/0xb20 [ 173.034983][T10610] ? mark_lock+0x9a/0x360 [ 173.039306][T10610] __inet_stream_connect+0x262/0xf30 [ 173.044596][T10610] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.050930][T10610] ? __local_bh_enable_ip+0x168/0x200 [ 173.056299][T10610] ? lockdep_hardirqs_on+0x99/0x150 [ 173.061487][T10610] ? __pfx___inet_stream_connect+0x10/0x10 [ 173.067280][T10610] ? __local_bh_enable_ip+0x168/0x200 [ 173.072650][T10610] ? inet_stream_connect+0x50/0xa0 [ 173.077757][T10610] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 173.083478][T10610] inet_stream_connect+0x65/0xa0 [ 173.088416][T10610] ? __pfx_inet_stream_connect+0x10/0x10 [ 173.094038][T10610] __sys_connect+0x2d1/0x300 [ 173.098626][T10610] ? __pfx___sys_connect+0x10/0x10 [ 173.103737][T10610] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.110064][T10610] ? do_syscall_64+0x100/0x230 [ 173.114819][T10610] __x64_sys_connect+0x7a/0x90 [ 173.119577][T10610] do_syscall_64+0xf3/0x230 [ 173.124071][T10610] ? clear_bhb_loop+0x35/0x90 [ 173.128770][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.134674][T10610] RIP: 0033:0x7fa844d7e719 [ 173.139098][T10610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.158695][T10610] RSP: 002b:00007fa845af3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 173.167102][T10610] RAX: ffffffffffffffda RBX: 00007fa844f36058 RCX: 00007fa844d7e719 [ 173.175066][T10610] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000005 [ 173.183032][T10610] RBP: 00007fa845af3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.191040][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.199458][T10610] R13: 0000000000000000 R14: 00007fa844f36058 R15: 00007fff4bd91318 [ 173.207518][T10610] [ 173.221009][T10610] socket: no more sockets [ 173.229735][T10524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.289493][T10600] lo speed is unknown, defaulting to 1000 [ 173.292819][T10555] chnl_net:caif_netlink_parms(): no params data found [ 173.376582][T10618] atomic_op ffff888029104198 conn xmit_atomic 0000000000000000 [ 173.569947][T10555] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.577145][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.606047][T10555] bridge_slave_0: entered allmulticast mode [ 173.627714][T10555] bridge_slave_0: entered promiscuous mode [ 173.718293][ T5152] Bluetooth: hci3: command tx timeout [ 173.741755][ T2967] bridge_slave_1: left allmulticast mode [ 173.747598][ T2967] bridge_slave_1: left promiscuous mode [ 173.756617][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.768306][ T2967] bridge_slave_0: left allmulticast mode [ 173.773989][ T2967] bridge_slave_0: left promiscuous mode [ 173.780237][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.793372][ T2967] bridge_slave_1: left allmulticast mode [ 173.799830][ T2967] bridge_slave_1: left promiscuous mode [ 173.805736][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.816505][ T2967] bridge_slave_0: left allmulticast mode [ 173.822569][ T2967] bridge_slave_0: left promiscuous mode [ 173.828520][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.388505][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.401151][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.412725][ T2967] bond0 (unregistering): Released all slaves [ 174.521498][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.533304][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.544009][ T2967] bond0 (unregistering): Released all slaves [ 174.558789][T10555] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.571932][T10555] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.584308][T10555] bridge_slave_1: entered allmulticast mode [ 174.595065][T10555] bridge_slave_1: entered promiscuous mode [ 174.608691][ T5152] Bluetooth: hci2: command tx timeout [ 174.915419][T10653] FAULT_INJECTION: forcing a failure. [ 174.915419][T10653] name failslab, interval 1, probability 0, space 0, times 0 [ 174.961887][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.971322][T10653] CPU: 1 UID: 0 PID: 10653 Comm: syz.4.1349 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 174.982110][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.992255][T10653] Call Trace: [ 174.995537][T10653] [ 174.998468][T10653] dump_stack_lvl+0x241/0x360 [ 175.003150][T10653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.008351][T10653] ? __pfx__printk+0x10/0x10 [ 175.012947][T10653] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 175.018503][T10653] ? __pfx___might_resched+0x10/0x10 [ 175.023799][T10653] should_fail_ex+0x3b0/0x4e0 [ 175.028480][T10653] ? sk_prot_alloc+0x58/0x210 [ 175.033155][T10653] should_failslab+0xac/0x100 [ 175.037853][T10653] ? sk_prot_alloc+0x58/0x210 [ 175.042552][T10653] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 175.047946][T10653] sk_prot_alloc+0x58/0x210 [ 175.052462][T10653] ? sk_alloc+0x26/0x370 [ 175.056708][T10653] sk_alloc+0x38/0x370 [ 175.060782][T10653] inet6_create+0x6d4/0x1100 [ 175.065403][T10653] ? inet6_create+0x78/0x1100 [ 175.070089][T10653] ? __sock_create+0x337/0x940 [ 175.074855][T10653] __sock_create+0x490/0x940 [ 175.079459][T10653] mptcp_subflow_create_socket+0x132/0xdf0 [ 175.085266][T10653] ? look_up_lock_class+0x77/0x170 [ 175.090386][T10653] ? register_lock_class+0x102/0x980 [ 175.095709][T10653] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 175.102039][T10653] ? __pfx_register_lock_class+0x10/0x10 [ 175.107677][T10653] ? mark_lock+0x9a/0x360 [ 175.112006][T10653] __mptcp_nmpc_sk+0x178/0x800 [ 175.116771][T10653] ? __lock_acquire+0x1384/0x2050 [ 175.121803][T10653] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 175.127102][T10653] mptcp_connect+0x71/0xb20 [ 175.131608][T10653] ? mark_lock+0x9a/0x360 [ 175.135945][T10653] __inet_stream_connect+0x262/0xf30 [ 175.141230][T10653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.147562][T10653] ? __local_bh_enable_ip+0x168/0x200 [ 175.152936][T10653] ? lockdep_hardirqs_on+0x99/0x150 [ 175.158143][T10653] ? __pfx___inet_stream_connect+0x10/0x10 [ 175.163952][T10653] ? __local_bh_enable_ip+0x168/0x200 [ 175.169333][T10653] ? inet_stream_connect+0x50/0xa0 [ 175.174438][T10653] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 175.180162][T10653] inet_stream_connect+0x65/0xa0 [ 175.185098][T10653] ? __pfx_inet_stream_connect+0x10/0x10 [ 175.190726][T10653] __sys_connect+0x2d1/0x300 [ 175.195328][T10653] ? __pfx___sys_connect+0x10/0x10 [ 175.200456][T10653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.206784][T10653] ? do_syscall_64+0x100/0x230 [ 175.211552][T10653] __x64_sys_connect+0x7a/0x90 [ 175.216321][T10653] do_syscall_64+0xf3/0x230 [ 175.220827][T10653] ? clear_bhb_loop+0x35/0x90 [ 175.225508][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.231400][T10653] RIP: 0033:0x7fe75f17e719 [ 175.235812][T10653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.255424][T10653] RSP: 002b:00007fe75fed8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 175.263838][T10653] RAX: ffffffffffffffda RBX: 00007fe75f336058 RCX: 00007fe75f17e719 [ 175.271810][T10653] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000005 [ 175.279778][T10653] RBP: 00007fe75fed8090 R08: 0000000000000000 R09: 0000000000000000 [ 175.287749][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.295718][T10653] R13: 0000000000000000 R14: 00007fe75f336058 R15: 00007ffea9bd26e8 [ 175.303701][T10653] [ 175.313497][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.417250][T10524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.485721][T10555] team0: Port device team_slave_0 added [ 175.492375][T10524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.514772][T10524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.541038][T10555] team0: Port device team_slave_1 added [ 175.563442][T10524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.656748][T10664] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1355'. [ 175.666756][T10664] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1355'. [ 175.677744][T10664] netlink: 'syz.0.1355': attribute type 6 has an invalid length. [ 175.685877][T10664] netlink: 'syz.0.1355': attribute type 5 has an invalid length. [ 175.693898][T10664] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1355'. [ 175.715955][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.740583][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.771062][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.797981][ T5152] Bluetooth: hci3: command tx timeout [ 175.843013][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.866477][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.917973][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.103569][T10555] hsr_slave_0: entered promiscuous mode [ 176.118112][T10555] hsr_slave_1: entered promiscuous mode [ 176.128734][T10555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.141895][T10555] Cannot create hsr debugfs directory [ 176.273365][T10664] lo speed is unknown, defaulting to 1000 [ 176.526637][ T2967] hsr_slave_0: left promiscuous mode [ 176.546398][ T2967] hsr_slave_1: left promiscuous mode [ 176.559487][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.570223][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.588800][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.596255][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.607649][ T2967] hsr_slave_0: left promiscuous mode [ 176.614337][ T2967] hsr_slave_1: left promiscuous mode [ 176.625128][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.633030][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.641174][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.648806][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.676672][ T2967] veth1_macvtap: left promiscuous mode [ 176.682401][ T2967] veth0_macvtap: left promiscuous mode [ 176.688141][ T2967] veth1_vlan: left promiscuous mode [ 176.688337][ T5152] Bluetooth: hci2: command tx timeout [ 176.693428][ T2967] veth0_vlan: left promiscuous mode [ 176.709634][ T2967] veth1_macvtap: left promiscuous mode [ 176.715144][ T2967] veth0_macvtap: left promiscuous mode [ 176.720883][ T2967] veth1_vlan: left promiscuous mode [ 176.726199][ T2967] veth0_vlan: left promiscuous mode [ 177.323379][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 177.387025][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 177.888227][ T5152] Bluetooth: hci3: command tx timeout [ 178.040862][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 178.083421][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 178.527231][T10716] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1367'. [ 178.710438][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.727501][T10524] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.759536][ T5152] Bluetooth: hci2: command tx timeout [ 178.793711][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.801034][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.859928][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.867093][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.045165][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 179.046633][T10737] FAULT_INJECTION: forcing a failure. [ 179.046633][T10737] name failslab, interval 1, probability 0, space 0, times 0 [ 179.093666][T10737] CPU: 1 UID: 0 PID: 10737 Comm: syz.1.1372 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 179.104949][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.115025][T10737] Call Trace: [ 179.118322][T10737] [ 179.121276][T10737] dump_stack_lvl+0x241/0x360 [ 179.126001][T10737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.131198][T10737] ? __pfx__printk+0x10/0x10 [ 179.135809][T10737] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 179.141281][T10737] ? __pfx___might_resched+0x10/0x10 [ 179.146596][T10737] should_fail_ex+0x3b0/0x4e0 [ 179.151303][T10737] should_failslab+0xac/0x100 [ 179.156011][T10737] ? subflow_ulp_init+0xcb/0x560 [ 179.160978][T10737] __kmalloc_cache_noprof+0x6c/0x2c0 [ 179.166289][T10737] ? do_syscall_64+0xf3/0x230 [ 179.170994][T10737] subflow_ulp_init+0xcb/0x560 [ 179.175791][T10737] tcp_set_ulp+0x537/0x5f0 [ 179.180250][T10737] mptcp_subflow_create_socket+0x761/0xdf0 [ 179.186085][T10737] ? look_up_lock_class+0x77/0x170 [ 179.191231][T10737] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 179.197677][T10737] ? __pfx_register_lock_class+0x10/0x10 [ 179.203344][T10737] ? mark_lock+0x9a/0x360 [ 179.207695][T10737] __mptcp_nmpc_sk+0x178/0x800 [ 179.212483][T10737] ? __lock_acquire+0x1384/0x2050 [ 179.217567][T10737] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 179.222893][T10737] mptcp_connect+0x71/0xb20 [ 179.227498][T10737] ? mark_lock+0x9a/0x360 [ 179.231860][T10737] __inet_stream_connect+0x262/0xf30 [ 179.237181][T10737] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.243545][T10737] ? __local_bh_enable_ip+0x168/0x200 [ 179.248942][T10737] ? lockdep_hardirqs_on+0x99/0x150 [ 179.254163][T10737] ? __pfx___inet_stream_connect+0x10/0x10 [ 179.259989][T10737] ? __local_bh_enable_ip+0x168/0x200 [ 179.265395][T10737] ? inet_stream_connect+0x50/0xa0 [ 179.270532][T10737] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 179.276288][T10737] inet_stream_connect+0x65/0xa0 [ 179.281248][T10737] ? __pfx_inet_stream_connect+0x10/0x10 [ 179.286899][T10737] __sys_connect+0x2d1/0x300 [ 179.291510][T10737] ? __pfx___sys_connect+0x10/0x10 [ 179.296656][T10737] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.303009][T10737] ? do_syscall_64+0x100/0x230 [ 179.306803][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1375'. [ 179.307785][T10737] __x64_sys_connect+0x7a/0x90 [ 179.307813][T10737] do_syscall_64+0xf3/0x230 [ 179.307835][T10737] ? clear_bhb_loop+0x35/0x90 [ 179.330632][T10737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.336538][T10737] RIP: 0033:0x7fa844d7e719 [ 179.340943][T10737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.360552][T10737] RSP: 002b:00007fa845af3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 179.368998][T10737] RAX: ffffffffffffffda RBX: 00007fa844f36058 RCX: 00007fa844d7e719 [ 179.376978][T10737] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000005 [ 179.384971][T10737] RBP: 00007fa845af3090 R08: 0000000000000000 R09: 0000000000000000 [ 179.392941][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.400908][T10737] R13: 0000000000000000 R14: 00007fa844f36058 R15: 00007fff4bd91318 [ 179.408883][T10737] [ 179.438674][T10745] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 179.446434][T10745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1375'. [ 179.456419][T10747] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1375'. [ 179.871101][T10524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.903969][T10524] veth0_vlan: entered promiscuous mode [ 179.914763][T10524] veth1_vlan: entered promiscuous mode [ 179.942384][T10524] veth0_macvtap: entered promiscuous mode [ 179.958549][ T5152] Bluetooth: hci3: command tx timeout [ 179.975178][T10524] veth1_macvtap: entered promiscuous mode [ 179.994964][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.005533][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.016456][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.027328][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.040191][T10524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.109919][T10555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.143108][T10555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.153143][T10555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.170856][T10555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.196212][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.213924][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.259899][T10524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.299560][T10524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.314076][T10524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.333394][T10524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.364346][T10524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.410960][T10791] FAULT_INJECTION: forcing a failure. [ 180.410960][T10791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.440482][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.4.1386 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 180.451302][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.461376][T10791] Call Trace: [ 180.464660][T10791] [ 180.467585][T10791] dump_stack_lvl+0x241/0x360 [ 180.472273][T10791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.477468][T10791] ? __pfx__printk+0x10/0x10 [ 180.482057][T10791] ? snprintf+0xda/0x120 [ 180.486385][T10791] should_fail_ex+0x3b0/0x4e0 [ 180.491078][T10791] _copy_to_user+0x31/0xb0 [ 180.495510][T10791] simple_read_from_buffer+0xca/0x150 [ 180.500899][T10791] proc_fail_nth_read+0x1e9/0x250 [ 180.505938][T10791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.511491][T10791] ? rw_verify_area+0x55e/0x6f0 [ 180.516358][T10791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.521911][T10791] vfs_read+0x1fc/0xb70 [ 180.526083][T10791] ? fdget_pos+0x24e/0x320 [ 180.530501][T10791] ? __pfx_vfs_read+0x10/0x10 [ 180.535183][T10791] ? __fget_files+0x3f3/0x470 [ 180.539866][T10791] ? fdget_pos+0x24e/0x320 [ 180.544281][T10791] ksys_read+0x183/0x2b0 [ 180.548532][T10791] ? __pfx_ksys_read+0x10/0x10 [ 180.553297][T10791] ? do_syscall_64+0x100/0x230 [ 180.558064][T10791] ? do_syscall_64+0xb6/0x230 [ 180.562738][T10791] do_syscall_64+0xf3/0x230 [ 180.567242][T10791] ? clear_bhb_loop+0x35/0x90 [ 180.571921][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.577809][T10791] RIP: 0033:0x7fe75f17d15c [ 180.582232][T10791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 180.601843][T10791] RSP: 