last executing test programs: 2.900858592s ago: executing program 2 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000180), &(0x7f00000003c0)='%ps \x00'}, 0x20) 2.600494554s ago: executing program 2 (id=257): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, &(0x7f00000000c0)) 2.451394423s ago: executing program 0 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000f0085000000820000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 2.378962716s ago: executing program 2 (id=260): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003027a2e"], 0x44}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) 2.204886743s ago: executing program 0 (id=263): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0x5}, 0x8) 2.174136193s ago: executing program 2 (id=264): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00018008"], 0x34}}, 0x0) 1.899799804s ago: executing program 1 (id=269): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) 1.895298348s ago: executing program 0 (id=270): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00$'], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.720778926s ago: executing program 4 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00\''], 0x50}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 1.709436165s ago: executing program 1 (id=274): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780), 0x10, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000), 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000080)=""/27, &(0x7f0000000240)=0x1b) 1.621156611s ago: executing program 0 (id=275): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x890c, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 1.545475706s ago: executing program 1 (id=277): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x4) 1.526578164s ago: executing program 4 (id=278): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1.388688844s ago: executing program 4 (id=280): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4}, 0x90) unshare(0x400) poll(&(0x7f0000000040), 0x55, 0x0) 1.372732525s ago: executing program 1 (id=281): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.26373756s ago: executing program 0 (id=282): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.263428558s ago: executing program 3 (id=283): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) 1.134405711s ago: executing program 0 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}], 0x1) 1.133498465s ago: executing program 2 (id=285): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}, 0x219e4}], 0x1, 0x2000, 0x0) 1.132697448s ago: executing program 4 (id=286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000340)='9', 0x1}], 0x1) 1.097243753s ago: executing program 3 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x6}, 0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x8, 0x50, &(0x7f0000000140)="f9ad48cc420029fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 962.470898ms ago: executing program 2 (id=288): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 863.372283ms ago: executing program 1 (id=289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00\''], 0x50}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 805.732428ms ago: executing program 1 (id=290): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f00000016c0)=ANY=[], 0x210}}], 0x2, 0xc8000) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x45, 0x0) 640.83636ms ago: executing program 3 (id=291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xfdfffdfd, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000240)=0x3ffffffc, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/25, 0x19}}], 0x1, 0x12002, 0x0) 313.960218ms ago: executing program 3 (id=292): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001380)={'#! ', '', [], 0xa, "7749905d65b5692f2475666e4db6188c5d2340455c957241f0f2de9807d65c2e32a9048cb340ffc25381f7955b91ace7605b1fdea205cd80afbd8b6e6b"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x85, 0x0, &(0x7f0000000040)) 235.702665ms ago: executing program 3 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611450000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) unshare(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x2, 0x8, 0x8}, 0x48) 131.77724ms ago: executing program 4 (id=294): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60000003}) 104.687715ms ago: executing program 3 (id=295): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) 0s ago: executing program 4 (id=296): unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 51.629918][ T5214] cgroup: Unknown subsys name 'net' [ 51.766742][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.178395][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.409287][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.429788][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.468826][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.480439][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.497027][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.520636][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.530136][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.537890][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.540926][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.547481][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.554220][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.568909][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.577383][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.577888][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.584975][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.601106][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.610615][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.611081][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.618781][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.630175][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.640502][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.648437][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.648776][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.656767][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.663414][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.678909][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.686352][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.695147][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.702725][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.710056][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.211565][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 