last executing test programs: 12.696837017s ago: executing program 0 (id=284): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8d0000e7487afa447e2edfae4f390a8337841cef386e2766895117476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef24f1c96a088a22e8b15c3e233db7ab22a30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007000000000000000056ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde2153ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c6f470b62237197ba5fad63772508d3407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc009000000f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad58ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268dff1a4e38a2246f120b7c84a57c1d2b54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff03257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) unshare(0x20000400) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 2.036760618s ago: executing program 1 (id=407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x100000) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1.887269175s ago: executing program 1 (id=409): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000380), 0x4) 1.825254461s ago: executing program 2 (id=410): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x3000000}, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000700), 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.664190349s ago: executing program 1 (id=413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) unshare(0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}) 1.412468135s ago: executing program 3 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) 1.400947935s ago: executing program 1 (id=417): r0 = socket(0xa, 0x1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100), 0x112) 1.389167375s ago: executing program 0 (id=284): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) unshare(0x20000400) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 1.364032657s ago: executing program 2 (id=418): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 1.330661369s ago: executing program 4 (id=419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) pipe(0x0) 1.229338092s ago: executing program 3 (id=420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x100000) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1.163715443s ago: executing program 1 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="3ba3", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2083) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000e80)=0x1b, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="342ae7b84d4bf408", @ANYRES16=r4, @ANYBLOB="010e00000000000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) sendmsg$netlink(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)={0x78, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x4}, @generic="db2a7e93546aabb369e59e37dcb00e23dfcfc71ef712f4db31b74c057bf36219e263db73531c765251d4152cc6e875b191a98be717db3aab9f19e4149474bfd018"]}, 0x78}, {&(0x7f0000001100)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000480)=""/72, 0x48}], 0x2}}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="e3ddd8ef824228d1927abc5d7923ed1d834448af6e0d749d7ef9b0c134c3c02f80d4f23f3c", 0x25}, {&(0x7f00000000c0)="fae7bdcee36686f6acd2cfbfc53f0759f43ef1049d4aeb46b71dfeb225f66f3013954e7e9527fe3aef2578060465217c3d484de9a3e4c77255bc5d92ebd66aa8e39020ce3ced44e32c49f4b79f4293cdd82350f2179507556df081f0ed72a3af51f8dda051612b902b7a87cbc2f3a7956def94398f99d9ca4a29dbe2b4a2aa895e7ca4976091cb5e09b3c229d9c76114a4da1d066bb0b0aa265f91a88ff70e47e1915dd4256c182c3023d2f9da164d75c356af963031c2347dda6b8a9cbc5fd4d67089449ca3b8f38a1148", 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="cb05cc", 0x3}, {&(0x7f0000000240)}], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff018}, {}]}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r8, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) 1.137325147s ago: executing program 4 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e000000000000000000000014"], 0x30}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=0x64010101, 0x1}}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x135, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x8000) 1.066509485s ago: executing program 3 (id=423): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000380), 0x4) 940.502237ms ago: executing program 3 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 914.616676ms ago: executing program 2 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 829.822344ms ago: executing program 0 (id=426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) 795.369678ms ago: executing program 4 (id=427): socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_misc(r0, &(0x7f0000001b40)=ANY=[], 0x3a7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf6, 0x4) sendmmsg$inet(r0, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002c40)="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", 0x1d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)="bbd6bb6566ca29d951d62c6405f4be50684ccbca15a245c087c6c4c8b7af5360efa41d82212dac0fa12bc11b8594bdacf68e42a8455ecd77a305480c374296de14", 0x41}, {&(0x7f0000000380)="41b39d1b73b797643bfe3ed9890a7f1b4b39c53917d157fa38e2686a060e4bf3ad5a3cdd1637430c6f", 0x29}, {&(0x7f0000001980)="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", 0x1ce}, {&(0x7f0000000840)="5ae3febd9f021400564f6fb579a81a6b557f297cf71fd2ebd8b1cbe9374aaf6dd004b7f7a625c80a34ee6fb91c1e9149b9387c7299b85a1ba33f4ce1555a60f5ba23cb9c81125f8c755d1ed3ef92a0bad9aff94caea5c0a46834ba99d170cb8ad6ee0fc0e785febddc598efd7dcde544eaa77fd3da6841479f33aa8bc0085520cb4e52ed32bbe2d92f82ce45477e805ed9f8c299ceaa37c365ebca227850b5a7d4df518ff467b64c3438af36182270a6cb4b716681b54d56cab2936b", 0xbc}], 0x4}}], 0x2, 0x0) 751.24566ms ago: executing program 3 (id=428): unshare(0x40000000) unshare(0x32000000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = epoll_create(0x80091) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @ptr]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffd96, 0x8002}}]}, 0x34}}, 0x0) 680.012119ms ago: executing program 2 (id=429): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x3000000}, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000700), 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 666.840969ms ago: executing program 0 (id=430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) unshare(0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}) 400.840624ms ago: executing program 4 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) 332.242167ms ago: executing program 0 (id=432): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x2) 239.85008ms ago: executing program 4 (id=433): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) pipe(0x0) 234.606991ms ago: executing program 2 (id=434): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000009700)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000016c0)="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", 0x841}], 0x1}}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20001f00) 52.557547ms ago: executing program 0 (id=435): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='\b', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000390000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 51.866997ms ago: executing program 3 (id=436): r0 = socket$kcm(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)) 30.815024ms ago: executing program 1 (id=437): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8d0000e7487afa447e2edfae4f390a8337841cef386e2766895117476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef24f1c96a088a22e8b15c3e233db7ab22a30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007000000000000000056ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde2153ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c6f470b62237197ba5fad63772508d3407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc009000000f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad58ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268dff1a4e38a2246f120b7c84a57c1d2b54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff03257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) unshare(0x20000400) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 18.006699ms ago: executing program 4 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e000000000000000000000014"], 0x30}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=0x64010101, 0x1}}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x135, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x8000) 0s ago: executing program 2 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 52.326199][ T5080] cgroup: Unknown subsys name 'net' [ 52.456890][ T5080] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.801598][ T5080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.386387][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.396864][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.405188][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.406497][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.413382][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.421374][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.427813][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.439530][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.448575][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.451390][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.456137][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.462643][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.471725][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.477816][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.483923][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.490864][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.501527][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.505685][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.511776][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.518619][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.525629][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.532689][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.546885][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.551019][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.561389][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.568561][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.568744][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.583996][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.584011][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.598691][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.996970][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 55.197625][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 55.215487][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 55.269723][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.277109][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.284595][ T5091] bridge_slave_0: entered allmulticast mode [ 55.291574][ T5091] bridge_slave_0: entered promiscuous mode [ 55.305680][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.312943][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.320021][ T5091] bridge_slave_1: entered allmulticast mode [ 55.326872][ T5091] bridge_slave_1: entered promiscuous mode [ 55.333882][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 55.447513][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.459174][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.595604][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.602831][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.609917][ T5090] bridge_slave_0: entered allmulticast mode [ 55.617063][ T5090] bridge_slave_0: entered promiscuous mode [ 55.626699][ T5091] team0: Port device team_slave_0 added [ 55.635268][ T5091] team0: Port device team_slave_1 added [ 55.641571][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 55.660947][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.668141][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.675522][ T5092] bridge_slave_0: entered allmulticast mode [ 55.682245][ T5092] bridge_slave_0: entered promiscuous mode [ 55.689267][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.699306][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.706841][ T5090] bridge_slave_1: entered allmulticast mode [ 55.715848][ T5090] bridge_slave_1: entered promiscuous mode [ 55.734785][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.741973][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.749177][ T5097] bridge_slave_0: entered allmulticast mode [ 55.756469][ T5097] bridge_slave_0: entered promiscuous mode [ 55.763761][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.771157][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.778233][ T5092] bridge_slave_1: entered allmulticast mode [ 55.788237][ T5092] bridge_slave_1: entered promiscuous mode [ 55.814657][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.821645][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.847913][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.867302][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.874297][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.900221][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.911352][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.918477][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.926681][ T5097] bridge_slave_1: entered allmulticast mode [ 55.933365][ T5097] bridge_slave_1: entered promiscuous mode [ 56.009254][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.021895][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.066100][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.077498][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.122115][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.140079][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.166313][ T5090] team0: Port device team_slave_0 added [ 56.176600][ T5091] hsr_slave_0: entered promiscuous mode [ 56.183799][ T5091] hsr_slave_1: entered promiscuous mode [ 56.190642][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.197793][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.205385][ T5089] bridge_slave_0: entered allmulticast mode [ 56.212178][ T5089] bridge_slave_0: entered promiscuous mode [ 56.219540][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.226976][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.234240][ T5089] bridge_slave_1: entered allmulticast mode [ 56.241530][ T5089] bridge_slave_1: entered promiscuous mode [ 56.268680][ T5090] team0: Port device team_slave_1 added [ 56.360520][ T5097] team0: Port device team_slave_0 added [ 56.371359][ T5092] team0: Port device team_slave_0 added [ 56.377967][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.385378][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.411944][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.429540][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.442163][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.452826][ T5097] team0: Port device team_slave_1 added [ 56.471431][ T5092] team0: Port device team_slave_1 added [ 56.477696][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.484907][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.510846][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.554895][ T5089] team0: Port device team_slave_0 added [ 56.581553][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.588489][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.615288][ T53] Bluetooth: hci2: command tx timeout [ 56.615862][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.621446][ T5098] Bluetooth: hci1: command tx timeout [ 56.650119][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.657131][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.683144][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.690500][ T53] Bluetooth: hci0: command tx timeout [ 56.699253][ T53] Bluetooth: hci3: command tx timeout [ 56.703797][ T5089] team0: Port device team_slave_1 added [ 56.704862][ T5098] Bluetooth: hci4: command tx timeout [ 56.721352][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.728297][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.754365][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.776609][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.783771][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.809781][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.858178][ T5090] hsr_slave_0: entered promiscuous mode [ 56.865556][ T5090] hsr_slave_1: entered promiscuous mode [ 56.872857][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.881209][ T5090] Cannot create hsr debugfs directory [ 56.919227][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.926238][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.953249][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.988336][ T5092] hsr_slave_0: entered promiscuous mode [ 56.996796][ T5092] hsr_slave_1: entered promiscuous mode [ 57.003677][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.011631][ T5092] Cannot create hsr debugfs directory [ 57.024752][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.031828][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.058116][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.110258][ T5097] hsr_slave_0: entered promiscuous mode [ 57.117291][ T5097] hsr_slave_1: entered promiscuous mode [ 57.123771][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.131655][ T5097] Cannot create hsr debugfs directory [ 57.321462][ T5089] hsr_slave_0: entered promiscuous mode [ 57.327893][ T5089] hsr_slave_1: entered promiscuous mode [ 57.337022][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.344646][ T5089] Cannot create hsr debugfs directory [ 57.521034][ T5091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.532481][ T5091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.564007][ T5091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.586463][ T5091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.673089][ T5097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.689189][ T5097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.717230][ T5097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.745656][ T5097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.782577][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.836116][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.846063][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.858098][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.873176][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.889491][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.900765][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.919541][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.962762][ T5089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.981761][ T5089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.006659][ T5089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.018672][ T5089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.080218][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.202404][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.222945][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.266233][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.274801][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.282221][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.322669][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.332203][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.339316][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.390532][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.397608][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.415961][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.423099][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.441031][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.484974][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.516139][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.523307][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.534510][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.541672][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.565035][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.677959][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.691746][ T53] Bluetooth: hci2: command tx timeout [ 58.697313][ T5098] Bluetooth: hci1: command tx timeout [ 58.705798][ T5097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.719417][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.768338][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.775337][ T5098] Bluetooth: hci4: command tx timeout [ 58.781645][ T53] Bluetooth: hci3: command tx timeout [ 58.784743][ T5107] Bluetooth: hci0: command tx timeout [ 58.798967][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.819914][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.846906][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.854095][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.919272][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.926445][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.966585][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.973757][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.029678][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.036839][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.089622][ T5089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.102082][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.131268][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.187970][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.225497][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.335512][ T5091] veth0_vlan: entered promiscuous mode [ 59.437960][ T5091] veth1_vlan: entered promiscuous mode [ 59.479908][ T5090] veth0_vlan: entered promiscuous mode [ 59.529558][ T5090] veth1_vlan: entered promiscuous mode [ 59.579436][ T5091] veth0_macvtap: entered promiscuous mode [ 59.606464][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.619394][ T5091] veth1_macvtap: entered promiscuous mode [ 59.663272][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.694875][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.710014][ T5097] veth0_vlan: entered promiscuous mode [ 59.737711][ T5097] veth1_vlan: entered promiscuous mode [ 59.749668][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.765633][ T5091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.774745][ T5091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.783846][ T5091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.794018][ T5091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.847736][ T5090] veth0_macvtap: entered promiscuous mode [ 59.859421][ T5090] veth1_macvtap: entered promiscuous mode [ 59.897480][ T5092] veth0_vlan: entered promiscuous mode [ 59.922269][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.933380][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.945313][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.960590][ T5089] veth0_vlan: entered promiscuous mode [ 59.977841][ T5092] veth1_vlan: entered promiscuous mode [ 59.999127][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.010652][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.025225][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.077259][ T5097] veth0_macvtap: entered promiscuous mode [ 60.085785][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.096737][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.105495][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.114598][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.125005][ T5089] veth1_vlan: entered promiscuous mode [ 60.150099][ T5097] veth1_macvtap: entered promiscuous mode [ 60.151020][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.177751][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.236205][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.244784][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.264384][ T5092] veth0_macvtap: entered promiscuous mode [ 60.285641][ T5089] veth0_macvtap: entered promiscuous mode [ 60.304519][ T5092] veth1_macvtap: entered promiscuous mode [ 60.332857][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.345349][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.355507][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.366128][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.379899][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.403463][ T5089] veth1_macvtap: entered promiscuous mode [ 60.447567][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.458769][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.482799][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.498474][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.511204][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.523456][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.535190][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.548575][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.565745][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.575962][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.588509][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.603291][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.623399][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.635180][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.646722][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.668607][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.678741][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.706864][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.726316][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.739527][ T5097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.750246][ T5097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.771054][ T5107] Bluetooth: hci1: command tx timeout [ 60.776479][ T5107] Bluetooth: hci2: command tx timeout [ 60.782423][ T5097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.792049][ T5097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.804984][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.816089][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.828272][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.836613][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.847300][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.858442][ T5107] Bluetooth: hci0: command tx timeout [ 60.861720][ T53] Bluetooth: hci3: command tx timeout [ 60.864852][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.869600][ T5098] Bluetooth: hci4: command tx timeout [ 60.879678][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.895932][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.905790][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.916367][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.932698][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.946552][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.956860][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.966217][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.976170][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.021669][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.035459][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.046754][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.059495][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.069835][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.080480][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.092643][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.104464][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.116154][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.178715][ T5089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.192586][ T5089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.202022][ T5089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.211992][ T5089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.231135][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.239624][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.389105][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.420674][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.476630][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.493328][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.637648][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.648814][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.676482][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.680837][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.783325][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 