002b:00007fe75fed8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.610260][T10791] RAX: ffffffffffffffda RBX: 00007fe75f336058 RCX: 00007fe75f17d15c [ 180.618242][T10791] RDX: 000000000000000f RSI: 00007fe75fed80a0 RDI: 0000000000000006 [ 180.626212][T10791] RBP: 00007fe75fed8090 R08: 0000000000000000 R09: 0000000000000000 [ 180.634179][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.642155][T10791] R13: 0000000000000000 R14: 00007fe75f336058 R15: 00007ffea9bd26e8 [ 180.650167][T10791] [ 180.832396][T10555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.162568][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 182.544270][T10555] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.560381][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.567546][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.661572][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.668784][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.703392][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.711326][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.731005][T10832] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1397'. [ 182.759240][T10832] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.806770][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.831762][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.951741][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 183.097387][T10555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.117951][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1401'. [ 183.158022][T10852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1403'. [ 183.189000][T10852] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1403'. [ 183.201705][T10555] veth0_vlan: entered promiscuous mode [ 183.224179][T10555] veth1_vlan: entered promiscuous mode [ 183.282938][T10555] veth0_macvtap: entered promiscuous mode [ 183.294137][T10555] veth1_macvtap: entered promiscuous mode [ 183.316836][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.328509][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.338784][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.356501][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.366769][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.378728][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.400081][T10555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.412159][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.433607][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.446169][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.466264][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.488336][T10555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.497031][T10864] netlink: 'syz.4.1406': attribute type 3 has an invalid length. [ 183.540486][T10555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.567156][T10555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.593722][T10555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.628264][T10555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.763337][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.836081][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.864134][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.877424][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.899762][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.908459][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.002966][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.072028][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.161064][ T53] bridge_slave_1: left allmulticast mode [ 184.166718][ T53] bridge_slave_1: left promiscuous mode [ 184.172965][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.182587][ T53] bridge_slave_0: left allmulticast mode [ 184.188522][ T53] bridge_slave_0: left promiscuous mode [ 184.194151][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.626738][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.671291][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.692931][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.710580][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.714463][ T53] bond0 (unregistering): Released all slaves [ 184.719976][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.737648][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.747062][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.755608][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.926003][T10875] lo speed is unknown, defaulting to 1000 [ 185.067505][T10875] chnl_net:caif_netlink_parms(): no params data found [ 185.127565][ T53] hsr_slave_0: left promiscuous mode [ 185.133716][ T53] hsr_slave_1: left promiscuous mode [ 185.153995][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.161968][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.173180][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.180681][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.230829][ T53] veth1_macvtap: left promiscuous mode [ 185.236419][ T53] veth0_macvtap: left promiscuous mode [ 185.264509][T10883] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 185.283868][ T53] veth1_vlan: left promiscuous mode [ 185.308974][T10883] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 185.330016][ T53] veth0_vlan: left promiscuous mode [ 185.398458][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.412484][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.426586][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.478710][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.500946][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.509142][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.559607][T10899] __nla_validate_parse: 2 callbacks suppressed [ 185.559626][T10899] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1415'. [ 185.942897][ T53] team0 (unregistering): Port device team_slave_1 removed [ 185.986620][ T53] team0 (unregistering): Port device team_slave_0 removed [ 186.392735][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 186.407388][T10896] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1415'. [ 186.584102][T10909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.606606][T10875] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.639481][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.650335][T10875] bridge_slave_0: entered allmulticast mode [ 186.658392][T10875] bridge_slave_0: entered promiscuous mode [ 186.668871][T10875] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.675972][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.698297][T10875] bridge_slave_1: entered allmulticast mode [ 186.705365][T10875] bridge_slave_1: entered promiscuous mode [ 186.749421][T10875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.787424][T10889] lo speed is unknown, defaulting to 1000 [ 186.792534][T10875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.840441][ T5848] Bluetooth: hci2: command tx timeout [ 186.847019][T10917] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 186.952275][T10875] team0: Port device team_slave_0 added [ 186.996161][T10875] team0: Port device team_slave_1 added [ 187.044145][ T5897] hid-generic 0005:0B57:FFF9.0003: item fetching failed at offset 0/1 [ 187.066604][ T5897] hid-generic 0005:0B57:FFF9.0003: probe with driver hid-generic failed with error -22 [ 187.196074][T10875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.209230][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.236741][T10875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.249705][T10875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.259364][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.291462][T10875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.388635][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 187.466667][T10958] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1431'. [ 187.558728][ T5848] Bluetooth: hci3: command tx timeout [ 187.574720][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.581355][T10967] ipt_ECN: cannot use operation on non-tcp rule [ 187.605334][T10875] hsr_slave_0: entered promiscuous mode [ 187.615958][T10875] hsr_slave_1: entered promiscuous mode [ 187.625882][T10875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.633910][T10875] Cannot create hsr debugfs directory [ 187.662770][T10965] unknown channel width for channel at 909000KHz? [ 187.682785][T10965] unknown channel width for channel at 909000KHz? [ 187.699755][T10889] chnl_net:caif_netlink_parms(): no params data found [ 187.755162][T10971] netlink: zone id is out of range [ 187.761961][T10971] netlink: zone id is out of range [ 187.772534][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.785751][T10971] netlink: zone id is out of range [ 187.800121][T10971] netlink: zone id is out of range [ 187.826655][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1437'. [ 187.836832][T10973] delete_channel: no stack [ 187.837293][T10971] netlink: set zone limit has 4 unknown bytes [ 187.894769][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.091820][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 188.093584][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.237198][T10889] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.246747][T10889] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.254508][T10889] bridge_slave_0: entered allmulticast mode [ 188.261949][T10889] bridge_slave_0: entered promiscuous mode [ 188.269827][T10889] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.276974][T10889] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.284509][T10889] bridge_slave_1: entered allmulticast mode [ 188.291527][T10889] bridge_slave_1: entered promiscuous mode [ 188.311044][T10995] bridge0: port 3(syz_tun) entered blocking state [ 188.318057][T10995] bridge0: port 3(syz_tun) entered disabled state [ 188.326041][T10995] syz_tun: entered allmulticast mode [ 188.335226][T10995] syz_tun: entered promiscuous mode [ 188.413211][T10889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.453568][T10889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.535232][T10889] team0: Port device team_slave_0 added [ 188.590195][T10889] team0: Port device team_slave_1 added [ 188.675506][T10889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.683634][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.709763][T10889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.734803][T11021] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1452'. [ 188.744198][T11022] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1452'. [ 188.777134][T10889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.784328][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.819659][T10889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.832411][ T53] bridge_slave_1: left allmulticast mode [ 188.838651][ T53] bridge_slave_1: left promiscuous mode [ 188.844530][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.861314][ T53] bridge_slave_0: left allmulticast mode [ 188.868265][ T53] bridge_slave_0: left promiscuous mode [ 188.876091][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.918618][ T5848] Bluetooth: hci2: command tx timeout [ 189.336787][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.348757][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.360395][ T53] bond0 (unregistering): Released all slaves [ 189.441153][T10875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.547485][T10875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.633744][T10889] hsr_slave_0: entered promiscuous mode [ 189.639461][ T5848] Bluetooth: hci3: command tx timeout [ 189.651433][T10889] hsr_slave_1: entered promiscuous mode [ 189.662518][T10889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.673867][T10889] Cannot create hsr debugfs directory [ 