last executing test programs: 1m38.808116087s ago: executing program 3 (id=330): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0xffffffff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x3000000}, 0x0) 1m20.965554629s ago: executing program 3 (id=330): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0xffffffff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x3000000}, 0x0) 1m5.257195114s ago: executing program 3 (id=330): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0xffffffff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x3000000}, 0x0) 55.536445869s ago: executing program 1 (id=1627): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}]}, 0x44}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8e72) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]}]}}]}, 0x8c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x78, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0) 55.201571409s ago: executing program 1 (id=1632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9ed95eb00"/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfdfffff7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x260, 0x37f, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00'}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r8 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r8}, 0x20) close(r8) 55.032605537s ago: executing program 1 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfb, 0x10000020}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000003a000900000000000000000001006c01000000000000000002809dfa5f8a0c000300000000800000000014000500fc0100"/64], 0x40}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000040)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) pipe(&(0x7f00000002c0)) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r13}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xd4, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x20}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x47, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x0, @broadcast, 0x0, @value=@device_b, 0x0, 0x0, @device_b}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x7, 0x0, {0x0, 0x1f01}}}]}]]}, 0xd4}}, 0x0) 54.416583717s ago: executing program 1 (id=1639): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fe, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000010000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 50.665619568s ago: executing program 3 (id=330): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0xffffffff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x3000000}, 0x0) 32.757308389s ago: executing program 1 (id=1639): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fe, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000010000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 30.953959009s ago: executing program 3 (id=330): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0xffffffff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x3000000}, 0x0) 23.794655881s ago: executing program 4 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r7, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r8 = socket$inet(0x2b, 0x0, 0x200) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r9, 0x40047459, &(0x7f0000000080)=0x1402020) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400e900", @ANYRES16=r10, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000e0000000000"], 0x34}}, 0x0) 21.000025074s ago: executing program 2 (id=1793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x11, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000021f9ffffffffffffff687930000000000c00050000000000000000000500200000000000"], 0x34}}, 0x0) 20.540618531s ago: executing program 2 (id=1794): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x2257, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002f80)=""/4096, 0x1069}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0xc, 0x4}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @typedef={0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x9, 0x2}, {0x4, 0x3}, {0xd, 0x4}, {0xd, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f00000014c0)=""/192, 0x92, 0xc0, 0x1, 0xff15, 0x10000, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda100000000000097010000f8ffffffb702000008000400b70300000000000015000000060000006100000000000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f00000003c0)=""/248, 0xf0}], 0x4, 0x0, 0x353}}], 0x400000000000010, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0xa4}}, 0x0) 20.232381428s ago: executing program 2 (id=1797): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6a3a7660122e00"/28, @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25030000000600010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x48000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0xff89, 0xffffffff, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010100}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r5, &(0x7f0000000180), 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="100000000000ff010000000000000000b63ea05a9c7b576a6c84acfb344750f3ee68d71d19ff35641869f2784842bc08fd0523c994cf92b55e77207eeb9a6faceb476b5e2f7e9ff7aa9612b646cbb38609abedd049fa084e945e160b5fb1e8c87a6d52724e9e5ac9f89893fdc27d752f6ca981d0461dee2124607883c340330d8b377fc1d59c183757acb7cf8f10227f745bdc692d031f00000000ee7aa590062d048a4e9d1697d6bf82f8959c070406274662e087a888ba7c5a24f5d38606efe2a604dafe58243ba7c8fffe9bfa3b802e05"], 0x10}, 0x41) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_macvtap\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="05bfbb000000003e9400"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="03000000040000000100"/28], 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r11, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 19.920106041s ago: executing program 0 (id=1799): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) (fail_nth: 3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x9, 0x33, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r7, 0x104, 0x5, &(0x7f0000001b40), 0x4) write$binfmt_script(r6, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.765508301s ago: executing program 0 (id=1800): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e21, 0x7, @empty, 0xfffffff8}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'wg2\x00', {}, 0x3f}) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 19.71762724s ago: executing program 4 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x5c}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x302}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x54}}, 0x0) 19.512200703s ago: executing program 0 (id=1802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08005700b80b00000800270003004a0008002600"], 0x34}}, 0x0) (fail_nth: 8) 19.511183032s ago: executing program 4 (id=1803): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c5090000f1000000c3aaf0ff00000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 19.37131238s ago: executing program 4 (id=1804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={r1, 0x1c, "e1d5fe9960f5081512d1f006a6fa7bde81a113cd74c95e1179ab8bdc"}, &(0x7f00000000c0)=0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x8}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50, 0x0, 0x4}, {0x20, 0x0, 0x0, 0xd38}, {0x6}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000012c000080000000dd71b8ed12b66d384a27f604760399ebc1831159d6495d53c115707606d85b9b66e9dfcd6c0e209dd22ea198070cb32c554f94750d76aeb4561e892c16c1105d7cf900"/96, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r4], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500fd0700000085000000b30000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000640)="96d9910c9e164c08f06f3070dff025557309b66cf412c8ffe14c332fa4bcf334ec670dc3ec8595aac37bad607a6787658299a6ea8ded6a912a49b866cf0ad6dea2cf", &(0x7f0000000740)=""/172, 0x0, &(0x7f0000000800)="fcfa1d0cb2269160e8a71693116edc4bee6308fe86ae6bac331d5f8d6abf5eaa1aac75f68e34d6bc714130b7382c8977d51fc8286078636c3b64c8cd3d0e4e1d522b38e88876daf3efa35ee8392d4cc3ff877f070a83a02cc5371e42214291851e4f863ff85bc9f42cdf1edcc5363f9243c6ed2f20b8a757c549effb127d7b4b56b1fca867e033f5384d4e67753c139f3e2b46993d126f7eda4a91bdf1a1ca5b0eb59181a0", 0x80, r6}, 0x38) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003500010700000000000000f910"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) recvmsg(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 19.327088304s ago: executing program 0 (id=1805): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="553a45983c430093df0d6038ba2f78777934ebc21b7361cf1d39e6b11ef1763e2a10519b", 0x24}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r1, 0x8b36, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b36, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xaa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r4, 0x10d, 0xaa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "15b4013a41a0ab29"}}, 0x38}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "15b4013a41a0ab29"}}, 0x38}}, 0x0) 19.028791221s ago: executing program 2 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1700000054008106fdffffffffffffff07"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x50834) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x22011, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x20194fff, 0x8032, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08005700b80b00000800270003004a0008002600"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc004) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 19.013057601s ago: executing program 4 (id=1807): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0x46, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x9, 0x33, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x5, &(0x7f0000001b40), 0x4) write$binfmt_script(r7, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.966518728s ago: executing program 0 (id=1808): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r2}, &(0x7f0000001e80), &(0x7f0000001ec0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x6, @empty, 0x4e24, 0x2, 'lc\x00', 0x20, 0x3ff, 0x5b}, 0x2c) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040), 0x4) sendmmsg$sock(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000000200)="54de9170f42838c0fd3fbbfd9c1ff09d49035619bf9d56338614daa118827877839e94090389a55ccd99844a65fcf8566535bfa3656cc8b68051d214c954d345b221e8db656de996a08204e62c59d7a51b26d6c4a59732f35ef01efdd90dc5d6afc8dc427867fa841a8f7a40409eced425b25401ba58b71a744165dd5bfc3014f9ecd7990ffe0d8f8ca68bd74f7803e15fbe0a72ba26097f95b7cb65c927745f7751f88e91bac2c373b95897b681d09efd428bbcf86821c786054d6c5402ad", 0xbf}, {&(0x7f0000004400)="e80f2b85107ecbd942677a2afc9ec38a238e98f0968b1bf7", 0x18}, {&(0x7f0000004440)="42d8b73f861c205fc9f03219fd7b72e24c837b3899e8eabe51e574612cac498a88936bcd03bade395b3c4d0b3a4c41264a0aedcae452964339a4dd5f7ad523b4d01a8f0bd8993b3f2d7fbb7b660ca42272bbed63f47b472d48c626178cf3c62c7bfcdb96869066fe93c05d5f3308ee8bca238fd7e29fcd77dfac9a8080c5c89b9c3c5139387eeb3424bf8085353bd99b37373b55f70af78c12a894", 0x9b}, {&(0x7f0000004500)="3fd3bc653efb2912876124a3257be88d8d1e3321192bfe099f6157b14992da6aba89abd8a8e69c763329b15889a690fd572064b371bab2dd084a70a444cc1b5f783a8ac6e76e43fcd37ef689e4c06c22c7a06579eb951c7fee204123f4d94a3ca1dd592f04", 0x65}, {&(0x7f0000004580)="35baf99e1b57e0b898ff12034de36adfbf87a5b7b79ff95b7e18561b4dc7df1cbadc28f3228296d4a41a4f2e8ecd636ca3dcf14c3b3b9be0f63d96cac233d7b8548429d900168285db5696ed55cb1a2deb0ae73a77c706c3634da596de867b890fcf0c", 0x63}, {&(0x7f0000004600)="9e4af11531436a85d3d800282d1682b764f549f0f289786e695393f6b0a0a9d93c7d61e78c39855590523e898a58459460d7545c14aebbdae9000e81316f752d2df3ca3ccb13cb73bbcc78f42adb24764dfc56e2f278d43b13d96e0d4bed51cb96c197146150f3cfbd601cca5ba5b67ac58ed764e63b623996f5566f44f4bed3475c9f16095eec9ac344b72b3511fe2625497ec3d07972d76cb58fec2dd1b09b65228c1ae03a8fc37e951d5bc47833d3224681c07472", 0xb6}, {&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="ded2257af45330279c63a9719b85446004c766e9dad2f9fc3b5eb2f6a78f14a490e06dacf7de121e8ea9f824f3861f9440493fb716bda73903204396a513e8cac7319e4ba85936e297e98cffe557d5595bca2e8b795c03c7", 0x58}], 0x8}}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000005840)="eb026edf4c90f4f3224f9cce24fb60707b4a7b8c157e08f06f65f32d41e7721c35d19782d0a1854a9eaf38a3baec9c0f0857e1ed2a53c692d17c833e2ea3a0f289b108b95e02d595d4354e9ed15776387bb9c4d63b0ff5769227c1b7590755f0ac45b6ab52a970d205f41f06fc5ad4af65dab227c20f00b280ca1b50204d3247c4d26e515adb49066c5cdaa1390117", 0x8f}, {&(0x7f0000005900)="f636492688c2e22d4758f1aa489f19df0fb00177c34193f52b57954828e00d707340b154ee144dcb2b5cdf7d3cd7dc86c4eb09679802eee538b5f47b8f766acf71a801f3183db1", 0x47}, {&(0x7f0000005980)="8ecc0b55fe377421e28cbc72e4e1a53423311e995d6d1e", 0x17}, {&(0x7f00000059c0)="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", 0x288}], 0x4}}], 0x2, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x371}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0xb}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x42, 0xac, "0ac1ee85d47dc902cb129a637ddc672b66b828b9a59e7e6281e2b5c26eaf5a80ea0df61d7ba58e127d8a8857d7f438d2d5ed6d8bbe7ce77b96f1e6151e2d"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xce}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x48}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x2cd}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x9a, &(0x7f0000000780)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x11, 0x4, 0x0, 0x4, 0x8c, 0x64, 0x0, 0x1, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x46, [@rand_addr=0x64010102, @multicast1, @multicast1]}, @rr={0x7, 0x7, 0x12, [@rand_addr=0x64010100]}, @generic={0x7, 0xc, "a435035bf6762022c270"}, @end, @ssrr={0x89, 0xb, 0x12, [@rand_addr=0x64010102, @remote]}]}}, {0x4e21, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "059147c0687f732815473a1e07c0635bee711d3fdd742941", "ca5d8f610a30cc277f006b337a1941c6cf5329fbf51c734d8f62523636f9df3f"}}}}}}, 0x0) 18.860739306s ago: executing program 2 (id=1809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002b0000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18.767692575s ago: executing program 4 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x74057a50413e6675, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18b0eb8bc03b922789e41993225ffb234ead5b0000000800000000000000000000631124000000000094002c9462996b00"/65], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}}, 0x0) 18.669418854s ago: executing program 0 (id=1811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/170, &(0x7f00000001c0)=0xaa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x2e, 0x7a, 0x8, 0x3}]}) unshare(0x40000100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0xba01}, 0x0) 18.600831272s ago: executing program 2 (id=1812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000d8c3000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000ce850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050001000500000008000200", @ANYRES32=0x0, @ANYBLOB="080003"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 5.474791725s ago: executing program 1 (id=1639): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fe, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000010000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 3 (id=330): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0xffffffff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x3000000}, 0x0) kernel console