last executing test programs: 1m24.334621437s ago: executing program 3 (id=1272): socket$packet(0x11, 0x3, 0x300) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60000005}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000908010100"/19], 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x0, 0xb}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r4, 0x6f, "eed286271eb52f2ab1789a8804b2bdec9953372ba8af851704c8b03ad499e6037fe3048ca6a24f170f61580cc12696b74b19dc0bdc132df6707b26b54f5818b5ff8e08e235a1322d82becba0ce0a9a34164a9f54f0fb8bb2ce2c0edd086ffd56787373926ba8d3c79073825fd46c35"}, &(0x7f0000000000)=0x77) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x28, 0x13, 0x1, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4200, 0x20000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x468e}]}, 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100e50008000500aa521cd814000200776730"], 0x30}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}, &(0x7f00000003c0)=0x90) 1m23.402913067s ago: executing program 3 (id=1280): sendmsg(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)=@isdn, 0x80, 0x0}, 0x0) r0 = socket$inet(0x2, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="90f176947c5d65f41209b36e70cbdb48a91340f61036eb85d5c5bb5e49709dbecce83f7aa43b341e8c6c292a7abeaa6b2e23ef9c067b6e428ad72f6ece754d8110340c36bab4ffcb788721cf1f0a4224d22d13b932e2c8e4cce0938307771a87aa55efb7b3", @ANYRES64=r1], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) socket$kcm(0x10, 0x2, 0x4) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003010e"], 0x98}}, 0x0) unshare(0x4020800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa89ab9b4c72ca86dd607927f3001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008", @ANYRES32=0x41424344, @ANYRESHEX=r3, @ANYBLOB="50002836ad96af02551404218425a37e74d407e7093a304243ed90f277ff9a34747de69aab5c2d65f15f7322375fcf952558737e867032191897c04bbb443de9d89ad31285602b71a9b1bbae"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r8 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0xffffff2d, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfffffffffffffe4c}], 0x1, 0x0, 0xffffffffffffff18}, 0x0) 1m21.745232757s ago: executing program 3 (id=1299): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="a300000000000000000004000000006ef034fd7df9afca347dbc120000000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x20, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x1, 0x0, 0x9, 0x7, 0xfffffffffffffff0, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xe, 0x4, 0x0, 0x7}], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfc) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ext4_ext_remove_space\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x0, 0x24, &(0x7f0000000000)='/proc/nc_\x00le\xf44\xa6\t\xc8\xdd\x15\xccwb\xc6\x13\x8b9\xd2\xf1\xff\xc1%\xa0\x00\x00\x00,'}, 0x30) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x6, 0x200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@gettclass={0x0, 0x2a, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0x3, 0xffff}, {0x7, 0xffff}}, ["", ""]}, 0x70}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) 1m21.346314271s ago: executing program 3 (id=1302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x2b8, 0x0, 0x220, 0x188, 0x0, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x32}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e24}}}, {{@ip={@broadcast, @private=0xa010102, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'wlan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x63, 0x5, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe5f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x6f0000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ts_info}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff027}, {0x6}]}, 0x10) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) write$ppp(r1, &(0x7f0000000080)="4a917ad39ec5f0ac", 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x172, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x13c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x5, 0x66}, @hopopts={0x29, 0x0, '\x00', [@enc_lim]}, @routing={0xff, 0xe, 0x2, 0xf5, 0x0, [@empty, @private0, @loopback, @empty, @remote, @remote, @private2]}, @routing={0x1, 0x2, 0x1, 0x6, 0x0, [@empty]}, @fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x7, 0x65}, @routing={0x6c, 0x0, 0x2, 0x8, 0x0, [@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, @srh={0x4, 0x4, 0x4, 0x2, 0x0, 0x60, 0x1, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0xe}]}], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async) r6 = accept4$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x13, r6, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r7, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) (async) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000040)=0x7, 0x4) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r8, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) (async) recvmsg(r7, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41, 0x29}, 0x5aa) (async) socket$igmp(0x2, 0x3, 0x2) 1m21.038456461s ago: executing program 3 (id=1306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000010000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.739649565s ago: executing program 3 (id=1306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000010000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.424775559s ago: executing program 1 (id=1431): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaac2ae000000000086dd600a043500d78a136e140608fe8000000000000000000000000200bb"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) write(r1, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000", 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/115, &(0x7f0000000140)=0x73) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000006000000000008000d00e5ff000008001b0000000000"], 0x30}}, 0x0) 1.677525326s ago: executing program 1 (id=1434): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000090a8caee"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"/332], 0x14c}}, 0x0) 1.454594529s ago: executing program 2 (id=1436): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}}}}) 1.253101396s ago: executing program 2 (id=1440): socket$packet(0x11, 0x3, 0x300) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60000005}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000908010100"/19], 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x0, 0xb}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r4, 0x7e, "eed286271eb52f2ab1789a8804b2bdec9953372ba8af851704c8b03ad499e6037fe3048ca6a24f170f61580cc12696b74b19dc0bdc132df6707b26b54f5818b5ff8e08e235a1322d82becba0ce0a9a34164a9f54f0fb8bb2ce2c0edd086ffd56787373926ba8d3c79073825fd46c3518d27e1058bd55c361925f708cd1a8"}, &(0x7f0000000000)=0x86) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x28, 0x13, 0x1, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4200, 0x20000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x468e}]}, 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100e50008000500aa521cd814000200776730"], 0x30}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}, &(0x7f00000003c0)=0x90) 1.202657431s ago: executing program 1 (id=1441): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@multicast1, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) (async) openat$tun(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) 1.121421762s ago: executing program 1 (id=1443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000100190001000000000000e3762aaf00"/33, @ANYRES32=0xffffffffffffffff], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000014000100"/36], 0xb8}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000000d5c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa8}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="8cc9db8bc40a28d704000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000600)=0xe8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', r6, 0x4, 0x5, 0x6, 0xffffffff, 0x32, @mcast2, @private0, 0x7800, 0x20, 0x2ae9, 0xffffffff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="0400028008000100", @ANYRES32=r6, @ANYBLOB="b0010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400feffffff08000600", @ANYRES32=r9, @ANYBLOB, @ANYRESHEX=r9, @ANYBLOB="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", @ANYRES32, @ANYBLOB="b401028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6f000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008900000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040052ebffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000494000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYBLOB, @ANYRES64=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400400000003c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000500", @ANYBLOB="305eed7dd300e7336e20e1001ff43086da5719e9ba79", @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r6, @ANYRES16=r2, @ANYRES32=r6, @ANYBLOB="6c01028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004002f00000008000600", @ANYRESDEC=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004001c00000008", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004005600000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRESHEX, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1c02028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400c105000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000440004000100220008000000f2ff01020800000000000502010100007800f90001000000fdff350400000000080010000500000001002405ffffff7f0600080c040000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES8], 0x82c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8800) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r12, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0xd1d, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x9, 0x1, 0x0, [{@private=0xa010100}, {@private}, {}, {@broadcast}, {@loopback}, {@private}, {@multicast2}, {@remote}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100014}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@delsa={0x1a4, 0x11, 0x400, 0x70bd27, 0x25dfdbfd, {@in=@private=0xa010102, 0x4d3, 0x2, 0x3c}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd2a, 0x5}}, @algo_comp={0x55, 0x3, {{'lzs\x00'}, 0x68, "26c0c9be31126ea8b6a9a89117"}}, @sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e23, 0x0, 0x4e22, 0x9, 0x2, 0x20, 0x20, 0x8, 0x0, r7}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in=@rand_addr=0x64010102, {0x5, 0x6, 0xb8, 0x14000000000000, 0xb, 0x9, 0x1ff, 0x7}, {0x8000000000000000, 0x100, 0x7fffffffffffffff, 0x7721}, {0x1, 0xb726, 0x8}, 0x70bd26, 0x3505, 0xa, 0x8, 0x9, 0xc}}, @lifetime_val={0x24, 0x9, {0x3, 0x1, 0x4, 0x4}}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x1a4}}, 0x24084000) r13 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r13, 0x110, 0x3) pipe(&(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @echo}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 1.038188785s ago: executing program 0 (id=1444): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 1.01029647s ago: executing program 2 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001080200c300ff04df2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500210008000000"], 0x30}}, 0x4000050) 810.219019ms ago: executing program 0 (id=1447): r0 = socket(0x2, 0x0, 0x132b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x80000, 0x9) bind$inet6(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYRES8, @ANYBLOB, @ANYRES32=r0, @ANYRES16], 0xa) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x5}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x5}, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000f00)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb6cd44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33", 0x143}, {&(0x7f0000000640)="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", 0x111}, {&(0x7f0000000480)="fff5c0293353dbff0f8392718c8095fbc29ac956aabc89", 0x17}], 0x4}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001980)="e7e42d90069206dbefd94dbb36d09f1e951a1de3e84f91f5204627404a9fc3dfeb4b442422836dec5e3e6965bccda342eff129c1c6a8184c95a8e6fa3672a4a52f625e1cfbc31b33f3fa800d3d72310558def11ad74c662f7dc7762b647215bd5af4ea29d538d63b24af3200228c04a76f7cff1c742eca7f5fbb4e28149ad71e1081ca8053177c1b4da0a71190f0c5c824d4c2c53a14121e8cc55931bd1b40", 0x9f}, {&(0x7f0000001a80)="14f8686284b12207398c63771e9f6285eed85d7fb3adba223d59e2e3870bc4fe69c7bdd1de", 0x25}], 0x2}}], 0x2, 0x4800) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x22, 0x76000000, 0x14, @mcast2, @rand_addr=' \x01\x00', 0x10, 0x80, 0x85e0, 0x8}}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000008fc0)={0x0}, 0x1, 0x0, 0x0, 0x20008840}, 0x20008080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000008fc0)={0x0}, 0x1, 0x0, 0x0, 0x20008840}, 0x20008080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2d667265657a6572202b667265657a6572202d696f202d70696473202b706572665f6576656e74202b6e6529b7f1508b01c11365745f636c7320"], 0x3a) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) accept4$llc(r0, 0x0, 0x0, 0x800) (async) accept4$llc(r0, 0x0, 0x0, 0x800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x205, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000001000000400000002000000000000000", @ANYRES32, @ANYBLOB="00fe0000020000cc000000000000000000e07622c29284687f88edfe475ef9333534a561cf8f4ddbb940f181a90000000ab85b829630d06eda7783f7c5c39c66988c464f7e337f628eea764461e71c827a55a1025dd8dd9434d35301", @ANYRES16=r6, @ANYRES16=r7, @ANYRES64, @ANYRES32=r6, @ANYRESHEX=r4, @ANYRESHEX=r5], 0x48) 809.911602ms ago: executing program 2 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 759.438891ms ago: executing program 4 (id=1449): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000080)=ANY=[], 0x28}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x5, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x3d8}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x71, 0x2e, 0x61, 0x0]}}, &(0x7f00000003c0)=""/244, 0x2a, 0xf4, 0x1, 0x8, 0x10000, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x40000000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000340)={0x2, "beda"}, 0x3) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}], {0x14}}, 0x68}}, 0x0) 696.792641ms ago: executing program 2 (id=1450): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}}}}) 638.7155ms ago: executing program 4 (id=1451): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 595.785644ms ago: executing program 4 (id=1452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2, 0x0, 0x4, 0x68b}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000000100)={@remote, @random='bY.\'aj', @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x86dd, "3aab0823cd52a13a72af324bf898081ceea0dee4b0d24b37982665766e234bd480d18d34aca8cc68e387bcd942169ec21631e3aad8d062e0d940dfa0b4888b2006e136e9a86b68f1232fadc15bb463aafdef6f7c9c5f5ed83119454eee7b0cb2347a14a1de7a3cdd5324bf958f31fce560e6d9561e2e94eac60e246ea183da5c46fbbf06eadfcdd6d72f66dd39048d77d326a5c0abfeb815b17034200c41b5202b2df768506c8091af6524c06a85ab7572905445d68fda1d5114b7e04a6549f907738fc09f6d2a03714d4a76769b24a1cf7d44edc56752f0c4dacf5bf7237088cb67321212d941"}}}, &(0x7f0000000200)={0x0, 0x1, [0xbe1, 0xe26, 0x63c, 0x25b]}) 579.590623ms ago: executing program 2 (id=1453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000"], 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x6d, 0x0, &(0x7f0000003c00)) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x40, 0x5000000000000, 0x4000001, 0x9, 0x0, 0xa9df]}, &(0x7f00000000c0)=0x78) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012000000a7ccc8be", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f00000002c0)=0xfffffffc, 0x26) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f00000001c0)="a5ceeceeb09969ce44db50") sendto$inet(r3, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 514.520545ms ago: executing program 0 (id=1454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="13990705a2282ccfd0e40c4d78dbc62f59e8f40c1a4eadcc6cf0e71b699f7fb8105f8bc1f8be6e23201ef8ec46700708144107ab5026bfd958739234670f2a5e02d5649caf97a382d04d03b1d180e4a1a5f6afca2147c19d64814509f9c2477754ad2d3d323de4a6dbf2c6af1ae769fed869c8c99e0171a711a7f42e9babbcc33a317a5f2d5831e4c7542d7ff7088b105efc1b9ecd7a39ae2f17ee10c96ff86bc3e08ae111994ac3336cc23d36a46eebe04d2013c43fac897db5a179d79191c220651bc9b92619d47c0e7dbd03fbc8686c80df3631a53bc030a71a212655b2a7f30ba6450695122d3753035459", 0xed}, {&(0x7f0000000040)="3fcd715aaa31aca8445d1789ed6fc6e4fcdfcaa1", 0x14}, {&(0x7f0000000240)="55ddedfc27c15cd1ece8ffa22a79b4bad1d2e4a4b27cf14892d875e5495a71f35bc4d1f32429beb4e1d7c41b4d990794d3658b0a543c13c6128d8382e8ba18e38a8f076c00ceb1633707c9f6f2cd65b12371bdfcf55c9e9a5a31c74ea77ec1d2", 0x60}, {&(0x7f0000000500)="c1ffe91306cad4ff562f85267ff99b0bee6f8ed4a30af202fbec994697db1093b8cb9cb912b82b81ceac64b6d5b64a25ce66e1951321c37f743c9c0935ddb6d3dc4f7a389804a294239c4e0b93211682b6001cf8632bce52559182d6c731076cb697656d40f6b785af90f96f49cf915c887b0e16a8b35ef1362efd505265e0bd661a0795763649b04057d1507bfa2a11661e0afc95045cd5c437fa0e3d87c19195", 0xa1}], 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x4e}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) unshare(0xc040480) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x0, 0x3, 0x2, 0x2, 0x6, 0xffffffffffffffe0, 0x8}, @exit, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='memory.numa_stat\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) 514.105284ms ago: executing program 