189.687406][T10875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.716776][T10875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.740405][T11053] netlink: 'syz.4.1460': attribute type 5 has an invalid length. [ 190.080373][ T53] hsr_slave_0: left promiscuous mode [ 190.100487][ T53] hsr_slave_1: left promiscuous mode [ 190.117294][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.126371][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.136603][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.144948][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.165869][ T53] veth1_macvtap: left promiscuous mode [ 190.171595][ T53] veth0_macvtap: left promiscuous mode [ 190.177206][ T53] veth1_vlan: left promiscuous mode [ 190.182539][ T53] veth0_vlan: left promiscuous mode [ 190.257658][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 190.682757][ T53] team0 (unregistering): Port device team_slave_1 removed [ 190.725844][ T53] team0 (unregistering): Port device team_slave_0 removed [ 191.002461][ T5848] Bluetooth: hci2: command tx timeout [ 191.120753][T11073] netlink: 'syz.4.1462': attribute type 4 has an invalid length. [ 191.225885][T10875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.326889][T10875] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.335165][T11089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1466'. [ 191.398868][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.406035][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.481660][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 191.489760][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.497820][ T7490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.584510][T10875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.646443][T11107] netlink: 'syz.4.1469': attribute type 3 has an invalid length. [ 191.718130][ T5848] Bluetooth: hci3: command tx timeout [ 191.783586][T10889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.833835][T10889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.911265][T10889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.944978][T10889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.980339][T10875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.100955][T10875] veth0_vlan: entered promiscuous mode [ 192.184331][T10875] veth1_vlan: entered promiscuous mode [ 192.206609][T11139] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 192.253045][T10889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.304063][T10875] veth0_macvtap: entered promiscuous mode [ 192.327233][T10875] veth1_macvtap: entered promiscuous mode [ 192.335869][T11146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'. [ 192.374095][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 192.379620][T10889] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.412776][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.419964][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.447532][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.454721][ T7490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.474234][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.486423][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.511135][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.522746][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.534652][T10875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.548774][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 192.559319][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1484'. [ 192.582391][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.608369][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.619685][T10875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.648960][T10875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.657718][T10875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.668545][T10875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.677772][T10875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.724333][T11158] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 192.757574][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 192.905392][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.915546][T10889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.932577][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.978100][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.028630][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.053916][T10889] veth0_vlan: entered promiscuous mode [ 193.067520][T10889] veth1_vlan: entered promiscuous mode [ 193.079587][ T5848] Bluetooth: hci2: command tx timeout [ 193.113106][T10889] veth0_macvtap: entered promiscuous mode [ 193.119208][T11174] netlink: 'syz.0.1490': attribute type 3 has an invalid length. [ 193.127295][T11174] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1490'. [ 193.127892][T10889] veth1_macvtap: entered promiscuous mode [ 193.144664][T11173] netlink: 'syz.1.1492': attribute type 9 has an invalid length. [ 193.153451][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.166906][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.182024][T11173] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1492'. [ 193.210739][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.231049][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.246793][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.247346][T11178] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 193.263738][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.293744][T10889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.332532][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.353265][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.378249][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.389183][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.401242][T10889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.412270][T10889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.421336][T10889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.430436][T10889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.439479][T10889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.543235][T11191] IPv6: sit1: Disabled Multicast RS [ 193.650905][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.666713][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.711112][ T7490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.733101][ T7490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.798470][ T5848] Bluetooth: hci3: command tx timeout [ 193.865711][T10934] ================================================================== [ 193.873825][T10934] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 193.881303][T10934] Read of size 8 at addr ffff88806f9c4060 by task khidpd_0b57fff9/10934 [ 193.889647][T10934] [ 193.891996][T10934] CPU: 0 UID: 0 PID: 10934 Comm: khidpd_0b57fff9 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 193.898187][T11207] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 193.903187][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.903202][T10934] Call Trace: [ 193.903210][T10934] [ 193.903219][T10934] dump_stack_lvl+0x241/0x360 [ 193.931900][T10934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.937136][T10934] ? __pfx__printk+0x10/0x10 [ 193.941745][T10934] ? _printk+0xd5/0x120 [ 193.945920][T10934] ? __virt_addr_valid+0x183/0x530 [ 193.947467][T11207] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.1502'. [ 193.951045][T10934] ? __virt_addr_valid+0x183/0x530 [ 193.951067][T10934] print_report+0x169/0x550 [ 193.951088][T10934] ? __virt_addr_valid+0x183/0x530 [ 193.951105][T10934] ? __virt_addr_valid+0x183/0x530 [ 193.979989][T10934] ? __virt_addr_valid+0x45f/0x530 [ 193.983474][T11207] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 193.985106][T10934] ? __phys_addr+0xba/0x170 [ 193.985131][T10934] ? __mutex_lock+0x6c0/0xd70 [ 194.001996][T10934] kasan_report+0x143/0x180 [ 194.006525][T10934] ? __mutex_lock+0x6c0/0xd70 [ 194.011220][T10934] __mutex_lock+0x6c0/0xd70 [ 194.015742][T10934] ? __mutex_lock+0x52a/0xd70 [ 194.020443][T10934] ? l2cap_unregister_user+0x6a/0x1c0 [ 194.025831][T10934] ? __pfx___mutex_lock+0x10/0x10 [ 194.030880][T10934] ? __pfx___timer_delete_sync+0x10/0x10 [ 194.036532][T10934] l2cap_unregister_user+0x6a/0x1c0 [ 194.041748][T10934] hidp_session_thread+0x450/0x490 [ 194.046879][T10934] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 194.052787][T10934] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.058429][T10934] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.064335][T10934] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 194.070597][T10934] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 194.076847][T10934] ? __kthread_parkme+0x169/0x1d0 [ 194.081863][T10934] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.087482][T10934] kthread+0x2f0/0x390 [ 194.091537][T10934] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.097167][T10934] ? __pfx_kthread+0x10/0x10 [ 194.101767][T10934] ret_from_fork+0x4b/0x80 [ 194.106176][T10934] ? __pfx_kthread+0x10/0x10 [ 194.110752][T10934] ret_from_fork_asm+0x1a/0x30 [ 194.115512][T10934] [ 194.118528][T10934] [ 194.120851][T10934] Allocated by task 10889: [ 194.125258][T10934] kasan_save_track+0x3f/0x80 [ 194.129921][T10934] __kasan_kmalloc+0x98/0xb0 [ 194.134495][T10934] __kmalloc_noprof+0x1fc/0x400 [ 194.139331][T10934] hci_alloc_dev_priv+0x27/0x2030 [ 194.144342][T10934] vhci_create_device+0x116/0x6a0 [ 194.149357][T10934] vhci_write+0x3cf/0x490 [ 194.153694][T10934] vfs_write+0xaeb/0xd30 [ 194.157928][T10934] ksys_write+0x183/0x2b0 [ 194.162248][T10934] do_syscall_64+0xf3/0x230 [ 194.166762][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.172669][T10934] [ 194.174991][T10934] Freed by task 10889: [ 194.179044][T10934] kasan_save_track+0x3f/0x80 [ 194.183722][T10934] kasan_save_free_info+0x40/0x50 [ 194.188730][T10934] __kasan_slab_free+0x59/0x70 [ 194.193475][T10934] kfree+0x1a0/0x440 [ 194.197352][T10934] hci_release_dev+0x1525/0x16b0 [ 194.202277][T10934] bt_host_release+0x83/0x90 [ 194.206852][T10934] device_release+0x99/0x1c0 [ 194.211428][T10934] kobject_put+0x22f/0x480 [ 194.215828][T10934] vhci_release+0x88/0xd0 [ 194.220154][T10934] __fput+0x23f/0x880 [ 194.224149][T10934] task_work_run+0x24f/0x310 [ 194.228738][T10934] do_exit+0xa2f/0x28e0 [ 194.232884][T10934] do_group_exit+0x207/0x2c0 [ 194.237477][T10934] __x64_sys_exit_group+0x3f/0x40 [ 194.242508][T10934] x64_sys_call+0x2634/0x2640 [ 194.247189][T10934] do_syscall_64+0xf3/0x230 [ 194.251680][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.257559][T10934] [ 194.259867][T10934] Last potentially related work creation: [ 194.265566][T10934] kasan_save_stack+0x3f/0x60 [ 194.270238][T10934] __kasan_record_aux_stack+0xac/0xc0 [ 194.275617][T10934] insert_work+0x3e/0x330 [ 194.279941][T10934] __queue_work+0xb66/0xf50 [ 194.284436][T10934] queue_work_on+0x1c2/0x380 [ 194.289023][T10934] process_scheduled_works+0xa63/0x1850 [ 194.294584][T10934] worker_thread+0x870/0xd30 [ 194.299189][T10934] kthread+0x2f0/0x390 [ 194.303265][T10934] ret_from_fork+0x4b/0x80 [ 194.307697][T10934] ret_from_fork_asm+0x1a/0x30 [ 194.312479][T10934] [ 194.314813][T10934] Second to last potentially related work creation: [ 194.321402][T10934] kasan_save_stack+0x3f/0x60 [ 194.326079][T10934] __kasan_record_aux_stack+0xac/0xc0 [ 194.331442][T10934] insert_work+0x3e/0x330 [ 194.336116][T10934] __queue_work+0xc8b/0xf50 [ 194.340632][T10934] call_timer_fn+0x18e/0x650 [ 194.345230][T10934] __run_timer_base+0x695/0x8e0 [ 194.350066][T10934] run_timer_softirq+0xb7/0x170 [ 194.354906][T10934] handle_softirqs+0x2c5/0x980 [ 194.359656][T10934] __irq_exit_rcu+0xf4/0x1c0 [ 194.364255][T10934] irq_exit_rcu+0x9/0x30 [ 194.368509][T10934] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 194.374163][T10934] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.380152][T10934] [ 