last executing test programs: 1m31.007254539s ago: executing program 1 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0xfffffe45}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0xec}}, 0x4008050) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0xfffffe45}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0xec}}, 0x4008050) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1m30.809239505s ago: executing program 1 (id=577): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) (async) gettid() sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, r1, 0x1000, 0x4241a}}, 0x20}}, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) (async) getpid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000b5cbebe2720a5228ba0012a87b533a58aa01960660c864536408de819af0af9fce4d8b", @ANYRES32=r10, @ANYBLOB="08009f00", @ANYRES32=r9, @ANYBLOB="04000180"], 0x24}], 0x1}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r12) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, 0x0, 0x20044002) (async) accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0), 0x10, 0x40000) 1m30.604035905s ago: executing program 1 (id=580): bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848116adf0000000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4c010) 1m30.503262873s ago: executing program 1 (id=582): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x2, 0xff}) (async) r2 = socket(0x1, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) close(r2) 1m30.351120408s ago: executing program 1 (id=585): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095", @ANYRESOCT=r1, @ANYBLOB="86a57ba9535eb5ebbb49e8df8a69ccaed97dfcaebcddd7ea477d34df6899be89038c714b0498013f17fd21487fa885b833e8f92fbe755cedc6ff648426b5b4da2e6d8367911447376a96f1b0abe4a5d88ab5e7e9b1a5faca8b7d0ebb3ac81653f223dbd31e3fbcfac96bb929eb", @ANYRESOCT, @ANYRES16=r1], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f00000001c0)="375c88413b2f19c9d6e9f8b8a0b6857e6804b86445e8caa44863407a874a9ca4a90f4724d35f965209108d2508a2c88f87337bdb7cd23f594a135c2067ff5d97273c8ba076e173ac05696cafe4baa868dc1bad8db3c564b9dd8acb3877d01d376c0a5b700046046098f1bfa0f3c8c0a806a82c606ee44af45b405b9fa2eec5288976a1d612b5ad761d0d9505fa0933310930c047e6343e5330ccc4de0e11856e159df6282c4a01b33cef69c3014f24e0ccf728fd8efb32857908ceb44c007faa386542b54435ba5aa2294fa2c6e5dd8a2258a7dd4dd996439a2e2272c1537ca56666f02de48c3c6abd1120cac6d10d185b68d333", &(0x7f00000002c0)=""/100, 0x4}, 0x20) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, 0x41, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x12d}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'pimreg\x00', {0x2, 0x0, @broadcast}}) 1m30.247963224s ago: executing program 1 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000fa0b0018"], 0x28}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x9) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) 1m15.243916588s ago: executing program 32 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000fa0b0018"], 0x28}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x9) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) 54.043875092s ago: executing program 3 (id=1071): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, 0x0, &(0x7f0000000240)) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) 53.940008348s ago: executing program 3 (id=1074): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008810) close(r0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x840) (async) recvmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000300), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/165, 0xa5}], 0x6, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000940)={0x0, 0x10000}, &(0x7f0000000980)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x1d, r11}, 0x10, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x1, 0xc82, 0x1, {0x0, 0xea60}, {0x77359400}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1}, 0x20, 0x1, 0x0, 0x0, "2d86f93f82c55ee820b44d5554378918ecffd3c65aa0f62a88c71e2d60a09673c7fca22fab998be462f84c400173b5cff0208abbcbbc5b567c4c39835bf481e8"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20044010) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@map=r9, 0x2b, 0x0, 0x7, &(0x7f0000000bc0)=[0x0], 0x1, 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6gre0\x00', r11, 0x29, 0x0, 0x8, 0x2, 0x8, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8008, 0x5, 0x6}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@ifindex=r14, r5, 0x1b, 0x20, 0x0, @void, @void, @void, @value, r13}, 0x20) r15 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r9) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r15, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x16}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0xd014}, 0x1) (async) close(r4) r16 = socket$nl_rdma(0x10, 0x3, 0x14) ppoll(&(0x7f0000000f80)=[{r9, 0x2}, {r12, 0x8400}, {r8, 0x1000}, {r12, 0x8380}, {r6, 0x110a}, {r16, 0x100}, {r4, 0xa600}], 0x7, &(0x7f0000000fc0)={0x77359400}, &(0x7f0000001000)={[0xfffffffffffffff8]}, 0x8) (async) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x2200, 0x0) ioctl$TUNSETDEBUG(r17, 0x400454c9, &(0x7f0000001080)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r0}, &(0x7f00000010c0), &(0x7f0000001100)=r0}, 0x20) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) bind$inet(r4, &(0x7f0000001280)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x18, 0x1402, 0xa06, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040002}, 0x0) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r18, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "57b9868751183be9432b63eec941e437"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b0a175abc1ffed0a00764de4092e31ad"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5497da80c4edfe437f9af94c1e158363"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 53.363914436s ago: executing program 3 (id=1075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0x8, [@datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x2}, {0x4, 0x200, 0x3a07}, {0x5, 0x9, 0x7}], "0a93"}, @union={0x10, 0x2, 0x0, 0x5, 0x1, 0xc0, [{0x4, 0x2, 0x8}, {0x3, 0x0, 0x4}]}, @volatile={0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xd, 0xd69}, {0x5, 0xfffffff6}, {0x5, 0x9}, {0xe, 0x9}, {0x1, 0xffff}, {0x2, 0x800000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x2f, 0x5}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x2e, 0x30]}}, &(0x7f0000000340)=""/179, 0xf4, 0xb3, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113c00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 44.205779506s ago: executing program 5 (id=1176): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000000080101000000000000700000000007"], 0x14}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004003176a70dd4"]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000000080101000000000000700000000007"], 0x14}}, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004003176a70dd4"]) (async) 44.200336624s ago: executing program 5 (id=1180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000400)=""/55}, 0x20) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000180)="86ddf692aee4b7a0bcf8b8e7c83edf0205637abf42e7104b37717c988edb05a2b7752916df2ba13290206ddf901251a7bf543dceff15cdfc6878ae31be7035a1ca58b9e08ae0b06b307ee7bc", 0x4c}, {&(0x7f0000000200)="1f131b568fe7", 0x6}, {&(0x7f00000005c0)="65cc5eb6b62d48a4cfdb668cce074cb2d83463a8c8452cbbf13c3d46379931d6bc473addd664377b42a29f3109eeca6e1969896f13ff201f049de95d80b985e6d555303ccb7cc901fd477ff605a5ad2c9ff1df71ebc7276d2fc4b6c9094c758e55fa9f3ef6367c5139a2046fb37619af8a99a254986be0a0efcd19d296bd343528894735abf0999091d6ab1c7cf3a48daaf2bfdfb2e491b91a6f824028980859f3806a8bc818320bbb9b3cd41815431827bb3ef42d52546f30f5d64a9a199f56ffadc39945cb76e436b94684f7fe2a29696c6d4ecf3906098913b5ad02c0805dafc5ca2a9832c20276e50ffbefd24172b9b54bb3f1cb4f6610f37f5c55", 0xfd}, {&(0x7f00000006c0)="414780a1ba98bb8b0c484c7ec5072cba48268d7f17534f9ced8fd2871269cbfa4be936fcbb21c2a62b202b4dacdb3530e87960881b5d75179e38b7f178815544e7ff595200b9b72cfb5d0205f79cf589be23129c104c449429f5b0d5e3fdb47c4757acf0aa7e602fc4ec25e7b1d20256f4477c3a8120ecc461bdfe", 0x7b}], 0x4, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc8402, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000080)) 44.031732988s ago: executing program 5 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@tcp6=r2, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000dfcc0000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x5, 0x1, 0x10, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4a8f, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r7, 0xffffffffffffffff, 0xb, 0x11, r3, @void, @value=r9, @void, @void, r6}, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94) 43.799486325s ago: executing program 5 (id=1190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 43.309778889s ago: executing program 3 (id=1075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0x8, [@datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x2}, {0x4, 0x200, 0x3a07}, {0x5, 0x9, 0x7}], "0a93"}, @union={0x10, 0x2, 0x0, 0x5, 0x1, 0xc0, [{0x4, 0x2, 0x8}, {0x3, 0x0, 0x4}]}, @volatile={0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xd, 0xd69}, {0x5, 0xfffffff6}, {0x5, 0x9}, {0xe, 0x9}, {0x1, 0xffff}, {0x2, 0x800000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x2f, 0x5}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x2e, 0x30]}}, &(0x7f0000000340)=""/179, 0xf4, 0xb3, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113c00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 22.389959648s ago: executing program 5 (id=1190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 21.82428038s ago: executing program 3 (id=1075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0x8, [@datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x2}, {0x4, 0x200, 0x3a07}, {0x5, 0x9, 0x7}], "0a93"}, @union={0x10, 0x2, 0x0, 0x5, 0x1, 0xc0, [{0x4, 0x2, 0x8}, {0x3, 0x0, 0x4}]}, @volatile={0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xd, 0xd69}, {0x5, 0xfffffff6}, {0x5, 0x9}, {0xe, 0x9}, {0x1, 0xffff}, {0x2, 0x800000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x2f, 0x5}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x2e, 0x30]}}, &(0x7f0000000340)=""/179, 0xf4, 0xb3, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113c00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 9.746025712s ago: executing program 5 (id=1190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 7.604211404s ago: executing program 3 (id=1075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0x8, [@datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x2}, {0x4, 0x200, 0x3a07}, {0x5, 0x9, 0x7}], "0a93"}, @union={0x10, 0x2, 0x0, 0x5, 0x1, 0xc0, [{0x4, 0x2, 0x8}, {0x3, 0x0, 0x4}]}, @volatile={0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xd, 0xd69}, {0x5, 0xfffffff6}, {0x5, 0x9}, {0xe, 0x9}, {0x1, 0xffff}, {0x2, 0x800000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x2f, 0x5}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x2e, 0x30]}}, &(0x7f0000000340)=""/179, 0xf4, 0xb3, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113c00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 2.383164511s ago: executing program 2 (id=1453): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.122989641s ago: executing program 0 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 2.051845473s ago: executing program 2 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14001400190a010200"/20], 0x14}}, 0x0) 2.017767867s ago: executing program 2 (id=1458): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/time\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r6, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/time\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r6, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) 1.903918725s ago: executing program 4 (id=1459): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1, 0x12) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000e10000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x913e0000) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, r4, 0x2000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) (async) sendto$inet(r7, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) recvmmsg(r7, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10064, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="59e3000000000000000008000000100004800900050073797a30000000001da9417a7c719cdf2b0560ccd63c7954e2950f00009e5ecf8ea75fe9a86308cb9d60b9bbcb5a934b5567aa8ede744a82ff137d5b5246eab3c654f9a0e016070b25f49ced4c40518b2eb7bbc5f55920fd5a"], 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 1.864162287s ago: executing program 4 (id=1460): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x40810) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000080)={@rand_addr=' \x01\x00', @empty}) socket$inet_udplite(0x2, 0x2, 0x88) 1.841187246s ago: executing program 0 (id=1461): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x866c3000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x11eac000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="100025bd7000fedbdf2505000000c40004804c000780080003008f0000000800010018000000080002005b0d000008000200170d00000800030012cc737fd70e60d4020000000800020007000000080003009c00000008000200ff07000008000400130000001300010062726f6164636173742d6c696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b000034000780080002000100000008000300e823208b080003007101000008000300070000000800010017000000080004000900000009000100"], 0xd8}, 0x1, 0x0, 0x0, 0x14001}, 0x4000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xd, 0xc}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 1.751079012s ago: executing program 2 (id=1462): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000002c0)={0x0, "63d4886f74b876f95715505dc5075a93"}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060400000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) sendmmsg$unix(r3, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="958bba6cda1f57a4bf03e06d0ee0147f4213fb1d31a73a901938420b16cf271ab5544e6498a51900826c", 0x2a}, {&(0x7f0000000040)="943398fe87", 0x5}], 0x2}}], 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r5, 0x12504000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r6, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002800)={0x1, &(0x7f00000026c0)="c29af59fd3ed282a52a915ff452af93d8a5bb0b9e4c273f7af5a5db9e5b0a0b33168c77bb103be2e7311b2f53731182bf016cb913cdf6c6222fb7e3fc5ca568c255154385d0adce09835e20b65157f0411ee47ad60f57504be00e778b035bd449a843c02ae00aad66345517cae95e77c179ff72f7d7be6da80f4503435d58525a4b79a378326b78127ca669fa954e714bd1d60d66fd0485f25b2a2abf9924199a76efe75bd7b93942c50c316b7704b06dd080b799b485837a138ba50610ca247bbd235e1677bc65a22e607deca752e287121b5aa54de", &(0x7f00000027c0)=@udp6=r5}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000140)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000012c0)={0x0, "dd3e1cc5d220403b90d19bb2da3d8eed"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002840)={0xa, 0x4, {0xc, @usage=0xfff, r1, 0x7, 0xf966, 0x80000001, 0xfffffffffffffffe, 0x2, 0xa, @usage=0x1, 0x0, 0x8000, [0x4, 0x7, 0x7, 0x8, 0x10, 0x7]}, {0x4, @usage=0x4, r10, 0x6, 0x0, 0x8a52, 0x2, 0x2, 0x40, @usage=0x10000000, 0x9378, 0xc0, [0x7, 0x9, 0x0, 0x850, 0x2, 0x10001]}, {0x7, @usage=0x5, 0x0, 0x5, 0xffffffffffffffff, 0x1, 0x9, 0xb84, 0x22, @struct={0x204e, 0x5}, 0x0, 0x1ff, [0x53cbf797, 0x2e1, 0x2cbf, 0xfa, 0x0, 0x1]}, {0x7fffffffffffffff, 0x9, 0x1}}) r11 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r14, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r13, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0) 1.744760795s ago: executing program 4 (id=1463): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="dfc0ba256acd15bae931d9922f44ee5066eb284fd192b52dd5db56d7565badcd5a0b5363927f995b4aac28a84bee435a3c78639605cf24fcce5ea2c0f118cbf61dd41f5b0597c89f7f5b0065170acd3b58bc7e154e2f8f0365948f2b2ac88ce30a4c81dce5929a1953524673c4c2509c49b704747e1e1ae42c02795be7e20a96864a2aebf93f2b3ab52010d7f936e0079e7181723451c9fb510981a96e36dad04392df372449476a5778a18568a86fa6c8112844a8f970d337230e3c72", 0xbd, 0x4000021, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0xb8000000}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@float={0x5, 0x0, 0x0, 0x10, 0x10}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x0, 0xc4}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.578028407s ago: executing program 0 (id=1464): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080) 1.499971911s ago: executing program 4 (id=1465): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00e739ecd08b00004b40d6bf7f3d4d9b933260e2983eb3ce656c47d79133bf00a0e6d4932a7fcaa9f7eae927274c72f6897b6af51d99310cf410b00f7406df90d35eb12882ef1482323ba05db6769bd9edf846fbfd496b7a942bfbf4efe795cc7496cda7747f4aedfc0ad54922092fe206b659cb4cc5c9e2720a6f315f2beecf2f627c43fc92c7ac3aca03375dfdab803de34469", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf254b0000006500a900f4f25c411a2c46180d8186fafbb7f2d1e14d4669fb53f15b647a016920232cda411258d63fa6535001211688cd9e05bebf4987bb1c44cae3f18621df6e9b75da8697cf76b3df91d4ce259b212cceef8383e486eb87184e53d9a2c7a1ca81266af5000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.495060942s ago: executing program 2 (id=1466): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 1.425763284s ago: executing program 2 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240200000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x24040801) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a32000000823213f2580008000180fffffffd0900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x94}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x300, 0xd0, 0x300, 0x428, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@loopback, @mcast1, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0xff}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x2}}, @common=@mh={{0x28}, {"183a"}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xfffffffe, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100), 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x0, 0x0, 0x17, 0x0, "a1c1dd75a6843e10951c55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d6701d5f2fdf98328de94410300"}, 0xd8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x8000001, @mcast2, 0x4}}, 0x0, 0x0, 0xf, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000800010000000000000190780a010100ac14140000000078000000004500000000b28853670b00000000110000ac1414aa7f000001e07cf2f5e69bcba831b8c64e8d2d728e24f31cb9fa06441c0eaee2c9da175c315f0fc6275ec2e373f9e468c14366f9c747b9c6d65b93e9a94b07556c54a023e7488d7e"], 0xfdef) 1.37790751s ago: executing program 0 (id=1468): syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x3, 0x1}}, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x1c, 0x2, 0x0, 0x0, "83b76047440e7cbee6547611addc012881fb5914da379066a6827d7d3c027f84644d77d467ce6b50a1de709332d21a0bfffd7b382c64211b6070eb34bafb91e9"}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000040000c30400000079db2fc1f756ac74", @ANYRES64, @ANYBLOB="000000000000000000050000000a0000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @rand_addr=0x64010102, 0x0, 0x0, 'sh\x00', 0x12, 0x40085, 0x12}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) recvfrom$l2tp(r1, &(0x7f0000000000)=""/82, 0x52, 0x100, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) accept4(r2, &(0x7f0000000080)=@can, &(0x7f0000000380)=0x80, 0x80800) 1.19127324s ago: executing program 4 (id=1469): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "7a84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x7, 0x5, 0x3, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xc, 0x9, [0x28, 0x21, 0x11, 0x2b, 0x9, 0x3f, 0x40, 0x19, 0x4, 0xf, 0x2b, 0x17, 0x1, 0x15, 0x3c, 0x2b], 0x0, 0x6, 0xb7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 955.779202ms ago: executing program 4 (id=1470): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$netlink(0x10, 0x3, 0x9) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000020bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660008004519003900e400006d97eeb9ad7fd1470c469a7fe59ce2cf8063869609de371553c02c9abcf673f3d4efec528c0096de76be594300"/94], 0x53) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) 436.719063ms ago: executing program 0 (id=1471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xdc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0xb4, 0x1, [@m_ctinfo={0xb0, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) sendmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f00000001c0), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x1, 0x805, 0x4, {}, {}, {0x4}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "768d6cbabc1fbda4"}}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x4000004) recvmsg$unix(r0, &(0x7f0000000100)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000000080)=""/53, 0x35}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000300)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 0 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'vlan0\x00', {}, 0x3}) kernel console output (not intermixed with test programs): 7590] syzkaller0: entered promiscuous mode [ 114.546502][ T7590] syzkaller0: entered allmulticast mode [ 114.881389][ T7596] tipc: Resetting bearer [ 114.935941][ T7590] tipc: Resetting bearer [ 115.042983][ T7590] tipc: Disabling bearer [ 115.088657][ T7632] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 115.467105][ T7651] bridge0: entered allmulticast mode [ 115.490369][ T7651] bridge_slave_1: left allmulticast mode [ 115.511527][ T7651] bridge_slave_1: left promiscuous mode [ 115.532106][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.579769][ T7651] bridge_slave_0: left allmulticast mode [ 115.618860][ T7651] bridge_slave_0: left promiscuous mode [ 115.634959][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.725116][ T7669] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 115.743082][ T7651] bridge0 (unregistering): left allmulticast mode [ 115.820364][ T7666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.893702][ T7677] vlan2: entered promiscuous mode [ 115.922783][ T7677] vlan2: entered allmulticast mode [ 115.957479][ T7677] hsr_slave_1: entered allmulticast mode [ 116.455739][ T7715] netlink: 'syz.0.521': attribute type 6 has an invalid length. [ 116.504473][ T7715] netlink: 'syz.0.521': attribute type 5 has an invalid length. [ 116.650429][ T7731] veth0: entered promiscuous mode [ 116.684441][ T7730] veth0: left promiscuous mode [ 116.835024][ T7747] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 116.843578][ T7747] netlink: 'syz.0.531': attribute type 4 has an invalid length. [ 116.898081][ T7749] x_tables: duplicate underflow at hook 3 [ 116.916507][ T7751] x_tables: duplicate underflow at hook 3 [ 117.273670][ T7772] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004 [ 117.434389][ T7785] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 117.453150][ T7786] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 117.466691][ T7785] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 117.494219][ T7786] __nla_validate_parse: 20 callbacks suppressed [ 117.494236][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'. [ 117.535064][ T7785] netlink: 'syz.4.543': attribute type 6 has an invalid length. [ 117.547781][ T7793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.547'. [ 117.560825][ T7785] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.543'. [ 117.636663][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 117.766173][ T7802] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 117.944174][ T7821] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 117.957514][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 117.974301][ T7823] xt_l2tp: v2 tid > 0xffff: 150994944 [ 117.977132][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 117.995692][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 118.018573][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 118.206728][ T7837] openvswitch: netlink: IP tunnel TTL not specified. [ 118.247124][ T7841] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 118.281876][ T7841] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 118.348208][ T7848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.565'. [ 118.403067][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 118.441332][ T7853] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 118.457947][ T7854] netlink: 'syz.1.566': attribute type 3 has an invalid length. [ 118.562253][ T7862] xt_limit: Overflow, try lower: 2147483649/128 [ 118.936744][ T7887] netlink: 'syz.4.575': attribute type 33 has an invalid length. [ 119.085531][ T7897] sit1: entered promiscuous mode [ 119.109924][ T7897] sit1: entered allmulticast mode [ 119.392462][ T7914] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.580138][ T7932] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.734249][ T7940] rdma_op ffff888027d419f0 conn xmit_rdma 0000000000000000 [ 120.496717][ T7956] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 120.635395][ T7960] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.882307][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.890286][ T7965] bridge0: port 1() entered disabled state [ 120.990509][ T7965] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 121.142487][ T7975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.177995][ T7975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.281617][ T7982] openvswitch: netlink: IP tunnel dst address not specified [ 122.011101][ T8009] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 122.011112][ T8010] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 122.660502][ T8033] __nla_validate_parse: 13 callbacks suppressed [ 122.660519][ T8033] netlink: 5 bytes leftover after parsing attributes in process `syz.3.622'. [ 122.687443][ T8033] 0ªX¹¦D: renamed from gretap0 (while UP) [ 122.705841][ T8033] 0ªX¹¦D: entered allmulticast mode [ 122.716624][ T8033] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 123.059748][ T8047] validate_nla: 1 callbacks suppressed [ 123.059764][ T8047] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 123.073204][ T8047] netlink: 224 bytes leftover after parsing attributes in process `syz.2.628'. [ 123.573604][ T7912] Set syz1 is full, maxelem 65536 reached [ 123.634146][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 123.700580][ T8062] netlink: 'syz.0.632': attribute type 11 has an invalid length. [ 123.926722][ T8075] netlink: 'syz.0.634': attribute type 30 has an invalid length. [ 123.955379][ T8075] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 123.981342][ T8075] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 124.207724][ T8085] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 124.303399][ T8097] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 124.315907][ T8098] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 124.324390][ T8097] netlink: 236 bytes leftover after parsing attributes in process `syz.4.642'. [ 124.457569][ T8103] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 124.472814][ T8103] netlink: 224 bytes leftover after parsing attributes in process `syz.4.644'. [ 124.703385][ T8122] netlink: 256 bytes leftover after parsing attributes in process `syz.2.651'. [ 124.903139][ T8132] netlink: 'syz.4.650': attribute type 8 has an invalid length. [ 125.789829][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 126.065034][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 126.225609][ T8162] x_tables: duplicate underflow at hook 2 [ 126.248930][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.658'. [ 126.314956][ T8168] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002 [ 126.691414][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'. [ 126.721761][ T8188] netlink: 'syz.0.666': attribute type 3 has an invalid length. [ 126.820974][ T8192] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.899108][ T8199] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 126.909992][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.934610][ T8203] netlink: 'syz.4.671': attribute type 6 has an invalid length. [ 126.939813][ T8200] netlink: 'syz.3.670': attribute type 21 has an invalid length. [ 126.954234][ T8201] veth1_to_bond: entered allmulticast mode [ 126.973639][ T8204] sit0: entered promiscuous mode [ 127.170637][ T8216] bond1: entered promiscuous mode [ 127.175713][ T8216] bond1: entered allmulticast mode [ 127.183218][ T8216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.193903][ T8220] sctp: [Deprecated]: syz.3.675 (pid 8220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.193903][ T8220] Use struct sctp_sack_info instead [ 127.263813][ T8225] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20000 [ 127.422916][ T8236] block nbd3: not configured, cannot reconfigure [ 127.605736][ T8248] veth0_vlan: entered allmulticast mode [ 127.626982][ T8248] veth0_vlan: left promiscuous mode [ 127.644520][ T8248] veth0_vlan: entered promiscuous mode [ 127.660781][ T8248] team0: Device veth0_vlan failed to register rx_handler [ 127.901812][ T8266] ipvlan0: entered promiscuous mode [ 127.907093][ T8266] ipvlan0: entered allmulticast mode [ 128.084720][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.156271][ T8281] __nla_validate_parse: 11 callbacks suppressed [ 128.156288][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.697'. [ 128.192996][ T8281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.697'. [ 128.345597][ T8293] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.504206][ T8306] validate_nla: 67 callbacks suppressed [ 128.504226][ T8306] netlink: 'syz.4.703': attribute type 6 has an invalid length. [ 128.522896][ T8306] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.703'. [ 128.704892][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 128.864605][ T8332] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 128.874110][ T8332] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 128.966257][ T8337] netlink: 'syz.3.716': attribute type 24 has an invalid length. [ 128.983717][ T8340] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.007637][ T8340] tipc: Enabling of bearer rejected, failed to enable media [ 129.087146][ T8348] Unsupported ieee802154 address type: 0 [ 129.100642][ T8352] Unsupported ieee802154 address type: 0 [ 129.209960][ T8358] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 129.233456][ T8358] bond0: (slave batadv0): Releasing backup interface [ 129.254106][ T8367] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 129.267947][ T8358] : left allmulticast mode [ 129.272500][ T8358] : left promiscuous mode [ 129.283335][ T8358] bridge0: port 1() entered disabled state [ 129.286114][ T8368] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 129.300822][ T8358] bridge_slave_1: left allmulticast mode [ 129.306563][ T8358] bridge_slave_1: left promiscuous mode [ 129.312926][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.324852][ T8358] bond0: (slave bond_slave_0): Releasing backup interface [ 129.341127][ T8358] bond0: (slave bond_slave_1): Releasing backup interface [ 129.360865][ T8358] team0: Port device team_slave_0 removed [ 129.372402][ T8358] team0: Port device team_slave_1 removed [ 129.379063][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.386551][ T8358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.395537][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.403218][ T8358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.444053][ T8368] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 129.456280][ T8368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.496191][ T8370] bond0: (slave wlan1): Releasing backup interface [ 129.715065][ T8379] netlink: 'syz.4.726': attribute type 4 has an invalid length. [ 129.826437][ T5970] IPVS: starting estimator thread 0... [ 129.836385][ T8383] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 129.972024][ T8387] IPVS: using max 26 ests per chain, 62400 per kthread [ 130.134686][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 130.437822][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 130.467158][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 130.499061][ T8421] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.508184][ T8421] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.516901][ T8421] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.525738][ T8421] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.552391][ T8423] netlink: 'syz.0.737': attribute type 22 has an invalid length. [ 130.592781][ T8421] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.601825][ T8421] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.610872][ T8421] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.620148][ T8421] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.655477][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 130.665374][ T8427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.740'. [ 130.789714][ T8435] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 130.815875][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 131.338540][ T8463] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 131.354397][ T8463] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 131.561353][ T8481] netlink: 'syz.3.759': attribute type 29 has an invalid length. [ 131.643322][ T8483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.956080][ T8501] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 131.987408][ T8503] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 132.376512][ T8526] pimreg3: entered allmulticast mode [ 132.530353][ T8536] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 132.600913][ T8536] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 132.607836][ T8536] syzkaller0: Linktype set failed because interface is up [ 132.617694][ T9] syzkaller0: tun_net_xmit 76 [ 132.782064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.264002][ T8551] __nla_validate_parse: 7 callbacks suppressed [ 133.264021][ T8551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.783'. [ 133.988059][ T8548] dvmrp0: left allmulticast mode [ 134.176283][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.784'. [ 134.186964][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.784'. [ 134.224525][ T8563] netlink: 68 bytes leftover after parsing attributes in process `syz.4.784'. [ 134.246293][ T8568] xt_nat: multiple ranges no longer supported [ 134.269484][ T8568] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 134.269921][ T8564] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 134.308161][ T8564] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 134.316643][ T8564] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 134.330006][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.784'. [ 134.483480][ T8574] xt_hashlimit: size too large, truncated to 1048576 [ 135.152379][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.161268][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.169460][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.210360][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.261454][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.584742][ T8611] validate_nla: 1 callbacks suppressed [ 135.584758][ T8611] netlink: 'syz.0.800': attribute type 5 has an invalid length. [ 135.741358][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.808453][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.800'. [ 135.984498][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.354294][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.572838][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.583746][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 136.628907][ T8596] chnl_net:caif_netlink_parms(): no params data found [ 136.861272][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 136.870461][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 137.078688][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.817'. [ 137.137859][ T12] bridge_slave_1: left allmulticast mode [ 137.143759][ T12] bridge_slave_1: left promiscuous mode [ 137.162739][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.215989][ T12] bridge_slave_0: left allmulticast mode [ 137.225087][ T12] bridge_slave_0: left promiscuous mode [ 137.236922][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.338128][ T5865] Bluetooth: hci5: command tx timeout [ 137.669258][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.690064][ T12] bond2 (unregistering): (slave bridge1): Releasing active interface [ 137.824160][ T12] bond0 (unregistering): (slave 1!€ÿÿÿ): Releasing backup interface [ 137.836090][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.846781][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 137.857885][ T12] bond0 (unregistering): Released all slaves [ 137.871505][ T12] bond1 (unregistering): Released all slaves [ 137.894274][ T12] bond2 (unregistering): Released all slaves [ 137.987031][ T12] bond3 (unregistering): Released all slaves [ 138.003496][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.010862][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.018340][ T8596] bridge_slave_0: entered allmulticast mode [ 138.025631][ T8596] bridge_slave_0: entered promiscuous mode [ 138.034766][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.042303][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.053997][ T8596] bridge_slave_1: entered allmulticast mode [ 138.062630][ T8596] bridge_slave_1: entered promiscuous mode [ 138.244423][ T12] tipc: Disabling bearer [ 138.252911][ T12] tipc: Left network mode [ 138.283363][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.314927][ T8704] netlink: 100 bytes leftover after parsing attributes in process `syz.2.824'. [ 138.482790][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.514801][ T8713] ieee802154 phy0 wpan0: encryption failed: -90 [ 138.593223][ T8596] team0: Port device team_slave_0 added [ 138.643039][ T8717] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 138.643326][ T12] mac80211_hwsim hwsim7 wlan0 (unregistering): left promiscuous mode [ 138.782102][ T8596] team0: Port device team_slave_1 added [ 138.793054][ T8714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.883824][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.897295][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.936752][ T8596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.957547][ T8732] netlink: 'syz.4.834': attribute type 4 has an invalid length. [ 138.971602][ T12] hsr_slave_0: left promiscuous mode [ 138.981166][ T12] hsr_slave_1: left promiscuous mode [ 138.991813][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.999559][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.008342][ T8733] netlink: 'syz.4.834': attribute type 4 has an invalid length. [ 139.013711][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.023526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.041864][ T12] veth1_macvtap: left promiscuous mode [ 139.048280][ T12] veth0_macvtap: left promiscuous mode [ 139.054127][ T12] veth1_vlan: left promiscuous mode [ 139.061013][ T12] veth0_vlan: left promiscuous mode [ 139.409568][ T5865] Bluetooth: hci5: command tx timeout [ 139.476091][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.513705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 139.904015][ T8745] netlink: 'syz.2.837': attribute type 30 has an invalid length. [ 139.929277][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.936358][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.962780][ T8596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.157985][ T8596] hsr_slave_0: entered promiscuous mode [ 140.164798][ T8596] hsr_slave_1: entered promiscuous mode [ 140.172456][ T8596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.181390][ T8596] Cannot create hsr debugfs directory [ 140.827004][ T8596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.854646][ T8596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.890459][ T8596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.913615][ T8596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.936472][ T8797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.854'. [ 141.006724][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 141.043193][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 141.156223][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.222817][ T8596] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.262663][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 141.264710][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.278675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.303765][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.311037][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.426738][ T8596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.446863][ T8596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.488833][ T5859] Bluetooth: hci5: command tx timeout [ 141.543732][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 141.745528][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.830470][ T8846] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 141.967523][ T5865] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 142.115095][ T8596] veth0_vlan: entered promiscuous mode [ 142.140117][ T8596] veth1_vlan: entered promiscuous mode [ 142.180587][ T8596] veth0_macvtap: entered promiscuous mode [ 142.190903][ T8596] veth1_macvtap: entered promiscuous mode [ 142.214769][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.227057][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.268992][ T8596] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.290965][ T8596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.308379][ T8596] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.316064][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 142.317106][ T8596] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.347108][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 142.455907][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.489582][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.497008][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.512113][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.546664][ T8868] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.874'. [ 142.815050][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 143.196145][ T8904] netlink: 'syz.5.882': attribute type 62 has an invalid length. [ 143.359924][ T8909] raw_sendmsg: syz.2.883 forgot to set AF_INET. Fix it! [ 143.425512][ T8911] x_tables: unsorted entry at hook 3 [ 143.567706][ T5865] Bluetooth: hci5: command tx timeout [ 143.699296][ T8915] netlink: 104 bytes leftover after parsing attributes in process `syz.2.886'. [ 143.772932][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 144.071065][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 144.370676][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'. [ 144.393727][ T8950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.410600][ T8949] netlink: 'syz.3.896': attribute type 8 has an invalid length. [ 144.645167][ T8975] netlink: 'syz.4.903': attribute type 9 has an invalid length. [ 144.654256][ T8975] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.903'. [ 144.976996][ T8992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.234766][ T9007] bond2: entered promiscuous mode [ 145.255217][ T9007] bond2: entered allmulticast mode [ 145.270756][ T9007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.296076][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 145.313285][ T9012] delete_channel: no stack [ 145.437984][ T9007] bond2 (unregistering): Released all slaves [ 145.933882][ T9056] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 145.965858][ T9056] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 145.988803][ T9056] veth7: entered promiscuous mode [ 145.996077][ T9056] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 146.069832][ T9031] netlink: 'syz.4.919': attribute type 23 has an invalid length. [ 146.535058][ T9090] netlink: 'syz.0.939': attribute type 3 has an invalid length. [ 146.550211][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 146.568067][ T9092] bond0: invalid ARP target 0.0.0.0 specified for addition [ 146.591440][ T9092] bond0: option arp_ip_target: invalid value (0) [ 146.666293][ T9097] netlink: 56 bytes leftover after parsing attributes in process `syz.0.941'. [ 147.043941][ T9119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.229728][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 147.251377][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 147.274936][ T9131] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 147.595258][ T9163] veth0_to_bridge: entered promiscuous mode [ 147.635078][ T9165] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 147.652462][ T9170] netlink: 'syz.2.961': attribute type 23 has an invalid length. [ 147.672795][ T9159] veth0_to_bridge: left promiscuous mode [ 147.944317][ T9185] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.971457][ T9178] hsr_slave_1 (unregistering): left promiscuous mode [ 148.401592][ T9204] netlink: 'syz.5.973': attribute type 39 has an invalid length. [ 148.427573][ T9206] netlink: 'syz.4.975': attribute type 83 has an invalid length. [ 148.683092][ T9222] netlink: 'syz.3.980': attribute type 23 has an invalid length. [ 148.747332][ T9226] __nla_validate_parse: 5 callbacks suppressed [ 148.747349][ T9226] netlink: 128 bytes leftover after parsing attributes in process `syz.4.981'. [ 148.797403][ T9226] netlink: 128 bytes leftover after parsing attributes in process `syz.4.981'. [ 148.904785][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.986'. [ 148.966111][ T9233] pim6reg: entered allmulticast mode [ 148.993568][ T9235] sctp: [Deprecated]: syz.5.986 (pid 9235) Use of int in max_burst socket option. [ 148.993568][ T9235] Use struct sctp_assoc_value instead [ 149.183693][ T9253] netlink: 'syz.3.993': attribute type 21 has an invalid length. [ 149.212013][ T9253] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.540199][ T9278] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 149.582167][ T9278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1003'. [ 149.624886][ T9284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1004'. [ 149.635778][ T9284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.955279][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1009'. [ 149.986815][ T9306] openvswitch: netlink: Flow key attr not present in new flow. [ 150.259608][ T978] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1 [ 150.268702][ T978] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 150.295865][ T30] audit: type=1800 audit(1752400346.592:2): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1015" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1110 res=0 errno=0 [ 150.301991][ T9326] netlink: 'syz.2.1016': attribute type 29 has an invalid length. [ 150.397012][ T9333] veth1_macvtap: left promiscuous mode [ 150.405296][ T9333] macsec0: entered promiscuous mode [ 150.412314][ T9333] macsec0: entered allmulticast mode [ 150.420344][ T9330] veth1_macvtap: entered promiscuous mode [ 150.427122][ T9330] veth1_macvtap: entered allmulticast mode [ 150.433285][ T9330] macsec0: left promiscuous mode [ 150.439262][ T9330] macsec0: left allmulticast mode [ 150.444324][ T9330] veth1_macvtap: left allmulticast mode [ 150.464841][ T9331] netlink: 'syz.2.1016': attribute type 29 has an invalid length. [ 150.484173][ T9335] sit0: entered promiscuous mode [ 150.503364][ T9335] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 150.519807][ T9335] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1019'. [ 150.537699][ T9337] tipc: Started in network mode [ 150.542701][ T9337] tipc: Node identity b6638aff4e0a, cluster identity 4711 [ 150.555463][ T9337] tipc: Enabled bearer , priority 10 [ 150.575920][ T9335] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 150.613949][ T9328] tipc: Resetting bearer [ 150.640591][ T9327] tipc: Resetting bearer [ 151.617811][ T5970] tipc: Node number set to 4167666431 [ 151.974812][ T9327] tipc: Disabling bearer [ 151.997846][ T9352] tc_dump_action: action bad kind [ 152.244451][ T9372] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 152.400261][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 152.445445][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1032'. [ 152.693009][ T9394] tipc: Started in network mode [ 152.698421][ T9394] tipc: Node identity 620da6d674eb, cluster identity 4711 [ 152.707010][ T9394] tipc: Enabled bearer , priority 10 [ 152.793811][ T9394] tipc: Resetting bearer [ 152.803837][ T9400] batadv_slave_0: entered promiscuous mode [ 152.833704][ T9393] tipc: Resetting bearer [ 152.922880][ T9408] sctp: [Deprecated]: syz.4.1042 (pid 9408) Use of int in max_burst socket option. [ 152.922880][ T9408] Use struct sctp_assoc_value instead [ 153.107150][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1044'. [ 153.476477][ T9433] openvswitch: netlink: Multiple metadata blocks provided [ 153.699305][ T978] tipc: Node number set to 384214742 [ 154.309257][ T9393] tipc: Disabling bearer [ 154.326148][ T9416] netlink: 'syz.4.1043': attribute type 12 has an invalid length. [ 154.336800][ T9419] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 154.424158][ T9433] xfrm1: entered promiscuous mode [ 154.443611][ T9433] xfrm1: entered allmulticast mode [ 154.566512][ T9442] tipc: Enabling of bearer rejected, failed to enable media [ 154.589637][ T9443] __nla_validate_parse: 3 callbacks suppressed [ 154.589654][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 154.606194][ T9446] openvswitch: netlink: Missing key (keys=40, expected=100) [ 155.299326][ T9480] netlink: 'syz.2.1062': attribute type 2 has an invalid length. [ 155.307509][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 155.386706][ T9491] netlink: ct family unspecified [ 155.404657][ T9491] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.494448][ T9499] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1067'. [ 155.813590][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 155.832824][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 156.210376][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.356775][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.399244][ T9526] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 156.432026][ T9526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.503209][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.593257][ T9527] gretap1: entered promiscuous mode [ 156.611079][ T9527] bond2: (slave gretap1): making interface the new active one [ 156.658664][ T9527] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 156.749128][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.976696][ T9546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.061451][ T36] team0: left allmulticast mode [ 157.066591][ T36] team_slave_0: left allmulticast mode [ 157.093700][ T36] team_slave_1: left allmulticast mode [ 157.103563][ T36] team0: left promiscuous mode [ 157.113562][ T36] team_slave_0: left promiscuous mode [ 157.139922][ T36] team_slave_1: left promiscuous mode [ 157.150517][ T36] bridge0: port 3(team0) entered disabled state [ 157.172210][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.184073][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.192251][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.200488][ T36] bridge_slave_1: left allmulticast mode [ 157.206728][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.215618][ T9581] netlink: 'syz.2.1085': attribute type 21 has an invalid length. [ 157.223829][ T36] bridge_slave_1: left promiscuous mode [ 157.229979][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.235526][ T9581] netlink: 'syz.2.1085': attribute type 22 has an invalid length. [ 157.245549][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.260357][ T36] bridge_slave_0: left allmulticast mode [ 157.274147][ T9581] netlink: 'syz.2.1085': attribute type 23 has an invalid length. [ 157.284432][ T36] bridge_slave_0: left promiscuous mode [ 157.290880][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.301606][ T9581] netlink: 'syz.2.1085': attribute type 25 has an invalid length. [ 157.311764][ T9581] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1085'. [ 157.429377][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 158.216042][ T36] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 158.236592][ T36] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a6:95:11:15:0f:0e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 158.473939][ T36] bond1 (unregistering): Released all slaves [ 158.566718][ T36] bond0 (unregistering): (slave veth3): Releasing active interface [ 158.576558][ T36] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 158.586610][ T36] bond0 (unregistering): Released all slaves [ 158.606979][ T36] bond2 (unregistering): Released all slaves [ 158.622999][ T36] bond3 (unregistering): (slave veth7): Releasing backup interface [ 158.632519][ T36] bond3 (unregistering): Released all slaves [ 158.644576][ T9564] netlink: 'syz.0.1083': attribute type 2 has an invalid length. [ 158.752311][ T9613] macsec0: entered promiscuous mode [ 158.868171][ T9621] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 159.046530][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 159.129918][ T9626] netlink: 'syz.5.1092': attribute type 58 has an invalid length. [ 159.153056][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1092'. [ 159.161156][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1096'. [ 159.209852][ T36] hsr_slave_0: left promiscuous mode [ 159.219253][ T36] hsr_slave_1: left promiscuous mode [ 159.225509][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.241414][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.258928][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.267704][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.305022][ T36] veth1_macvtap: left promiscuous mode [ 159.311530][ T36] veth0_macvtap: left promiscuous mode [ 159.320147][ T36] veth1_vlan: left promiscuous mode [ 159.327423][ T5865] Bluetooth: hci0: command tx timeout [ 159.362783][ T9652] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 159.472464][ T36] pimreg3 (unregistering): left allmulticast mode [ 159.865412][ T36] team0 (unregistering): Port device team_slave_1 removed [ 159.902731][ T36] team0 (unregistering): Port device team_slave_0 removed [ 160.324513][ T9642] kthread_run failed with err -4 [ 160.629502][ T9565] chnl_net:caif_netlink_parms(): no params data found [ 160.774622][ T9682] __nla_validate_parse: 2 callbacks suppressed [ 160.774640][ T9682] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1110'. [ 160.894315][ T9565] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.911078][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.919187][ T9565] bridge_slave_0: entered allmulticast mode [ 160.927126][ T9565] bridge_slave_0: entered promiscuous mode [ 160.945819][ T9689] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 160.956706][ T9565] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.971468][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.981891][ T9565] bridge_slave_1: entered allmulticast mode [ 160.990853][ T9565] bridge_slave_1: entered promiscuous mode [ 161.061727][ T9565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.090025][ T9565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.168824][ T9565] team0: Port device team_slave_0 added [ 161.192903][ T9565] team0: Port device team_slave_1 added [ 161.389302][ T9565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.398512][ T9565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.427703][ T5865] Bluetooth: hci0: command tx timeout [ 161.452140][ T9565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.491385][ T9565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.501474][ T9565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.527618][ T9565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.544978][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 161.734974][ T9565] hsr_slave_0: entered promiscuous mode [ 161.754855][ T9565] hsr_slave_1: entered promiscuous mode [ 161.770594][ T9565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.791801][ T9565] Cannot create hsr debugfs directory [ 161.963899][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 162.402272][ T9763] tipc: Enabling of bearer rejected, failed to enable media [ 162.403721][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 162.482670][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1139'. [ 162.766379][ T9781] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.770821][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'. [ 162.775476][ T9781] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.786560][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'. [ 162.793374][ T9781] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.810997][ T9781] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.827765][ T9781] vxlan0: entered promiscuous mode [ 162.833035][ T9781] vxlan0: entered allmulticast mode [ 162.871650][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 162.944575][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 162.952223][ T9565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.966368][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 163.077962][ T9565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.108955][ T9565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.123062][ T9565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.240086][ T9565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.276055][ T9565] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.292217][ T9810] bridge: RTM_NEWNEIGH with invalid ether address [ 163.305756][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.312991][ T9594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.357974][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.365181][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.413886][ T9813] tipc: Enabling of bearer rejected, failed to enable media [ 163.487471][ T5865] Bluetooth: hci0: command tx timeout [ 163.865324][ T9565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.928172][ T9837] C: renamed from lo (while UP) [ 163.986382][ T9565] veth0_vlan: entered promiscuous mode [ 164.006769][ T9565] veth1_vlan: entered promiscuous mode [ 164.193043][ T9565] veth0_macvtap: entered promiscuous mode [ 164.229572][ T9565] veth1_macvtap: entered promiscuous mode [ 164.291212][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.313966][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.339641][ T9565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.373917][ T9565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.412404][ T9565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.437411][ T9565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.714308][ T9879] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 164.747311][ T9603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.781073][ T9603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.909465][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.932805][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.525685][ T9924] unsupported nlmsg_type 40 [ 165.712326][ T9931] netlink: 'syz.0.1186': attribute type 13 has an invalid length. [ 165.783156][ T9931] lo: entered promiscuous mode [ 165.791844][ T9931] lo: entered allmulticast mode [ 165.819204][ T9931] tunl0: entered promiscuous mode [ 165.831064][ T9931] tunl0: entered allmulticast mode [ 165.870859][ T9931] gre0: entered promiscuous mode [ 165.889062][ T9931] gre0: entered allmulticast mode [ 165.921234][ T9931] gretap0: entered promiscuous mode [ 165.936820][ T9931] gretap0: entered allmulticast mode [ 165.950642][ T9931] gretap0: refused to change device tx_queue_len [ 165.985072][ T9931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.025715][ T9945] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.034966][ T9945] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.043778][ T9945] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.052744][ T9945] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.192794][ T9568] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.286513][ T9568] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.456445][ T9568] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.559241][ T9568] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.664568][ T9955] __nla_validate_parse: 5 callbacks suppressed [ 166.664587][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1194'. [ 166.689299][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 166.985402][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.994507][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.004610][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.022135][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.030120][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.045385][ T9568] bridge_slave_1: left allmulticast mode [ 167.074516][ T9568] bridge_slave_1: left promiscuous mode [ 167.123082][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.148975][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.153244][ T9568] bridge_slave_0: left allmulticast mode [ 167.158373][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.170316][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.179204][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.186987][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.204418][ T9568] bridge_slave_0: left promiscuous mode [ 167.228036][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.685484][ T9568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.696182][ T9568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.706887][ T9568] bond0 (unregistering): Released all slaves [ 167.762489][ T9981] tipc: Enabled bearer , priority 12 [ 167.830840][ T9568] tipc: Left network mode [ 168.034518][ T9992] tipc: Enabled bearer , priority 10 [ 168.128295][ T9986] tipc: Resetting bearer [ 168.185740][T10001] netlink: 'syz.2.1204': attribute type 2 has an invalid length. [ 168.201150][T10001] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1204'. [ 168.232196][ T9985] tipc: Resetting bearer [ 168.768961][ T10] tipc: Node number set to 278527744 [ 169.098580][ T5865] Bluetooth: hci0: command tx timeout [ 169.260822][ T5865] Bluetooth: hci2: command tx timeout [ 169.645981][ T9985] tipc: Disabling bearer [ 169.728026][ T9568] hsr_slave_0: left promiscuous mode [ 169.739860][ T9568] hsr_slave_1: left promiscuous mode [ 169.745965][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.773142][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.795089][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.804909][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.829486][ T9568] veth1_macvtap: left promiscuous mode [ 169.835056][ T9568] veth0_macvtap: left promiscuous mode [ 169.841028][ T9568] veth1_vlan: left promiscuous mode [ 169.846367][ T9568] veth0_vlan: left promiscuous mode [ 169.882061][T10019] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 169.892756][T10019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.277942][ T9568] team0 (unregistering): Port device team_slave_1 removed [ 170.321178][ T9568] team0 (unregistering): Port device team_slave_0 removed [ 170.906745][T10025] bridge0: port 1(syz_tun) entered blocking state [ 170.915481][T10025] bridge0: port 1(syz_tun) entered disabled state [ 170.922506][T10025] syz_tun: entered allmulticast mode [ 170.932154][T10025] syz_tun: entered promiscuous mode [ 171.076158][ T9965] chnl_net:caif_netlink_parms(): no params data found [ 171.116345][T10039] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1213'. [ 171.167930][ T5865] Bluetooth: hci0: command tx timeout [ 171.219545][T10043] lo speed is unknown, defaulting to 1000 [ 171.266557][T10043] lo speed is unknown, defaulting to 1000 [ 171.296909][T10043] lo speed is unknown, defaulting to 1000 [ 171.329927][ T5865] Bluetooth: hci2: command tx timeout [ 171.386075][T10043] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.403980][ T9568] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.473932][T10043] lo speed is unknown, defaulting to 1000 [ 171.541569][T10053] tipc: Enabled bearer , priority 10 [ 171.549005][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 171.616533][T10056] tipc: Resetting bearer [ 171.618309][T10043] lo speed is unknown, defaulting to 1000 [ 171.655859][ T9568] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.671880][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.679868][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.687129][ T9965] bridge_slave_0: entered allmulticast mode [ 171.695559][ T9965] bridge_slave_0: entered promiscuous mode [ 171.712392][T10052] tipc: Resetting bearer [ 172.958035][T10052] tipc: Disabling bearer [ 172.978149][T10043] lo speed is unknown, defaulting to 1000 [ 172.993146][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.001695][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.009642][ T9965] bridge_slave_1: entered allmulticast mode [ 173.017996][ T9965] bridge_slave_1: entered promiscuous mode [ 173.040266][ T9568] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.064520][T10043] lo speed is unknown, defaulting to 1000 [ 173.113370][T10043] lo speed is unknown, defaulting to 1000 [ 173.141512][ T9568] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.168766][T10043] lo speed is unknown, defaulting to 1000 [ 173.194172][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.219834][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 173.241111][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.253838][ T5865] Bluetooth: hci0: command tx timeout [ 173.304065][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.341474][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.351182][ T9970] bridge_slave_0: entered allmulticast mode [ 173.361508][ T9970] bridge_slave_0: entered promiscuous mode [ 173.394897][ T9965] team0: Port device team_slave_0 added [ 173.406805][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.414571][ T5865] Bluetooth: hci2: command tx timeout [ 173.425905][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.433573][ T9970] bridge_slave_1: entered allmulticast mode [ 173.440946][ T9970] bridge_slave_1: entered promiscuous mode [ 173.478803][ T9965] team0: Port device team_slave_1 added [ 173.515969][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.546535][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.554097][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.581590][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.596291][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.628921][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.638523][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.666430][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.745742][ T9970] team0: Port device team_slave_0 added [ 173.802155][ T9970] team0: Port device team_slave_1 added [ 173.854460][ T9568] bridge_slave_1: left allmulticast mode [ 173.862282][ T9568] bridge_slave_1: left promiscuous mode [ 173.869260][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.882515][ T9568] bridge_slave_0: left allmulticast mode [ 173.899407][ T9568] bridge_slave_0: left promiscuous mode [ 173.905128][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.313776][ T9568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.326403][ T9568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.338637][ T9568] bond0 (unregistering): Released all slaves [ 175.328202][ T5865] Bluetooth: hci0: command tx timeout [ 175.487586][ T5865] Bluetooth: hci2: command tx timeout [ 175.828818][T10111] x_tables: duplicate underflow at hook 3 [ 175.843443][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.863167][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.942913][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.960165][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.967327][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.993915][T10117] sctp: [Deprecated]: syz.0.1235 (pid 10117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.993915][T10117] Use struct sctp_sack_info instead [ 176.059080][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.105470][ T9965] hsr_slave_0: entered promiscuous mode [ 176.115979][ T9965] hsr_slave_1: entered promiscuous mode [ 176.134740][ T9965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.143376][ T9965] Cannot create hsr debugfs directory [ 176.162150][T10115] tipc: Started in network mode [ 176.167539][T10115] tipc: Node identity a6a2220e1a4a, cluster identity 4711 [ 176.180514][T10115] tipc: Enabled bearer , priority 10 [ 176.256208][T10105] infiniband syz!: set down [ 176.267842][T10105] infiniband syz!: added team_slave_0 [ 176.274918][T10105] syz!: rxe_create_cq: returned err = -12 [ 176.285399][T10118] tipc: Resetting bearer [ 176.292631][T10105] infiniband syz!: Couldn't create ib_mad CQ [ 176.299399][T10105] infiniband syz!: Couldn't open port 1 [ 176.338747][T10105] RDS/IB: syz!: added [ 176.343288][T10105] smc: adding ib device syz! with port count 1 [ 176.363799][T10105] smc: ib device syz! port 1 has pnetid [ 176.386514][T10108] tipc: Resetting bearer [ 176.982893][T10128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1237'. [ 177.227997][ T5935] tipc: Node number set to 3169329678 [ 177.778293][T10108] tipc: Disabling bearer [ 177.896604][ T9970] hsr_slave_0: entered promiscuous mode [ 177.924204][ T9970] hsr_slave_1: entered promiscuous mode [ 177.931318][ T9970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.945822][ T9970] Cannot create hsr debugfs directory [ 178.025010][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 178.034848][T10136] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1239'. [ 178.590925][T10156] x_tables: duplicate underflow at hook 3 [ 178.786758][T10163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.796474][T10163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.805830][T10163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.814922][T10163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.075713][T10169] tipc: Enabled bearer , priority 10 [ 179.119587][ T9965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.213613][T10169] tipc: Resetting bearer [ 179.219680][ T9965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.234586][ T9965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.256092][T10166] tipc: Resetting bearer [ 179.265138][T10174] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1251'. [ 180.569742][T10166] tipc: Disabling bearer [ 180.591456][ T9965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.741782][T10187] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 180.920910][ T9965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.993448][ T9965] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.069898][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.077078][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.161159][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.168387][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.336423][ T9970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.373416][ T9970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.463592][ T9965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.485052][ T9970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.523784][ T9970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.727325][T10219] tipc: Enabled bearer , priority 10 [ 181.833378][T10219] tipc: Resetting bearer [ 181.846318][T10218] tipc: Resetting bearer [ 182.115774][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 183.425023][T10218] tipc: Disabling bearer [ 183.473434][ T9568] hsr_slave_0: left promiscuous mode [ 183.517858][ T9568] hsr_slave_1: left promiscuous mode [ 183.541909][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.565372][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.592347][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.609580][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.691887][ T9568] veth1_macvtap: left promiscuous mode [ 183.703359][ T9568] veth0_macvtap: left promiscuous mode [ 183.709575][ T9568] veth1_vlan: left promiscuous mode [ 183.724241][ T9568] veth0_vlan: left promiscuous mode [ 183.751065][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 183.982723][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 184.185440][ T9568] team0 (unregistering): Port device team_slave_1 removed [ 184.226519][ T9568] team0 (unregistering): Port device team_slave_0 removed [ 184.752804][T10261] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 184.763788][T10261] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1273'. [ 184.777962][T10261] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 184.826078][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.896640][ T9965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.951958][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.002120][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.009355][ T9606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.024641][T10272] xt_TCPMSS: Only works on TCP SYN packets [ 185.071479][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.078713][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.782209][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1284'. [ 185.865648][ T9965] veth0_vlan: entered promiscuous mode [ 185.924648][ T9965] veth1_vlan: entered promiscuous mode [ 185.954831][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.976598][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1286'. [ 186.063585][ T9965] veth0_macvtap: entered promiscuous mode [ 186.111081][ T9970] veth0_vlan: entered promiscuous mode [ 186.132101][ T9965] veth1_macvtap: entered promiscuous mode [ 186.185879][ T9965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.241048][ T9965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.269827][ T9970] veth1_vlan: entered promiscuous mode [ 186.295879][T10324] syzkaller1: entered allmulticast mode [ 186.324041][ T9965] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.354465][ T9965] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.366644][ T9965] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.378380][ T9965] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.435759][T10339] netlink: 'syz.0.1293': attribute type 10 has an invalid length. [ 186.558666][ T9970] veth0_macvtap: entered promiscuous mode [ 186.578933][ T9970] veth1_macvtap: entered promiscuous mode [ 186.675850][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.680018][T10346] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 186.705493][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.733937][T10347] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1296'. [ 186.758466][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.810319][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.840774][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.861479][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.875491][ T9970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.897093][ T9970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.918726][ T9970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.928084][ T9970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.008725][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 187.231258][ T9603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.246526][ T9603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.432574][ T9594] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.477784][ T9605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.485651][ T9605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.546691][ T9594] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.663564][ T9594] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.841279][ T9594] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.186155][ T9594] bridge_slave_1: left allmulticast mode [ 188.193760][ T9594] bridge_slave_1: left promiscuous mode [ 188.204302][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.228012][ T9594] bridge_slave_0: left allmulticast mode [ 188.233711][ T9594] bridge_slave_0: left promiscuous mode [ 188.248028][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.381916][T10397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1311'. [ 188.472845][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.486219][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.500411][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.511071][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.520009][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.794365][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.804054][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.818579][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.826886][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.842046][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.985829][ T9594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.998773][ T9594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.009828][ T9594] bond0 (unregistering): Released all slaves [ 189.165695][T10403] lo speed is unknown, defaulting to 1000 [ 189.180631][T10411] lo speed is unknown, defaulting to 1000 [ 189.334769][T10420] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.553940][T10428] x_tables: unsorted entry at hook 3 [ 190.090371][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'. [ 190.135784][T10416] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 190.343757][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 190.378254][T10463] pim6reg1: entered promiscuous mode [ 190.383907][T10463] pim6reg1: entered allmulticast mode [ 190.394424][ T9594] hsr_slave_0: left promiscuous mode [ 190.403892][ T9594] hsr_slave_1: left promiscuous mode [ 190.409920][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.417508][ T9594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.425298][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.433086][ T9594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.453063][ T9594] veth1_macvtap: left promiscuous mode [ 190.458820][ T9594] veth0_macvtap: left promiscuous mode [ 190.465479][ T9594] veth1_vlan: left promiscuous mode [ 190.471950][ T9594] veth0_vlan: left promiscuous mode [ 190.617491][ T5865] Bluetooth: hci0: command tx timeout [ 190.912732][ T9594] team0 (unregistering): Port device team_slave_1 removed [ 190.928570][ T5865] Bluetooth: hci2: command tx timeout [ 190.961597][ T9594] team0 (unregistering): Port device team_slave_0 removed [ 191.335616][T10460] syz_tun (unregistering): left allmulticast mode [ 191.342684][T10460] syz_tun (unregistering): left promiscuous mode [ 191.351445][T10460] bridge0: port 1(syz_tun) entered disabled state [ 191.441729][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 191.447048][T10403] chnl_net:caif_netlink_parms(): no params data found [ 191.810430][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.822986][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.830319][T10403] bridge_slave_0: entered allmulticast mode [ 191.850930][T10403] bridge_slave_0: entered promiscuous mode [ 191.877735][T10488] netlink: 'syz.2.1331': attribute type 10 has an invalid length. [ 191.917126][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.924902][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.932520][T10403] bridge_slave_1: entered allmulticast mode [ 191.940816][T10403] bridge_slave_1: entered promiscuous mode [ 191.947414][T10488] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 192.076486][T10494] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 192.087141][T10411] chnl_net:caif_netlink_parms(): no params data found [ 192.150458][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.173262][T10494] team0: Port device bond0 added [ 192.193431][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.245117][T10499] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1334'. [ 192.272819][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.424031][T10513] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1337'. [ 192.438501][ T9594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.599486][ T9594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.615951][T10516] tipc: Enabling of bearer rejected, failed to enable media [ 192.638367][T10403] team0: Port device team_slave_0 added [ 192.644712][T10411] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.653808][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.665479][T10411] bridge_slave_0: entered allmulticast mode [ 192.673812][T10411] bridge_slave_0: entered promiscuous mode [ 192.686701][T10403] team0: Port device team_slave_1 added [ 192.692872][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 192.741381][ T9594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.756061][T10411] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.765038][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.776142][T10411] bridge_slave_1: entered allmulticast mode [ 192.786602][T10411] bridge_slave_1: entered promiscuous mode [ 192.856150][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.863774][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.891458][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.915716][ T9594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.936611][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.950798][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.958145][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.985762][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.003238][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.018727][ T5865] Bluetooth: hci2: command tx timeout [ 193.074036][T10411] team0: Port device team_slave_0 added [ 193.108291][T10403] hsr_slave_0: entered promiscuous mode [ 193.114678][T10403] hsr_slave_1: entered promiscuous mode [ 193.120908][T10403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.130115][T10403] Cannot create hsr debugfs directory [ 193.139730][T10411] team0: Port device