4 (id=1455): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18001000000004000000000000000000850000003b000000957698903cc8c9e68710a0081c10c455a25b43de3c4d263271b90eae30030a4aa86ab3b980ab03063c37add6f9c97f9f6ab129ceff0ba737522d909fecf2e12f95a893a409036e2ec3d04b"], &(0x7f0000000040)='syzkaller\x00', 0x4b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 436.318389ms ago: executing program 4 (id=1456): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfded, 0x0) write$tun(r2, 0x0, 0xad) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1f8, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xe0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3c51dc7d323d8207e1ba6aa52b8f20229f5072d50ce0204b72966a6d8a873a02"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf72e}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_SEC_KEY={0x104, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b5b040656b80b7d86fcf16fb4c512f16"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7c23fcb6f2ca699c0c556309417350fed9afd0dedcce4c41e3cdc80feaccb0d1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "394d1fef57d63e3cbac61eb5d4b29da4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "33b9ae317eb0c485cd61ad87a444a31e"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "53c87ad17727e528360dd9bc3bff04d8b2416f2fa29000f22cab8773fe847e26"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2fea3698fc2d8d6e5e42586741f13091829a9eec77d1f05fbfbd0e98dcb5fb5e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6bf5d1abd534bb493cd88be360aed883"}]}]}, 0x1f8}}, 0x24000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x22}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xc}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c001) socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38e20d00000000000000", @ANYRES16=r3, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c30074130000"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) (async) pipe(&(0x7f0000000180)) (async) splice(r1, 0x0, r0, 0x0, 0xfded, 0x0) (async) write$tun(r2, 0x0, 0xad) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1f8, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xe0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3c51dc7d323d8207e1ba6aa52b8f20229f5072d50ce0204b72966a6d8a873a02"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf72e}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_SEC_KEY={0x104, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b5b040656b80b7d86fcf16fb4c512f16"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7c23fcb6f2ca699c0c556309417350fed9afd0dedcce4c41e3cdc80feaccb0d1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "394d1fef57d63e3cbac61eb5d4b29da4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "33b9ae317eb0c485cd61ad87a444a31e"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "53c87ad17727e528360dd9bc3bff04d8b2416f2fa29000f22cab8773fe847e26"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2fea3698fc2d8d6e5e42586741f13091829a9eec77d1f05fbfbd0e98dcb5fb5e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6bf5d1abd534bb493cd88be360aed883"}]}]}, 0x1f8}}, 0x24000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x22}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xc}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c001) (async) socket$netlink(0x10, 0x3, 0x6) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38e20d00000000000000", @ANYRES16=r3, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c30074130000"], 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 399.697626ms ago: executing program 0 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 198.587599ms ago: executing program 4 (id=1458): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 198.021224ms ago: executing program 0 (id=1459): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaac2ae000000000086dd600a043500d78a136e140608fe8000000000000000000000000200bb"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) write(r1, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff010000000000", 0x1a) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/115, &(0x7f0000000140)=0x73) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000006000000000008000d00e5ff000008001b0000000000"], 0x30}}, 0x0) 99.002933ms ago: executing program 1 (id=1460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 19.657566ms ago: executing program 1 (id=1461): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x4, 0x0, {0x27, 0x40, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x1, 0x5, 0x0, {0xb3, 0xe, 0x0, 0x38d, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x5, 0x2}}]}, 0x68}}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tr'], 0xa) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) socket$inet_sctp(0x2, 0x4fbfbbd5ab8dc69d, 0x84) (async) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x90}}, 0x20000000) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc}, {0xc}}]}, 0x54}}, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r9, 0x29, 0xc8, 0x0, &(0x7f0000000040)) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344, 0x41424344}, 0xfffffffb, 0x200) syz_emit_ethernet(0x1dd, &(0x7f0000000680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x31, 0x4, 0x1, 0x29, 0x1cb, 0x67, 0x0, 0x2, 0x6, 0x0, @empty, @multicast1, {[@end, @end, @cipso={0x86, 0x24, 0x2, [{0x4, 0xe, "cbfa6fc8e1c3e33d7aa8db1c"}, {0x5, 0x10, "9ea8366bd2fe8f927cd67e1ac42f"}]}, @cipso={0x86, 0x3a, 0x3, [{0x7, 0x9, "98fd326efb231d"}, {0x1, 0xd, "cf34699f52e1bb475f766c"}, {0x5, 0x12, "caec03f4900af2dfb8d9c0dc5d2958cc"}, {0x2, 0xc, "5dc7ba574daeafefa192"}]}, @ssrr={0x89, 0x1f, 0x55, [@multicast1, @private=0xa010102, @multicast1, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @timestamp={0x44, 0x10, 0x8b, 0x0, 0x5, [0x7, 0xd760, 0x7]}, @noop, @cipso={0x86, 0x16, 0x1, [{0x1, 0xc, "815a0159cba9fb4d749d"}, {0x0, 0x4, "a02d"}]}, @timestamp={0x44, 0x8, 0x92, 0x0, 0x7, [0xfffffc00]}]}}, {{0x4e23, 0x4e20, r10, r11, 0x1, 0x0, 0xf, 0x2, 0x8000, 0x0, 0x7, {[@eol, @window={0x3, 0x3, 0x2}, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x6, @remote, 0x5, "f49352"}, @exp_fastopen={0xfe, 0x14, 0xf989, "c6e42e6a4eb10b93bd4638f78301be43"}]}}, {"3fa5ce0d74b724343f3cd4f06c82cc00c3b47d2ce8d28077ddea57bb7624311ca246b0fee27c587512b06f9fde6a54af22335b3ea5cef41fd852139f111d7a8029ff73bed2f315bfe284934c29143a18b2069a6a73c5a39c3df5bdc1851739a9ad7a8c0636756c43bb4b0113b71fba1f9aafd8b748bd2e4470a8d1732c92891888c8d5be347a58bad44c2881e74ea770ffd461e1c954bf659c9a5d6044e1a74803a6a24fec07b86b81bd858727d98f70c2d0906a98abfaf7364bf7676d176b3c4802054a896761c3f38b4a"}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00ee00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=1462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) kernel console output (not intermixed with test programs): 5.810634][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.818022][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.825164][ T8351] bridge_slave_0: entered allmulticast mode [ 335.832212][ T8351] bridge_slave_0: entered promiscuous mode [ 335.840682][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.848031][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.855146][ T8351] bridge_slave_1: entered allmulticast mode [ 335.862154][ T8351] bridge_slave_1: entered promiscuous mode [ 335.901290][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.910976][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.937374][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.987025][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.994172][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.001720][ T8354] bridge_slave_0: entered allmulticast mode [ 336.010050][ T8354] bridge_slave_0: entered promiscuous mode [ 336.018591][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.025551][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.051644][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.082837][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.093526][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.100889][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.108123][ T8354] bridge_slave_1: entered allmulticast mode [ 336.115557][ T8354] bridge_slave_1: entered promiscuous mode [ 336.165758][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.195625][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.208802][ T8347] hsr_slave_0: entered promiscuous mode [ 336.221581][ T8347] hsr_slave_1: entered promiscuous mode [ 336.228616][ T8347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.236429][ T8347] Cannot create hsr debugfs directory [ 336.274650][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.298503][ T5247] Bluetooth: hci6: command tx timeout [ 336.304097][ T5247] Bluetooth: hci3: command tx timeout [ 336.309823][ T5237] Bluetooth: hci8: command tx timeout [ 336.330348][ T8351] team0: Port device team_slave_0 added [ 336.361016][ T7925] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.387594][ T5237] Bluetooth: hci9: command tx timeout [ 336.387929][ T8350] hsr_slave_0: entered promiscuous mode [ 336.393021][ T5237] Bluetooth: hci7: command tx timeout [ 336.405356][ T8350] hsr_slave_1: entered promiscuous mode [ 336.420022][ T8350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.427685][ T8350] Cannot create hsr debugfs directory [ 336.469543][ T8354] team0: Port device team_slave_0 added [ 336.478016][ T8351] team0: Port device team_slave_1 added [ 336.495918][ T7925] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.559696][ T8346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.578117][ T8354] team0: Port device team_slave_1 added [ 336.625651][ T7925] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.663298][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.671843][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.698294][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.745140][ T8346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.781322][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.788452][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.821020][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.834251][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.841510][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.867904][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.900142][ T7925] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.941548][ T8346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.960579][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.967684][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.993968][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.042075][ T8346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.099192][ T8354] hsr_slave_0: entered promiscuous mode [ 337.105673][ T8354] hsr_slave_1: entered promiscuous mode [ 337.113962][ T8354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.121609][ T8354] Cannot create hsr debugfs directory [ 337.185682][ T8351] hsr_slave_0: entered promiscuous mode [ 337.194064][ T8351] hsr_slave_1: entered promiscuous mode [ 337.200502][ T8351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.208949][ T8351] Cannot create hsr debugfs directory [ 337.403750][ T7925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.504983][ T7925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.549633][ T8346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.575633][ T8346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.598317][ T7925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.615561][ T8346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.633127][ T8346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.663083][ T7925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.735397][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.759229][ T8346] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.770228][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.777330][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.802855][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.809993][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.093041][ T8346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.142907][ T8346] veth0_vlan: entered promiscuous mode [ 338.159294][ T8346] veth1_vlan: entered promiscuous mode [ 338.204271][ T8346] veth0_macvtap: entered promiscuous mode [ 338.220838][ T8346] veth1_macvtap: entered promiscuous mode [ 338.269759][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.283600][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.294274][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.305655][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.316655][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.327840][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.339113][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.373261][ T7925] bridge_slave_1: left allmulticast mode [ 338.379779][ T5247] Bluetooth: hci8: command tx timeout [ 338.379797][ T54] Bluetooth: hci3: command tx timeout [ 338.385311][ T5237] Bluetooth: hci6: command tx timeout [ 338.397690][ T7925] bridge_slave_1: left promiscuous mode [ 338.403412][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.412680][ T7925] bridge_slave_0: left allmulticast mode [ 338.418975][ T7925] bridge_slave_0: left promiscuous mode [ 338.424688][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.434299][ T7925] bridge_slave_1: left allmulticast mode [ 338.440491][ T7925] bridge_slave_1: left promiscuous mode [ 338.446870][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.467390][ T5237] Bluetooth: hci7: command tx timeout [ 338.467402][ T54] Bluetooth: hci9: command tx timeout [ 338.479970][ T7925] bridge_slave_0: left allmulticast mode [ 338.490456][ T7925] bridge_slave_0: left promiscuous mode [ 338.496242][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.506389][ T7925] bridge_slave_1: left allmulticast mode [ 338.512075][ T7925] bridge_slave_1: left promiscuous mode [ 338.518193][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.526785][ T7925] bridge_slave_0: left allmulticast mode [ 338.532446][ T7925] bridge_slave_0: left promiscuous mode [ 338.541035][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.269276][ T7925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.281104][ T7925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.292860][ T7925] bond0 (unregistering): Released all slaves [ 339.395615][ T7925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.409303][ T7925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.423178][ T7925] bond0 (unregistering): Released all slaves [ 339.536547][ T7925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.547181][ T7925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.557118][ T7925] bond0 (unregistering): Released all slaves [ 339.568594][ T7925] bond1 (unregistering): Released all slaves [ 339.603814][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.616492][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.626755][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.637500][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.647562][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.658418][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.676947][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.704542][ T8346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.715171][ T8346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.724737][ T8346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.733725][ T8346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.855225][ T8350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.865035][ T8350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.884789][ T8350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.902209][ T8350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.125220][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.140495][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.205143][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.214109][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.284453][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.364708][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.380304][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.387458][ T7927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.421018][ T8347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.456418][ T54] Bluetooth: hci6: command tx timeout [ 340.461860][ T54] Bluetooth: hci8: command tx timeout [ 340.467401][ T54] Bluetooth: hci3: command tx timeout [ 340.473496][ T8350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.483973][ T8350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.540422][ T5237] Bluetooth: hci7: command tx timeout [ 340.545943][ T5237] Bluetooth: hci9: command tx timeout [ 340.652895][ T8347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.669631][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.676796][ T7927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.727895][ T8347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.830483][ T8347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.978845][ T7925] hsr_slave_0: left promiscuous mode [ 340.989947][ T7925] hsr_slave_1: left promiscuous mode [ 341.006308][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.013716][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.022608][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.031147][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.044098][ T7925] hsr_slave_0: left promiscuous mode [ 341.050983][ T7925] hsr_slave_1: left promiscuous mode [ 341.057089][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.064670][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.074469][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.082498][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.094143][ T7925] hsr_slave_0: left promiscuous mode [ 341.102594][ T7925] hsr_slave_1: left promiscuous mode [ 341.108987][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.117266][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.152780][ T7925] veth1_macvtap: left promiscuous mode [ 341.159365][ T7925] veth0_macvtap: left promiscuous mode [ 341.164937][ T7925] veth1_vlan: left promiscuous mode [ 341.170420][ T7925] veth0_vlan: left promiscuous mode [ 341.177294][ T7925] veth1_macvtap: left promiscuous mode [ 341.182912][ T7925] veth0_macvtap: left promiscuous mode [ 341.189577][ T7925] veth1_vlan: left promiscuous mode [ 341.194875][ T7925] veth0_vlan: left promiscuous mode [ 341.713214][ T7925] team0 (unregistering): Port device team_slave_1 removed [ 341.760939][ T7925] team0 (unregistering): Port device team_slave_0 removed [ 342.478365][ T7925] team0 (unregistering): Port device team_slave_1 removed [ 342.521126][ T7925] team0 (unregistering): Port device team_slave_0 removed [ 343.207775][ T7925] team0 (unregistering): Port device team_slave_1 removed [ 343.251521][ T7925] team0 (unregistering): Port device team_slave_0 removed [ 343.615947][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.775584][ T8350] veth0_vlan: entered promiscuous mode [ 343.845624][ T8350] veth1_vlan: entered promiscuous mode [ 343.882334][ T8354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.927872][ T8409] vlan2: entered promiscuous mode [ 343.932950][ T8409] macvtap0: entered promiscuous mode [ 343.941155][ T8409] macvtap0: left promiscuous mode [ 343.977002][ T8354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.031236][ T8354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.045717][ T8354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.094199][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.155426][ T8350] veth0_macvtap: entered promiscuous mode [ 344.180505][ T8350] veth1_macvtap: entered promiscuous mode [ 344.217377][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.245198][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.252346][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.267922][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.278981][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.304459][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.314963][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.326895][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.357489][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.364716][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.436774][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.448844][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.460550][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.471949][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.483369][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.529185][ T8350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.546044][ T8350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.554855][ T8350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.564747][ T8350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.770618][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.879023][ T8351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.913704][ T8351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.939959][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.953490][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.965545][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.975611][ T8351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.005347][ T8351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.030118][ T2470] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.037301][ T2470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.058666][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.102388][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.109566][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.181779][ T7927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.199997][ T7927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.340516][ T8433] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 345.376170][ T8433] batman_adv: batadv0: Adding interface: ip6gretap1 [ 345.388497][ T8433] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.427167][ T8433] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 345.456789][ T8438] IPVS: length: 115 != 24 [ 345.600959][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.609460][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.749766][ T8438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.763807][ T8438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.872974][ T8438] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.882214][ T8438] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.891907][ T8438] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.901900][ T8438] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.968282][ T8445] __nla_validate_parse: 3 callbacks suppressed [ 345.968303][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.867'. [ 345.984958][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 345.994518][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.004288][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.011536][ T8445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.051994][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.080535][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.117448][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.167368][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.174522][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.185166][ T8347] veth0_vlan: entered promiscuous mode [ 346.227401][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.234526][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.247826][ T8450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.868'. [ 346.260450][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.868'. [ 346.277343][ T8347] veth1_vlan: entered promiscuous mode [ 346.355045][ T8354] veth0_vlan: entered promiscuous mode [ 346.415022][ T8354] veth1_vlan: entered promiscuous mode [ 346.458690][ T8347] veth0_macvtap: entered promiscuous mode [ 346.525217][ T8347] veth1_macvtap: entered promiscuous mode [ 346.562764][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.575716][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.590265][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.601715][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.613461][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.639879][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.660111][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.671205][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.682814][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.704543][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.725612][ T8354] veth0_macvtap: entered promiscuous mode [ 346.752041][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.872'. [ 346.763846][ T8459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.872'. [ 346.773231][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.789114][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.796407][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.814812][ T8354] veth1_macvtap: entered promiscuous mode [ 346.824843][ T8347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.834994][ T8347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.845348][ T8347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.864436][ T8347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.896971][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.921962][ T8463] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 346.943334][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.957898][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.970261][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.981009][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.991185][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.002081][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.013574][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.124309][ T8351] veth0_vlan: entered promiscuous mode [ 347.132336][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.144968][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.155315][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.168354][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.179170][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.189745][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.202363][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.224984][ T8354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.241879][ T8354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.250758][ T8354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.265880][ T8354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.292774][ T7927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.306251][ T7927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.364422][ T8351] veth1_vlan: entered promiscuous mode [ 347.370545][ T7925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.389891][ T7925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.499230][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.521505][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.539309][ T8351] veth0_macvtap: entered promiscuous mode [ 347.620826][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.621186][ T8351] veth1_macvtap: entered promiscuous mode [ 347.629603][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.671298][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.683269][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.694506][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.704982][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.725948][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.743409][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.753655][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.764976][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.776441][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.814909][ T2470] syzkaller0: tun_net_xmit 76 [ 347.823543][ T2470] syzkaller0: tun_net_xmit 48 [ 347.837872][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.848757][ T8] syzkaller0: tun_net_xmit 76 [ 347.854611][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.869850][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.880635][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.893010][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.904745][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.915683][ T8351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.931450][ T8351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.943857][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.956177][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 347.975052][ T8351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.992661][ T8351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.996105][ T5281] syzkaller0: tun_net_xmit 76 [ 348.001945][ T8351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.015344][ T8351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.060664][ T8490] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 348.068961][ T8490] netlink: 636 bytes leftover after parsing attributes in process `syz.3.880'. [ 349.634653][ T8506] team0: Device veth0_vlan failed to register rx_handler [ 349.716842][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 349.835051][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.866093][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.944411][ T7925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.986089][ T7925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.121721][ T8535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.852'. [ 351.136399][ T8554] team0: Device veth0_vlan failed to register rx_handler [ 351.297624][ T8564] netlink: 'syz.1.899': attribute type 9 has an invalid length. [ 351.305325][ T8564] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.899'. [ 351.343182][ T8564] xt_ecn: cannot match TCP bits for non-tcp packets [ 351.357960][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 351.383441][ T8566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.394741][ T8566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.404893][ T8566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.413901][ T8566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.442254][ T8573] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 351.517823][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.531267][ T8573] team0: Port device bond0 added [ 351.547717][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 351.580065][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.903'. [ 351.592780][ T8581] netem: unknown loss type 13 [ 351.607268][ T8581] netem: change failed [ 351.630301][ T8583] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 351.640070][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.647234][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.680082][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 351.696094][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 351.735518][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.905'. [ 351.769761][ T8583] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 351.780969][ T8589] netlink: 104 bytes leftover after parsing attributes in process `syz.1.907'. [ 351.848896][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.905'. [ 351.960556][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'. [ 352.476515][ T8625] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 352.510106][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.568003][ T8625] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 352.584069][ T8625] bridge0: port 3(team0) entered blocking state [ 352.590573][ T8625] bridge0: port 3(team0) entered disabled state [ 352.600439][ T8625] team0: entered allmulticast mode [ 352.605836][ T8625] team_slave_0: entered allmulticast mode [ 352.612028][ T8625] team_slave_1: entered allmulticast mode [ 352.618046][ T8625] bond0: entered allmulticast mode [ 352.626403][ T8625] bond_slave_0: entered allmulticast mode [ 352.632270][ T8625] bond_slave_1: entered allmulticast mode [ 352.640912][ T8625] team0: entered promiscuous mode [ 352.655959][ T8625] team_slave_0: entered promiscuous mode [ 352.670375][ T8625] team_slave_1: entered promiscuous mode [ 352.680112][ T8625] bond0: entered promiscuous mode [ 352.685284][ T8625] bond_slave_0: entered promiscuous mode [ 352.692111][ T8625] bond_slave_1: entered promiscuous mode [ 353.451479][ T8668] netlink: 'syz.2.927': attribute type 9 has an invalid length. [ 353.645338][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.790347][ T8685] netlink: 'syz.3.933': attribute type 3 has an invalid length. [ 353.897732][ T81] wlan1: Trigger new scan to find an IBSS to join [ 354.101394][ T8704] tipc: Started in network mode [ 354.109320][ T8704] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 354.152033][ T8704] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 354.164019][ T8704] tipc: Enabled bearer , priority 10 [ 354.663135][ T8726] sctp: [Deprecated]: syz.4.943 (pid 8726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.663135][ T8726] Use struct sctp_sack_info instead [ 355.047056][ T8734] lo speed is unknown, defaulting to 1000 [ 355.064727][ T8734] lo speed is unknown, defaulting to 1000 [ 355.072494][ T8734] lo speed is unknown, defaulting to 1000 [ 355.210505][ T8734] infiniband syz0: set active [ 355.215223][ T8734] infiniband syz0: added lo [ 355.220069][ T8] lo speed is unknown, defaulting to 1000 [ 355.253547][ T8734] RDS/IB: syz0: added [ 355.267239][ T8734] smc: adding ib device syz0 with port count 1 [ 355.273603][ T8734] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 355.278074][ T46] tipc: Node number set to 1 [ 355.286245][ T8] lo speed is unknown, defaulting to 1000 [ 355.293246][ T8734] lo speed is unknown, defaulting to 1000 [ 355.458348][ T8734] lo speed is unknown, defaulting to 1000 [ 355.679949][ T8734] lo speed is unknown, defaulting to 1000 [ 355.686613][ T8769] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 355.801325][ T8772] Bluetooth: MGMT ver 1.23 [ 355.843020][ T8774] tap0: tun_chr_ioctl cmd 1074025677 [ 355.864465][ T8774] tap0: linktype set to 1 [ 356.034078][ T8734] lo speed is unknown, defaulting to 1000 [ 356.125748][ T8787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.319016][ T8734] lo speed is unknown, defaulting to 1000 [ 356.456126][ T54] Bluetooth: hci9: command tx timeout [ 356.491795][ T8734] lo speed is unknown, defaulting to 1000 [ 356.536637][ T8800] xt_hashlimit: size too large, truncated to 1048576 [ 356.609760][ T8802] bond0: left promiscuous mode [ 356.623552][ T8802] bond_slave_0: left promiscuous mode [ 356.644973][ T8802] bond_slave_1: left promiscuous mode [ 356.661662][ T8802] bond0: left allmulticast mode [ 