61.828050][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.871982][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.882598][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.940975][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.459756][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 62.746615][ T5233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 62.853855][ T5098] Bluetooth: hci1: command tx timeout [ 62.859302][ T5098] Bluetooth: hci2: command tx timeout [ 62.933265][ T5098] Bluetooth: hci0: command tx timeout [ 62.942001][ T53] Bluetooth: hci3: command tx timeout [ 62.947653][ T5098] Bluetooth: hci4: command tx timeout [ 64.962876][ T5343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.78'. [ 65.603493][ T5377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.737154][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'. [ 66.443587][ T5409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.106'. [ 67.009288][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 67.250104][ T5461] netlink: 'syz.2.119': attribute type 22 has an invalid length. [ 67.475585][ T5453] veth1_macvtap: left promiscuous mode [ 67.486053][ T5453] macsec0: entered promiscuous mode [ 67.500259][ T5453] macsec0: entered allmulticast mode [ 67.532560][ T5458] veth1_macvtap: entered promiscuous mode [ 67.553267][ T5458] veth1_macvtap: entered allmulticast mode [ 67.573072][ T5458] macsec0: left promiscuous mode [ 67.589879][ T5458] macsec0: left allmulticast mode [ 67.612260][ T5458] veth1_macvtap: left allmulticast mode [ 67.972248][ T5495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.999128][ T5495] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 68.142450][ T5504] netlink: 'syz.4.141': attribute type 46 has an invalid length. [ 68.342797][ T5516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.148'. [ 68.344764][ T5517] syz.0.146 uses obsolete (PF_INET,SOCK_PACKET) [ 68.667377][ T5534] netlink: 'syz.4.154': attribute type 46 has an invalid length. [ 68.925838][ T5551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 69.137190][ T5557] af_packet: tpacket_rcv: packet too big, clamped from 64686 to 32624. macoff=96 [ 69.147721][ T5557] netlink: 'syz.1.163': attribute type 16 has an invalid length. [ 69.162587][ T5557] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.163'. [ 69.189246][ T5560] veth1_macvtap: left promiscuous mode [ 69.203855][ T5560] macsec0: entered promiscuous mode [ 69.221336][ T5560] macsec0: entered allmulticast mode [ 69.271945][ T5563] veth1_macvtap: entered promiscuous mode [ 69.278805][ T5563] veth1_macvtap: entered allmulticast mode [ 69.320982][ T5563] macsec0: left promiscuous mode [ 69.355609][ T5563] macsec0: left allmulticast mode [ 69.382538][ T5563] veth1_macvtap: left allmulticast mode [ 70.325497][ T5609] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 70.360509][ T5609] netlink: 'syz.3.187': attribute type 2 has an invalid length. [ 70.401459][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.412764][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.431007][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.441502][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.451505][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.459408][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.703997][ T1276] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.891402][ T1276] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.988467][ T1276] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.034754][ T5637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.198'. [ 71.137729][ T1276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.488098][ T5612] chnl_net:caif_netlink_parms(): no params data found [ 71.661865][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.668667][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.681700][ T1276] bridge_slave_1: left allmulticast mode [ 71.687541][ T1276] bridge_slave_1: left promiscuous mode [ 71.734805][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.754242][ T5669] netlink: 'syz.0.208': attribute type 16 has an invalid length. [ 71.767298][ T5669] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.208'. [ 71.778084][ T1276] bridge_slave_0: left allmulticast mode [ 71.809318][ T1276] bridge_slave_0: left promiscuous mode [ 71.830596][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.418421][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.429801][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.441976][ T1276] bond0 (unregistering): Released all slaves [ 72.530584][ T5098] Bluetooth: hci4: command tx timeout [ 72.717874][ T5696] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 72.754766][ T5696] netlink: 140 bytes leftover after parsing attributes in process `syz.2.219'. [ 72.774072][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.800394][ T5696] netlink: 100 bytes leftover after parsing attributes in process `syz.2.219'. [ 72.800585][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.809994][ T5701] netlink: 48 bytes leftover after parsing attributes in process `syz.0.222'. [ 72.870580][ T5612] bridge_slave_0: entered allmulticast mode [ 72.911666][ T5612] bridge_slave_0: entered promiscuous mode [ 73.121872][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.139275][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.154207][ T5612] bridge_slave_1: entered allmulticast mode [ 73.189588][ T5612] bridge_slave_1: entered promiscuous mode [ 73.205504][ T5712] sit0: entered promiscuous mode [ 73.228973][ T5712] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 73.254133][ T5712] netlink: 1 bytes leftover after parsing attributes in process `syz.3.224'. [ 73.281865][ T5711] netlink: 'syz.0.225': attribute type 2 has an invalid length. [ 73.302812][ T5711] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.225'. [ 73.479703][ T5723] netlink: 'syz.1.228': attribute type 16 has an invalid length. [ 73.490661][ T5723] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.228'. [ 73.613975][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.646997][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.790509][ T5742] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 73.819784][ T5742] netlink: 140 bytes leftover after parsing attributes in process `syz.0.236'. [ 73.848088][ T5742] netlink: 100 bytes leftover after parsing attributes in process `syz.0.236'. [ 73.968236][ T1276] hsr_slave_0: left promiscuous mode [ 74.010626][ T1276] hsr_slave_1: left promiscuous mode [ 74.017150][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.035563][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.047155][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.055132][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.079024][ T1276] veth1_macvtap: left promiscuous mode [ 74.085220][ T1276] veth0_macvtap: left promiscuous mode [ 74.105325][ T1276] veth1_vlan: left promiscuous mode [ 74.117716][ T1276] veth0_vlan: left promiscuous mode [ 74.373642][ T5765] netlink: 'syz.0.244': attribute type 16 has