team_slave_1 added [ 193.184656][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.192561][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.219586][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.246642][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.254217][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.281581][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.394300][T10411] hsr_slave_0: entered promiscuous mode [ 193.401750][T10411] hsr_slave_1: entered promiscuous mode [ 193.409141][T10411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.416743][T10411] Cannot create hsr debugfs directory [ 193.431091][ T9594] bridge_slave_1: left allmulticast mode [ 193.437418][ T9594] bridge_slave_1: left promiscuous mode [ 193.443305][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.453216][ T9594] bridge_slave_0: left allmulticast mode [ 193.459141][ T9594] bridge_slave_0: left promiscuous mode [ 193.464875][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.749613][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 193.858580][ T9594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.872616][ T9594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.882995][ T9594] bond0 (unregistering): Released all slaves [ 194.211730][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321322][T10551] tipc: Enabling of bearer rejected, failed to enable media [ 194.452845][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 194.466732][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 194.565234][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 194.574993][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 194.706631][ T9594] hsr_slave_0: left promiscuous mode [ 194.726980][ T9594] hsr_slave_1: left promiscuous mode [ 194.735018][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.748512][ T9594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.756848][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.767693][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 194.773190][ T9594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.824236][ T9594] veth1_macvtap: left promiscuous mode [ 194.830640][ T9594] veth0_macvtap: left promiscuous mode [ 194.836361][ T9594] veth1_vlan: left promiscuous mode [ 194.841972][ T9594] veth0_vlan: left promiscuous mode [ 195.100531][ T51] Bluetooth: hci2: command tx timeout [ 195.304850][ T9594] team0 (unregistering): Port device team_slave_1 removed [ 195.351232][ T9594] team0 (unregistering): Port device team_slave_0 removed [ 195.984651][T10403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.043685][T10403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.053975][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 196.112837][T10403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.151679][T10597] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 196.176823][T10599] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1363'. [ 196.177349][T10403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.239460][T10599] 8021q: VLANs not supported on gre0 [ 196.253767][T10599] netlink: 'syz.0.1363': attribute type 24 has an invalid length. [ 196.291328][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.291383][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 196.623004][T10627] lo speed is unknown, defaulting to 1000 [ 196.642165][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.734835][T10411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.771493][T10411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.811416][T10411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.848940][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.856115][ T5859] Bluetooth: hci0: command 0x041b tx timeout [ 196.863600][T10411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.916402][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.923646][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.985084][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.992322][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.111889][T10645] ip6t_REJECT: ECHOREPLY is not supported [ 197.168307][ T5859] Bluetooth: hci2: command tx timeout [ 197.219918][T10648] netlink: 'syz.4.1371': attribute type 10 has an invalid length. [ 197.238585][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.246776][T10648] team0: Port device bond0 added [ 197.480397][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.560014][T10411] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.605117][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.612362][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.645767][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.652980][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.040036][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.086117][T10680] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.093940][T10680] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.423090][T10692] virt_wifi0: mtu less than device minimum [ 198.732127][T10403] veth0_vlan: entered promiscuous mode [ 198.751939][T10403] veth1_vlan: entered promiscuous mode [ 198.823684][T10403] veth0_macvtap: entered promiscuous mode [ 198.841074][T10403] veth1_macvtap: entered promiscuous mode [ 198.883849][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.947679][ T5859] Bluetooth: hci0: command 0x041b tx timeout [ 198.989028][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.060091][T10403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.109833][T10403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.134225][T10403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154223][T10403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.182647][T10709] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 199.214821][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.223282][T10709] team0: Cannot enslave team device to itself [ 199.380767][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.401537][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 199.421049][ T9594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.435623][ T9594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.455131][T10717] vlan5: entered allmulticast mode [ 199.461318][T10717] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 199.505795][ T9606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.533118][ T9606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.603171][T10411] veth0_vlan: entered promiscuous mode [ 199.622621][T10722] veth0_vlan: entered allmulticast mode [ 199.644140][T10411] veth1_vlan: entered promiscuous mode [ 199.832845][T10411] veth0_macvtap: entered promiscuous mode [ 199.846135][T10411] veth1_macvtap: entered promiscuous mode [ 199.899942][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.001674][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.010918][T10735] netlink: 'syz.2.1396': attribute type 4 has an invalid length. [ 200.023259][T10411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.048441][T10411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.068923][T10411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.088901][T10411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.146058][T10740] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1397'. [ 200.156925][T10740] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 200.195615][ T9568] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.338737][ T9568] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.452866][ T9568] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.709184][ T9568] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.783708][T10757] openvswitch: netlink: Message has 4 unknown bytes. [ 200.881751][ T9594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.919390][ T9594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.001456][ T9573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.025961][ T9573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.041991][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.057128][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.079716][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.089907][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.100591][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.258728][ T9568] bridge_slave_1: left allmulticast mode [ 201.264428][ T9568] bridge_slave_1: left promiscuous mode [ 201.291728][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.312068][ T9568] bridge_slave_0: left allmulticast mode [ 201.324924][ T9568] bridge_slave_0: left promiscuous mode [ 201.350340][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.798977][ T9568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.810168][ T9568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.821557][ T9568] bond0 (unregistering): Released all slaves [ 201.834155][T10775] syzkaller0: entered promiscuous mode [ 201.840175][T10775] syzkaller0: entered allmulticast mode [ 202.010005][T10765] lo speed is unknown, defaulting to 1000 [ 202.057030][T10799] syz_tun: entered allmulticast mode [ 202.076077][T10795] syz_tun: left allmulticast mode [ 202.661846][ T9568] hsr_slave_0: left promiscuous mode [ 202.670337][ T9568] hsr_slave_1: left promiscuous mode [ 202.676160][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.683659][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.692705][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.700730][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.719845][ T9568] veth1_macvtap: left promiscuous mode [ 202.725420][ T9568] veth0_macvtap: left promiscuous mode [ 202.731338][ T9568] veth1_vlan: left promiscuous mode [ 202.736584][ T9568] veth0_vlan: left promiscuous mode [ 203.168617][ T5865] Bluetooth: hci0: command tx timeout [ 203.301293][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.311329][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.321165][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.339445][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.360815][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.441148][ T9568] team0 (unregistering): Port device team_slave_1 removed [ 203.489715][ T9568] team0 (unregistering): Port device team_slave_0 removed [ 204.096513][T10820] lo speed is unknown, defaulting to 1000 [ 204.155319][T10765] chnl_net:caif_netlink_parms(): no params data found [ 204.275321][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 204.343670][T10841] xt_hashlimit: size too large, truncated to 1048576 [ 204.406961][T10843] SET target dimension over the limit! [ 204.493486][T10849] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 204.571579][T10849] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1421'. [ 204.720837][T10853] netlink: 'syz.0.1422': attribute type 4 has an invalid length. [ 204.734278][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.770923][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.813520][T10765] bridge_slave_0: entered allmulticast mode [ 204.822168][T10858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1422'. [ 204.831467][T10765] bridge_slave_0: entered promiscuous mode [ 204.845585][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.874666][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.905329][T10765] bridge_slave_1: entered allmulticast mode [ 204.921403][T10765] bridge_slave_1: entered promiscuous mode [ 205.130365][ T9568] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.166641][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.188948][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.251631][ T5865] Bluetooth: hci0: command tx timeout [ 205.393903][T10765] team0: Port device team_slave_0 added [ 205.412210][ T5865] Bluetooth: hci2: command tx timeout [ 205.450708][ T9568] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.515980][T10886] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1430'. [ 205.515982][T10765] team0: Port device team_slave_1 added [ 205.599340][ T9568] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.628809][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.636291][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.718188][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.733131][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 205.779628][ T9568] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.802463][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.811595][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.840127][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.967824][T10905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1435'. [ 206.215602][T10765] hsr_slave_0: entered promiscuous mode [ 206.232255][T10765] hsr_slave_1: entered promiscuous mode [ 206.241524][T10765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.251659][T10765] Cannot create hsr debugfs directory [ 206.259973][T10918] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 206.299051][T10820] chnl_net:caif_netlink_parms(): no params data found [ 206.491331][ T9568] bridge_slave_1: left allmulticast mode [ 206.499709][ T9568] bridge_slave_1: left promiscuous mode [ 206.505492][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.570070][ T9568] bridge_slave_0: left allmulticast mode [ 206.575772][ T9568] bridge_slave_0: left promiscuous mode [ 206.593527][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.725955][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 206.740492][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'. [ 207.014941][ T9568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.025725][ T9568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.035703][ T9568] bond0 (unregistering): Released all slaves [ 207.327918][ T5865] Bluetooth: hci0: command tx timeout [ 207.374451][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.391976][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.400056][T10967] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1452'. [ 207.408164][T10820] bridge_slave_0: entered allmulticast mode [ 207.414403][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 207.424553][T10820] bridge_slave_0: entered promiscuous mode [ 207.441874][T10970] netlink: 'syz.0.1454': attribute type 13 has an invalid length. [ 207.461280][T10958] netlink: 'syz.4.1452': attribute type 4 has an invalid length. [ 207.474476][T10970] gretap0: refused to change device tx_queue_len [ 207.481705][T10970] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.497876][ T5865] Bluetooth: hci2: command tx timeout [ 207.504613][T10968] sch_fq: defrate 0 ignored. [ 207.520285][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.528863][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.547466][T10820] bridge_slave_1: entered allmulticast mode [ 207.555425][T10820] bridge_slave_1: entered promiscuous mode [ 207.836024][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.919518][T10994] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 207.952957][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.167125][T10820] team0: Port device team_slave_0 added [ 208.236348][T10820] team0: Port device team_slave_1 added [ 208.314408][ T9568] hsr_slave_0: left promiscuous mode [ 208.324796][ T9568] hsr_slave_1: left promiscuous mode [ 208.332596][T11011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.342260][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.351714][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.360262][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.371562][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.395584][ T9568] veth1_macvtap: left promiscuous mode [ 208.401341][ T9568] veth0_macvtap: left promiscuous mode [ 208.412741][ T9568] veth1_vlan: left promiscuous mode [ 208.418268][ T9568] veth0_vlan: left promiscuous mode [ 208.451053][ T5935] IPVS: starting estimator thread 0... [ 208.509176][T11020] x_tables: duplicate underflow at hook 3 [ 208.540324][T11017] IPVS: using max 29 ests per chain, 69600 per kthread [ 209.066832][ T9568] team0 (unregistering): Port device team_slave_1 removed [ 209.109729][ T9568] team0 (unregistering): Port device team_slave_0 removed [ 209.407917][ T5865] Bluetooth: hci0: command tx timeout [ 209.526809][T11014] syzkaller1: entered promiscuous mode [ 209.533585][T11014] syzkaller1: entered allmulticast mode [ 209.574280][ T5865] Bluetooth: hci2: command tx timeout [ 