356.676293][ T8802] bond_slave_0: left allmulticast mode [ 356.696657][ T8802] bond_slave_1: left allmulticast mode [ 356.752200][ T8802] team0: Port device bond0 removed [ 356.773432][ T8802] team0: left allmulticast mode [ 356.816825][ T8802] team_slave_0: left allmulticast mode [ 356.859608][ T8802] team_slave_1: left allmulticast mode [ 356.889621][ T8802] team0: left promiscuous mode [ 356.895058][ T8802] team_slave_0: left promiscuous mode [ 356.925078][ T8802] team_slave_1: left promiscuous mode [ 356.937665][ T3011] wlan1: Trigger new scan to find an IBSS to join [ 356.937868][ T8802] bridge0: port 3(team0) entered disabled state [ 356.991723][ T8802] bridge_slave_0: left allmulticast mode [ 357.007897][ T8802] bridge_slave_0: left promiscuous mode [ 357.014031][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.057457][ T8802] bridge_slave_1: left allmulticast mode [ 357.063451][ T8802] bridge_slave_1: left promiscuous mode [ 357.079688][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.139426][ T8802] bond0: (slave bond_slave_0): Releasing backup interface [ 357.163956][ T8802] bond0: (slave bond_slave_1): Releasing backup interface [ 357.192987][ T8802] team0: Port device team_slave_0 removed [ 357.235683][ T8802] team0: Port device team_slave_1 removed [ 357.244971][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.271016][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.293988][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.303167][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.368760][ T8734] lo speed is unknown, defaulting to 1000 [ 357.472890][ T8810] __nla_validate_parse: 14 callbacks suppressed [ 357.472908][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 357.987084][ T8807] lo speed is unknown, defaulting to 1000 [ 358.281227][ T8826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.974'. [ 358.340293][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 358.478094][ T8828] team_slave_0: entered promiscuous mode [ 358.483977][ T8828] team_slave_1: entered promiscuous mode [ 358.497820][ T8828] macsec1: entered promiscuous mode [ 358.503484][ T8828] team0: entered promiscuous mode [ 358.514425][ T8828] macsec1: entered allmulticast mode [ 358.546128][ T8828] team0: entered allmulticast mode [ 358.563556][ T8828] team_slave_0: entered allmulticast mode [ 358.579409][ T8828] team_slave_1: entered allmulticast mode [ 358.605786][ T8828] team0: left allmulticast mode [ 358.645992][ T8828] team_slave_0: left allmulticast mode [ 358.661983][ T8828] team_slave_1: left allmulticast mode [ 358.667936][ T8828] team0: left promiscuous mode [ 358.678269][ T8828] team_slave_0: left promiscuous mode [ 358.683778][ T8828] team_slave_1: left promiscuous mode [ 358.696420][ T5237] Bluetooth: hci9: command 0x0405 tx timeout [ 359.257509][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 359.809579][ T8868] netlink: 44 bytes leftover after parsing attributes in process `syz.2.986'. [ 359.836223][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'. [ 359.897678][ T81] wlan1: Creating new IBSS network, BSSID ba:cf:67:35:63:7f [ 360.255707][ T8858] lo speed is unknown, defaulting to 1000 [ 360.460807][ T8870] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 360.513583][ T8870] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 361.279803][ T8896] dccp_invalid_packet: P.Data Offset(0) too small [ 361.753290][ T8916] netlink: 44 bytes leftover after parsing attributes in process `syz.3.998'. [ 361.791005][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 361.799981][ T8858] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.983'. [ 361.893605][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 361.909429][ T8927] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 362.364918][ T8938] ebtables: ebtables: counters copy to user failed while replacing table [ 362.651713][ T8957] sctp: [Deprecated]: syz.0.1012 (pid 8957) Use of int in max_burst socket option. [ 362.651713][ T8957] Use struct sctp_assoc_value instead [ 362.671589][ T8960] syz.1.1013 uses old SIOCAX25GETINFO [ 362.902913][ T8964] can: request_module (can-proto-0) failed. [ 363.109371][ T8984] No such timeout policy "syz0" [ 363.136266][ T8986] netlink: 'syz.1.1021': attribute type 9 has an invalid length. [ 363.159068][ T8986] __nla_validate_parse: 2 callbacks suppressed [ 363.159089][ T8986] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1021'. [ 363.223007][ T8989] netlink: 'syz.1.1021': attribute type 9 has an invalid length. [ 363.243045][ T8989] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1021'. [ 363.398734][ T8991] ebtables: ebtables: counters copy to user failed while replacing table [ 363.739767][ T9011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1029'. [ 363.904537][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 364.107992][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.115301][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.204063][ T9035] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 364.336690][ T9046] dvmrp5: entered allmulticast mode [ 364.343473][ T9046] dvmrp5: left allmulticast mode [ 364.348969][ T9045] siw: device registration error -23 [ 364.529898][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 364.786534][ T9066] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 364.866789][ T9070] IPVS: length: 115 != 24 [ 365.048760][ T9076] IPVS: length: 115 != 24 [ 365.064918][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.072530][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.237184][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.251826][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.325096][ T9070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.339248][ T9070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.348777][ T9070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.358432][ T9070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.484047][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.491492][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.584171][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.602669][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.675680][ T9076] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.684765][ T9076] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.695299][ T9076] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.705029][ T9076] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.747855][ T9078] wg2: entered promiscuous mode [ 366.145038][ T9116] IPVS: length: 115 != 24 [ 366.190273][ T9119] openvswitch: netlink: Message has -1 unknown bytes. [ 366.333570][ T9131] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 366.357320][ T9129] netlink: 'syz.3.1072': attribute type 58 has an invalid length. [ 366.378043][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1072'. [ 366.507948][ T9141] openvswitch: netlink: Actions may not be safe on all matching packets [ 366.713509][ T9146] netlink: 'syz.4.1075': attribute type 9 has an invalid length. [ 366.721461][ T9146] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1075'. [ 366.732658][ T9136] lo speed is unknown, defaulting to 1000 [ 366.852985][ T9161] IPVS: length: 115 != 24 [ 366.879588][ T9161] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.910387][ T9161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.958126][ T9161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.987560][ T9161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.639055][ T9196] netlink: 'syz.4.1089': attribute type 4 has an invalid length. [ 370.922039][ T9190] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1087'. [ 370.931794][ T9190] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1087'. [ 370.941967][ T9190] netlink: 65 bytes leftover after parsing attributes in process `syz.2.1087'. [ 370.955870][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1091'. [ 370.964852][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1091'. [ 371.184283][ T9214] IPVS: set_ctl: invalid protocol: 255 172.30.1.5:20000 [ 371.381893][ T9223] netlink: 'syz.1.1098': attribute type 8 has an invalid length. [ 371.422033][ T9225] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1099'. [ 371.462746][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 371.614821][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 372.394992][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 372.449541][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 372.492469][ T9251] lo speed is unknown, defaulting to 1000 [ 372.813241][ T9263] syzkaller1: entered promiscuous mode [ 372.833903][ T9263] syzkaller1: entered allmulticast mode [ 372.919903][ T9303] pim6reg1: entered promiscuous mode [ 372.925495][ T9303] pim6reg1: entered allmulticast mode [ 373.187792][ T9312] ebtables: ebtables: counters copy to user failed while replacing table [ 374.164404][ T9362] xt_TCPMSS: Only works on TCP SYN packets [ 374.328146][ T9373] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 374.359426][ T9374] lo: entered allmulticast mode [ 374.364443][ T9374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.446731][ T9380] Bluetooth: MGMT ver 1.23 [ 374.939280][ T9399] netlink: 'syz.3.1148': attribute type 27 has an invalid length. [ 375.072257][ T9404] bridge_slave_0: left allmulticast mode [ 375.078130][ T9404] bridge_slave_0: left promiscuous mode [ 375.083970][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.092988][ T9404] bridge_slave_1: left allmulticast mode [ 375.098900][ T9404] bridge_slave_1: left promiscuous mode [ 375.104873][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.130538][ T9404] bond0: (slave bond_slave_0): Releasing backup interface [ 375.143197][ T9404] bond0: (slave bond_slave_1): Releasing backup interface [ 375.167141][ T9404] team0: Port device team_slave_0 removed [ 375.175113][ T9404] team0: Port device team_slave_1 removed [ 375.182061][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.192015][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.422480][ T9413] ebtables: ebtables: counters copy to user failed while replacing table [ 376.059570][ T9432] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 376.116939][ T9436] x_tables: unsorted entry at hook 1 [ 376.265549][ T9444] __nla_validate_parse: 9 callbacks suppressed [ 376.265568][ T9444] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1163'. [ 376.416052][ T9449] hsr0: entered promiscuous mode [ 376.424835][ T9449] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 376.489706][ T9453] ebtables: ebtables: counters copy to user failed while replacing table [ 376.623946][ T9465] openvswitch: netlink: Missing key (keys=20040, expected=80) [ 376.632623][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 376.674266][ T9467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1168'. [ 376.823961][ T9477] netlink: 'syz.4.1172': attribute type 7 has an invalid length. [ 376.855719][ T9477] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1172'. [ 376.877263][ T9480] netlink: 'syz.4.1172': attribute type 11 has an invalid length. [ 377.086526][ T9489] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 377.099276][ T9478] lo speed is unknown, defaulting to 1000 [ 377.140464][ T9489] vlan2: entered allmulticast mode [ 377.145638][ T9489] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 377.194586][ T9489] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 377.511843][ T9506] ebtables: ebtables: counters copy to user failed while replacing table [ 377.536397][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1174'. [ 378.133022][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 378.620320][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.037278][ T9543] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 380.051998][ T9544] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1188'. [ 380.315471][ T9547] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 380.324942][ T9555] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1186'. [ 380.354114][ T9569] netlink: 'syz.2.1194': attribute type 10 has an invalid length. [ 380.386264][ T9569] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1194'. [ 380.420068][ T9569] team0: entered promiscuous mode [ 380.438806][ T9569] team_slave_0: entered promiscuous mode [ 380.455350][ T9569] team_slave_1: entered promiscuous mode [ 380.475282][ T9569] bridge0: port 3(team0) entered blocking state [ 380.491239][ T9569] bridge0: port 3(team0) entered disabled state [ 380.498251][ T9569] team0: entered allmulticast mode [ 380.507788][ T9569] team_slave_0: entered allmulticast mode [ 380.515691][ T9569] team_slave_1: entered allmulticast mode [ 380.526915][ T9569] bridge0: port 3(team0) entered blocking state [ 380.533351][ T9569] bridge0: port 3(team0) entered forwarding state [ 380.693559][ T9582] FAULT_INJECTION: forcing a failure. [ 380.693559][ T9582] name failslab, interval 1, probability 0, space 0, times 1 [ 380.707556][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.2.1200 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 380.713171][ T9585] netlink: 'syz.1.1199': attribute type 9 has an invalid length. [ 380.717912][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.725889][ T9585] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1199'. [ 380.735738][ T9582] Call Trace: [ 380.748348][ T9582] [ 380.751396][ T9582] dump_stack_lvl+0x241/0x360 [ 380.756135][ T9582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.761369][ T9582] ? __pfx__printk+0x10/0x10 [ 380.765991][ T9582] ? __pfx_lock_acquire+0x10/0x10 [ 380.771041][ T9582] should_fail_ex+0x3b0/0x4e0 [ 380.775727][ T9582] ? __sigqueue_alloc+0x42e/0x540 [ 380.780764][ T9582] should_failslab+0xac/0x100 [ 380.785461][ T9582] ? __sigqueue_alloc+0x42e/0x540 [ 380.790573][ T9582] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 380.795966][ T9582] __sigqueue_alloc+0x42e/0x540 [ 380.800831][ T9582] __send_signal_locked+0x22f/0xdc0 [ 380.806046][ T9582] ? __lock_task_sighand+0x29/0x2d0 [ 380.811253][ T9582] group_send_sig_info+0x292/0x310 [ 380.816375][ T9582] ? __pfx_group_send_sig_info+0x10/0x10 [ 380.822014][ T9582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.828092][ T9582] bpf_send_signal_common+0x2dd/0x430 [ 380.833553][ T9582] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 380.839450][ T9582] ? mark_lock+0x9a/0x360 [ 380.843786][ T9582] ? bpf_trace_run2+0x1fc/0x540 [ 380.848646][ T9582] bpf_send_signal+0x19/0x30 [ 380.853248][ T9582] bpf_prog_2a4b6e86cea73e9e+0x23/0x29 [ 380.858734][ T9582] bpf_trace_run2+0x2ec/0x540 [ 380.863432][ T9582] ? __pfx_bpf_trace_run2+0x10/0x10 [ 380.868642][ T9582] ? xskq_destroy+0x40/0x60 [ 380.873164][ T9582] ? kfree+0x1a0/0x440 [ 380.877262][ T9582] ? xskq_destroy+0x40/0x60 [ 380.881783][ T9582] ? xskq_destroy+0x40/0x60 [ 380.886331][ T9582] kfree+0x35e/0x440 [ 380.890246][ T9582] ? vfree+0x24c/0x2e0 [ 380.894357][ T9582] xskq_destroy+0x40/0x60 [ 380.898708][ T9582] xsk_release+0x700/0x930 [ 380.903143][ T9582] ? do_raw_spin_lock+0x14f/0x370 [ 380.908183][ T9582] sock_close+0xbc/0x240 [ 380.912438][ T9582] ? __pfx_sock_close+0x10/0x10 [ 380.917302][ T9582] __fput+0x23f/0x880 [ 380.921309][ T9582] __x64_sys_close+0x7f/0x110 [ 380.926089][ T9582] do_syscall_64+0xf3/0x230 [ 380.930601][ T9582] ? clear_bhb_loop+0x35/0x90 [ 380.935290][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.941199][ T9582] RIP: 0033:0x7f0a3477dff9 [ 380.945623][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.965242][ T9582] RSP: 002b:00007f0a3548e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 380.973674][ T9582] RAX: ffffffffffffffda RBX: 00007f0a34935f80 RCX: 00007f0a3477dff9 [ 380.981687][ T9582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 380.989666][ T9582] RBP: 00007f0a3548e090 R08: 0000000000000000 R09: 0000000000000000 [ 380.997649][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.005622][ T9582] R13: 0000000000000000 R14: 00007f0a34935f80 R15: 00007ffc2d7b5b78 [ 381.013627][ T9582] [ 381.064119][ T9589] can: request_module (can-proto-4) failed. [ 381.081143][ T9587] netlink: 'syz.1.1199': attribute type 9 has an invalid length. [ 381.204801][ T9585] siw: device registration error -23 [ 381.229151][ T9601] netlink: 'syz.4.1203': attribute type 3 has an invalid length. [ 381.449264][ T9614] x_tables: duplicate underflow at hook 1 [ 381.523952][ T9619] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 381.551799][ T9619] __nla_validate_parse: 5 callbacks suppressed [ 381.551823][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1211'. [ 381.615120][ T9624] FAULT_INJECTION: forcing a failure. [ 381.615120][ T9624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.663372][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.4.1212 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 381.673773][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.683861][ T9624] Call Trace: [ 381.687169][ T9624] [ 381.690131][ T9624] dump_stack_lvl+0x241/0x360 [ 381.694860][ T9624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.700105][ T9624] ? __pfx__printk+0x10/0x10 [ 381.704737][ T9624] ? __pfx_lock_release+0x10/0x10 [ 381.709799][ T9624] ? __lock_acquire+0x1384/0x2050 [ 381.714872][ T9624] should_fail_ex+0x3b0/0x4e0 [ 381.719598][ T9624] _copy_from_user+0x2f/0xe0 [ 381.724234][ T9624] kstrtouint_from_user+0xc6/0x190 [ 381.729391][ T9624] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 381.735183][ T9624] ? __pfx_lock_acquire+0x10/0x10 [ 381.740244][ T9624] proc_fail_nth_write+0xaa/0x2d0 [ 381.745323][ T9624] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 381.751220][ T9624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 381.756902][ T9624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 381.762561][ T9624] vfs_write+0x29c/0xc90 [ 381.766859][ T9624] ? __pfx_vfs_write+0x10/0x10 [ 381.771660][ T9624] ? __fget_files+0x3f3/0x470 [ 381.776346][ T9624] ? fdget_pos+0x24e/0x320 [ 381.780784][ T9624] ksys_write+0x183/0x2b0 [ 381.785238][ T9624] ? __pfx_ksys_write+0x10/0x10 [ 381.790097][ T9624] ? do_syscall_64+0x100/0x230 [ 381.794868][ T9624] ? do_syscall_64+0xb6/0x230 [ 381.799549][ T9624] do_syscall_64+0xf3/0x230 [ 381.804058][ T9624] ? clear_bhb_loop+0x35/0x90 [ 381.808845][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.814749][ T9624] RIP: 0033:0x7f2fdaf7cadf [ 381.819169][ T9624] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 381.838799][ T9624] RSP: 002b:00007f2fdbdf7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 381.847223][ T9624] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2fdaf7cadf [ 381.855204][ T9624] RDX: 0000000000000001 RSI: 00007f2fdbdf70a0 RDI: 0000000000000004 [ 381.863177][ T9624] RBP: 00007f2fdbdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 381.871161][ T9624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 381.879183][ T9624] R13: 0000000000000000 R14: 00007f2fdb135f80 R15: 00007ffc0a9c22c8 [ 381.887175][ T9624] [ 381.901932][ T9635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.909096][ T9635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 381.926131][ T9631] bridge0: entered promiscuous mode [ 381.936735][ T9630] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 381.957964][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.966662][ T9630] bond0: (slave team0): Enslaving as an active interface with an up link [ 381.987744][ T9630] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1215'. [ 381.998863][ T9626] bridge0: left promiscuous mode [ 382.010701][ T9634] tipc: MTU too low for tipc bearer [ 382.024846][ T9633] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 382.072106][ T9633] bond0: (slave team0): Releasing backup interface [ 382.119461][ T9633] bridge0: port 3(team0) entered blocking state [ 382.126902][ T9633] bridge0: port 3(team0) entered disabled state [ 382.133323][ T9633] team0: entered allmulticast mode [ 382.138622][ T9633] team_slave_0: entered allmulticast mode [ 382.144666][ T9633] team_slave_1: entered allmulticast mode [ 382.152749][ T9633] team0: entered promiscuous mode [ 382.157921][ T9633] team_slave_0: entered promiscuous mode [ 382.163860][ T9633] team_slave_1: entered promiscuous mode [ 382.165775][ T9650] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 382.175510][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 382.203258][ T9650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1216'. [ 382.227706][ T9653] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 382.296465][ T9642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1217'. [ 382.493601][ T9662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.637999][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 382.688499][ T9678] pimreg3: entered allmulticast mode [ 382.736843][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 382.759738][ T9684] netlink: 'syz.4.1228': attribute type 3 has an invalid length. [ 382.889253][ T9704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1230'. [ 383.101393][ T9694] lo speed is unknown, defaulting to 1000 [ 383.213706][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 383.360033][ T9724] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 383.360540][ T9726] IPVS: length: 115 != 24 [ 383.379949][ T9726] infiniband syz0: set down [ 383.505678][ T9726] bridge0: port 3(team0) entered disabled state [ 383.512183][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.519740][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.598049][ T9726] wg2: left promiscuous mode [ 383.660377][ T9741] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1240'. [ 383.694097][ T9726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.724263][ T9726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.782071][ T9726] hsr0: left promiscuous mode [ 383.876164][ T9726] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.885079][ T9726] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.894810][ T9726] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.904049][ T9726] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.993312][ T8] lo speed is unknown, defaulting to 1000 [ 384.000556][ T9737] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 384.015271][ T9738] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 384.071482][ T8] lo speed is unknown, defaulting to 1000 [ 384.116118][ T9757] netlink: 'syz.2.1246': attribute type 25 has an invalid length. [ 384.163516][ T29] audit: type=1107 audit(1727821520.706:2): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='IL xhp' [ 384.273735][ T9759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.287501][ T9759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.296941][ T9759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.306031][ T9759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.326212][ T9759] geneve2: entered promiscuous mode [ 384.344251][ T9759] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.377180][ T9759] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.416258][ T9759] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.425949][ T9759] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.527042][ T9763] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 384.536266][ T9763] team0: left allmulticast mode [ 384.552810][ T9763] team_slave_0: left allmulticast mode [ 384.559032][ T9763] team_slave_1: left allmulticast mode [ 384.565000][ T9763] team0: left promiscuous mode [ 384.570749][ T9763] team_slave_0: left promiscuous mode [ 384.576520][ T9763] team_slave_1: left promiscuous mode [ 384.586078][ T9763] bridge0: port 3(team0) entered disabled state [ 384.649048][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.671012][ T9763] bond0: (slave team0): Enslaving as an active interface with an up link [ 384.856224][ T5237] Bluetooth: hci9: command 0x0405 tx timeout [ 385.280447][ T9786] lo speed is unknown, defaulting to 1000 [ 385.591570][ T9788] lo speed is unknown, defaulting to 1000 [ 385.767362][ T9813] netlink: 'syz.3.1261': attribute type 29 has an invalid length. [ 385.916983][ T9801] lo speed is unknown, defaulting to 1000 [ 386.331609][ T9837] ebtables: ebtables: counters copy to user failed while replacing table [ 386.620892][ T9855] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 386.804556][ T9861] vlan2: entered allmulticast mode [ 386.814799][ T9861] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 386.842420][ T9861] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 387.453005][ T9873] syzkaller0: entered promiscuous mode [ 387.463922][ T9873] syzkaller0: entered allmulticast mode [ 387.627250][ T9877] ipt_ECN: cannot use operation on non-tcp rule [ 387.659850][ T9880] tipc: Started in network mode [ 387.664769][ T9880] tipc: Node identity 1, cluster identity 4711 [ 387.695217][ T9880] tipc: Node number set to 1 [ 387.713323][ T9880] tipc: Cannot configure node identity twice [ 387.749393][ T9877] __nla_validate_parse: 6 callbacks suppressed [ 387.749413][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1281'. [ 387.813065][ T9882] ebtables: ebtables: counters copy to user failed while replacing table [ 388.007402][ T5282] IPVS: starting estimator thread 0... [ 388.031435][ T9890] tipc: Started in network mode [ 388.050649][ T9890] tipc: Node identity ac1414aa, cluster identity 4711 [ 388.077067][ T9890] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.092723][ T9890] tipc: Enabled bearer , priority 10 [ 388.106064][ T9895] IPVS: using max 18 ests per chain, 43200 per kthread [ 388.226118][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.283951][ T9873] lo speed is unknown, defaulting to 1000 [ 388.366026][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.515935][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.665874][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.805951][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.858309][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 388.871641][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1297'. [ 388.945925][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.106623][ T8] tipc: Node number set to 2886997162 [ 389.119958][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1299'. [ 389.235928][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.456143][ T9928] ebtables: ebtables: counters copy to user failed while replacing table [ 389.485934][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 390.256167][ T9962] IPVS: length: 115 != 24 [ 390.500543][ T9969] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 390.524913][ T9969] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 390.621095][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'. [ 390.641933][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 390.711291][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.723950][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.732172][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.741500][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.750614][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 390.759230][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.764473][ T7927] bridge_slave_1: left allmulticast mode [ 390.775498][ T7927] bridge_slave_1: left promiscuous mode [ 390.784881][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.809068][ T7927] bridge_slave_0: left allmulticast mode [ 390.814765][ T7927] bridge_slave_0: left promiscuous mode [ 390.820690][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.205369][ T7927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.217718][ T7927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.233650][ T7927] bond0 (unregistering): Released all slaves [ 391.523451][ T9997] validate_nla: 2 callbacks suppressed [ 391.523472][ T9997] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 391.560674][ T9978] lo speed is unknown, defaulting to 1000 [ 391.564605][ T9997] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1318'. [ 391.587419][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 391.604402][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 391.638056][T10003] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 392.016583][T10014] dvmrp4: entered allmulticast mode [ 392.202403][ T7927] hsr_slave_0: left promiscuous mode [ 392.228224][ T7927] hsr_slave_1: left promiscuous mode [ 392.238616][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.262082][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.622694][ T7927] team0 (unregistering): Port device team_slave_1 removed [ 392.671708][ T7927] team0 (unregistering): Port device team_slave_0 removed [ 392.860992][ T54] Bluetooth: hci0: command tx timeout [ 392.962381][T10040] net_ratelimit: 5 callbacks suppressed [ 392.962448][T10040] ebtables: ebtables: counters copy to user failed while replacing table [ 393.185871][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.173589][T10030] vlan0: entered promiscuous mode [ 394.215870][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.275931][T10030] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 394.283440][T10030] vlan0: entered allmulticast mode [ 394.365933][T10030] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 394.476378][T10030] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 394.483907][T10030] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 394.945942][ T54] Bluetooth: hci0: command tx timeout [ 395.265929][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 396.305886][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.015956][ T54] Bluetooth: hci0: command tx timeout [ 397.335859][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.375876][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 399.097665][ T54] Bluetooth: hci0: command tx timeout [ 399.415883][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.455869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.505871][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.545889][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.575857][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.615893][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.665908][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.695921][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.761311][T10044] __nla_validate_parse: 2 callbacks suppressed [ 406.761334][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1330'. [ 407.735869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.775876][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.815878][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.855880][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.906028][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.154067][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 412.935891][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.975906][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.015891][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.065894][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 417.095893][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.145895][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.175902][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.215857][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.265869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 422.295905][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.345852][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.375918][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.415874][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.455904][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.495869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.535962][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.585861][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.615850][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.665864][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 432.695872][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.745877][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 434.785877][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.825843][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 436.526541][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 436.855927][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 437.895870][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 438.935851][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 439.975854][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.015872][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.484886][ T9978] chnl_net:caif_netlink_parms(): no params data found [ 442.037448][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.065916][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.073037][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.086347][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.096183][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.104030][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.113433][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.122453][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 442.132336][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 442.140003][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.141306][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.156214][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 442.156252][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 442.171034][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.172375][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 442.178111][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 442.185793][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 442.192737][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 442.200146][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 442.372354][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.380908][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 442.405035][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 442.406612][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.458330][ T9978] bridge_slave_0: entered allmulticast mode [ 442.464630][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 442.485572][ T9978] bridge_slave_0: entered promiscuous mode [ 442.507558][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 442.516622][ T5247] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 442.525996][ T5246] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 442.579529][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.600811][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.613462][ T9978] bridge_slave_1: entered allmulticast mode [ 442.620301][ T9978] bridge_slave_1: entered promiscuous mode [ 442.668901][T10057] lo speed is unknown, defaulting to 1000 [ 442.805452][ T9978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.828580][ T9978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.884281][T10059] lo speed is unknown, defaulting to 1000 [ 442.958318][ T9978] team0: Port device team_slave_0 added [ 443.017325][ T9978] team0: Port device team_slave_1 added [ 443.084114][T10055] lo speed is unknown, defaulting to 1000 [ 443.105909][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 443.170019][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.186123][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.225948][ T9978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.238632][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.245595][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.271771][ T9978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.385402][T10061] lo speed is unknown, defaulting to 1000 [ 443.394800][ T9978] hsr_slave_0: entered promiscuous mode [ 443.409841][ T9978] hsr_slave_1: entered promiscuous mode [ 443.419864][ T9978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.428690][ T9978] Cannot create hsr debugfs directory [ 443.455064][T10057] chnl_net:caif_netlink_parms(): no params data found [ 443.836521][ T3011] bond0 (unregistering): Released all slaves [ 443.847812][ T3011] bond1 (unregistering): Released all slaves [ 444.001136][ T3011] tipc: Disabling bearer [ 444.009157][ T3011] tipc: Left network mode [ 444.046053][ T3011] IPVS: stopping master sync thread 8927 ... [ 444.128804][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.136143][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.144143][T10057] bridge_slave_0: entered allmulticast mode [ 444.151412][T10057] bridge_slave_0: entered promiscuous mode [ 444.194729][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.201961][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.209469][T10057] bridge_slave_1: entered allmulticast mode [ 444.216475][T10057] bridge_slave_1: entered promiscuous mode [ 444.228159][T10059] chnl_net:caif_netlink_parms(): no params data found [ 444.323167][T10057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.378657][T10057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.546118][ T5248] Bluetooth: hci8: command tx timeout [ 444.552239][ T5247] Bluetooth: hci2: command tx timeout [ 444.552887][ T5246] Bluetooth: hci4: command tx timeout [ 444.616114][ T5246] Bluetooth: hci10: command tx timeout [ 444.659339][T10057] team0: Port device team_slave_0 added [ 444.678116][ T3011] hsr_slave_0: left promiscuous mode [ 444.684292][ T3011] hsr_slave_1: left promiscuous mode [ 445.450529][T10057] team0: Port device team_slave_1 added [ 445.488788][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.496299][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.503457][T10059] bridge_slave_0: entered allmulticast mode [ 445.510119][T10059] bridge_slave_0: entered promiscuous mode [ 445.518033][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.525131][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.532496][T10059] bridge_slave_1: entered allmulticast mode [ 445.540118][T10059] bridge_slave_1: entered promiscuous mode [ 445.623110][T10055] chnl_net:caif_netlink_parms(): no params data found [ 445.664702][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.677925][T10061] chnl_net:caif_netlink_parms(): no params data found [ 445.701923][T10057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.710372][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.736756][T10057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.763348][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.811217][T10057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.823099][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.854202][T10057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.955890][T10059] team0: Port device team_slave_0 added [ 445.968628][T10059] team0: Port device team_slave_1 added [ 446.056887][T10057] hsr_slave_0: entered promiscuous mode [ 446.066344][T10057] hsr_slave_1: entered promiscuous mode [ 446.072356][T10057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.080101][T10057] Cannot create hsr debugfs directory [ 446.100521][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.108430][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.134669][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.173847][ T3011] IPVS: stop unused estimator thread 0... [ 446.204369][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.211482][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.238522][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.290237][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.301634][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.311743][T10061] bridge_slave_0: entered allmulticast mode [ 446.319194][T10061] bridge_slave_0: entered promiscuous mode [ 446.342237][T10055] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.349482][T10055] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.357620][T10055] bridge_slave_0: entered allmulticast mode [ 446.367793][T10055] bridge_slave_0: entered promiscuous mode [ 446.375076][T10055] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.382492][T10055] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.389680][T10055] bridge_slave_1: entered allmulticast mode [ 446.397187][T10055] bridge_slave_1: entered promiscuous mode [ 446.410110][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.422947][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.430140][T10061] bridge_slave_1: entered allmulticast mode [ 446.437925][T10061] bridge_slave_1: entered promiscuous mode [ 446.450841][ T9978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.511775][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.521304][ T9978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.534955][ T9978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.553902][T10059] hsr_slave_0: entered promiscuous mode [ 446.560548][T10059] hsr_slave_1: entered promiscuous mode [ 446.566726][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.574298][T10059] Cannot create hsr debugfs directory [ 446.584246][T10055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.605214][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.615998][ T5246] Bluetooth: hci4: command tx timeout [ 446.616007][ T5247] Bluetooth: hci8: command tx timeout [ 446.626932][ T5246] Bluetooth: hci2: command tx timeout [ 446.650064][ T9978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.675448][T10055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.696227][ T5247] Bluetooth: hci10: command tx timeout [ 446.763754][T10055] team0: Port device team_slave_0 added [ 446.774051][T10061] team0: Port device team_slave_0 added [ 446.818279][T10055] team0: Port device team_slave_1 added [ 446.849013][T10061] team0: Port device team_slave_1 added [ 447.019711][T10055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.027127][T10055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.053354][T10055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.077268][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.084241][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.110777][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.128260][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.135237][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.163069][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.191360][T10055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.198530][T10055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.225088][T10055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.349502][T10061] hsr_slave_0: entered promiscuous mode [ 447.356287][T10061] hsr_slave_1: entered promiscuous mode [ 447.362450][T10061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.370256][T10061] Cannot create hsr debugfs directory [ 447.434346][T10055] hsr_slave_0: entered promiscuous mode [ 447.441318][T10055] hsr_slave_1: entered promiscuous mode [ 447.453256][T10055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.461335][T10055] Cannot create hsr debugfs directory [ 447.728046][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.746560][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.805641][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.851743][ T9978] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.884231][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.911713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.918877][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.955404][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.962534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.992866][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.023587][T10057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.039601][T10057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.049449][T10057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.080240][T10057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.253102][ T3011] team0: left allmulticast mode [ 448.260178][ T3011] team_slave_0: left allmulticast mode [ 448.265714][ T3011] team_slave_1: left allmulticast mode [ 448.275475][ T3011] team0: left promiscuous mode [ 448.280603][ T3011] team_slave_0: left promiscuous mode [ 448.286249][ T3011] team_slave_1: left promiscuous mode [ 448.291831][ T3011] bridge0: port 3(team0) entered disabled state [ 448.300438][ T3011] bridge_slave_1: left allmulticast mode [ 448.307476][ T3011] bridge_slave_1: left promiscuous mode [ 448.313238][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.323035][ T3011] bridge_slave_0: left allmulticast mode [ 448.328812][ T3011] bridge_slave_0: left promiscuous mode [ 448.334471][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.695913][ T5247] Bluetooth: hci2: command tx timeout [ 448.697421][ T5246] Bluetooth: hci4: command tx timeout [ 448.706249][ T5247] Bluetooth: hci8: command tx timeout [ 448.786289][ T5247] Bluetooth: hci10: command tx timeout [ 448.948247][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.958440][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.968243][ T3011] bond0 (unregistering): Released all slaves [ 449.075323][ T3011] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 449.095341][ T3011] bond0 (unregistering): Released all slaves [ 449.170948][T10057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.199702][ T3011] tipc: Left network mode [ 449.221115][T10057] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.243300][ T3011] tipc: Disabling bearer [ 449.253472][ T3011] tipc: Left network mode [ 449.257802][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.264930][ T7925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.294809][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.323018][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.330131][ T7925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.430991][ T9978] veth0_vlan: entered promiscuous mode [ 449.514907][ T9978] veth1_vlan: entered promiscuous mode [ 449.556055][T10059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.613570][T10059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.641734][T10059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.695545][T10059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.741660][ T9978] veth0_macvtap: entered promiscuous mode [ 449.804558][ T9978] veth1_macvtap: entered promiscuous mode [ 449.836565][T10057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.897306][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.910481][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.921593][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.038990][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.049618][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.061052][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.092153][ T9978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.101260][ T9978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.110839][ T9978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.119849][ T9978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.262154][T10057] veth0_vlan: entered promiscuous mode [ 450.405624][T10057] veth1_vlan: entered promiscuous mode [ 450.510892][T10061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.558834][T10061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.597610][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.640535][ T3011] hsr_slave_0: left promiscuous mode [ 450.655718][ T3011] hsr_slave_1: left promiscuous mode [ 450.662131][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.676644][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.699820][ T3011] hsr_slave_0: left promiscuous mode [ 450.705699][ T3011] hsr_slave_1: left promiscuous mode [ 450.735639][ T3011] veth1_macvtap: left promiscuous mode [ 450.742652][ T3011] veth0_macvtap: left promiscuous mode [ 450.775969][ T5247] Bluetooth: hci8: command tx timeout [ 450.781424][ T5247] Bluetooth: hci2: command tx timeout [ 450.784614][ T5246] Bluetooth: hci4: command tx timeout [ 450.856187][ T5248] Bluetooth: hci10: command tx timeout [ 450.888743][ T3011] pimreg3 (unregistering): left allmulticast mode [ 451.350283][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.359609][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.377422][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.392326][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.404874][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 451.425026][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 451.513246][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 451.552500][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 452.548638][T10061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.574738][T10055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.656732][T10061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 452.676378][T10055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.687483][T10055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.763630][T10055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.793434][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.910922][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.918050][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.957075][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.964179][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.985196][T10057] veth0_macvtap: entered promiscuous mode [ 452.994851][T10096] lo speed is unknown, defaulting to 1000 [ 453.045739][T10057] veth1_macvtap: entered promiscuous mode [ 453.131660][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.142988][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.153831][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.172352][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.184191][T10057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.225397][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.238964][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.249610][T10057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.260785][T10057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.272273][T10057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.305540][T10057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.314557][T10057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.323975][T10057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.333410][T10057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.413096][T10061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.485664][T10061] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.496605][ T5248] Bluetooth: hci3: command tx timeout [ 453.521066][T10055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.642381][T10055] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.654080][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.661227][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.670490][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.677637][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.785344][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.792466][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.806645][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.813735][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.835505][T10096] chnl_net:caif_netlink_parms(): no params data found [ 453.850375][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.862218][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.901870][ T3011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.954417][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.993267][ T3011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.027856][ T7925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.039859][ T7925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.103634][ T3011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.244096][ T3011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.263966][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.273547][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.283062][T10096] bridge_slave_0: entered allmulticast mode [ 454.316076][T10096] bridge_slave_0: entered promiscuous mode [ 454.354869][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.366795][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.374081][T10096] bridge_slave_1: entered allmulticast mode [ 454.384292][T10096] bridge_slave_1: entered promiscuous mode [ 454.501131][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.531785][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.555044][T10059] veth0_vlan: entered promiscuous mode [ 454.604469][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.641151][T10059] veth1_vlan: entered promiscuous mode [ 