output (not intermixed with test programs): : unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.997739][ T9738] bridge_slave_1: left allmulticast mode [ 273.004912][ T9738] bridge_slave_1: left promiscuous mode [ 273.017340][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.028508][ T9738] bridge_slave_0: left allmulticast mode [ 273.034486][ T9738] bridge_slave_0: left promiscuous mode [ 273.048348][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.517389][T10569] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.1330'. [ 273.540723][T10567] Cannot find add_set index 0 as target [ 273.545055][T10569] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1330'. [ 273.557672][T10569] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.1330'. [ 274.202203][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1346'. [ 274.237613][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.248910][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.257679][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.279534][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.287493][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.295344][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.327150][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.388622][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.420882][ T9738] bond0 (unregistering): Released all slaves [ 274.485662][T10579] bridge0: port 3(gretap0) entered blocking state [ 274.570439][T10579] bridge0: port 3(gretap0) entered disabled state [ 274.592103][T10579] gretap0: entered allmulticast mode [ 274.620902][T10579] gretap0: entered promiscuous mode [ 274.668199][T10579] bridge0: port 3(gretap0) entered blocking state [ 274.674861][T10579] bridge0: port 3(gretap0) entered forwarding state [ 275.126501][T10612] Cannot find add_set index 0 as target [ 275.153098][T10581] gretap0: left allmulticast mode [ 275.158199][T10581] gretap0: left promiscuous mode [ 275.199610][T10581] bridge0: port 3(gretap0) entered disabled state [ 275.481569][T10605] lo speed is unknown, defaulting to 1000 [ 275.625905][T10595] lo speed is unknown, defaulting to 1000 [ 275.685177][T10619] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 275.741071][ T9738] hsr_slave_0: left promiscuous mode [ 275.756000][ T9738] hsr_slave_1: left promiscuous mode [ 275.766640][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.786727][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.805278][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.813133][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.852773][ T9738] veth1_macvtap: left promiscuous mode [ 275.860683][ T9738] veth0_macvtap: left promiscuous mode [ 275.866399][ T9738] veth1_vlan: left promiscuous mode [ 275.872561][ T9738] veth0_vlan: left promiscuous mode [ 276.354949][ T5245] Bluetooth: hci4: command tx timeout [ 276.535081][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 276.586953][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 276.936718][T10627] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 277.116051][T10620] smc: net device lo applied user defined pnetid SYZ1 [ 277.120336][T10619] mac80211_hwsim hwsim52 syzkaller0: renamed from wlan1 (while UP) [ 277.135812][T10621] smc: net device lo erased user defined pnetid SYZ1 [ 277.193608][T10626] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.203990][T10626] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.215184][T10626] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.224490][T10626] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.236951][T10626] geneve2: entered promiscuous mode [ 277.242792][T10626] geneve2: entered allmulticast mode [ 277.383311][T10634] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1356'. [ 277.394974][T10634] openvswitch: netlink: Multiple metadata blocks provided [ 277.444240][T10634] vlan2: entered promiscuous mode [ 277.641393][T10642] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1358'. [ 277.682863][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.692188][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.059174][T10595] chnl_net:caif_netlink_parms(): no params data found [ 278.199060][ T5245] Bluetooth: hci0: command 0x0401 tx timeout [ 278.299874][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.322023][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.348968][T10595] bridge_slave_0: entered allmulticast mode [ 278.371508][T10595] bridge_slave_0: entered promiscuous mode [ 278.418297][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.429558][ T5245] Bluetooth: hci4: command tx timeout [ 278.455408][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.464028][T10595] bridge_slave_1: entered allmulticast mode [ 278.491970][T10595] bridge_slave_1: entered promiscuous mode [ 278.624070][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.642402][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.715428][T10595] team0: Port device team_slave_0 added [ 278.767358][T10595] team0: Port device team_slave_1 added [ 278.856914][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.878897][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.944511][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.967869][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.976795][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.043709][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.189834][T10595] hsr_slave_0: entered promiscuous mode [ 279.229514][T10595] hsr_slave_1: entered promiscuous mode [ 279.249486][T10595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.257106][T10595] Cannot create hsr debugfs directory [ 279.983337][T10713] syzkaller0: entered promiscuous mode [ 279.989153][T10713] syzkaller0: entered allmulticast mode [ 280.030601][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 280.296136][T10739] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1383'. [ 280.509684][ T5245] Bluetooth: hci4: command tx timeout [ 282.597933][ T5245] Bluetooth: hci4: command tx timeout [ 284.381497][T10765] Cannot find add_set index 0 as target [ 284.471682][T10763] tipc: Started in network mode [ 284.476609][T10763] tipc: Node identity ac1414aa, cluster identity 4711 [ 284.531020][T10763] tipc: Enabled bearer , priority 10 [ 284.951484][T10595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.983380][T10595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.017469][T10595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.039822][T10595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.045218][T10780] x_tables: unsorted underflow at hook 2 [ 285.062429][T10780] Bluetooth: MGMT ver 1.23 [ 285.316262][T10595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.402857][T10595] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.467528][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.474818][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.529559][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.530184][ T5317] tipc: Node number set to 2886997162 [ 285.536703][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.769180][T10799] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1397'. [ 286.052251][T10807] netlink: 'syz.1.1398': attribute type 33 has an invalid length. [ 286.073055][T10807] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1398'. [ 286.263070][T10595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.472067][T10815] dccp_invalid_packet: P.Data Offset(172) too large [ 286.496999][T10595] veth0_vlan: entered promiscuous mode [ 286.524281][T10820] x_tables: duplicate underflow at hook 3 [ 286.543358][T10595] veth1_vlan: entered promiscuous mode [ 286.657109][T10595] veth0_macvtap: entered promiscuous mode [ 286.696287][T10595] veth1_macvtap: entered promiscuous mode [ 286.724925][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1403'. [ 286.744849][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.772094][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.802981][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.831603][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.848497][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.870511][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.895976][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.922094][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.945883][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.968515][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.992142][T10595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.023382][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.050458][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.077030][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.104274][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.130884][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.158757][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.178575][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.199687][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.225588][T10595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.247356][T10595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.291103][T10595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.337885][T10835] lo speed is unknown, defaulting to 1000 [ 287.354534][T10595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.375264][T10595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.398480][T10595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.417469][T10595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.480883][T10836] siw: device registration error -23 [ 287.777548][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.797015][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.957665][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.018841][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.121544][T10855] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 288.805791][T10885] tipc: Started in network mode [ 288.821507][T10885] tipc: Node identity f7, cluster identity 4711 [ 288.827857][T10885] tipc: Node number set to 247 [ 288.887168][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 289.012061][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 289.052660][T10902] ɶƣ0GC¦: entered promiscuous mode [ 289.256958][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1426'. [ 289.272852][T10910] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1428'. [ 289.285944][T10910] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 289.294544][T10908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1426'. [ 289.367123][T10908] team0: Port device team_slave_0 removed [ 289.652597][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1433'. [ 289.763659][T10935] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 289.778491][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 289.802479][T10935] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 290.225182][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.828683][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.876798][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.951731][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.036340][ T61] bridge_slave_1: left allmulticast mode [ 291.043364][ T61] bridge_slave_1: left promiscuous mode [ 291.049358][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.058030][ T61] bridge_slave_0: left allmulticast mode [ 291.063940][ T61] bridge_slave_0: left promiscuous mode [ 291.070093][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.400133][T10956] __nla_validate_parse: 1 callbacks suppressed [ 291.400154][T10956] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1442'. [ 291.659427][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.693219][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.714524][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.745381][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.763154][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.781964][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.852062][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.864168][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.876213][ T61] bond0 (unregistering): Released all slaves [ 291.978836][T10970] lo speed is unknown, defaulting to 1000 [ 292.072187][T10978] rdma_rxe: rxe_newlink: failed to add lo [ 292.096149][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1445'. [ 292.118690][T10978] erspan0: entered promiscuous mode [ 292.371445][T10992] x_tables: ip_tables: osf match: only valid for protocol 6 [ 292.397092][T10990] team_slave_0: entered promiscuous mode [ 292.403523][T10990] team_slave_1: entered promiscuous mode [ 292.429449][T10990] vlan0: entered promiscuous mode [ 292.446633][T10990] team0: entered promiscuous mode [ 292.471153][T10990] team0: left promiscuous mode [ 292.476669][T10990] team_slave_0: left promiscuous mode [ 292.482215][T10990] team_slave_1: left promiscuous mode [ 292.993497][ T61] hsr_slave_0: left promiscuous mode [ 293.053593][ T61] hsr_slave_1: left promiscuous mode [ 293.079069][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.086609][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.124962][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.135306][T11023] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 293.148607][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.167856][T11023] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1459'. [ 293.190209][ T61] veth1_macvtap: left promiscuous mode [ 293.197270][ T61] veth0_macvtap: left promiscuous mode [ 293.203377][ T61] veth1_vlan: left promiscuous mode [ 293.208992][ T61] veth0_vlan: left promiscuous mode [ 293.852739][ T61] team0 (unregistering): Port device team_slave_1 removed [ 293.873717][ T5245] Bluetooth: hci4: command tx timeout [ 293.923491][ T61] team0 (unregistering): Port device team_slave_0 removed [ 294.718854][T11044] xt_hashlimit: size too large, truncated to 1048576 [ 294.761374][T10970] chnl_net:caif_netlink_parms(): no params data found [ 294.775003][T11053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.889034][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 294.948965][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1465'. [ 294.968970][T11052] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 295.026836][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 295.354185][T10970] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.366082][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.377739][T10970] bridge_slave_0: entered allmulticast mode [ 295.385708][T10970] bridge_slave_0: entered promiscuous mode [ 295.784979][T11085] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1471'. [ 295.951187][ T5245] Bluetooth: hci4: command tx timeout [ 298.029033][ T5245] Bluetooth: hci4: command tx timeout [ 298.132794][T10970] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.142233][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.151197][T10970] bridge_slave_1: entered allmulticast mode [ 298.158098][T10970] bridge_slave_1: entered promiscuous mode [ 298.274973][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.321284][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.428309][T10970] team0: Port device team_slave_0 added [ 298.442677][T10970] team0: Port device team_slave_1 added [ 298.493430][T11111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1477'. [ 