56.282396][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 56.293095][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 56.363008][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 56.467333][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.476205][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.484617][ T5237] bridge_slave_0: entered allmulticast mode [ 56.491937][ T5237] bridge_slave_0: entered promiscuous mode [ 56.541778][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.549251][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.556430][ T5237] bridge_slave_1: entered allmulticast mode [ 56.563847][ T5237] bridge_slave_1: entered promiscuous mode [ 56.614720][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.622203][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.629727][ T5231] bridge_slave_0: entered allmulticast mode [ 56.636489][ T5231] bridge_slave_0: entered promiscuous mode [ 56.655551][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.663155][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.671105][ T5227] bridge_slave_0: entered allmulticast mode [ 56.677949][ T5227] bridge_slave_0: entered promiscuous mode [ 56.686530][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.693911][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.701264][ T5227] bridge_slave_1: entered allmulticast mode [ 56.708122][ T5227] bridge_slave_1: entered promiscuous mode [ 56.716162][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 56.731812][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.739144][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.746727][ T5231] bridge_slave_1: entered allmulticast mode [ 56.754300][ T5231] bridge_slave_1: entered promiscuous mode [ 56.764954][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.826748][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.859514][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.872230][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.890458][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.897675][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.905060][ T5236] bridge_slave_0: entered allmulticast mode [ 56.912267][ T5236] bridge_slave_0: entered promiscuous mode [ 56.945492][ T5237] team0: Port device team_slave_0 added [ 56.990826][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.997985][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.005612][ T5236] bridge_slave_1: entered allmulticast mode [ 57.013811][ T5236] bridge_slave_1: entered promiscuous mode [ 57.024495][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.035850][ T5237] team0: Port device team_slave_1 added [ 57.056315][ T5227] team0: Port device team_slave_0 added [ 57.065318][ T5227] team0: Port device team_slave_1 added [ 57.083285][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.156111][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.191216][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.198208][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.225160][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.259141][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.281208][ T5231] team0: Port device team_slave_0 added [ 57.299862][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.307039][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.333905][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.345508][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.356831][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.364996][ T5241] bridge_slave_0: entered allmulticast mode [ 57.372896][ T5241] bridge_slave_0: entered promiscuous mode [ 57.381024][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.388002][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.420572][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.434953][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.442119][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.469830][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.484094][ T5231] team0: Port device team_slave_1 added [ 57.505657][ T5236] team0: Port device team_slave_0 added [ 57.518453][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.525940][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.533319][ T5241] bridge_slave_1: entered allmulticast mode [ 57.541323][ T5241] bridge_slave_1: entered promiscuous mode [ 57.566034][ T5236] team0: Port device team_slave_1 added [ 57.597850][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.605405][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.632253][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.646118][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.653817][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.680475][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.709652][ T5234] Bluetooth: hci1: command tx timeout [ 57.712719][ T5239] Bluetooth: hci3: command tx timeout [ 57.720773][ T5245] Bluetooth: hci0: command tx timeout [ 57.728329][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.735592][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.762469][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.777239][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.784292][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.811203][ T5245] Bluetooth: hci2: command tx timeout [ 57.811753][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.830757][ T5245] Bluetooth: hci4: command tx timeout [ 57.851483][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.864187][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.892446][ T5237] hsr_slave_0: entered promiscuous mode [ 57.899065][ T5237] hsr_slave_1: entered promiscuous mode [ 57.975686][ T5236] hsr_slave_0: entered promiscuous mode [ 57.982540][ T5236] hsr_slave_1: entered promiscuous mode [ 57.989961][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.998049][ T5236] Cannot create hsr debugfs directory [ 58.019974][ T5227] hsr_slave_0: entered promiscuous mode [ 58.026473][ T5227] hsr_slave_1: entered promiscuous mode [ 58.033088][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.040921][ T5227] Cannot create hsr debugfs directory [ 58.050170][ T5241] team0: Port device team_slave_0 added [ 58.085061][ T5241] team0: Port device team_slave_1 added [ 58.135887][ T5231] hsr_slave_0: entered promiscuous mode [ 58.142258][ T5231] hsr_slave_1: entered promiscuous mode [ 58.149026][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.156651][ T5231] Cannot create hsr debugfs directory [ 