209.630084][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.637063][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.665509][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.680458][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.688333][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.715284][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.875892][T11035] netlink: 'syz.2.1473': attribute type 12 has an invalid length. [ 209.876854][T11037] __nla_validate_parse: 4 callbacks suppressed [ 209.876868][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 209.887646][T11035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1473'. [ 209.933211][T10820] hsr_slave_0: entered promiscuous mode [ 209.948541][T10820] hsr_slave_1: entered promiscuous mode [ 209.955074][T10820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.972964][T10820] Cannot create hsr debugfs directory [ 210.335596][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 210.349570][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 210.364448][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 210.405834][T11057] tipc: Enabling of bearer rejected, already enabled [ 210.416753][T10765] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.459726][T10765] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.488613][T10765] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.519418][T10765] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.712163][T11076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.823961][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.866851][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.882237][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.889389][ T9604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.908909][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.916139][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.983564][T10820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.995747][T10820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.007902][T10820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.029761][T10820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.176265][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.203524][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.223985][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.231190][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.252909][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.260168][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.312988][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.608959][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.649068][ T5865] Bluetooth: hci2: command tx timeout [ 211.665695][T10820] veth0_vlan: entered promiscuous mode [ 211.683711][T10820] veth1_vlan: entered promiscuous mode [ 211.734061][T10820] veth0_macvtap: entered promiscuous mode [ 211.754979][T10765] veth0_vlan: entered promiscuous mode [ 211.764065][T10820] veth1_macvtap: entered promiscuous mode [ 211.781948][T10765] veth1_vlan: entered promiscuous mode [ 211.796025][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.820670][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.835484][T10820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.845255][T10820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.854461][T10820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.864406][T10820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.903966][T10765] veth0_macvtap: entered promiscuous mode [ 211.922612][T10765] veth1_macvtap: entered promiscuous mode [ 211.961228][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.995695][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.004953][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.008008][T10765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.022254][T10765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.032025][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.039943][T10765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.050244][T10765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.103299][ T9604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.114822][ T9604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.200486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.214562][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.274846][ T9603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.283205][ T9603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.435870][ T9604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.900735][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.911304][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.919874][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.929907][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.938514][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.976625][T11100] lo speed is unknown, defaulting to 1000 [ 214.342393][T11100] chnl_net:caif_netlink_parms(): no params data found [ 214.430696][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.441219][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.450146][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.461948][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.471511][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.482411][T11100] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.496849][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.504225][T11100] bridge_slave_0: entered allmulticast mode [ 214.512280][T11100] bridge_slave_0: entered promiscuous mode [ 214.525012][T11100] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.532805][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.540075][T11100] bridge_slave_1: entered allmulticast mode [ 214.547067][T11100] bridge_slave_1: entered promiscuous mode [ 214.580834][T11100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.593840][T11100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.622535][T11107] lo speed is unknown, defaulting to 1000 [ 214.648201][T11100] team0: Port device team_slave_0 added [ 214.657661][T11100] team0: Port device team_slave_1 added [ 214.735868][T11100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.748623][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.779511][T11100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.794711][T11100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.804799][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.838696][T11100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.871356][ T9604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.956496][T11100] hsr_slave_0: entered promiscuous mode [ 214.963317][T11100] hsr_slave_1: entered promiscuous mode [ 214.970018][T11100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.977783][T11100] Cannot create hsr debugfs directory [ 215.100207][ T9604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.205853][ T9604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.252609][T11107] chnl_net:caif_netlink_parms(): no params data found [ 215.359598][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.366826][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.374362][T11107] bridge_slave_0: entered allmulticast mode [ 215.382808][T11107] bridge_slave_0: entered promiscuous mode [ 215.398669][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.405787][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.413870][T11107] bridge_slave_1: entered allmulticast mode [ 215.421913][T11107] bridge_slave_1: entered promiscuous mode [ 215.459383][ T9604] bridge_slave_1: left allmulticast mode [ 215.465079][ T9604] bridge_slave_1: left promiscuous mode [ 215.471269][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.480775][ T9604] bridge_slave_0: left allmulticast mode [ 215.486421][ T9604] bridge_slave_0: left promiscuous mode [ 215.492660][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.813184][ T9604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.825042][ T9604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.835388][ T9604] bond0 (unregistering): Released all slaves [ 215.866593][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.906184][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.968509][ T5859] Bluetooth: hci0: command tx timeout [ 216.013225][T11107] team0: Port device team_slave_0 added [ 216.028712][T11107] team0: Port device team_slave_1 added [ 216.103616][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.110705][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.139360][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.166369][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.176050][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.202493][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.431375][T11107] hsr_slave_0: entered promiscuous mode [ 216.438180][T11107] hsr_slave_1: entered promiscuous mode [ 216.444241][T11107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.453686][T11107] Cannot create hsr debugfs directory [ 216.465925][ T9604] hsr_slave_0: left promiscuous mode [ 216.473974][ T9604] hsr_slave_1: left promiscuous mode [ 216.480036][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.487914][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.495696][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.504185][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.524410][ T9604] veth1_macvtap: left promiscuous mode [ 216.529144][ T5859] Bluetooth: hci2: command tx timeout [ 216.530325][ T9604] veth0_macvtap: left promiscuous mode [ 216.542300][ T9604] veth1_vlan: left promiscuous mode [ 216.548286][ T9604] veth0_vlan: left promiscuous mode [ 216.963720][ T9604] team0 (unregistering): Port device team_slave_1 removed [ 217.005552][ T9604] team0 (unregistering): Port device team_slave_0 removed [ 217.490688][T11100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.509220][T11100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.526648][T11100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.553942][T11100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.691555][T11107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.753335][T11100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.783159][T11107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.814784][T11100] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.828699][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.835835][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.863176][T11107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.884231][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.891426][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.950444][T11107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.033466][ T9604] bridge_slave_1: left allmulticast mode [ 218.047245][ T9604] bridge_slave_1: left promiscuous mode [ 218.047474][ T5859] Bluetooth: hci0: command tx timeout [ 218.053039][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.100680][ T9604] bridge_slave_0: left allmulticast mode [ 218.106696][ T9604] bridge_slave_0: left promiscuous mode [ 218.115176][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.419979][ T9604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.432748][ T9604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.442826][ T9604] bond0 (unregistering): Released all slaves [ 218.599070][T11107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.609625][ T5859] Bluetooth: hci2: command tx timeout [ 218.618834][T11107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.657706][T11107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.676464][T11100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.684116][T11107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.810158][T11100] veth0_vlan: entered promiscuous mode [ 218.842483][T11100] veth1_vlan: entered promiscuous mode [ 218.894915][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.915913][T11100] veth0_macvtap: entered promiscuous mode [ 218.932326][T11100] veth1_macvtap: entered promiscuous mode [ 218.965547][T11100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.984122][T11100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.014404][ T9604] hsr_slave_0: left promiscuous mode [ 219.021709][ T9604] hsr_slave_1: left promiscuous mode [ 219.030797][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.039388][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.047914][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.055350][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.075370][ T9604] veth1_macvtap: left promiscuous mode [ 219.081510][ T9604] veth0_macvtap: left promiscuous mode [ 219.087079][ T9604] veth1_vlan: left promiscuous mode [ 219.093165][ T9604] veth0_vlan: left promiscuous mode [ 219.515528][ T9604] team0 (unregistering): Port device team_slave_1 removed [ 219.557043][ T9604] team0 (unregistering): Port device team_slave_0 removed [ 219.819229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.942206][T11100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.952197][T11100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.961764][T11100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.971322][T11100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.994163][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.034021][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.041310][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.077135][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.084345][ T9573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.127958][ T5859] Bluetooth: hci0: command tx timeout [ 220.216421][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.231513][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.263884][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.273799][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.472581][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.680770][T11107] veth0_vlan: entered promiscuous mode [ 220.688783][ T5859] Bluetooth: hci2: command tx timeout [ 220.700189][T11107] veth1_vlan: entered promiscuous mode [ 220.729315][T11107] veth0_macvtap: entered promiscuous mode [ 220.739984][T11107] veth1_macvtap: entered promiscuous mode [ 220.762024][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.780772][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.793175][T11107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.802723][T11107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.811770][T11107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.820536][T11107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.884114][ T9603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.895586][ T9603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.921021][ T9568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.930003][ T9568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.543673][ T9604] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.800595][ T9604] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.025251][ T9604] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.045626][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.057875][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.065967][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.076836][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.084669][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.119008][T11144] lo speed is unknown, defaulting to 1000 [ 222.324757][ T9604] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.425715][T11144] chnl_net:caif_netlink_parms(): no params data found [ 222.559212][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.566357][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.587873][T11144] bridge_slave_0: entered allmulticast mode [ 222.594902][T11144] bridge_slave_0: entered promiscuous mode [ 222.610338][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.624543][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.633725][T11144] bridge_slave_1: entered allmulticast mode [ 222.650324][T11144] bridge_slave_1: entered promiscuous mode [ 222.706481][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.724528][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.791770][T11144] team0: Port device team_slave_0 added [ 222.802651][T11144] team0: Port device team_slave_1 added [ 