298.508908][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.515988][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.543813][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.570721][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.577726][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.632334][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.673616][T11119] sctp: [Deprecated]: syz.1.1477 (pid 11119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.673616][T11119] Use struct sctp_sack_info instead [ 298.912797][T10970] hsr_slave_0: entered promiscuous mode [ 298.929107][T10970] hsr_slave_1: entered promiscuous mode [ 298.941668][T10970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.958774][T10970] Cannot create hsr debugfs directory [ 299.391395][T11143] IPVS: persistence engine module ip_vs_pe_@ not found [ 299.896866][T10970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.108640][ T5245] Bluetooth: hci4: command tx timeout [ 300.181851][T10970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.225849][T10970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.246036][T11194] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 300.289094][T10970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.423492][T11199] IPVS: persistence engine module ip_vs_pe_@ not found [ 300.444959][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 300.469074][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 300.562117][T11211] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1503'. [ 300.588323][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 300.635510][T11213] wlan1: mtu less than device minimum [ 300.661451][T10970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.723792][T11215] gretap0: entered promiscuous mode [ 300.745810][T11215] macsec1: entered allmulticast mode [ 300.757022][T11215] gretap0: entered allmulticast mode [ 300.774502][T11215] gretap0: left allmulticast mode [ 300.784349][T11215] gretap0: left promiscuous mode [ 300.855530][T10970] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.917515][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.919417][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 300.924771][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.971637][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.978850][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.985156][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 301.123509][T10970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.160559][T10970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.566498][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.776581][T10970] veth0_vlan: entered promiscuous mode [ 301.782498][T11246] IPVS: persistence engine module ip_vs_pe_@ not found [ 301.826918][T10970] veth1_vlan: entered promiscuous mode [ 301.967482][T10970] veth0_macvtap: entered promiscuous mode [ 302.011103][T10970] veth1_macvtap: entered promiscuous mode [ 302.056416][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.067699][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.094224][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.107652][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.129917][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.152292][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.169259][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 302.170735][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.216145][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.238182][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.261526][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.277658][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.295291][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.306087][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.323025][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.333660][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.344714][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.356367][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.366456][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.380785][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.392318][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.452581][T10970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.501168][T10970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.522504][T10970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.538607][T10970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.567822][T11279] netlink: 'syz.2.1524': attribute type 29 has an invalid length. [ 302.596400][T11282] IPv6: sit1: Disabled Multicast RS [ 302.631077][T11279] netlink: 'syz.2.1524': attribute type 29 has an invalid length. [ 302.922530][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.948526][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.007270][T11295] IPVS: persistence engine module ip_vs_pe_@ not found [ 303.088210][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.123351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.325028][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 303.346710][T11312] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1531'. [ 303.396268][T11312] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 303.441139][T11319] ip6t_REJECT: ECHOREPLY is not supported [ 303.455749][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.462929][T11312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.470990][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.478186][T11312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.519772][T11312] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 303.577019][T11323] __nla_validate_parse: 2 callbacks suppressed [ 303.577038][T11323] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1536'. [ 304.025854][T11343] IPVS: persistence engine module ip_vs_pe_@ not found [ 304.035453][T11346] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1543'. [ 304.256189][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 304.514650][T11371] Cannot find add_set index 0 as target [ 304.830228][T11383] IPVS: persistence engine module ip_vs_pe_@ not found [ 305.028263][T11393] FAULT_INJECTION: forcing a failure. [ 305.028263][T11393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.066201][T11393] CPU: 0 UID: 0 PID: 11393 Comm: syz.2.1557 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 305.077018][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.087085][T11393] Call Trace: [ 305.090365][T11393] [ 305.093299][T11393] dump_stack_lvl+0x241/0x360 [ 305.097985][T11393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.103213][T11393] ? __pfx__printk+0x10/0x10 [ 305.107898][T11393] ? __pfx_lock_release+0x10/0x10 [ 305.112938][T11393] should_fail_ex+0x3b0/0x4e0 [ 305.117619][T11393] _copy_from_user+0x2f/0xe0 [ 305.122236][T11393] copy_msghdr_from_user+0xae/0x680 [ 305.127532][T11393] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 305.133443][T11393] __sys_sendmsg+0x23d/0x3a0 [ 305.138125][T11393] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.143257][T11393] ? vfs_write+0x7c4/0xc90 [ 305.147720][T11393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.154065][T11393] ? do_syscall_64+0x100/0x230 [ 305.158836][T11393] ? do_syscall_64+0xb6/0x230 [ 305.163599][T11393] do_syscall_64+0xf3/0x230 [ 305.168094][T11393] ? clear_bhb_loop+0x35/0x90 [ 305.172771][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.178722][T11393] RIP: 0033:0x7fafbbb7def9 [ 305.183150][T11393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.202749][T11393] RSP: 002b:00007fafbb9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.211246][T11393] RAX: ffffffffffffffda RBX: 00007fafbbd35f80 RCX: 00007fafbbb7def9 [ 305.219209][T11393] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 305.227174][T11393] RBP: 00007fafbb9f8090 R08: 0000000000000000 R09: 0000000000000000 [ 305.235142][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.243213][T11393] R13: 0000000000000000 R14: 00007fafbbd35f80 R15: 00007fffbb714d78 [ 305.251220][T11393] [ 305.468845][ T5249] Bluetooth: hci3: command 0x0405 tx timeout [ 305.649966][T11407] Bluetooth: MGMT ver 1.23 [ 305.655772][T11407] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 305.726868][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1562'. [ 305.742722][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 305.772041][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 306.102132][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.124186][T11407] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1560'. [ 306.317451][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.387406][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.439099][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.531929][ T12] bridge_slave_1: left allmulticast mode [ 306.537610][ T12] bridge_slave_1: left promiscuous mode [ 306.543433][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.552421][ T12] bridge_slave_0: left allmulticast mode [ 306.558078][ T12] bridge_slave_0: left promiscuous mode [ 306.564431][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.047581][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.060320][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.071464][ T12] bond0 (unregistering): Released all slaves [ 307.195896][T11419] Cannot find add_set index 0 as target [ 307.318749][ T5245] Bluetooth: hci0: command 0x0401 tx timeout [ 307.325630][ T5238] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 307.444155][T11426] IPVS: persistence engine module ip_vs_pe_@ not found [ 307.775895][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.787814][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.801511][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.813590][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.822286][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.831732][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.938867][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 307.987146][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 308.014446][T11451] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1570'. [ 308.081474][T11451] sch_fq: defrate 2 ignored. [ 308.135015][ T12] hsr_slave_0: left promiscuous mode [ 308.182388][ T12] hsr_slave_1: left promiscuous mode [ 308.208284][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.219024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.248779][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.256245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.313365][ T12] veth1_macvtap: left promiscuous mode [ 308.341617][ T12] veth0_macvtap: left promiscuous mode [ 308.368682][ T12] veth1_vlan: left promiscuous mode [ 308.374050][ T12] veth0_vlan: left promiscuous mode [ 309.446097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 309.501127][ T12] team0 (unregistering): Port device team_slave_0 removed [ 309.868898][ T5245] Bluetooth: hci4: command tx timeout [ 310.184827][T11494] __nla_validate_parse: 1 callbacks suppressed [ 310.184849][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 310.216844][T11494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1581'. [ 310.227885][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'. [ 310.238128][T11494] vlan0: entered allmulticast mode [ 310.243632][T11494] veth0_vlan: entered allmulticast mode [ 310.250324][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 310.319147][T11502] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 310.560918][T11509] bond_slave_0: entered promiscuous mode [ 310.566976][T11509] bond_slave_1: entered promiscuous mode [ 310.694303][T11509] bond_slave_0: left promiscuous mode [ 310.699883][T11509] bond_slave_1: left promiscuous mode [ 310.795121][T11520] netlink: 'syz.4.1590': attribute type 10 has an invalid length. [ 310.856309][T11520] team0: Port device netdevsim0 added [ 310.945815][T11517] netlink: 'syz.4.1590': attribute type 10 has an invalid length. [ 311.039369][T11517] team0: Port device netdevsim0 removed [ 311.047459][T11517] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 311.118967][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'. [ 311.166996][T11532] 8021q: VLANs not supported on ipvlan1 [ 311.344390][T11443] chnl_net:caif_netlink_parms(): no params data found [ 311.496457][T11532] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1593'. [ 311.668210][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.682218][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.699149][T11443] bridge_slave_0: entered allmulticast mode [ 311.713504][T11443] bridge_slave_0: entered promiscuous mode [ 311.921812][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.949065][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.949900][ T5245] Bluetooth: hci4: command tx timeout [ 311.956649][T11443] bridge_slave_1: entered allmulticast mode [ 312.004084][T11443] bridge_slave_1: entered promiscuous mode [ 312.172121][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.246609][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.257774][T11559] IPVS: persistence engine module ip_vs_pe_@ not found [ 312.387235][T11565] No such timeout policy "syz0" [ 312.422582][T11443] team0: Port device team_slave_0 added [ 312.443082][T11443] team0: Port device team_slave_1 added [ 312.510932][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.533419][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.560425][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.599797][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.607146][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.645797][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.732128][T11443] hsr_slave_0: entered promiscuous mode [ 312.746358][T11443] hsr_slave_1: entered promiscuous mode [ 312.775904][T11443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.792479][T11443] Cannot create hsr debugfs directory [ 313.329705][T11580] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1604'. [ 313.637229][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'. [ 313.825918][T11597] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 313.861508][T11597] x_tables: ip_tables: osf match: only valid for protocol 6 [ 314.030161][ T5245] Bluetooth: hci4: command tx timeout [ 314.118022][T11605] IPVS: persistence engine module ip_vs_pe_@ not found [ 314.128075][T11443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.168163][T11443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.220116][T11443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.252571][T11443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.535530][T11443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.630988][T11443] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.679598][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.686855][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.714871][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'. [ 314.738328][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.746015][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.321551][T11443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.446684][T11443] veth0_vlan: entered promiscuous mode [ 315.453256][T11657] IPVS: persistence engine module ip_vs_pe_@ not found [ 315.501547][T11443] veth1_vlan: entered promiscuous mode [ 315.531346][T11663] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 