454.693729][ T3011] bridge_slave_1: left allmulticast mode [ 454.706563][ T3011] bridge_slave_1: left promiscuous mode [ 454.732636][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.742646][ T3011] bridge_slave_0: left allmulticast mode [ 454.749910][ T3011] bridge_slave_0: left promiscuous mode [ 454.755683][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.111503][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.124063][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.134966][ T3011] bond0 (unregistering): Released all slaves [ 455.206804][T10055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.213916][T10135] tun0: tun_chr_ioctl cmd 35111 [ 455.283040][T10096] team0: Port device team_slave_0 added [ 455.326041][T10096] team0: Port device team_slave_1 added [ 455.535580][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.561810][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.595029][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.596143][ T5248] Bluetooth: hci3: command tx timeout [ 455.608278][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.619997][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.646319][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.668337][T10059] veth0_macvtap: entered promiscuous mode [ 455.681963][ T3011] hsr_slave_0: left promiscuous mode [ 455.687913][ T3011] hsr_slave_1: left promiscuous mode [ 455.693744][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.701922][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.710105][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.718417][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.741626][ T3011] veth1_macvtap: left promiscuous mode [ 455.747392][ T3011] veth0_macvtap: left promiscuous mode [ 455.752982][ T3011] veth1_vlan: left promiscuous mode [ 455.758548][ T3011] veth0_vlan: left promiscuous mode [ 456.183913][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 456.233382][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 456.650839][T10096] hsr_slave_0: entered promiscuous mode [ 456.660768][T10096] hsr_slave_1: entered promiscuous mode [ 456.674409][T10096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.677243][T10147] tipc: Failed to remove unknown binding: 66,1,1/0:967472338/967472340 [ 456.685972][T10096] Cannot create hsr debugfs directory [ 456.693874][T10147] tipc: Failed to remove unknown binding: 66,1,1/0:967472338/967472340 [ 456.706131][T10147] tipc: Failed to remove unknown binding: 66,1,1/0:967472338/967472340 [ 456.723846][T10059] veth1_macvtap: entered promiscuous mode [ 456.802794][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.815680][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.825669][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.837027][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.849742][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.910386][T10055] veth0_vlan: entered promiscuous mode [ 456.937261][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.949889][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.959810][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.970407][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.981579][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.013013][T10055] veth1_vlan: entered promiscuous mode [ 457.022174][T10150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1340'. [ 457.031843][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1340'. [ 457.076788][T10059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.085572][T10059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.095552][T10059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.105944][T10059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.190123][T10055] veth0_macvtap: entered promiscuous mode [ 457.205144][T10061] veth0_vlan: entered promiscuous mode [ 457.277494][T10055] veth1_macvtap: entered promiscuous mode [ 457.316601][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1342'. [ 457.317739][T10061] veth1_vlan: entered promiscuous mode [ 457.326114][T10154] nbd: must specify at least one socket [ 457.415713][T10055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.433647][T10055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.448477][T10055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.459530][T10055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.469989][T10055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.480522][T10055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.491800][T10055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.538768][T10055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.550983][T10055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.570742][T10055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.585668][T10055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.595836][T10055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.606411][T10055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.617748][T10055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.666452][ T5248] Bluetooth: hci3: command tx timeout [ 457.677682][T10055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.688390][T10055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.697241][T10055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.707325][T10055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.750279][ T7925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.762147][ T7925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.784288][T10061] veth0_macvtap: entered promiscuous mode [ 457.832894][T10061] veth1_macvtap: entered promiscuous mode [ 457.876990][ T7925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.886127][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.898319][ T7925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.909456][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.919668][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.936798][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.949087][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.960212][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.971369][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.991425][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.006084][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.099486][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.126369][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.138974][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.171936][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.198733][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.226345][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.239203][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.256128][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.277750][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.334122][T10061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.344767][T10061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.360825][T10061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.369954][T10061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.393298][ T7925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.411117][ T7925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.493826][T10096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.494572][ T7925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.517657][ T7925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.518032][T10096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.565633][T10096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.609893][T10096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.801524][T10195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1347'. [ 459.746213][ T5248] Bluetooth: hci3: command tx timeout [ 460.391381][T10194] ip6gre1: entered allmulticast mode [ 460.473235][ T7920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.481610][ T7920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.529665][ T7925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.558203][ T7925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.607140][T10200] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 460.747556][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.778040][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.826307][T10205] IPVS: length: 115 != 24 [ 460.973713][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.981368][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.120429][T10223] sctp: [Deprecated]: syz.1.1357 (pid 10223) Use of int in maxseg socket option. [ 461.120429][T10223] Use struct sctp_assoc_value instead [ 461.173962][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.194032][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.275148][T10205] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.284230][T10205] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.294075][T10205] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.303081][T10205] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.351439][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.358586][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.405623][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.412782][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.637906][T10239] netlink: 'syz.0.1360': attribute type 11 has an invalid length. [ 461.676162][T10239] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1360'. [ 461.861502][T10252] caif0: Master is either lo or non-ether device [ 461.951594][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.083429][T10096] veth0_vlan: entered promiscuous mode [ 462.095118][T10096] veth1_vlan: entered promiscuous mode [ 462.117392][T10096] veth0_macvtap: entered promiscuous mode [ 462.126326][T10096] veth1_macvtap: entered promiscuous mode [ 462.143051][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 462.183518][T10271] IPVS: length: 115 != 24 [ 462.203681][T10272] netlink: 'syz.4.1367': attribute type 22 has an invalid length. [ 462.319776][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.331238][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.343123][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.353774][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.364431][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.377586][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.390163][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.401609][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.413544][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.484801][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.492190][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.585023][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.609508][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.699480][T10271] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.709854][T10271] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.720002][T10271] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.730291][T10271] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.767720][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 462.777184][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 462.788707][T10274] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 462.838002][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.864298][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.879788][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.891684][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.902164][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.920174][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.920315][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 462.943984][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.996796][T10096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.005536][T10096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.029133][T10096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.046679][T10096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.102915][T10282] netlink: 'syz.4.1372': attribute type 33 has an invalid length. [ 463.124911][T10282] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1372'. [ 463.288368][ T7929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.309348][ T7929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.449281][ T7927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.469190][ T7927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.519744][T10305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1378'. [ 463.566743][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 463.746251][T10315] IPVS: length: 115 != 24 [ 463.764735][T10322] x_tables: unsorted underflow at hook 3 [ 463.855783][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.863384][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.985514][T10315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.000273][T10315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.114504][T10315] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.123824][T10315] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.134506][T10315] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.143854][T10315] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.373102][ T7925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.437191][T10336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1387'. [ 464.505903][T10340] netlink: 9356 bytes leftover after parsing attributes in process `syz.4.1389'. [ 464.518324][ T7925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.533788][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 464.612256][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.626867][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.634585][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.660405][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.673440][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.682675][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.707725][T10353] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 464.801157][ T7925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.853083][T10346] lo speed is unknown, defaulting to 1000 [ 465.075330][ T7925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.243417][T10374] IPVS: length: 115 != 24 [ 465.574911][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.582497][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.768255][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.783541][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.863118][T10374] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.873162][T10374] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.885207][T10374] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.894179][T10374] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.939215][T10374] ip6gre1: left allmulticast mode [ 466.031197][T10346] chnl_net:caif_netlink_parms(): no params data found [ 466.071211][ T7925] bridge_slave_1: left allmulticast mode [ 466.083215][ T7925] bridge_slave_1: left promiscuous mode [ 466.090799][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.097123][T10407] netlink: 'syz.1.1406': attribute type 2 has an invalid length. [ 466.108276][ T7925] bridge_slave_0: left allmulticast mode [ 466.114265][ T7925] bridge_slave_0: left promiscuous mode [ 466.120298][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.509389][ T7925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.521757][ T7925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.534350][ T7925] bond0 (unregistering): Released all slaves [ 466.573918][T10407] : entered promiscuous mode [ 466.600248][T10409] macsec1: entered allmulticast mode [ 466.610815][T10409] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 466.638097][T10409] mac80211_hwsim hwsim49 wlan0: left allmulticast mode [ 466.776678][ T5248] Bluetooth: hci0: command tx timeout [ 466.993077][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.025887][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.050546][T10346] bridge_slave_0: entered allmulticast mode [ 467.070339][T10346] bridge_slave_0: entered promiscuous mode [ 467.077819][T10440] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 467.105091][T10440] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 467.111526][T10446] IPVS: length: 115 != 24 [ 467.191957][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.200291][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.207945][T10346] bridge_slave_1: entered allmulticast mode [ 467.223588][T10346] bridge_slave_1: entered promiscuous mode [ 467.284981][T10452] __nla_validate_parse: 8 callbacks suppressed [ 467.285003][T10452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 467.394111][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.441116][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.464049][T10466] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1423'. [ 467.728313][T10346] team0: Port device team_slave_0 added [ 467.785000][ T7925] hsr_slave_0: left promiscuous mode [ 467.793115][ T7925] hsr_slave_1: left promiscuous mode [ 467.800897][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.819477][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.834931][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.843783][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.887968][ T7925] veth1_macvtap: left promiscuous mode [ 467.893674][ T7925] veth0_macvtap: left promiscuous mode [ 467.900321][ T7925] veth1_vlan: left promiscuous mode [ 467.910326][ T7925] veth0_vlan: left promiscuous mode [ 468.390295][T10492] IPVS: length: 115 != 24 [ 468.457449][ T7925] team0 (unregistering): Port device team_slave_1 removed [ 468.498402][ T7925] team0 (unregistering): Port device team_slave_0 removed [ 468.866123][ T5248] Bluetooth: hci0: command tx timeout [ 468.907416][T10346] team0: Port device team_slave_1 added [ 468.977869][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 468.994598][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 469.055078][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.086681][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.163967][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.178152][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 469.207691][ T1121] tipc: Subscription rejected, illegal request [ 469.244011][T10505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 469.287467][T10505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 469.295295][T10505] gretap1: entered promiscuous mode [ 469.315986][T10505] gretap1: entered allmulticast mode [ 469.328311][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.345960][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.372379][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.389811][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 469.447686][T10346] hsr_slave_0: entered promiscuous mode [ 469.488705][T10346] hsr_slave_1: entered promiscuous mode [ 469.536047][T10346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.543943][T10346] Cannot create hsr debugfs directory [ 469.613695][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'. [ 469.635448][ T29] audit: type=1107 audit(1727821606.156:3): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='&ORXP`=RA#Zz[( QdM7 'ϟrkHK%mRМ'oGjf?