194.382461][T10934] The buggy address belongs to the object at ffff88806f9c4000 [ 194.382461][T10934] which belongs to the cache kmalloc-8k of size 8192 [ 194.396500][T10934] The buggy address is located 96 bytes inside of [ 194.396500][T10934] freed 8192-byte region [ffff88806f9c4000, ffff88806f9c6000) [ 194.410280][T10934] [ 194.412606][T10934] The buggy address belongs to the physical page: [ 194.419030][T10934] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f9c0 [ 194.427815][T10934] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.436304][T10934] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 194.443850][T10934] page_type: f5(slab) [ 194.447826][T10934] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 194.456403][T10934] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 194.465005][T10934] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 194.473681][T10934] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 194.482367][T10934] head: 00fff00000000003 ffffea0001be7001 ffffffffffffffff 0000000000000000 [ 194.491045][T10934] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 194.499699][T10934] page dumped because: kasan: bad access detected [ 194.506112][T10934] page_owner tracks the page as allocated [ 194.511822][T10934] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10875, tgid 10875 (syz-executor), ts 185091060526, free_ts 184444269027 [ 194.531437][T10934] post_alloc_hook+0x1f3/0x230 [ 194.536319][T10934] get_page_from_freelist+0x303f/0x3190 [ 194.541883][T10934] __alloc_pages_noprof+0x292/0x710 [ 194.547084][T10934] alloc_pages_mpol_noprof+0x3e8/0x680 [ 194.552544][T10934] alloc_slab_page+0x6a/0x120 [ 194.557320][T10934] allocate_slab+0x5a/0x2f0 [ 194.561807][T10934] ___slab_alloc+0xcd1/0x14b0 [ 194.566509][T10934] __slab_alloc+0x58/0xa0 [ 194.570841][T10934] __kmalloc_noprof+0x25a/0x400 [ 194.575708][T10934] batadv_hash_new+0xb6/0x2a0 [ 194.580392][T10934] batadv_nc_mesh_init+0x139/0x3b0 [ 194.585492][T10934] batadv_mesh_init+0x438/0x730 [ 194.590331][T10934] batadv_softif_init_late+0xa30/0xef0 [ 194.595778][T10934] register_netdevice+0x6d7/0x1b00 [ 194.600915][T10934] rtnl_newlink+0x1591/0x20a0 [ 194.605599][T10934] rtnetlink_rcv_msg+0x73f/0xcf0 [ 194.610546][T10934] page last free pid 10532 tgid 10532 stack trace: [ 194.617115][T10934] free_unref_page+0xcfb/0xf20 [ 194.621885][T10934] vfree+0x186/0x2e0 [ 194.625878][T10934] kcov_close+0x28/0x50 [ 194.630028][T10934] __fput+0x23f/0x880 [ 194.634009][T10934] task_work_run+0x24f/0x310 [ 194.638587][T10934] do_exit+0xa2f/0x28e0 [ 194.642728][T10934] do_group_exit+0x207/0x2c0 [ 194.647346][T10934] __x64_sys_exit_group+0x3f/0x40 [ 194.652366][T10934] x64_sys_call+0x2634/0x2640 [ 194.657047][T10934] do_syscall_64+0xf3/0x230 [ 194.661536][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.667419][T10934] [ 194.669738][T10934] Memory state around the buggy address: [ 194.675373][T10934] ffff88806f9c3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.683437][T10934] ffff88806f9c3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.691486][T10934] >ffff88806f9c4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.699542][T10934] ^ [ 194.706735][T10934] ffff88806f9c4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.714786][T10934] ffff88806f9c4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.722845][T10934] ================================================================== [ 194.735949][T10934] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.743173][T10934] CPU: 0 UID: 0 PID: 10934 Comm: khidpd_0b57fff9 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 194.754361][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.764409][T10934] Call Trace: [ 194.767701][T10934] [ 194.770619][T10934] dump_stack_lvl+0x241/0x360 [ 194.775291][T10934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.780489][T10934] ? __pfx__printk+0x10/0x10 [ 194.785071][T10934] ? vscnprintf+0x5d/0x90 [ 194.789399][T10934] panic+0x349/0x880 [ 194.793299][T10934] ? check_panic_on_warn+0x21/0xb0 [ 194.798407][T10934] ? __pfx_panic+0x10/0x10 [ 194.802815][T10934] ? mark_lock+0x9a/0x360 [ 194.807135][T10934] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 194.813020][T10934] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.818925][T10934] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.825240][T10934] ? print_report+0x502/0x550 [ 194.829913][T10934] check_panic_on_warn+0x86/0xb0 [ 194.834841][T10934] ? __mutex_lock+0x6c0/0xd70 [ 194.839513][T10934] end_report+0x77/0x160 [ 194.843745][T10934] kasan_report+0x154/0x180 [ 194.848239][T10934] ? __mutex_lock+0x6c0/0xd70 [ 194.852995][T10934] __mutex_lock+0x6c0/0xd70 [ 194.857493][T10934] ? __mutex_lock+0x52a/0xd70 [ 194.862162][T10934] ? l2cap_unregister_user+0x6a/0x1c0 [ 194.867528][T10934] ? __pfx___mutex_lock+0x10/0x10 [ 194.872552][T10934] ? __pfx___timer_delete_sync+0x10/0x10 [ 194.878183][T10934] l2cap_unregister_user+0x6a/0x1c0 [ 194.883381][T10934] hidp_session_thread+0x450/0x490 [ 194.888492][T10934] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 194.894377][T10934] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.899999][T10934] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.905887][T10934] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 194.912123][T10934] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 194.918365][T10934] ? __kthread_parkme+0x169/0x1d0 [ 194.923389][T10934] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.929012][T10934] kthread+0x2f0/0x390 [ 194.933070][T10934] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.938694][T10934] ? __pfx_kthread+0x10/0x10 [ 194.943273][T10934] ret_from_fork+0x4b/0x80 [ 194.947698][T10934] ? __pfx_kthread+0x10/0x10 [ 194.952277][T10934] ret_from_fork_asm+0x1a/0x30 [ 194.957040][T10934] [ 194.960305][T10934] Kernel Offset: disabled [ 194.964616][T10934] Rebooting in 86400 seconds..