315.551275][T11663] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.1627'. [ 315.561076][T11663] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 315.630629][T11443] veth0_macvtap: entered promiscuous mode [ 315.656318][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1630'. [ 315.671734][T11443] veth1_macvtap: entered promiscuous mode [ 315.680984][T11671] netlink: 'syz.0.1631': attribute type 3 has an invalid length. [ 315.697911][T11671] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1631'. [ 315.713622][T11668] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1629'. [ 315.761646][T11668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.822459][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.849535][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.862028][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.878068][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.889808][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.904017][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.914106][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.925225][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.937726][T11443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.970778][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.993114][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.008214][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.020325][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.031107][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.041868][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.053057][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.064033][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.074425][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.085338][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.097727][T11443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.109510][ T5245] Bluetooth: hci4: command tx timeout [ 316.332142][T11443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.350098][T11443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.369752][T11443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.385457][T11443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.472002][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 316.581638][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.639980][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 316.761379][T11696] IPVS: persistence engine module ip_vs_pe_@ not found [ 316.832918][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.010487][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.086118][ T9738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.115723][ T9738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.181331][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.208164][T11718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1645'. [ 317.223458][T11719] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1645'. [ 317.294009][ T9738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.314411][ T9738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.476154][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.495625][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.507758][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.520902][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.538894][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 317.547531][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.612789][ T61] bridge_slave_1: left allmulticast mode [ 317.649248][ T61] bridge_slave_1: left promiscuous mode [ 317.664687][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.856991][ T61] bridge_slave_0: left allmulticast mode [ 317.876499][ T61] bridge_slave_0: left promiscuous mode [ 317.882774][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.418701][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.432015][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.443388][ T61] bond0 (unregistering): Released all slaves [ 318.463754][T11746] netlink: 'syz.2.1653': attribute type 15 has an invalid length. [ 318.480924][T11751] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1653'. [ 318.582648][ T61] tipc: Left network mode [ 318.669148][ T5238] Bluetooth: hci4: command 0x0405 tx timeout [ 318.785376][T11757] IPVS: persistence engine module ip_vs_pe_@ not found [ 319.087142][ T61] hsr_slave_0: left promiscuous mode [ 319.120137][ T61] hsr_slave_1: left promiscuous mode [ 319.130224][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.150725][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.165546][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.196941][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.241226][ T61] veth1_macvtap: left promiscuous mode [ 319.255770][ T61] veth0_macvtap: left promiscuous mode [ 319.269909][ T61] veth1_vlan: left promiscuous mode [ 319.281914][ T61] veth0_vlan: left allmulticast mode [ 319.287508][ T61] veth0_vlan: left promiscuous mode [ 319.628890][ T5245] Bluetooth: hci2: command tx timeout [ 319.955474][T11795] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 320.606532][ T61] team0 (unregistering): Port device team_slave_1 removed [ 320.656143][ T61] team0 (unregistering): Port device team_slave_0 removed [ 321.201973][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 321.216771][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 321.272192][T11788] hsr0: entered promiscuous mode [ 321.282068][T11788] hsr0: left promiscuous mode [ 321.313085][T11794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1664'. [ 321.325323][T11795] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1664'. [ 321.432017][T11725] chnl_net:caif_netlink_parms(): no params data found [ 321.551506][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.559512][T11725] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.566703][T11725] bridge_slave_0: entered allmulticast mode [ 321.574495][T11725] bridge_slave_0: entered promiscuous mode [ 321.583212][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.590685][T11725] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.597958][T11725] bridge_slave_1: entered allmulticast mode [ 321.605493][T11725] bridge_slave_1: entered promiscuous mode [ 321.640423][T11725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.653209][T11725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.691315][T11725] team0: Port device team_slave_0 added [ 321.700732][T11725] team0: Port device team_slave_1 added [ 321.709161][ T5245] Bluetooth: hci2: command tx timeout [ 321.728017][T11725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.736094][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.762663][T11725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.813173][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.876341][T11725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.901105][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.958664][T11725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.075184][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.217741][T11813] IPVS: persistence engine module ip_vs_pe_@ not found [ 322.332731][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.391557][T11725] hsr_slave_0: entered promiscuous mode [ 322.420434][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.435173][T11725] hsr_slave_1: entered promiscuous mode [ 322.442525][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.454982][T11725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.463373][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.473214][T11725] Cannot create hsr debugfs directory [ 322.479208][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.491258][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 322.498930][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.751606][T11821] vlan2: entered promiscuous mode [ 322.774830][T11821] macvtap0: entered promiscuous mode [ 322.789217][T11821] vlan2: entered allmulticast mode [ 322.794577][T11821] macvtap0: entered allmulticast mode [ 322.811836][T11821] veth0_macvtap: entered allmulticast mode [ 322.855161][T11821] macvtap0: left allmulticast mode [ 322.868712][T11821] veth0_macvtap: left allmulticast mode [ 322.874329][T11821] macvtap0: left promiscuous mode [ 322.983089][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.014510][T11828] netlink: 'syz.2.1673': attribute type 21 has an invalid length. [ 323.027860][T11828] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1673'. [ 323.480253][T11853] netlink: 'syz.0.1680': attribute type 3 has an invalid length. [ 323.563450][T11853] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 323.601312][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.609049][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.638033][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.645287][T11853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.652949][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.660329][T11853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.685999][T11853] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 323.703684][ T61] bridge_slave_1: left allmulticast mode [ 323.720364][ T61] bridge_slave_1: left promiscuous mode [ 323.726250][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.736571][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 323.747083][ T61] bridge_slave_0: left allmulticast mode [ 323.766301][ T61] bridge_slave_0: left promiscuous mode [ 323.782079][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.791568][ T5238] Bluetooth: hci2: command tx timeout [ 323.816268][T11862] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 323.963922][T11865] IPVS: persistence engine module ip_vs_pe_@ not found [ 324.314827][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.326393][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.337284][ T61] bond0 (unregistering): Released all slaves [ 324.590192][ T5238] Bluetooth: hci4: command tx timeout [ 324.827931][T11826] chnl_net:caif_netlink_parms(): no params data found [ 325.369230][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1691'. [ 325.397889][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.399912][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1691'. [ 325.425820][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.433721][T11826] bridge_slave_0: entered allmulticast mode [ 325.442814][T11826] bridge_slave_0: entered promiscuous mode [ 325.482477][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.506706][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.522081][T11826] bridge_slave_1: entered allmulticast mode [ 325.538623][T11826] bridge_slave_1: entered promiscuous mode [ 325.584039][ T61] hsr_slave_0: left promiscuous mode [ 325.591019][ T61] hsr_slave_1: left promiscuous mode [ 325.597612][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.609466][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.616839][T11910] vxcan1: tx address claim with dest, not broadcast [ 325.617619][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.634462][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.636617][T11910] vxcan1: tx address claim with dest, not broadcast [ 325.683604][ T61] veth1_macvtap: left promiscuous mode [ 325.699038][ T61] veth0_macvtap: left promiscuous mode [ 325.704735][ T61] veth1_vlan: left promiscuous mode [ 325.719210][ T61] veth0_vlan: left promiscuous mode [ 325.733224][T11915] IPVS: persistence engine module ip_vs_pe_@ not found [ 325.874567][ T5245] Bluetooth: hci2: command tx timeout [ 326.317631][ T61] team0 (unregistering): Port device team_slave_1 removed [ 326.374230][ T61] team0 (unregistering): Port device team_slave_0 removed [ 326.668798][ T5245] Bluetooth: hci4: command tx timeout [ 327.023535][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.065104][T11725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.142138][T11725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.325872][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.375016][T11929] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 327.399556][T11725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.482170][T11725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.553079][T11826] team0: Port device team_slave_0 added [ 327.602795][T11826] team0: Port device team_slave_1 added [ 328.748750][ T5245] Bluetooth: hci4: command tx timeout [ 330.839579][ T5245] Bluetooth: hci4: command tx timeout [ 332.708118][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.725358][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.761375][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.803461][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.817008][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.845937][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.846441][T11954] IPVS: persistence engine module ip_vs_pe_@ not found [ 332.875407][T11956] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 332.886857][T11956] geneve0: entered promiscuous mode [ 332.901825][T11956] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 332.929319][T11958] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 333.034773][T11826] hsr_slave_0: entered promiscuous mode [ 333.044826][T11826] hsr_slave_1: entered promiscuous mode [ 333.062056][T11826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.074854][T11826] Cannot create hsr debugfs directory [ 333.505118][T11725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.679370][T11725] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.692852][T11972] infiniband syz1: set active [ 333.701738][T11986] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1715'. [ 333.726652][T11972] infiniband syz1: added bond0 [ 333.757540][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.764803][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.820213][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.827348][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.837782][T11972] RDS/IB: syz1: added [ 333.861282][T11972] smc: adding ib device syz1 with port count 1 [ 333.877896][T11972] smc: ib device syz1 port 1 has pnetid [ 333.905026][T11992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1716'. [ 334.229926][T11826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.264148][T11826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.289457][T11826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.308197][T11826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.572238][T11725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.631663][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.715687][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.821424][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.828649][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.886385][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.893608][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.935855][T11725] veth0_vlan: entered promiscuous mode [ 334.977334][T11725] veth1_vlan: entered promiscuous mode [ 335.151332][T11725] veth0_macvtap: entered promiscuous mode [ 335.171952][T12004] IPVS: persistence engine module ip_vs_pe_@ not found [ 335.230285][T11725] veth1_macvtap: entered promiscuous mode [ 