222.804643][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.825818][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.834485][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.844468][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.853982][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.877734][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.884719][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.911398][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.924441][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.933836][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.960456][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.032594][T11144] hsr_slave_0: entered promiscuous mode [ 223.039924][T11144] hsr_slave_1: entered promiscuous mode [ 223.045969][T11144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.053810][T11144] Cannot create hsr debugfs directory [ 223.060011][T11153] lo speed is unknown, defaulting to 1000 [ 223.322709][ T9604] bridge_slave_1: left allmulticast mode [ 223.331028][ T9604] bridge_slave_1: left promiscuous mode [ 223.337903][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.353530][ T9604] bridge_slave_0: left allmulticast mode [ 223.359667][ T9604] bridge_slave_0: left promiscuous mode [ 223.365778][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.687050][ T9604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.698945][ T9604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.710287][ T9604] bond0 (unregistering): Released all slaves [ 223.960547][T11153] chnl_net:caif_netlink_parms(): no params data found [ 224.128326][ T5859] Bluetooth: hci0: command tx timeout [ 224.234790][T11144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.249518][ T9604] hsr_slave_0: left promiscuous mode [ 224.256706][ T9604] hsr_slave_1: left promiscuous mode [ 224.263427][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.271014][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.279490][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.287091][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.311166][ T9604] veth1_macvtap: left promiscuous mode [ 224.316686][ T9604] veth0_macvtap: left promiscuous mode [ 224.322597][ T9604] veth1_vlan: left promiscuous mode [ 224.328687][ T9604] veth0_vlan: left promiscuous mode [ 224.751338][ T9604] team0 (unregistering): Port device team_slave_1 removed [ 224.794087][ T9604] team0 (unregistering): Port device team_slave_0 removed [ 224.931645][ T5859] Bluetooth: hci2: command tx timeout [ 225.205428][T11144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.232160][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.241401][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.249331][T11153] bridge_slave_0: entered allmulticast mode [ 225.256548][T11153] bridge_slave_0: entered promiscuous mode [ 225.265822][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.273352][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.281590][T11153] bridge_slave_1: entered allmulticast mode [ 225.289411][T11153] bridge_slave_1: entered promiscuous mode [ 225.296378][T11144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.320172][T11144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.359985][T11153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.384172][T11153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.451047][T11153] team0: Port device team_slave_0 added [ 225.463330][T11153] team0: Port device team_slave_1 added [ 225.504044][T11153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.511454][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.537871][T11153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.553041][T11153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.560686][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.594223][T11153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.656466][T11153] hsr_slave_0: entered promiscuous mode [ 225.665405][T11153] hsr_slave_1: entered promiscuous mode [ 225.671885][T11153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.680678][T11153] Cannot create hsr debugfs directory [ 225.849947][T11153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.882387][T11144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.905581][T11144] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.931791][T11153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.957120][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.964298][ T9594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.980997][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.988187][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.029691][T11153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.085319][T11153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.183234][ T9604] bridge_slave_1: left allmulticast mode [ 226.191327][ T9604] bridge_slave_1: left promiscuous mode [ 226.210603][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.218939][ T5859] Bluetooth: hci0: command tx timeout [ 226.232483][ T9604] bridge_slave_0: left allmulticast mode [ 226.238784][ T9604] bridge_slave_0: left promiscuous mode [ 226.244569][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.596581][ T9604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.610257][ T9604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.620524][ T9604] bond0 (unregistering): Released all slaves [ 226.720521][T11153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.739963][T11144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.747081][T11153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.759829][T11153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.810250][T11153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.007865][ T5859] Bluetooth: hci2: command tx timeout [ 227.010098][T11153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.081227][T11153] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.113309][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.120833][ T9573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.164308][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.171531][ T9573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.281249][ T9604] hsr_slave_0: left promiscuous mode [ 227.295753][ T9604] hsr_slave_1: left promiscuous mode [ 227.301813][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.310083][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.318395][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.326343][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.344988][ T9604] veth1_macvtap: left promiscuous mode [ 227.351654][ T9604] veth0_macvtap: left promiscuous mode [ 227.357393][ T9604] veth1_vlan: left promiscuous mode [ 227.362716][ T9604] veth0_vlan: left promiscuous mode [ 227.786531][ T9604] team0 (unregistering): Port device team_slave_1 removed [ 227.827437][ T9604] team0 (unregistering): Port device team_slave_0 removed [ 228.223708][T11144] veth0_vlan: entered promiscuous mode [ 228.244652][T11153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.272599][T11144] veth1_vlan: entered promiscuous mode [ 228.288693][ T5859] Bluetooth: hci0: command tx timeout [ 228.361868][T11144] veth0_macvtap: entered promiscuous mode [ 228.373509][T11144] veth1_macvtap: entered promiscuous mode [ 228.404486][T11144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.417892][T11144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.455024][T11144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.463945][T11144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.475120][T11144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.484947][T11144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.623021][ T9603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.633977][ T9603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.678264][ T9567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.690305][T11153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.698197][ T9567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.755442][T11153] veth0_vlan: entered promiscuous mode [ 228.779787][T11153] veth1_vlan: entered promiscuous mode [ 228.841785][T11153] veth0_macvtap: entered promiscuous mode [ 228.851887][T11153] veth1_macvtap: entered promiscuous mode [ 228.871162][T11153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.888373][T11153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.900720][T11153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.909504][T11153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.919818][T11153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.928597][T11153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.993808][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.003164][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.026731][ T9604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.036646][ T9604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.087392][ C1] ------------[ cut here ]------------ [ 229.093194][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 229.099925][ C1] WARNING: CPU: 1 PID: 0 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 229.108679][ C1] Modules linked in: [ 229.112739][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00183-g5e28d5a3f774 #0 PREEMPT(full) [ 229.124367][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.134412][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 229.139682][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 19 d7 98 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 40 54 35 00 90 0f 0b 90 e9 dd fc ff [ 229.159284][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 229.165336][ C1] RAX: 88b89198e5930700 RBX: 0000000000000100 RCX: ffff88801d2f5a00 [ 229.173299][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 229.181256][ C1] RBP: 1ffff1100e998938 R08: 0000000000000003 R09: 0000000000000004 [ 229.189210][ C1] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dffffc0000000000 [ 229.197163][ C1] R13: ffff888061edc988 R14: 0000000000000008 R15: ffff888074cc4978 [ 229.205143][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 229.214073][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.220649][ C1] CR2: 00007ffc7b28e6d0 CR3: 000000007dfd6000 CR4: 00000000003526f0 [ 229.228613][ C1] Call Trace: [ 229.231882][ C1] [ 229.234720][ C1] call_timer_fn+0x17e/0x5f0 [ 229.239299][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 229.245089][ C1] ? call_timer_fn+0xbe/0x5f0 [ 229.249778][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 229.254910][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 229.260100][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 229.265890][ C1] __run_timer_base+0x646/0x860 [ 229.270728][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 229.275947][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 229.281345][ C1] run_timer_softirq+0xb7/0x180 [ 229.286188][ C1] handle_softirqs+0x286/0x870 [ 229.290940][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 229.295695][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 229.300979][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 229.306168][ C1] __irq_exit_rcu+0xca/0x1f0 [ 229.310742][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 229.315952][ C1] irq_exit_rcu+0x9/0x30 [ 229.320178][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 229.325796][ C1] [ 229.328710][ C1] [ 229.331625][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.337604][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 229.343312][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 fd 18 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 229.363001][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 229.369056][ C1] RAX: 88b89198e5930700 RBX: ffffffff81976c78 RCX: 88b89198e5930700 [ 229.377022][ C1] RDX: 0000000000000001 RSI: ffffffff8d998b32 RDI: ffffffff8be29dc0 [ 229.385004][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 229.392970][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1f3f0 [ 229.400956][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5eb40 [ 229.408923][ C1] ? do_idle+0x1e8/0x510 [ 229.413159][ C1] default_idle+0x13/0x20 [ 229.417470][ C1] default_idle_call+0x74/0xb0 [ 229.422212][ C1] do_idle+0x1e8/0x510 [ 229.426264][ C1] ? __pfx_do_idle+0x10/0x10 [ 229.430836][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.436029][ C1] cpu_startup_entry+0x44/0x60 [ 229.440776][ C1] start_secondary+0x101/0x110 [ 229.445545][ C1] common_startup_64+0x13e/0x147 [ 229.450507][ C1] [ 229.453542][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 229.460811][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00183-g5e28d5a3f774 #0 PREEMPT(full) [ 229.472426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.482475][ C1] Call Trace: [ 229.485745][ C1] [ 229.488579][ C1] dump_stack_lvl+0x99/0x250 [ 229.493155][ C1] ? __asan_memcpy+0x40/0x70 [ 229.497745][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.502974][ C1] ? __pfx__printk+0x10/0x10 [ 229.507584][ C1] panic+0x2db/0x790 [ 229.511467][ C1] ? __pfx_panic+0x10/0x10 [ 229.515874][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 229.521062][ C1] ? common_startup_64+0x13e/0x147 [ 229.526165][ C1] __warn+0x31b/0x4b0 [ 229.530127][ C1] ? __queue_work+0xd62/0xfe0 [ 229.534805][ C1] ? __queue_work+0xd62/0xfe0 [ 229.539468][ C1] report_bug+0x2be/0x4f0 [ 229.543783][ C1] ? __queue_work+0xd62/0xfe0 [ 229.548455][ C1] ? __queue_work+0xd62/0xfe0 [ 229.553114][ C1] ? __queue_work+0xd64/0xfe0 [ 229.557774][ C1] handle_bug+0x84/0x160 [ 229.562017][ C1] exc_invalid_op+0x1a/0x50 [ 229.566502][ C1] asm_exc_invalid_op+0x1a/0x20 [ 229.571335][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 229.576615][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 19 d7 98 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 40 54 35 00 90 0f 0b 90 e9 dd fc ff [ 229.596230][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 229.602298][ C1] RAX: 88b89198e5930700 RBX: 0000000000000100 RCX: ffff88801d2f5a00 [ 229.610284][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 229.618238][ C1] RBP: 1ffff1100e998938 R08: 0000000000000003 R09: 0000000000000004 [ 229.626190][ C1] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dffffc0000000000 [ 229.634166][ C1] R13: ffff888061edc988 R14: 0000000000000008 R15: ffff888074cc4978 [ 229.642133][ C1] ? __queue_work+0xd61/0xfe0 [ 229.646806][ C1] call_timer_fn+0x17e/0x5f0 [ 229.651390][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 229.657194][ C1] ? call_timer_fn+0xbe/0x5f0 [ 229.661885][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 229.667001][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 229.672196][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 229.677991][ C1] __run_timer_base+0x646/0x860 [ 229.682842][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 229.688046][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 229.693416][ C1] run_timer_softirq+0xb7/0x180 [ 229.698269][ C1] handle_softirqs+0x286/0x870 [ 229.703040][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 229.707792][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 229.713070][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 229.718278][ C1] __irq_exit_rcu+0xca/0x1f0 [ 229.722854][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 229.728042][ C1] irq_exit_rcu+0x9/0x30 [ 229.732267][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 229.737890][ C1] [ 229.740808][ C1] [ 229.743723][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.749701][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 229.755449][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 fd 18 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 229.775041][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 229.781107][ C1] RAX: 88b89198e5930700 RBX: ffffffff81976c78 RCX: 88b89198e5930700 [ 229.789088][ C1] RDX: 0000000000000001 RSI: ffffffff8d998b32 RDI: ffffffff8be29dc0 [ 229.797045][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 229.805018][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1f3f0 [ 229.812977][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5eb40 [ 229.820936][ C1] ? do_idle+0x1e8/0x510 [ 229.825172][ C1] default_idle+0x13/0x20 [ 229.829486][ C1] default_idle_call+0x74/0xb0 [ 229.834231][ C1] do_idle+0x1e8/0x510 [ 229.838293][ C1] ? __pfx_do_idle+0x10/0x10 [ 229.842880][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.848099][ C1] cpu_startup_entry+0x44/0x60 [ 229.852887][ C1] start_secondary+0x101/0x110 [ 229.857642][ C1] common_startup_64+0x13e/0x147 [ 229.862585][ C1] [ 229.865862][ C1] Kernel Offset: disabled [ 229.870177][ C1] Rebooting in 86400 seconds..