an invalid length. [ 74.382574][ T5765] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.244'. [ 74.555592][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 74.588019][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 74.612879][ T5098] Bluetooth: hci4: command tx timeout [ 74.864723][ T5612] team0: Port device team_slave_0 added [ 74.878818][ T5751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 74.904391][ T5612] team0: Port device team_slave_1 added [ 75.035557][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.087486][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.133799][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.166156][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.195812][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.290546][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.316834][ T5775] netlink: 'syz.2.249': attribute type 2 has an invalid length. [ 75.584673][ T5612] hsr_slave_0: entered promiscuous mode [ 75.608382][ T5612] hsr_slave_1: entered promiscuous mode [ 75.625769][ T5612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.646293][ T5612] Cannot create hsr debugfs directory [ 76.320838][ T5830] netlink: 'syz.1.265': attribute type 2 has an invalid length. [ 76.526232][ T5839] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 76.690557][ T5098] Bluetooth: hci4: command tx timeout [ 76.783997][ T45] cfg80211: failed to load regulatory.db [ 76.794192][ T5843] sit0: entered promiscuous mode [ 76.818261][ T5843] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 77.287654][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.339814][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.401659][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.449855][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.809090][ T2836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.957521][ T2836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.266623][ T2836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.319719][ T5902] validate_nla: 3 callbacks suppressed [ 78.319733][ T5902] netlink: 'syz.3.291': attribute type 4 has an invalid length. [ 78.369884][ T5896] netlink: 'syz.1.288': attribute type 2 has an invalid length. [ 78.380341][ T5896] __nla_validate_parse: 8 callbacks suppressed [ 78.380355][ T5896] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.288'. [ 78.432099][ T5895] netlink: 'syz.2.290': attribute type 6 has an invalid length. [ 78.517799][ T2836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.614617][ T5912] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 78.626590][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.644863][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.654395][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.662616][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.680440][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.691514][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.701305][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.753881][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.770434][ T53] Bluetooth: hci4: command tx timeout [ 78.792054][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.799452][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.810576][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.817697][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.873057][ T5920] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.000700][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 79.134885][ T2836] bridge_slave_1: left allmulticast mode [ 79.150148][ T2836] bridge_slave_1: left promiscuous mode [ 79.158606][ T2836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.190609][ T2836] bridge_slave_0: left allmulticast mode [ 79.208304][ T2836] bridge_slave_0: left promiscuous mode [ 79.221912][ T2836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.657864][ T2836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.697074][ T2836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.721926][ T2836] bond0 (unregistering): Released all slaves [ 79.805258][ T5946] tap0: tun_chr_ioctl cmd 1074025677 [ 79.827154][ T5946] tap0: linktype set to 768 [ 80.096515][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 80.408820][ T2836] hsr_slave_0: left promiscuous mode [ 80.461269][ T2836] hsr_slave_1: left promiscuous mode [ 80.474734][ T2836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.484872][ T2836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.493015][ T2836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.500803][ T2836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.522673][ T2836] veth1_macvtap: left promiscuous mode [ 80.528275][ T2836] veth0_macvtap: left promiscuous mode [ 80.534298][ T2836] veth1_vlan: left promiscuous mode [ 80.539685][ T2836] veth0_vlan: left promiscuous mode [ 80.772490][ T53] Bluetooth: hci3: command tx timeout [ 80.866564][ T2836] team0 (unregistering): Port device team_slave_1 removed [ 80.897650][ T2836] team0 (unregistering): Port device team_slave_0 removed [ 81.478733][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.508895][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 81.620950][ T6009] tap0: tun_chr_ioctl cmd 1074025677 [ 81.630990][ T6009] tap0: linktype set to 768 [ 81.936949][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.954253][ T6033] Bluetooth: MGMT ver 1.22 [ 81.959650][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.973467][ T5908] bridge_slave_0: entered allmulticast mode [ 81.986144][ T5908] bridge_slave_0: entered promiscuous mode [ 82.007866][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.029141][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.043013][ T5908] bridge_slave_1: entered allmulticast mode [ 82.071628][ T5908] bridge_slave_1: entered promiscuous mode [ 82.197443][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.257180][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.378413][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.326'. [ 82.389908][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.326'. [ 82.485883][ T5908] team0: Port device team_slave_0 added [ 82.537880][ T5908] team0: Port device team_slave_1 added [ 82.684474][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.701520][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.747448][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.785454][ T5612] veth0_vlan: entered promiscuous mode [ 82.809640][ T6059] tap0: tun_chr_ioctl cmd 1074025677 [ 82.823855][ T6059] tap0: linktype set to 768 [ 82.839139][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.850724][ T53] Bluetooth: hci3: command tx timeout [ 82.861824][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.919427][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.955044][ T6075] warning: `syz.3.337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.014792][ T5612] veth1_vlan: entered promiscuous mode [ 83.237627][ T5908] hsr_slave_0: entered promiscuous mode [ 83.280854][ T5908] hsr_slave_1: entered promiscuous mode [ 83.305454][ T5908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.317259][ T5908] Cannot create hsr debugfs