(.}vVw\*(AϿ?UDz!K3gZ%rXe5u>2̫uĩ' [ 469.831694][T10532] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1443'. [ 469.843217][T10533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.863354][T10529] ebtables: ebtables: counters copy to user failed while replacing table [ 469.895693][T10536] IPVS: length: 115 != 24 [ 470.214251][T10346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.245404][T10346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.269871][T10346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.286896][T10346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.440707][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 470.457817][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.510582][T10346] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.549715][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.556902][ T7929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.607468][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.614691][ T7929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.673894][T10580] IPVS: length: 115 != 24 [ 470.714893][T10575] ebtables: ebtables: counters copy to user failed while replacing table [ 470.777416][ T30] INFO: task syz.2.789:8152 blocked for more than 143 seconds. [ 470.785629][ T30] Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 470.799276][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.845200][ T30] task:syz.2.789 state:D stack:20864 pid:8152 tgid:8150 ppid:7841 flags:0x00004000 [ 470.874171][ T30] Call Trace: [ 470.885854][ T30] [ 470.890280][ T30] __schedule+0x1895/0x4b30 [ 470.894879][ T30] ? __pfx___schedule+0x10/0x10 [ 470.909176][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.922763][ T30] ? __pfx_lock_release+0x10/0x10 [ 470.932535][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 470.947331][ T5248] Bluetooth: hci0: command tx timeout [ 470.958567][ T30] ? schedule+0x90/0x320 [ 470.962875][ T30] schedule+0x14b/0x320 [ 471.002895][ T30] rpc_wait_bit_killable+0x1b/0x160 [ 471.034292][ T30] __wait_on_bit+0xb0/0x2f0 [ 471.051813][ T30] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 471.058168][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 471.085897][ T30] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 471.091767][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 471.120663][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 471.135564][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 471.151460][ T30] __rpc_execute+0x723/0x1460 [ 471.158077][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.166710][ T30] ? __pfx___rpc_execute+0x10/0x10 [ 471.178046][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 471.185664][ T30] ? rpc_make_runnable+0xb5/0x1c0 [ 471.191056][ T30] rpc_execute+0x1ec/0x3f0 [ 471.196225][ T30] rpc_run_task+0x562/0x6c0 [ 471.200793][ T30] rpc_call_sync+0x197/0x2e0 [ 471.205425][ T30] ? __pfx_rpc_call_sync+0x10/0x10 [ 471.218671][ T30] rpcb_register+0x36b/0x670 [ 471.225081][ T30] ? __pfx_rpcb_register+0x10/0x10 [ 471.235269][ T30] ? net_generic+0x1f/0x240 [ 471.243930][ T30] svc_unregister+0x25d/0x7c0 [ 471.253454][T10346] veth0_vlan: entered promiscuous mode [ 471.266986][ T30] svc_bind+0x1ea/0x230 [ 471.271239][ T30] nfsd_create_serv+0x715/0xc30 [ 471.275035][T10346] veth1_vlan: entered promiscuous mode [ 471.282739][ T30] ? __pfx_nfsd_create_serv+0x10/0x10 [ 471.288478][ T30] ? __mutex_lock+0x52a/0xd70 [ 471.293204][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 471.300698][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.305883][ T30] ? __asan_memset+0x23/0x50 [ 471.310586][ T30] ? netlink_unicast+0x7f6/0x990 [ 471.315617][ T30] ? __sock_sendmsg+0x221/0x270 [ 471.320766][ T30] ? __sys_sendmsg+0x292/0x380 [ 471.325597][ T30] nfsd_nl_listener_set_doit+0x135/0x1a90 [ 471.343283][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 471.351671][T10346] veth0_macvtap: entered promiscuous mode [ 471.352812][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 471.369630][T10346] veth1_macvtap: entered promiscuous mode [ 471.381858][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 471.388884][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.402957][ T30] ? __nla_parse+0x40/0x60 [ 471.407671][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.407996][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 471.424455][ T30] genl_rcv_msg+0xb14/0xec0 [ 471.429609][ T30] ? mark_lock+0x9a/0x360 [ 471.433986][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.437573][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.439459][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 471.451639][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 471.458073][ T30] ? __pfx___might_resched+0x10/0x10 [ 471.463437][ T30] netlink_rcv_skb+0x1e3/0x430 [ 471.468754][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.469866][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.473809][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.473859][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 471.504183][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.515841][ T30] genl_rcv+0x28/0x40 [ 471.517070][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.519928][ T30] netlink_unicast+0x7f6/0x990 [ 471.535858][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 471.545449][ T30] ? __virt_addr_valid+0x183/0x530 [ 471.548334][T10346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.563530][ T30] ? __check_object_size+0x48e/0x900 [ 471.570839][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 471.571135][T10346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.575731][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.590752][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 471.599405][T10346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.600327][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.615692][T10346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.631783][ T30] __sock_sendmsg+0x221/0x270 [ 471.640138][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 471.645139][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.660953][ T30] __sys_sendmsg+0x292/0x380 [ 471.665663][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.675690][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.685642][ T30] ? do_syscall_64+0x100/0x230 [ 471.702815][ T30] ? do_syscall_64+0xb6/0x230 [ 471.707647][ T30] do_syscall_64+0xf3/0x230 [ 471.712277][ T30] ? clear_bhb_loop+0x35/0x90 [ 471.732163][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.805956][ T30] RIP: 0033:0x7fe3d697dff9 [ 471.824041][ T30] RSP: 002b:00007fe3d77a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.866471][ T30] RAX: ffffffffffffffda RBX: 00007fe3d6b35f80 RCX: 00007fe3d697dff9 [ 471.898563][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000b [ 471.906658][ T30] RBP: 00007fe3d69f0296 R08: 0000000000000000 R09: 0000000000000000 [ 471.914660][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.922724][ T30] R13: 0000000000000000 R14: 00007fe3d6b35f80 R15: 00007ffdf6e9e618 [ 471.930841][ T30] [ 471.940985][ T30] [ 471.940985][ T30] Showing all locks held in the system: [ 471.974080][ T30] 3 locks held by kworker/0:0/8: [ 472.002653][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.065920][ T30] #1: ffffc900000d7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.090341][ T30] #2: ffff888056815240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 472.115895][ T30] 2 locks held by kworker/u8:0/11: [ 472.126846][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.153682][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 472.181097][ T30] 3 locks held by kworker/u8:1/12: [ 472.186525][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.203453][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.214848][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 472.224790][ T30] 1 lock held by khungtaskd/30: [ 472.229794][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 472.239780][ T30] 3 locks held by kworker/u8:5/1121: [ 472.245070][ T30] #0: ffff88802dbba148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.256798][ T30] #1: ffffc900046b7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.269835][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 472.279427][ T30] 2 locks held by getty/4982: [ 472.284142][ T30] #0: ffff88802e11d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 472.293956][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 472.304498][ T30] 4 locks held by syz.1.209/6007: [ 472.309858][ T30] #0: ffff88802ac9cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 472.320025][ T30] #1: ffff88802ac9c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 472.329925][ T30] #2: ffffffff8fe3f2a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 472.340129][ T30] #3: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 472.351069][ T30] 2 locks held by syz.2.789/8152: [ 472.356224][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 472.364460][ T30] #1: ffffffff8ec1ad88 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 472.374723][ T30] 3 locks held by syz-executor/10346: [ 472.380708][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 472.390246][ T30] #1: ffff888063c09428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 472.400032][ T30] #2: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 472.411212][ T30] [ 472.413565][ T30] ============================================= [ 472.413565][ T30] [ 472.422849][ T30] NMI backtrace for cpu 1 [ 472.427201][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 472.437369][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.447439][ T30] Call Trace: [ 472.450765][ T30] [ 472.453693][ T30] dump_stack_lvl+0x241/0x360 [ 472.458406][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.463703][ T30] ? __pfx__printk+0x10/0x10 [ 472.468311][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 472.473276][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.478763][ T30] ? _printk+0xd5/0x120 [ 472.482934][ T30] ? __pfx__printk+0x10/0x10 [ 472.487645][ T30] ? __wake_up_klogd+0xcc/0x110 [ 472.492508][ T30] ? __pfx__printk+0x10/0x10 [ 472.497109][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 472.502143][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.508141][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 472.514227][ T30] watchdog+0xff4/0x1040 [ 472.518496][ T30] ? watchdog+0x1ea/0x1040 [ 472.522935][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.527654][ T30] kthread+0x2f0/0x390 [ 472.531735][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.536421][ T30] ? __pfx_kthread+0x10/0x10 [ 472.541013][ T30] ret_from_fork+0x4b/0x80 [ 472.545438][ T30] ? __pfx_kthread+0x10/0x10 [ 472.550028][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.554812][ T30] [ 472.558837][ T30] Sending NMI from CPU 1 to CPUs 0: [ 472.564099][ C0] NMI backtrace for cpu 0 [ 472.564112][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 472.564131][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.564142][ C0] Workqueue: bat_events batadv_nc_worker [ 472.564166][ C0] RIP: 0010:check_preemption_disabled+0x2/0x120 [ 472.564185][ C0] Code: 00 61 8c 48 c7 c6 c0 00 61 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 472.564200][ C0] RSP: 0018:ffffc900001179f0 EFLAGS: 00000283 [ 472.564213][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81703d00 [ 472.564225][ C0] RDX: 0000000000000000 RSI: ffffffff8c6100c0 RDI: ffffffff8c610080 [ 472.564236][ C0] RBP: ffffc90000117b48 R08: ffffffff901cf8af R09: 1ffffffff2039f15 [ 472.564249][ C0] R10: dffffc0000000000 R11: fffffbfff2039f16 R12: 1ffff92000022f50 [ 472.564261][ C0] R13: ffffffff8b8ed81b R14: ffff888026c38000 R15: dffffc0000000000 [ 472.564273][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 472.564291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.564303][ C0] CR2: 00007fea1d557440 CR3: 0000000011fd4000 CR4: 00000000003506f0 [ 472.564317][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.564326][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.564336][ C0] Call Trace: [ 472.564342][ C0] [ 472.564348][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 472.564367][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 472.564391][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.564409][ C0] ? nmi_handle+0x2a/0x5a0 [ 472.564432][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 472.564453][ C0] ? nmi_handle+0x14f/0x5a0 [ 472.564468][ C0] ? nmi_handle+0x2a/0x5a0 [ 472.564484][ C0] ? check_preemption_disabled+0x2/0x120 [ 472.564500][ C0] ? default_do_nmi+0x63/0x160 [ 472.564519][ C0] ? exc_nmi+0x123/0x1f0 [ 472.564536][ C0] ? end_repeat_nmi+0xf/0x53 [ 472.564551][ C0] ? batadv_nc_worker+0xcb/0x610 [ 472.564573][ C0] ? lock_release+0xb0/0xa30 [ 472.564595][ C0] ? check_preemption_disabled+0x2/0x120 [ 472.564612][ C0] ? check_preemption_disabled+0x2/0x120 [ 472.564628][ C0] ? check_preemption_disabled+0x2/0x120 [ 472.564644][ C0] [ 472.564649][ C0] [ 472.564655][ C0] rcu_is_watching+0x15/0xb0 [ 472.564672][ C0] lock_release+0xbf/0xa30 [ 472.564694][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 472.564718][ C0] ? batadv_nc_worker+0xcb/0x610 [ 472.564756][ C0] ? __pfx_lock_release+0x10/0x10 [ 472.564782][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.564809][ C0] ? batadv_nc_worker+0xcb/0x610 [ 472.564830][ C0] batadv_nc_worker+0x28b/0x610 [ 472.564851][ C0] ? batadv_nc_worker+0xcb/0x610 [ 472.564873][ C0] ? process_scheduled_works+0x976/0x1850 [ 472.564896][ C0] process_scheduled_works+0xa63/0x1850 [ 472.564932][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.564960][ C0] ? assign_work+0x364/0x3d0 [ 472.564984][ C0] worker_thread+0x870/0xd30 [ 472.565014][ C0] ? __kthread_parkme+0x169/0x1d0 [ 472.565039][ C0] ? __pfx_worker_thread+0x10/0x10 [ 472.565062][ C0] kthread+0x2f0/0x390 [ 472.565077][ C0] ? __pfx_worker_thread+0x10/0x10 [ 472.565100][ C0] ? __pfx_kthread+0x10/0x10 [ 472.565116][ C0] ret_from_fork+0x4b/0x80 [ 472.565139][ C0] ? __pfx_kthread+0x10/0x10 [ 472.565154][ C0] ret_from_fork_asm+0x1a/0x30 [ 472.565186][ C0] [ 472.571941][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 472.571958][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 472.571984][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.571998][ T30] Call Trace: [ 472.572006][ T30] [ 472.572015][ T30] dump_stack_lvl+0x241/0x360 [ 472.572063][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.572096][ T30] ? __pfx__printk+0x10/0x10 [ 472.572125][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.572163][ T30] ? vscnprintf+0x5d/0x90 [ 472.572190][ T30] panic+0x349/0x880 [ 472.572221][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 472.572248][ T30] ? __pfx_panic+0x10/0x10 [ 472.572275][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 472.572300][ T30] ? __irq_work_queue_local+0x137/0x410 [ 472.572329][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 472.572352][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 472.572377][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 472.572404][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 472.572432][ T30] watchdog+0x1033/0x1040 [ 472.572461][ T30] ? watchdog+0x1ea/0x1040 [ 472.572494][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.572521][ T30] kthread+0x2f0/0x390 [ 472.572541][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.572567][ T30] ? __pfx_kthread+0x10/0x10 [ 472.572589][ T30] ret_from_fork+0x4b/0x80 [ 472.572618][ T30] ? __pfx_kthread+0x10/0x10 [ 472.572656][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.572702][ T30] [ 473.061395][ T30] Kernel Offset: disabled [ 473.065719][ T30] Rebooting in 86400 seconds..