335.305120][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.338844][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.358631][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.384953][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.400106][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.411202][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.424634][T11725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.451131][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.493756][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.528910][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.578622][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.608508][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.638644][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.658664][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.677084][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.701563][T11725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.720935][T12026] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 335.740764][T12026] netlink: 4916 bytes leftover after parsing attributes in process `syz.4.1723'. [ 335.742293][T11725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.750087][T12026] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1723'. [ 335.787677][T11725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.788661][T12026] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 335.805504][T11725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.825450][T11725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.083583][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.299441][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.322022][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.413747][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.432042][T11826] veth0_vlan: entered promiscuous mode [ 336.451039][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.462787][T11826] veth1_vlan: entered promiscuous mode [ 336.494853][T12042] FAULT_INJECTION: forcing a failure. [ 336.494853][T12042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.529622][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.4.1727 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 336.540525][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 336.550692][T12042] Call Trace: [ 336.553988][T12042] [ 336.556937][T12042] dump_stack_lvl+0x241/0x360 [ 336.561647][T12042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.566890][T12042] ? __pfx__printk+0x10/0x10 [ 336.571511][T12042] ? __pfx_lock_release+0x10/0x10 [ 336.576621][T12042] should_fail_ex+0x3b0/0x4e0 [ 336.581339][T12042] _copy_from_user+0x2f/0xe0 [ 336.585970][T12042] copy_msghdr_from_user+0xae/0x680 [ 336.591229][T12042] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 336.597088][T12042] __sys_sendmsg+0x23d/0x3a0 [ 336.601752][T12042] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.607320][T12042] ? vfs_write+0x7c4/0xc90 [ 336.611775][T12042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.618277][T12042] ? do_syscall_64+0x100/0x230 [ 336.623042][T12042] ? do_syscall_64+0xb6/0x230 [ 336.627714][T12042] do_syscall_64+0xf3/0x230 [ 336.632215][T12042] ? clear_bhb_loop+0x35/0x90 [ 336.636910][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.642800][T12042] RIP: 0033:0x7fc726b7def9 [ 336.647210][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.666813][T12042] RSP: 002b:00007fc727a58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.675309][T12042] RAX: ffffffffffffffda RBX: 00007fc726d35f80 RCX: 00007fc726b7def9 [ 336.683277][T12042] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 336.691242][T12042] RBP: 00007fc727a58090 R08: 0000000000000000 R09: 0000000000000000 [ 336.699207][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.707687][T12042] R13: 0000000000000000 R14: 00007fc726d35f80 R15: 00007ffc59ce7d38 [ 336.715670][T12042] [ 336.744474][T11826] veth0_macvtap: entered promiscuous mode [ 336.777948][T11826] veth1_macvtap: entered promiscuous mode [ 336.938290][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.971302][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.989824][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.004924][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.015123][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.030560][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.043057][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.055743][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.067742][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.131272][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.138536][T12052] IPVS: persistence engine module ip_vs_pe_@ not found [ 337.151276][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.178659][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.198655][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.210029][T12056] Cannot find add_set index 0 as target [ 337.218615][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.237260][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.256703][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.267860][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.285193][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.307499][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.334878][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.381379][T11826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.408827][T11826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.417584][T11826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.436371][T11826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.529483][T12063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 337.554670][T12064] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 337.629143][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.637113][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.666589][ T5745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.677472][ T5745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.840562][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 337.899394][T12074] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1736'. [ 337.917915][T12074] bridge5: entered promiscuous mode [ 338.079577][T12081] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 338.098711][T12081] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 338.215066][ T9742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.402368][T12088] netlink: 'syz.0.1740': attribute type 4 has an invalid length. [ 338.410527][T12088] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 338.411713][T12086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1741'. [ 338.418259][T12088] netlink: 88156 bytes leftover after parsing attributes in process `syz.0.1740'. [ 338.447851][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1742'. [ 338.487137][T12086] dummy0: entered promiscuous mode [ 338.498239][T12084] dummy0: left promiscuous mode [ 338.830455][T12092] IPVS: persistence engine module ip_vs_pe_@ not found [ 338.859023][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.871301][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.883690][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.893679][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.901898][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.921074][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.011418][ T9742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.140333][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'. [ 339.203716][ T9742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.245913][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 339.256334][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1747'. [ 339.271211][T12105] pim6reg: entered allmulticast mode [ 339.278504][T12109] batadv_slave_0: entered allmulticast mode [ 339.355034][ T9742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.637916][ T9742] bridge_slave_1: left allmulticast mode [ 339.661081][ T9742] bridge_slave_1: left promiscuous mode [ 339.667149][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.746976][ T9742] bridge_slave_0: left allmulticast mode [ 339.767626][ T9742] bridge_slave_0: left promiscuous mode [ 339.775802][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.785633][T12122] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 339.883462][T12122] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.1752'. [ 340.507092][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.521231][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.535046][ T9742] bond0 (unregistering): Released all slaves [ 340.567144][T12125] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 340.578498][T12125] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 340.587009][T12125] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 340.876155][T12096] chnl_net:caif_netlink_parms(): no params data found [ 340.989968][ T5245] Bluetooth: hci2: command tx timeout [ 341.112936][T12096] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.120441][T12096] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.127680][T12096] bridge_slave_0: entered allmulticast mode [ 341.144702][T12096] bridge_slave_0: entered promiscuous mode [ 341.156738][ T9742] hsr_slave_0: left promiscuous mode [ 341.169835][ T9742] hsr_slave_1: left promiscuous mode [ 341.176142][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.184246][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.193644][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.201248][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.222920][ T9742] veth1_macvtap: left promiscuous mode [ 341.229722][ T9742] veth0_macvtap: left promiscuous mode [ 341.235408][ T9742] veth1_vlan: left promiscuous mode [ 341.240955][ T9742] veth0_vlan: left promiscuous mode [ 342.077207][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.090742][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.118544][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.133522][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.142262][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.150523][ T9742] team0 (unregistering): Port device team_slave_1 removed [ 342.158911][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.230158][ T9742] team0 (unregistering): Port device team_slave_0 removed [ 342.842115][T12096] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.849842][T12096] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.857112][T12096] bridge_slave_1: entered allmulticast mode [ 342.866825][T12096] bridge_slave_1: entered promiscuous mode [ 342.906011][T12143] bridge2: entered promiscuous mode [ 342.911657][T12143] bridge2: entered allmulticast mode [ 342.922449][T12143] team0: Port device bridge2 added [ 342.929346][T12144] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 342.945630][T12144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 343.068613][ T5245] Bluetooth: hci2: command tx timeout [ 343.097238][T12096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.136442][T12096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.154333][T12160] FAULT_INJECTION: forcing a failure. [ 343.154333][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 343.167481][T12160] CPU: 0 UID: 0 PID: 12160 Comm: syz.2.1759 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 343.178361][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 343.188613][T12160] Call Trace: [ 343.191910][T12160] [ 343.194859][T12160] dump_stack_lvl+0x241/0x360 [ 343.199566][T12160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.204787][T12160] ? __pfx__printk+0x10/0x10 [ 343.209429][T12160] should_fail_ex+0x3b0/0x4e0 [ 343.214140][T12160] ? radix_tree_node_alloc+0x8b/0x3c0 [ 343.219532][T12160] should_failslab+0xac/0x100 [ 343.224230][T12160] ? radix_tree_node_alloc+0x8b/0x3c0 [ 343.229596][T12160] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 343.234968][T12160] radix_tree_node_alloc+0x8b/0x3c0 [ 343.240195][T12160] idr_get_free+0x296/0xab0 [ 343.244726][T12160] idr_alloc_u32+0x195/0x330 [ 343.249348][T12160] ? __pfx_idr_alloc_u32+0x10/0x10 [ 343.254461][T12160] ? l2tp_session_register+0x109/0xf30 [ 343.259917][T12160] l2tp_session_register+0x1d4/0xf30 [ 343.265201][T12160] ? lockdep_init_map_type+0xa1/0x910 [ 343.270573][T12160] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 343.276376][T12160] ? __pfx_l2tp_session_register+0x10/0x10 [ 343.282176][T12160] ? __raw_spin_lock_init+0x45/0x100 [ 343.287458][T12160] pppol2tp_session_create+0x139/0x1b0 [ 343.292938][T12160] l2tp_nl_cmd_session_create+0x7df/0xe30 [ 343.298689][T12160] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 343.304971][T12160] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 343.311330][T12160] genl_rcv_msg+0xb14/0xec0 [ 343.315831][T12160] ? mark_lock+0x9a/0x350 [ 343.320168][T12160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.325248][T12160] ? __pfx_lock_acquire+0x10/0x10 [ 343.330285][T12160] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 343.336723][T12160] ? __pfx___might_resched+0x10/0x10 [ 343.342034][T12160] netlink_rcv_skb+0x1e3/0x430 [ 343.346800][T12160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.351827][T12160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.357125][T12160] ? __netlink_deliver_tap+0x77e/0x7c0 [ 343.362611][T12160] genl_rcv+0x28/0x40 [ 343.366598][T12160] netlink_unicast+0x7f6/0x990 [ 343.371368][T12160] ? __pfx_netlink_unicast+0x10/0x10 [ 343.376661][T12160] ? __virt_addr_valid+0x183/0x530 [ 343.381797][T12160] ? __check_object_size+0x49c/0x900 [ 343.387085][T12160] ? bpf_lsm_netlink_send+0x9/0x10 [ 343.392196][T12160] netlink_sendmsg+0x8e4/0xcb0 [ 343.396966][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.402247][T12160] ? __import_iovec+0x536/0x820 [ 343.407102][T12160] ? aa_sock_msg_perm+0x91/0x160 [ 343.412037][T12160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 343.417411][T12160] ? security_socket_sendmsg+0x87/0xb0 [ 343.422865][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.428493][T12160] __sock_sendmsg+0x221/0x270 [ 343.433314][T12160] ____sys_sendmsg+0x525/0x7d0 [ 343.438108][T12160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.443421][T12160] __sys_sendmsg+0x2b0/0x3a0 [ 343.448019][T12160] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.453129][T12160] ? vfs_write+0x7c4/0xc90 [ 343.457583][T12160] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.463985][T12160] ? do_syscall_64+0x100/0x230 [ 343.468821][T12160] ? do_syscall_64+0xb6/0x230 [ 343.473605][T12160] do_syscall_64+0xf3/0x230 [ 343.478104][T12160] ? clear_bhb_loop+0x35/0x90 [ 343.482783][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.488685][T12160] RIP: 0033:0x7fafbbb7def9 [ 343.493101][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.512704][T12160] RSP: 002b:00007fafbb9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.521116][T12160] RAX: ffffffffffffffda RBX: 00007fafbbd35f80 RCX: 00007fafbbb7def9 [ 343.529082][T12160] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000005 [ 343.537043][T12160] RBP: 00007fafbb9f8090 R08: 0000000000000000 R09: 0000000000000000 [ 343.545010][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.552982][T12160] R13: 0000000000000000 R14: 00007fafbbd35f80 R15: 00007fffbb714d78 [ 343.560971][T12160] [ 343.706739][T12096] team0: Port device team_slave_0 added [ 343.741086][T12096] team0: Port device team_slave_1 added [ 