directory [ 83.576789][ T5612] veth0_macvtap: entered promiscuous mode [ 83.638163][ T5612] veth1_macvtap: entered promiscuous mode [ 83.952110][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.990062][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.005068][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.020717][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.033074][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.043803][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.056629][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.097921][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.118199][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.141519][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.162222][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.175518][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.187024][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.198656][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.280029][ T5612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311175][ T5612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.319890][ T5612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.353168][ T5612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.476078][ T6147] netlink: 'syz.1.362': attribute type 3 has an invalid length. [ 84.824069][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.864304][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.923662][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.931855][ T53] Bluetooth: hci3: command tx timeout [ 84.959967][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.137712][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.184096][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.232240][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.291425][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.693586][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.777680][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.814016][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.821220][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.849824][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.857000][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.988173][ T5908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.027577][ T5908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.281884][ T6225] netlink: 76 bytes leftover after parsing attributes in process `syz.1.384'. [ 86.619033][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.843077][ T5908] veth0_vlan: entered promiscuous mode [ 86.904691][ T5908] veth1_vlan: entered promiscuous mode [ 87.013125][ T53] Bluetooth: hci3: command tx timeout [ 87.028784][ T5908] veth0_macvtap: entered promiscuous mode [ 87.059096][ T5908] veth1_macvtap: entered promiscuous mode [ 87.059422][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 87.109470][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 87.161546][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.229476][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.258215][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.292882][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.340495][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.383336][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.440141][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.495547][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.571812][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.838349][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.900414][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.927445][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.938873][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.949159][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.980013][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.999450][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.013659][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.062105][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.095393][ T5908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.128008][ T5908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.160353][ T5908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.200207][ T5908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.413347][ T6316] netlink: 76 bytes leftover after parsing attributes in process `syz.3.408'. [ 88.617342][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.649546][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.787088][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.814824][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.861770][ T6337] netlink: 'syz.4.414': attribute type 4 has an invalid length. [ 88.924555][ T6338] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 89.145499][ T6351] sit0: entered promiscuous mode [ 89.184731][ T6351] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 89.308506][ T6351] netlink: 1 bytes leftover after parsing attributes in process `syz.0.284'. [ 89.323245][ T6363] netlink: 'syz.4.422': attribute type 3 has an invalid length. [ 89.848878][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 90.330345][ T51] ================================================================== [ 90.338456][ T51] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 90.346565][ T51] Read of size 8 at addr ffff88807a6280b8 by task kworker/u8:3/51 [ 90.354374][ T51] [ 90.356706][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0 [ 90.366778][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.376837][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 90.382330][ T51] Call Trace: [ 90.384353][ T6408] netlink: 'syz.4.438': attribute type 3 has an invalid length. [ 90.385633][ T51] [ 90.385644][ T51] dump_stack_lvl+0x241/0x360 [ 90.400846][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.406100][ T51] ? __pfx__printk+0x10/0x10 [ 90.410698][ T51] ? _printk+0xd5/0x120 [ 90.414859][ T51] ? __virt_addr_valid+0x183/0x520 [ 90.419959][ T51] ? __virt_addr_valid+0x183/0x520 [ 90.425072][ T51] print_report+0x169/0x550 [ 90.429590][ T51] ? __virt_addr_valid+0x183/0x520 [ 90.434730][ T51] ? __virt_addr_valid+0x183/0x520 [ 90.439826][ T51] ? __virt_addr_valid+0x44e/0x520 [ 90.444923][ T51] ? __phys_addr+0xba/0x170 [ 90.449412][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 90.454685][ T51] kasan_report+0x143/0x180 [ 90.459180][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 90.464464][ T51] l2tp_tunnel_del_work+0xe5/0x330 [ 90.469566][ T51] ? process_scheduled_works+0x945/0x1830 [ 90.475300][ T51] process_scheduled_works+0xa2c/0x1830 [ 90.480862][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.486841][ T51] ? assign_work+0x364/0x3d0 [ 90.491428][ T51] worker_thread+0x86d/0xd70 [ 90.496011][ T51] ? __kthread_parkme+0x169/0x1d0 [ 90.501029][ T51] ? __pfx_worker_thread+0x10/0x10 [ 90.506121][ T51] kthread+0x2f0/0x390 [ 90.510175][ T51] ? __pfx_worker_thread+0x10/0x10 [ 90.515270][ T51] ? __pfx_kthread+0x10/0x10 [ 90.519844][ T51] ret_from_fork+0x4b/0x80 [ 90.524247][ T51] ? __pfx_kthread+0x10/0x10 [ 90.528822][ T51] ret_from_fork_asm+0x1a/0x30 [ 90.533584][ T51] [ 90.536587][ T51] [ 90.538923][ T51] Allocated by task 6400: [ 90.543241][ T51] kasan_save_track+0x3f/0x80 [ 90.547906][ T51] __kasan_kmalloc+0x98/0xb0 [ 90.552483][ T51] __kmalloc_noprof+0x1f9/0x400 [ 90.557315][ T51] l2tp_session_create+0x3b/0xc20 [ 90.562354][ T51] pppol2tp_connect+0xca3/0x17a0 [ 90.567273][ T51] __sys_connect+0x2df/0x310 [ 90.571865][ T51] __x64_sys_connect+0x7a/0x90 [ 90.576610][ T51] do_syscall_64+0xf3/0x230 [ 90.581101][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.586983][ T51] [ 90.589296][ T51] Freed by task 931: [ 90.593212][ T51] kasan_save_track+0x3f/0x80 [ 90.597873][ T51] kasan_save_free_info+0x40/0x50 [ 90.602884][ T51] poison_slab_object+0xe0/0x150 [ 90.607814][ T51] __kasan_slab_free+0x37/0x60 [ 90.612573][ T51] kfree+0x149/0x360 [ 90.616456][ T51] __sk_destruct+0x58/0x5f0 [ 90.620945][ T51] rcu_core+0xafd/0x1830 [ 90.625170][ T51] handle_softirqs+0x2c4/0x970 [ 90.629915][ T51] __irq_exit_rcu+0xf4/0x1c0 [ 90.634485][ T51] irq_exit_rcu+0x9/0x30 [ 90.638709][ T51] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 90.644328][ T51] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.650314][ T51] [ 90.652626][ T51] Last potentially related work creation: [ 90.658335][ T51] kasan_save_stack+0x3f/0x60 [ 90.662996][ T51] __kasan_record_aux_stack+0xac/0xc0 [ 90.668350][ T51] call_rcu+0x167/0xa70 [ 90.672505][ T51] pppol2tp_release+0x24b/0x350 [ 90.677337][ T51] sock_close+0xbc/0x240 [ 90.681565][ T51] __fput+0x406/0x8b0 [ 90.685533][ T51] task_work_run+0x24f/0x310 [ 90.690107][ T51] syscall_exit_to_user_mode+0x168/0x370 [ 90.695727][ T51] do_syscall_64+0x100/0x230 [ 90.700307][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.706190][ T51] [ 90.708494][ T51] The buggy address belongs to the object at ffff88807a628000 [ 90.708494][ T51] which belongs to the cache kmalloc-1k of size 1024 [ 90.722528][ T51] The buggy address is located 184 bytes inside of [ 90.722528][ T51] freed 1024-byte region [ffff88807a628000, ffff88807a628400) [ 90.736416][ T51] [ 90.738723][ T51] The buggy address belongs to the physical page: [ 90.745118][ T51] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a628 [ 90.753878][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.762357][ T51] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 90.770322][ T51] page_type: 0xffffefff(slab) [ 90.775015][ T51] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 90.783582][ T51] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 90.792160][ T51] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 90.800816][ T51] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 90.809470][ T51] head: 00fff00000000003 ffffea0001e98a01 ffffffffffffffff 0000000000000000 [ 90.818121][ T51] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 90.826766][ T51] page dumped because: kasan: bad access detected [ 90.833161][ T51] page_owner tracks the page as allocated [ 90.838857][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u8:0), ts 62442221326, free_ts 62419621042 [ 90.859156][ T51] post_alloc_hook+0x1f3/0x230 [ 90.863915][ T51] get_page_from_freelist+0x2e43/0x2f00 [ 90.869449][ T51] __alloc_pages_noprof+0x256/0x6c0 [ 90.874635][ T51] alloc_slab_page+0x5f/0x120 [ 90.879294][ T51] allocate_slab+0x5a/0x2f0 [ 90.883789][ T51] ___slab_alloc+0xcd1/0x14b0 [ 90.888449][ T51] __slab_alloc+0x58/0xa0 [ 90.892768][ T51] __kmalloc_noprof+0x257/0x400 [ 90.897639][ T51] ___neigh_create+0x691/0x2470 [ 90.902477][ T51] ip6_finish_output2+0x1631/0x1680 [ 90.907661][ T51] ip6_finish_output+0x41e/0x810 [ 90.912590][ T51] ndisc_send_skb+0xab2/0x1380 [ 90.917335][ T51] ndisc_send_ns+0xcc/0x160 [ 90.921818][ T51] addrconf_dad_work+0xb45/0x16f0 [ 90.926866][ T51] process_scheduled_works+0xa2c/0x1830 [ 90.932392][ T51] worker_thread+0x86d/0xd70 [ 90.936963][ T51] page last free pid 5213 tgid 5209 stack trace: [ 90.943268][ T51] free_unref_page+0xd22/0xea0 [ 90.948027][ T51] __put_partials+0xeb/0x130 [ 90.952599][ T51] put_cpu_partial+0x17c/0x250 [ 90.957344][ T51] __slab_free+0x2ea/0x3d0 [ 90.961744][ T51] qlist_free_all+0x9e/0x140 [ 90.966324][ T51] kasan_quarantine_reduce+0x14f/0x170 [ 90.971769][ T51] __kasan_slab_alloc+0x23/0x80 [ 90.976604][ T51] kmem_cache_alloc_noprof+0x135/0x2a0 [ 90.982050][ T51] taskstats_exit+0x360/0xa60 [ 90.986714][ T51] do_exit+0x9a5/0x27e0 [ 90.990868][ T51] do_group_exit+0x207/0x2c0 [ 90.995459][ T51] get_signal+0x16a1/0x1740 [ 90.999953][ T51] arch_do_signal_or_restart+0x96/0x860 [ 91.005508][ T51] syscall_exit_to_user_mode+0xc9/0x370 [ 91.011040][ T51] do_syscall_64+0x100/0x230 [ 91.015616][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.021498][ T51] [ 91.023804][ T51] Memory state around the buggy address: [ 91.029410][ T51] ffff88807a627f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.037453][ T51] ffff88807a628000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.045495][ T51] >ffff88807a628080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.053539][ T51] ^ [ 91.059427][ T51] ffff88807a628100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.067466][ T51] ffff88807a628180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.075516][ T51] ================================================================== [ 91.083614][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.090806][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0 [ 91.100874][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 91.110937][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 91.116419][ T51] Call Trace: [ 91.119711][ T51] [ 91.122644][ T51] dump_stack_lvl+0x241/0x360 [ 91.127342][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.132558][ T51] ? __pfx__printk+0x10/0x10 [ 91.137151][ T51] ? vscnprintf+0x5d/0x90 [ 91.141477][ T51] panic+0x349/0x860 [ 91.145359][ T51] ? check_panic_on_warn+0x21/0xb0 [ 91.150458][ T51] ? __pfx_panic+0x10/0x10 [ 91.154860][ T51] ? mark_lock+0x9a/0x350 [ 91.159173][ T51] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 91.165059][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 91.170945][ T51] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.177264][ T51] ? print_report+0x502/0x550 [ 91.181931][ T51] check_panic_on_warn+0x86/0xb0 [ 91.186880][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 91.192165][ T51] end_report+0x77/0x160 [ 91.196407][ T51] kasan_report+0x154/0x180 [ 91.200913][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 91.206219][ T51] l2tp_tunnel_del_work+0xe5/0x330 [ 91.211322][ T51] ? process_scheduled_works+0x945/0x1830 [ 91.217024][ T51] process_scheduled_works+0xa2c/0x1830 [ 91.222564][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.228529][ T51] ? assign_work+0x364/0x3d0 [ 91.233114][ T51] worker_thread+0x86d/0xd70 [ 91.237694][ T51] ? __kthread_parkme+0x169/0x1d0 [ 91.242703][ T51] ? __pfx_worker_thread+0x10/0x10 [ 91.247797][ T51] kthread+0x2f0/0x390 [ 91.251855][ T51] ? __pfx_worker_thread+0x10/0x10 [ 91.256953][ T51] ? __pfx_kthread+0x10/0x10 [ 91.261529][ T51] ret_from_fork+0x4b/0x80 [ 91.265932][ T51] ? __pfx_kthread+0x10/0x10 [ 91.270507][ T51] ret_from_fork_asm+0x1a/0x30 [ 91.275262][ T51] [ 91.278462][ T51] Kernel Offset: disabled [ 91.282766][ T51] Rebooting in 86400 seconds..