58.218385][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.227753][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.255362][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.306486][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.313649][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.341408][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.499908][ T5241] hsr_slave_0: entered promiscuous mode [ 58.506494][ T5241] hsr_slave_1: entered promiscuous mode [ 58.513891][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.521756][ T5241] Cannot create hsr debugfs directory [ 58.746066][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.766966][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.784939][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.808118][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.870706][ T5237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.880966][ T5237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.911800][ T5237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.926203][ T5237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.975783][ T5231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.018971][ T5231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.060644][ T5231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.092350][ T5231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.116352][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.127203][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.138037][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.168844][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.257721][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.306847][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.335019][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.345822][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.365498][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.372965][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.393394][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.400952][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.425021][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.432401][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.449610][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.515565][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.577290][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.584511][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.620868][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.628030][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.645764][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.743565][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.764334][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.771700][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.789429][ T5245] Bluetooth: hci0: command tx timeout [ 59.789459][ T5239] Bluetooth: hci1: command tx timeout [ 59.794841][ T5234] Bluetooth: hci3: command tx timeout [ 59.816094][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.823291][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.843237][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.872574][ T5234] Bluetooth: hci4: command tx timeout [ 59.872582][ T5239] Bluetooth: hci2: command tx timeout [ 59.966142][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.031481][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.038784][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.065245][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.087333][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.094554][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.164079][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.274103][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.281499][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.293560][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.300758][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.341892][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.437182][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.536856][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.724897][ T5236] veth0_vlan: entered promiscuous mode [ 60.754164][ T5231] veth0_vlan: entered promiscuous mode [ 60.801839][ T5236] veth1_vlan: entered promiscuous mode [ 60.824778][ T5231] veth1_vlan: entered promiscuous mode [ 60.858490][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.986541][ T5231] veth0_macvtap: entered promiscuous mode [ 61.018227][ T5236] veth0_macvtap: entered promiscuous mode [ 61.037271][ T5236] veth1_macvtap: entered promiscuous mode [ 61.054273][ T5227] veth0_vlan: entered promiscuous mode [ 61.065153][ T5231] veth1_macvtap: entered promiscuous mode [ 61.110757][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.121016][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.132211][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.143883][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.154445][ T5227] veth1_vlan: entered promiscuous mode [ 61.175739][ T5237] veth0_vlan: entered promiscuous mode [ 61.185844][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.204625][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.214049][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.224311][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.233785][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.250736][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.261901][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.273797][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.307471][ T5231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.317180][ T5231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.326758][ T5231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.335828][ T5231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.348034][ T5237] veth1_vlan: entered promiscuous mode [ 61.369926][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.431654][ T5227] veth0_macvtap: entered promiscuous mode [ 61.480931][ T5227] veth1_macvtap: entered promiscuous mode [ 61.507734][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.521821][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.532892][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.543385][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.563964][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.597418][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.608378][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.619455][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.630767][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.641830][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.692660][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.703229][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.715058][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.719147][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.731428][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.740273][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.752319][ T5237] veth0_macvtap: entered promiscuous mode [ 61.776131][ T5237] veth1_macvtap: entered promiscuous mode [ 61.838072][ T5241] veth0_vlan: entered promiscuous mode [ 61.839918][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.854489][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.871261][ T5239] Bluetooth: hci1: command tx timeout [ 61.871325][ T5234] Bluetooth: hci0: command tx timeout [ 61.876674][ T5245] Bluetooth: hci3: command tx timeout [ 61.912717][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.924305][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.935709][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.946612][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.961386][ T5245] Bluetooth: hci4: command tx timeout [ 61.962327][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.967076][ T5245] Bluetooth: hci2: command tx timeout [ 61.977781][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.986549][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.020762][ T5241] veth1_vlan: entered promiscuous mode [ 62.037424][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.037696][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.052154][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.056441][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.073255][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.084485][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.094443][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.105153][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.117087][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.147390][ T5237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.156599][ T5237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.165739][ T5237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.175011][ T5237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.214196][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.234593][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.272722][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.289167][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.417380][ T5241] veth0_macvtap: entered promiscuous mode [ 62.463822][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.476312][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.493684][ T5241] veth1_macvtap: entered promiscuous mode [ 62.540569][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.571092][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.681394][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.712821][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.724904][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.778836][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.808210][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.834276][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.868270][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.898696][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.921246][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.948928][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.970719][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.037774][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.071708][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.091553][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.125766][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.138411][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.162468][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.176620][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.188638][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.212457][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.257800][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.282618][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.325616][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.349619][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.555866][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.587782][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.718098][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.758819][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.953895][ T5245] Bluetooth: hci3: command tx timeout [ 63.954557][ T5239] Bluetooth: hci1: command tx timeout [ 63.965379][ T5239] Bluetooth: hci0: command tx timeout [ 64.020164][ T5338] Bluetooth: MGMT ver 1.23 [ 64.051554][ T5245] Bluetooth: hci4: command tx timeout [ 64.057916][ T5234] Bluetooth: hci2: command tx timeout [ 64.482643][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 64.521801][ T5355] Zero length message leads to an empty skb [ 64.804748][ T5365] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 65.000331][ T5370] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.076247][ T5372] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 65.224088][ T5377] trusted_key: syz.2.26 sent an empty control message without MSG_MORE. [ 66.109173][ T5245] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.115360][ T5239] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 66.443918][ T5424] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 67.460118][ T5460] tipc: Started in network mode [ 67.479032][ T5460] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 67.504765][ T5460] tipc: Enabled bearer , priority 0 [ 67.531110][ T5468] tipc: Enabled bearer , priority 0 [ 67.654104][ T5471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'. [ 68.080480][ T5490] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.087417][ T5490] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.118776][ T5490] hsr_slave_0: left promiscuous mode [ 68.185268][ T5490] hsr_slave_1: left promiscuous mode [ 68.548427][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 68.619866][ T9] tipc: Node number set to 10136234 [ 69.566031][ T5542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.253886][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 71.020234][ T5561] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 71.217749][ T5594] pim6reg1: entered allmulticast mode [ 71.675598][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 