343.880268][T12096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.887337][T12096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.918023][T12096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.938766][T12096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.955956][T12096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.004979][T12096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.119816][T12171] netlink: 'syz.0.1764': attribute type 21 has an invalid length. [ 344.131267][T12171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1764'. [ 344.167490][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1764'. [ 344.177326][T12172] netlink: 'syz.0.1764': attribute type 21 has an invalid length. [ 344.192676][T12172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1764'. [ 344.208288][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1764'. [ 344.225040][T12169] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 344.269098][ T5245] Bluetooth: hci4: command tx timeout [ 344.297210][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1765'. [ 344.379385][T12096] hsr_slave_0: entered promiscuous mode [ 344.387330][T12096] hsr_slave_1: entered promiscuous mode [ 344.389257][T12183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.403593][T12096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.417633][T12096] Cannot create hsr debugfs directory [ 344.547565][ T9742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.693501][ T9742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.758949][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1768'. [ 344.768105][T12190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1768'. [ 344.806820][ T9742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.864709][T12190] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1768'. [ 344.897353][T12190] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1768'. [ 344.908893][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1768'. [ 344.965495][ T9742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.016791][T12156] chnl_net:caif_netlink_parms(): no params data found [ 345.154720][ T5245] Bluetooth: hci2: command tx timeout [ 345.217870][T12203] FAULT_INJECTION: forcing a failure. [ 345.217870][T12203] name failslab, interval 1, probability 0, space 0, times 0 [ 345.230626][T12203] CPU: 1 UID: 0 PID: 12203 Comm: syz.4.1771 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 345.241416][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.251481][T12203] Call Trace: [ 345.254791][T12203] [ 345.257740][T12203] dump_stack_lvl+0x241/0x360 [ 345.262462][T12203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.267709][T12203] ? __pfx__printk+0x10/0x10 [ 345.272356][T12203] should_fail_ex+0x3b0/0x4e0 [ 345.277166][T12203] ? radix_tree_node_alloc+0x8b/0x3c0 [ 345.282579][T12203] should_failslab+0xac/0x100 [ 345.287299][T12203] ? radix_tree_node_alloc+0x8b/0x3c0 [ 345.292717][T12203] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 345.298131][T12203] radix_tree_node_alloc+0x8b/0x3c0 [ 345.303412][T12203] idr_get_free+0x296/0xab0 [ 345.307956][T12203] idr_alloc_u32+0x195/0x330 [ 345.312585][T12203] ? __pfx_idr_alloc_u32+0x10/0x10 [ 345.317730][T12203] ? l2tp_session_register+0x109/0xf30 [ 345.323234][T12203] l2tp_session_register+0x1d4/0xf30 [ 345.328897][T12203] ? lockdep_init_map_type+0xa1/0x910 [ 345.334301][T12203] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 345.340144][T12203] ? __pfx_l2tp_session_register+0x10/0x10 [ 345.345982][T12203] ? __raw_spin_lock_init+0x45/0x100 [ 345.351309][T12203] pppol2tp_session_create+0x139/0x1b0 [ 345.356810][T12203] l2tp_nl_cmd_session_create+0x7df/0xe30 [ 345.362579][T12203] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 345.368855][T12203] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 345.375240][T12203] genl_rcv_msg+0xb14/0xec0 [ 345.379781][T12203] ? mark_lock+0x9a/0x350 [ 345.384150][T12203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.389239][T12203] ? __pfx_lock_acquire+0x10/0x10 [ 345.394291][T12203] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 345.400569][T12203] ? __pfx___might_resched+0x10/0x10 [ 345.405894][T12203] netlink_rcv_skb+0x1e3/0x430 [ 345.410690][T12203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.415755][T12203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.421078][T12203] ? __netlink_deliver_tap+0x77e/0x7c0 [ 345.426601][T12203] genl_rcv+0x28/0x40 [ 345.430608][T12203] netlink_unicast+0x7f6/0x990 [ 345.435411][T12203] ? __pfx_netlink_unicast+0x10/0x10 [ 345.440724][T12203] ? __virt_addr_valid+0x183/0x530 [ 345.445864][T12203] ? __check_object_size+0x49c/0x900 [ 345.451186][T12203] ? bpf_lsm_netlink_send+0x9/0x10 [ 345.456330][T12203] netlink_sendmsg+0x8e4/0xcb0 [ 345.461135][T12203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.466456][T12203] ? __import_iovec+0x536/0x820 [ 345.471335][T12203] ? aa_sock_msg_perm+0x91/0x160 [ 345.476301][T12203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.481615][T12203] ? security_socket_sendmsg+0x87/0xb0 [ 345.487101][T12203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.492416][T12203] __sock_sendmsg+0x221/0x270 [ 345.497121][T12203] ____sys_sendmsg+0x525/0x7d0 [ 345.501921][T12203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.507250][T12203] __sys_sendmsg+0x2b0/0x3a0 [ 345.511874][T12203] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.517068][T12203] ? vfs_write+0x7c4/0xc90 [ 345.521574][T12203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.527939][T12203] ? do_syscall_64+0x100/0x230 [ 345.532742][T12203] ? do_syscall_64+0xb6/0x230 [ 345.537459][T12203] do_syscall_64+0xf3/0x230 [ 345.542014][T12203] ? clear_bhb_loop+0x35/0x90 [ 345.546723][T12203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.552645][T12203] RIP: 0033:0x7fc726b7def9 [ 345.557087][T12203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.576721][T12203] RSP: 002b:00007fc727a58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.585170][T12203] RAX: ffffffffffffffda RBX: 00007fc726d35f80 RCX: 00007fc726b7def9 [ 345.593174][T12203] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000005 [ 345.601171][T12203] RBP: 00007fc727a58090 R08: 0000000000000000 R09: 0000000000000000 [ 345.609255][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.617251][T12203] R13: 0000000000000000 R14: 00007fc726d35f80 R15: 00007ffc59ce7d38 [ 345.625268][T12203] [ 345.658083][T12211] FAULT_INJECTION: forcing a failure. [ 345.658083][T12211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.702514][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.0.1774 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 345.713331][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.723411][T12211] Call Trace: [ 345.726706][T12211] [ 345.729660][T12211] dump_stack_lvl+0x241/0x360 [ 345.734353][T12211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.739557][T12211] ? __pfx__printk+0x10/0x10 [ 345.744170][T12211] ? __pfx_lock_release+0x10/0x10 [ 345.749219][T12211] should_fail_ex+0x3b0/0x4e0 [ 345.753933][T12211] _copy_from_user+0x2f/0xe0 [ 345.758541][T12211] copy_msghdr_from_user+0xae/0x680 [ 345.763772][T12211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 345.769618][T12211] __sys_sendmsg+0x23d/0x3a0 [ 345.774240][T12211] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.779390][T12211] ? vfs_write+0x7c4/0xc90 [ 345.783880][T12211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.790256][T12211] ? do_syscall_64+0x100/0x230 [ 345.795051][T12211] ? do_syscall_64+0xb6/0x230 [ 345.799771][T12211] do_syscall_64+0xf3/0x230 [ 345.804309][T12211] ? clear_bhb_loop+0x35/0x90 [ 345.809025][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.814972][T12211] RIP: 0033:0x7f4f6ab7def9 [ 345.819406][T12211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.839034][T12211] RSP: 002b:00007f4f6b955038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.847498][T12211] RAX: ffffffffffffffda RBX: 00007f4f6ad35f80 RCX: 00007f4f6ab7def9 [ 345.855487][T12211] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000008 [ 345.863469][T12211] RBP: 00007f4f6b955090 R08: 0000000000000000 R09: 0000000000000000 [ 345.871464][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.879472][T12211] R13: 0000000000000000 R14: 00007f4f6ad35f80 R15: 00007ffe05eb3db8 [ 345.887489][T12211] [ 345.953231][ T9742] bridge_slave_1: left allmulticast mode [ 345.967335][ T9742] bridge_slave_1: left promiscuous mode [ 345.974593][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.984770][ T9742] bridge_slave_0: left allmulticast mode [ 345.991104][ T9742] bridge_slave_0: left promiscuous mode [ 345.997016][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.358744][ T5245] Bluetooth: hci4: command tx timeout [ 346.468680][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.484850][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.496025][ T9742] bond0 (unregistering): Released all slaves [ 346.523684][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 346.576979][T12156] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.609780][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.621597][T12156] bridge_slave_0: entered allmulticast mode [ 346.630549][T12156] bridge_slave_0: entered promiscuous mode [ 346.709172][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.721656][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.737793][T12156] bridge_slave_1: entered allmulticast mode [ 346.746168][T12156] bridge_slave_1: entered promiscuous mode [ 346.974324][T12156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.033259][T12156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.096957][T12241] IPVS: persistence engine module ip_vs_pe_@ not found [ 347.237445][ T5245] Bluetooth: hci2: command tx timeout [ 347.369346][T12253] FAULT_INJECTION: forcing a failure. [ 347.369346][T12253] name failslab, interval 1, probability 0, space 0, times 0 [ 347.405063][T12253] CPU: 1 UID: 0 PID: 12253 Comm: syz.0.1786 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 347.416073][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 347.426155][T12253] Call Trace: [ 347.429450][T12253] [ 347.432391][T12253] dump_stack_lvl+0x241/0x360 [ 347.437111][T12253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.442382][T12253] ? __pfx__printk+0x10/0x10 [ 347.447015][T12253] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 347.453024][T12253] ? __pfx___might_resched+0x10/0x10 [ 347.458350][T12253] should_fail_ex+0x3b0/0x4e0 [ 347.463064][T12253] should_failslab+0xac/0x100 [ 347.467776][T12253] ? __alloc_skb+0x1c3/0x440 [ 347.472401][T12253] kmem_cache_alloc_node_noprof+0x71/0x320 [ 347.478331][T12253] __alloc_skb+0x1c3/0x440 [ 347.482781][T12253] ? l2tp_v3_session_get+0x97/0x9b0 [ 347.488019][T12253] ? __pfx___alloc_skb+0x10/0x10 [ 347.493009][T12253] ? __pfx_l2tp_v3_session_get+0x10/0x10 [ 347.498678][T12253] l2tp_session_notify+0x2e/0x140 [ 347.503734][T12253] l2tp_nl_cmd_session_create+0x869/0xe30 [ 347.509501][T12253] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 347.515896][T12253] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 347.522280][T12253] genl_rcv_msg+0xb14/0xec0 [ 347.526940][T12253] ? mark_lock+0x9a/0x350 [ 347.531441][T12253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.536549][T12253] ? __pfx_lock_acquire+0x10/0x10 [ 347.541626][T12253] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 347.547903][T12253] ? __pfx___might_resched+0x10/0x10 [ 347.553236][T12253] netlink_rcv_skb+0x1e3/0x430 [ 347.558023][T12253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.560202][T12156] team0: Port device team_slave_0 added [ 347.563069][T12253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.563109][T12253] ? __netlink_deliver_tap+0x77e/0x7c0 [ 347.579783][T12253] genl_rcv+0x28/0x40 [ 347.583800][T12253] netlink_unicast+0x7f6/0x990 [ 347.588607][T12253] ? __pfx_netlink_unicast+0x10/0x10 [ 347.594108][T12253] ? __virt_addr_valid+0x183/0x530 [ 347.599251][T12253] ? __check_object_size+0x49c/0x900 [ 347.604586][T12253] ? bpf_lsm_netlink_send+0x9/0x10 [ 347.609760][T12253] netlink_sendmsg+0x8e4/0xcb0 [ 347.614577][T12253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.619900][T12253] ? __import_iovec+0x536/0x820 [ 347.624775][T12253] ? aa_sock_msg_perm+0x91/0x160 [ 347.629742][T12253] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 347.635059][T12253] ? security_socket_sendmsg+0x87/0xb0 [ 347.640554][T12253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.645870][T12253] __sock_sendmsg+0x221/0x270 [ 347.650584][T12253] ____sys_sendmsg+0x525/0x7d0 [ 347.655393][T12253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.660804][T12253] __sys_sendmsg+0x2b0/0x3a0 [ 347.665523][T12253] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.670654][T12253] ? vfs_write+0x7c4/0xc90 [ 347.675147][T12253] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.681504][T12253] ? do_syscall_64+0x100/0x230 [ 347.686477][T12253] ? do_syscall_64+0xb6/0x230 [ 347.691205][T12253] do_syscall_64+0xf3/0x230 [ 347.695949][T12253] ? clear_bhb_loop+0x35/0x90 [ 347.700688][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.706626][T12253] RIP: 0033:0x7f4f6ab7def9 [ 347.711070][T12253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.730706][T12253] RSP: 002b:00007f4f6b955038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.739158][T12253] RAX: ffffffffffffffda RBX: 00007f4f6ad35f80 RCX: 00007f4f6ab7def9 [ 347.747162][T12253] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000005 [ 347.755179][T12253] RBP: 00007f4f6b955090 R08: 0000000000000000 R09: 0000000000000000 [ 347.763366][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.771377][T12253] R13: 0000000000000000 R14: 00007f4f6ad35f80 R15: 00007ffe05eb3db8 [ 347.779425][T12253] [ 347.815369][ T9742] hsr_slave_0: left promiscuous mode [ 347.827532][ T9742] hsr_slave_1: left promiscuous mode [ 347.848937][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.864185][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.875141][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.882906][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.914767][ T9742] veth1_macvtap: left promiscuous mode [ 347.920780][ T9742] veth0_macvtap: left promiscuous mode [ 347.926730][ T9742] veth1_vlan: left promiscuous mode [ 347.932510][ T9742] veth0_vlan: left promiscuous mode [ 348.438714][ T5245] Bluetooth: hci4: command tx timeout [ 348.552566][ T9742] team0 (unregistering): Port device team_slave_1 removed [ 348.613994][ T9742] team0 (unregistering): Port device team_slave_0 removed [ 349.182536][T12256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.190184][T12256] IPv6: NLM_F_CREATE should be set when creating new route [ 349.197429][T12256] IPv6: NLM_F_CREATE should be set when creating new route [ 349.210799][T12156] team0: Port device team_slave_1 added [ 349.239567][T12096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.261885][T12096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.347833][T12096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.365648][T12265] FAULT_INJECTION: forcing a failure. [ 349.365648][T12265] name failslab, interval 1, probability 0, space 0, times 0 [ 349.379817][T12265] CPU: 1 UID: 0 PID: 12265 Comm: syz.2.1789 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 349.390632][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 349.400711][T12265] Call Trace: [ 349.404104][T12265] [ 349.407133][T12265] dump_stack_lvl+0x241/0x360 [ 349.411845][T12265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.417074][T12265] ? __pfx__printk+0x10/0x10 [ 349.421702][T12265] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 349.427711][T12265] ? __pfx___might_resched+0x10/0x10 [ 349.433035][T12265] should_fail_ex+0x3b0/0x4e0 [ 349.437755][T12265] should_failslab+0xac/0x100 [ 349.442476][T12265] ? __alloc_skb+0x1c3/0x440 [ 349.447268][T12265] kmem_cache_alloc_node_noprof+0x71/0x320 [ 349.453099][T12265] __alloc_skb+0x1c3/0x440 [ 349.457518][T12265] ? __pfx___alloc_skb+0x10/0x10 [ 349.462457][T12265] ? netlink_ack_tlv_len+0x6e/0x200 [ 349.467738][T12265] netlink_ack+0x13f/0xa30 [ 349.472143][T12265] ? __pfx_lock_acquire+0x10/0x10 [ 349.477160][T12265] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 349.483312][T12265] ? __pfx_nl80211_post_doit+0x10/0x10 [ 349.488793][T12265] netlink_rcv_skb+0x262/0x430 [ 349.493593][T12265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.498645][T12265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.503972][T12265] ? __netlink_deliver_tap+0x77e/0x7c0 [ 349.509455][T12265] genl_rcv+0x28/0x40 [ 349.513441][T12265] netlink_unicast+0x7f6/0x990 [ 349.518209][T12265] ? __pfx_netlink_unicast+0x10/0x10 [ 349.523497][T12265] ? __virt_addr_valid+0x183/0x530 [ 349.529472][T12265] ? __check_object_size+0x49c/0x900 [ 349.534778][T12265] ? bpf_lsm_netlink_send+0x9/0x10 [ 349.539889][T12265] netlink_sendmsg+0x8e4/0xcb0 [ 349.544670][T12265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.549949][T12265] ? __import_iovec+0x536/0x820 [ 349.554801][T12265] ? aa_sock_msg_perm+0x91/0x160 [ 349.559734][T12265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.565015][T12265] ? security_socket_sendmsg+0x87/0xb0 [ 349.570471][T12265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.575749][T12265] __sock_sendmsg+0x221/0x270 [ 349.580425][T12265] ____sys_sendmsg+0x525/0x7d0 [ 349.585998][T12265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.591318][T12265] __sys_sendmsg+0x2b0/0x3a0 [ 349.595917][T12265] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.601021][T12265] ? vfs_write+0x7c4/0xc90 [ 349.605517][T12265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.611870][T12265] ? do_syscall_64+0x100/0x230 [ 349.616637][T12265] ? do_syscall_64+0xb6/0x230 [ 349.621307][T12265] do_syscall_64+0xf3/0x230 [ 349.625811][T12265] ? clear_bhb_loop+0x35/0x90 [ 349.630501][T12265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.636393][T12265] RIP: 0033:0x7fafbbb7def9 [ 349.640821][T12265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.660432][T12265] RSP: 002b:00007fafbb9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.668932][T12265] RAX: ffffffffffffffda RBX: 00007fafbbd35f80 RCX: 00007fafbbb7def9 [ 349.676894][T12265] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 349.684863][T12265] RBP: 00007fafbb9f8090 R08: 0000000000000000 R09: 0000000000000000 [ 349.692834][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.700800][T12265] R13: 0000000000000000 R14: 00007fafbbd35f80 R15: 00007fffbb714d78 [ 349.708973][T12265] [ 349.733932][T12156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.749141][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.782896][T12156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.817106][T12096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.175242][T12156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.182647][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.209594][T12156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.343733][T12156] hsr_slave_0: entered promiscuous mode [ 350.364412][T12156] hsr_slave_1: entered promiscuous mode [ 350.374597][T12156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.390004][T12156] Cannot create hsr debugfs directory [ 350.508584][ T5245] Bluetooth: hci4: command tx timeout [ 350.977065][T12096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.116548][T12096] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.167235][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.174474][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.204637][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.211856][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.363466][T12096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.517018][T12156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.571315][T12156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.593008][T12156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.623002][T12156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.727190][T12310] IPVS: persistence engine module ip_vs_pe_@ not found [ 351.789542][T12096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.927676][T12096] veth0_vlan: entered promiscuous mode [ 351.973999][T12156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.027327][T12096] veth1_vlan: entered promiscuous mode [ 352.128253][T12156] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.165486][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.172727][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.210895][T12096] veth0_macvtap: entered promiscuous mode [ 352.300665][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.307843][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.166908][T12096] veth1_macvtap: entered promiscuous mode [ 362.255650][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.298487][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.328640][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.368620][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.408670][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.438533][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.471241][T12096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.502182][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.568644][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.598598][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.649556][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.686050][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.725838][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.756718][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.777030][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.797304][T12096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.846413][T12337] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 362.914059][T12096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.994622][T12096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.019522][T12096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.028261][T12096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.147076][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.157966][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.177255][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.190722][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.191178][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.209475][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 363.211104][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.228197][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.228546][ T5244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.246208][ T5244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.287481][ T5244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 363.309284][ T5244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.331669][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.363723][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.368012][ T9742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.394445][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.415998][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.435276][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 363.455078][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.553165][ T9742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.736188][ T9742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.812566][T12156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.851787][ T9742] bond0: (slave netdevsim0): Releasing backup interface [ 363.866829][ T9742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.932253][ T5745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.957624][ T5745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.114207][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.133305][ T9742] bridge_slave_1: left allmulticast mode [ 364.139255][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.146854][ T9742] bridge_slave_1: left promiscuous mode [ 364.152882][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.162790][ T9742] bridge_slave_0: left allmulticast mode [ 364.169047][ T9742] bridge_slave_0: left promiscuous mode [ 364.174713][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.258899][ T9742] infiniband syz1: set down [ 364.477059][ T9742] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 364.515473][ T9742] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 364.617213][ T9742] team0: Port device bridge2 removed [ 364.806273][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.817792][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.828945][ T9742] bond0 (unregistering): Released all slaves [ 364.844324][ T9742] bond1 (unregistering): Released all slaves [ 364.872273][ T5286] infiniband syz1: ib_query_port failed (-19) [ 364.955702][T12156] veth0_vlan: entered promiscuous mode [ 365.066880][ T5745] smc: removing ib device syz1 [ 365.144653][T12156] veth1_vlan: entered promiscuous mode [ 365.309013][ T5249] Bluetooth: hci3: command tx timeout [ 365.394225][ T5249] Bluetooth: hci5: command tx timeout [ 365.518789][T12343] chnl_net:caif_netlink_parms(): no params data found [ 365.570074][ T5249] Bluetooth: hci0: command tx timeout [ 365.817546][T12156] veth0_macvtap: entered promiscuous mode [ 366.322934][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.332757][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.358857][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.367735][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.384224][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.399829][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.507452][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.540002][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.547220][T12343] bridge_slave_0: entered allmulticast mode [ 366.573225][T12343] bridge_slave_0: entered promiscuous mode [ 366.584923][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.604769][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.612522][T12343] bridge_slave_1: entered allmulticast mode [ 366.644253][T12343] bridge_slave_1: entered promiscuous mode [ 366.721807][T12156] veth1_macvtap: entered promiscuous mode [ 367.063644][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.089906][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.185886][T12343] team0: Port device team_slave_0 added [ 367.201149][T12343] team0: Port device team_slave_1 added [ 367.227020][T12344] chnl_net:caif_netlink_parms(): no params data found [ 367.263302][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.274016][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.285155][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.295774][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.307146][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.317860][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.329741][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.340454][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.361320][T12156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.389859][ T5249] Bluetooth: hci3: command tx timeout [ 367.398868][T12342] chnl_net:caif_netlink_parms(): no params data found [ 367.423015][ T9742] tipc: Disabling bearer [ 367.433940][ T9742] tipc: Left network mode [ 367.437844][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.450158][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.460187][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.471211][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.481415][ T5249] Bluetooth: hci5: command tx timeout [ 367.486621][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.499167][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.510465][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.521256][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.531293][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.541893][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.558069][T12156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.580774][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.587843][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.615706][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.629287][ T5249] Bluetooth: hci0: command tx timeout [ 367.683149][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.696206][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.725536][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.782628][T12156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.792948][T12156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.802874][T12156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.813307][T12156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.910927][T12343] hsr_slave_0: entered promiscuous mode [ 367.919487][T12343] hsr_slave_1: entered promiscuous mode [ 367.925670][T12343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.933904][T12343] Cannot create hsr debugfs directory [ 368.051397][T12342] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.064094][T12342] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.071801][T12342] bridge_slave_0: entered allmulticast mode [ 368.079616][T12342] bridge_slave_0: entered promiscuous mode [ 368.142126][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.149919][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.158384][T12344] bridge_slave_0: entered allmulticast mode [ 368.165863][T12344] bridge_slave_0: entered promiscuous mode [ 368.176321][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.183523][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.191459][T12344] bridge_slave_1: entered allmulticast mode [ 368.199181][T12344] bridge_slave_1: entered promiscuous mode [ 368.207317][T12342] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.214877][T12342] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.223835][T12342] bridge_slave_1: entered allmulticast mode [ 368.231366][T12342] bridge_slave_1: entered promiscuous mode [ 368.314300][T12342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.354925][ T9742] hsr_slave_0: left promiscuous mode [ 368.363769][ T9742] hsr_slave_1: left promiscuous mode [ 368.370377][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.377819][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.385753][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.394217][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.414575][ T9742] veth1_macvtap: left promiscuous mode [ 368.420952][ T9742] veth0_macvtap: left promiscuous mode [ 368.427549][ T9742] veth1_vlan: left promiscuous mode [ 368.433529][ T9742] veth0_vlan: left promiscuous mode [ 368.510183][ T5249] Bluetooth: hci1: command tx timeout [ 369.052687][ T9742] team0 (unregistering): Port device team_slave_1 removed [ 369.107946][ T9742] team0 (unregistering): Port device team_slave_0 removed [ 369.470926][ T5249] Bluetooth: hci3: command tx timeout [ 369.549186][ T5249] Bluetooth: hci5: command tx timeout [ 369.567040][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.580138][T12342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.663176][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.708677][ T5249] Bluetooth: hci0: command tx timeout [ 369.760926][T12342] team0: Port device team_slave_0 added [ 369.844777][T12344] team0: Port device team_slave_0 added [ 369.854709][T12342] team0: Port device team_slave_1 added [ 369.859920][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.868157][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.912056][T12344] team0: Port device team_slave_1 added [ 369.967180][T12342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.984599][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.011354][T12342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.042878][T12362] chnl_net:caif_netlink_parms(): no params data found [ 370.075347][T12342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.082770][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.109120][T12342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.147110][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.185071][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.212056][T12343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.252548][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.263923][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.301075][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.373626][T12343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.421539][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.435195][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.466384][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.536549][T12343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.589194][ T5249] Bluetooth: hci1: command tx timeout [ 370.627072][T12342] hsr_slave_0: entered promiscuous mode [ 370.634487][T12342] hsr_slave_1: entered promiscuous mode [ 370.640803][T12342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.648380][T12342] Cannot create hsr debugfs directory [ 370.676346][T12343] bond0: (slave netdevsim0): Releasing backup interface [ 370.687850][T12343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.714677][T12362] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.725065][T12362] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.733593][T12362] bridge_slave_0: entered allmulticast mode [ 370.742800][T12362] bridge_slave_0: entered promiscuous mode [ 370.752428][T12362] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.759858][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.767118][T12362] bridge_slave_1: entered allmulticast mode [ 370.774878][T12362] bridge_slave_1: entered promiscuous mode [ 370.873213][T12344] hsr_slave_0: entered promiscuous mode [ 370.906973][T12344] hsr_slave_1: entered promiscuous mode [ 370.914093][T12344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.922042][T12344] Cannot create hsr debugfs directory [ 370.934666][T12362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.962600][T12362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.167724][ T9742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.220407][T12362] team0: Port device team_slave_0 added [ 371.265618][T12362] team0: Port device team_slave_1 added [ 371.367501][ T9742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.409474][T12362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.416459][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.443035][T12362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.456948][T12362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.464214][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.490629][T12362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.513598][T12343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.559116][ T5249] Bluetooth: hci3: command tx timeout [ 371.568145][ T9742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.592501][T12343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.607427][T12343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.631335][ T5249] Bluetooth: hci5: command tx timeout [ 371.680940][ T9742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.704596][T12343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.774572][T12362] hsr_slave_0: entered promiscuous mode [ 371.782581][T12362] hsr_slave_1: entered promiscuous mode [ 371.790693][T12362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.798243][T12362] Cannot create hsr debugfs directory [ 371.803917][ T5249] Bluetooth: hci0: command tx timeout [ 372.051128][ T9742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.147777][T12344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.159368][T12344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.197370][ T9742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.260753][T12344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.272365][T12344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.325808][ T9742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.374841][T12344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.385610][T12344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.446257][ T9742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.488949][T12344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.500725][T12344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.541535][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.582437][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.641611][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.648794][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.668894][ T5249] Bluetooth: hci1: command tx timeout [ 372.782480][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.789693][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.840155][T12344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.869247][ T9742] bridge_slave_1: left allmulticast mode [ 372.874956][ T9742] bridge_slave_1: left promiscuous mode [ 372.891843][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.910595][ T9742] bridge_slave_0: left allmulticast mode [ 372.916293][ T9742] bridge_slave_0: left promiscuous mode [ 372.940361][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.948777][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.957945][ T9742] bridge_slave_1: left allmulticast mode [ 372.960046][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.970851][ T9742] bridge_slave_1: left promiscuous mode [ 372.973205][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.976622][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.984805][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.007077][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 373.016671][ T9742] bridge_slave_0: left allmulticast mode [ 373.023340][ T9742] bridge_slave_0: left promiscuous mode [ 373.028856][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.029197][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.055095][ T9742] bridge_slave_1: left allmulticast mode [ 373.061031][ T9742] bridge_slave_1: left promiscuous mode [ 373.066732][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.076085][ T9742] bridge_slave_0: left allmulticast mode [ 373.084084][ T9742] bridge_slave_0: left promiscuous mode [ 373.090748][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.101411][ T9742] bridge_slave_1: left allmulticast mode [ 373.107097][ T9742] bridge_slave_1: left promiscuous mode [ 373.112987][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.122464][ T9742] bridge_slave_0: left allmulticast mode [ 373.128146][ T9742] bridge_slave_0: left promiscuous mode [ 373.134520][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.378171][ T9742] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 374.750280][ T5244] Bluetooth: hci1: command tx timeout [ 374.828221][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.847780][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.862199][ T9742] bond0 (unregistering): Released all slaves [ 375.033978][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.045516][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.056489][ T9742] bond0 (unregistering): Released all slaves [ 375.077736][ T5244] Bluetooth: hci2: command tx timeout [ 375.215922][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.226786][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.237591][ T9742] bond0 (unregistering): Released all slaves [ 375.387249][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.405986][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.416666][ T9742] bond0 (unregistering): Released all slaves [ 375.437033][T12344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.450261][T12344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.500941][T12344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.664727][ T9742] ɶƣ0GC¦: left promiscuous mode [ 375.714258][T12342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.742435][T12342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.773685][T12342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.906144][ T9742] ------------[ cut here ]------------ [ 375.911912][ T9742] WARNING: CPU: 0 PID: 9742 at net/l2tp/l2tp_core.c:1879 l2tp_exit_net+0x150/0x170 [ 375.915944][T12343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.921971][ T9742] Modules linked in: [ 375.933556][T12343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.936219][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: kworker/u8:28 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 375.958249][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 375.968500][ T9742] Workqueue: netns cleanup_net [ 375.973301][ T9742] RIP: 0010:l2tp_exit_net+0x150/0x170 [ 375.979602][ T9742] Code: 5e 41 5f e9 72 e1 cf 00 e8 5d 90 b0 f6 eb 05 e8 56 90 b0 f6 90 0f 0b 90 e9 3b ff ff ff e8 48 90 b0 f6 eb 05 e8 41 90 b0 f6 90 <0f> 0b 90 e9 7a ff ff ff e8 33 90 b0 f6 eb 05 e8 2c 90 b0 f6 90 0f [ 375.999327][ T9742] RSP: 0018:ffffc900044afa98 EFLAGS: 00010293 [ 376.006542][ T9742] RAX: ffffffff8ae2fc68 RBX: ffff888073c00978 RCX: ffff888024a08000 [ 376.009879][T12342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.015589][ T9742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 376.029635][ T9742] RBP: ffffc900044afbb0 R08: ffffffff8bb2de16 R09: 1ffffffff2031015 [ 376.038663][ T9742] R10: dffffc0000000000 R11: fffffbfff2031016 R12: dffffc0000000000 [ 376.046672][ T9742] R13: 1ffffffff1fd274c R14: ffff888073c00930 R15: ffff888073c00800 [ 376.055090][ T9742] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 376.064125][ T9742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.070800][ T9742] CR2: 00007f78bd6bd8b0 CR3: 0000000071b6a000 CR4: 00000000003506f0 [ 376.079075][ T9742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.087066][ T9742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.095166][ T9742] Call Trace: [ 376.098525][ T9742] [ 376.101480][ T9742] ? __warn+0x163/0x4e0 [ 376.106818][ T9742] ? l2tp_exit_net+0x150/0x170 [ 376.113031][ T9742] ? report_bug+0x2b3/0x500 [ 376.117570][ T9742] ? l2tp_exit_net+0x150/0x170 [ 376.122933][ T9742] ? handle_bug+0x3e/0x70 [ 376.127295][ T9742] ? exc_invalid_op+0x1a/0x50 [ 376.132059][ T9742] ? asm_exc_invalid_op+0x1a/0x20 [ 376.137115][ T9742] ? idr_destroy+0x56/0x290 [ 376.141925][ T9742] ? l2tp_exit_net+0x148/0x170 [ 376.146739][ T9742] ? l2tp_exit_net+0x150/0x170 [ 376.151641][ T9742] ? l2tp_exit_net+0x148/0x170 [ 376.156427][ T9742] cleanup_net+0x802/0xcc0 [ 376.160962][ T9742] ? __pfx_cleanup_net+0x10/0x10 [ 376.165946][ T9742] ? process_scheduled_works+0x945/0x1830 [ 376.172021][ T9742] process_scheduled_works+0xa2c/0x1830 [ 376.177983][ T9742] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.184074][ T9742] ? assign_work+0x364/0x3d0 [ 376.188902][ T9742] worker_thread+0x86d/0xd10 [ 376.193553][ T9742] ? __kthread_parkme+0x169/0x1d0 [ 376.198908][ T9742] ? __pfx_worker_thread+0x10/0x10 [ 376.204056][ T9742] kthread+0x2f0/0x390 [ 376.209128][ T9742] ? __pfx_worker_thread+0x10/0x10 [ 376.214275][ T9742] ? __pfx_kthread+0x10/0x10 [ 376.219644][ T9742] ret_from_fork+0x4b/0x80 [ 376.224088][ T9742] ? __pfx_kthread+0x10/0x10 [ 376.229002][ T9742] ret_from_fork_asm+0x1a/0x30 [ 376.233805][ T9742] [ 376.236833][ T9742] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 376.244108][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: kworker/u8:28 Not tainted 6.11.0-rc6-syzkaller-01235-ga9b1fab3b69f #0 [ 376.255035][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 376.265311][ T9742] Workqueue: netns cleanup_net [ 376.270090][ T9742] Call Trace: [ 376.273378][ T9742] [ 376.276316][ T9742] dump_stack_lvl+0x241/0x360 [ 376.281013][ T9742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.286296][ T9742] ? __pfx__printk+0x10/0x10 [ 376.290879][ T9742] ? _printk+0xd5/0x120 [ 376.295034][ T9742] ? vscnprintf+0x5d/0x90 [ 376.299358][ T9742] panic+0x349/0x860 [ 376.303244][ T9742] ? __warn+0x172/0x4e0 [ 376.307390][ T9742] ? __pfx_panic+0x10/0x10 [ 376.311798][ T9742] ? show_trace_log_lvl+0x4e6/0x520 [ 376.317003][ T9742] ? ret_from_fork_asm+0x1a/0x30 [ 376.321951][ T9742] __warn+0x346/0x4e0 [ 376.327315][ T9742] ? l2tp_exit_net+0x150/0x170 [ 376.332074][ T9742] report_bug+0x2b3/0x500 [ 376.336392][ T9742] ? l2tp_exit_net+0x150/0x170 [ 376.341151][ T9742] handle_bug+0x3e/0x70 [ 376.345296][ T9742] exc_invalid_op+0x1a/0x50 [ 376.349802][ T9742] asm_exc_invalid_op+0x1a/0x20 [ 376.354667][ T9742] RIP: 0010:l2tp_exit_net+0x150/0x170 [ 376.360032][ T9742] Code: 5e 41 5f e9 72 e1 cf 00 e8 5d 90 b0 f6 eb 05 e8 56 90 b0 f6 90 0f 0b 90 e9 3b ff ff ff e8 48 90 b0 f6 eb 05 e8 41 90 b0 f6 90 <0f> 0b 90 e9 7a ff ff ff e8 33 90 b0 f6 eb 05 e8 2c 90 b0 f6 90 0f [ 376.379649][ T9742] RSP: 0018:ffffc900044afa98 EFLAGS: 00010293 [ 376.385709][ T9742] RAX: ffffffff8ae2fc68 RBX: ffff888073c00978 RCX: ffff888024a08000 [ 376.393678][ T9742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 376.401655][ T9742] RBP: ffffc900044afbb0 R08: ffffffff8bb2de16 R09: 1ffffffff2031015 [ 376.409639][ T9742] R10: dffffc0000000000 R11: fffffbfff2031016 R12: dffffc0000000000 [ 376.417614][ T9742] R13: 1ffffffff1fd274c R14: ffff888073c00930 R15: ffff888073c00800 [ 376.425609][ T9742] ? idr_destroy+0x56/0x290 [ 376.430148][ T9742] ? l2tp_exit_net+0x148/0x170 [ 376.434915][ T9742] ? l2tp_exit_net+0x148/0x170 [ 376.439672][ T9742] cleanup_net+0x802/0xcc0 [ 376.444086][ T9742] ? __pfx_cleanup_net+0x10/0x10 [ 376.449022][ T9742] ? process_scheduled_works+0x945/0x1830 [ 376.454737][ T9742] process_scheduled_works+0xa2c/0x1830 [ 376.460321][ T9742] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.466508][ T9742] ? assign_work+0x364/0x3d0 [ 376.471100][ T9742] worker_thread+0x86d/0xd10 [ 376.475698][ T9742] ? __kthread_parkme+0x169/0x1d0 [ 376.480725][ T9742] ? __pfx_worker_thread+0x10/0x10 [ 376.485836][ T9742] kthread+0x2f0/0x390 [ 376.489900][ T9742] ? __pfx_worker_thread+0x10/0x10 [ 376.495007][ T9742] ? __pfx_kthread+0x10/0x10 [ 376.499690][ T9742] ret_from_fork+0x4b/0x80 [ 376.504278][ T9742] ? __pfx_kthread+0x10/0x10 [ 376.508863][ T9742] ret_from_fork_asm+0x1a/0x30 [ 376.513634][ T9742] [ 376.516751][ T9742] Kernel Offset: disabled [ 376.521134][ T9742] Rebooting in 86400 seconds..