71.809520][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.816193][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.279603][ T5623] sit0: entered promiscuous mode [ 72.350219][ T5623] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 72.380328][ T5623] netlink: 1 bytes leftover after parsing attributes in process `syz.0.114'. [ 72.947751][ T5647] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 72.990907][ T5647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 73.307133][ T5663] vxcan1: entered allmulticast mode [ 73.348961][ T5663] netlink: 'syz.2.128': attribute type 39 has an invalid length. [ 73.371600][ T5663] vxcan1: left allmulticast mode [ 73.407597][ T5672] pimreg: entered allmulticast mode [ 73.449195][ T5672] pimreg: left allmulticast mode [ 73.861396][ T5688] Bluetooth: MGMT ver 1.23 [ 74.426003][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 74.965778][ T5738] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 75.005665][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.043116][ T5738] team0: Port device batadv0 added [ 75.179294][ T5746] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 75.546495][ T5764] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 75.776048][ T5772] netlink: 'syz.2.178': attribute type 3 has an invalid length. [ 75.887564][ T5774] syzkaller0: entered promiscuous mode [ 75.894632][ T5774] syzkaller0: entered allmulticast mode [ 76.939915][ T47] cfg80211: failed to load regulatory.db [ 78.557081][ T5826] warning: `syz.0.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.727540][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 80.737494][ T5853] pim6reg1: entered promiscuous mode [ 80.747187][ T5853] pim6reg1: entered allmulticast mode [ 81.101548][ T5867] ipip0: entered promiscuous mode [ 81.126658][ T5865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.211'. [ 88.392357][ T5968] openvswitch: netlink: nsh attr 13569 is out of range max 3 [ 89.284110][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.270'. [ 89.974295][ T6039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.259143][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265537][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.409532][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 181.415635][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 181.426487][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.432823][ T5246] Bluetooth: hci3: command 0x0406 tx timeout [ 194.689099][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.695436][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.828673][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 235.639748][ T30] INFO: task syz.1.290:6054 blocked for more than 143 seconds. [ 235.647444][ T30] Not tainted 6.11.0-rc6-syzkaller-01156-gd5c4546062fd #0 [ 235.788710][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.797487][ T30] task:syz.1.290 state:D stack:24672 pid:6054 tgid:6054 ppid:5236 flags:0x00000006 [ 235.978639][ T30] Call Trace: [ 235.981976][ T30] [ 235.985583][ T30] __schedule+0x1800/0x4a60 [ 236.088733][ T30] ? __pfx___schedule+0x10/0x10 [ 236.093668][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.189230][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 236.194825][ T30] ? schedule+0x90/0x320 [ 236.288613][ T30] schedule+0x14b/0x320 [ 236.293504][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.398664][ T30] __mutex_lock+0x6a4/0xd70 [ 236.403500][ T30] ? __mutex_lock+0x527/0xd70 [ 236.408200][ T30] ? pipe_release+0x4e/0x330 [ 236.499551][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.504651][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.609552][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.614994][ T30] pipe_release+0x4e/0x330 [ 236.708681][ T30] ? __pfx_pipe_release+0x10/0x10 [ 236.713779][ T30] __fput+0x24a/0x8a0 [ 236.717789][ T30] task_work_run+0x24f/0x310 [ 236.858694][ T30] ? __pfx_task_work_run+0x10/0x10 [ 236.863879][ T30] get_signal+0x15e6/0x1740 [ 236.868414][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 236.995418][ T30] ? __close_range+0x49a/0x940 [ 237.049749][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.054935][ T30] ? __pfx_get_signal+0x10/0x10 [ 237.148623][ T30] arch_do_signal_or_restart+0x96/0x860 [ 237.154251][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.258669][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.264734][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 237.368620][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 237.374426][ T30] do_syscall_64+0x100/0x230 [ 237.468710][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.473638][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.568715][ T30] RIP: 0033:0x7f031637cef9 [ 237.573204][ T30] RSP: 002b:00007ffcba484168 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 237.719523][ T30] RAX: 0000000000000000 RBX: 00007f0316537a80 RCX: 00007f031637cef9 [ 237.778626][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 237.786657][ T30] RBP: 00007f0316537a80 R08: 0000000000000006 R09: 00007ffcba48445f [ 237.948678][ T30] R10: 00000000005f80d8 R11: 0000000000000246 R12: 00000000000163ef [ 237.956713][ T30] R13: 00007ffcba484270 R14: 0000000000000032 R15: ffffffffffffffff [ 238.088674][ T30] [ 238.148715][ T30] [ 238.148715][ T30] Showing all locks held in the system: [ 238.156480][ T30] 3 locks held by kworker/0:1/9: [ 238.254117][ T30] #0: ffff8880b883e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 238.348689][ T30] #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 238.468722][ T30] #2: ffff8880b882a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 238.478131][ T30] 1 lock held by khungtaskd/30: [ 238.578599][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 238.678852][ T30] 1 lock held by udevd/4685: [ 238.683500][ T30] 2 locks held by getty/4982: [ 238.688195][ T30] #0: ffff888034db20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 238.868592][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 238.958740][ T30] 1 lock held by syz.1.290/6054: [ 238.963740][ T30] #0: ffff88803141fc68 (&pipe->mutex){+.+.}-{3:3}, at: pipe_release+0x4e/0x330 [ 239.118620][ T30] 1 lock held by syz.1.290/6056: [ 239.123607][ T30] #0: ffff88803141fc68 (&pipe->mutex){+.+.}-{3:3}, at: splice_file_to_pipe+0x2e/0x500 [ 239.238618][ T30] 1 lock held by udevd/6074: [ 239.289647][ T30] [ 239.292023][ T30] ============================================= [ 239.292023][ T30] [ 239.408602][ T30] NMI backtrace for cpu 1 [ 239.412997][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-01156-gd5c4546062fd #0 [ 239.423523][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.433598][ T30] Call Trace: [ 239.436888][ T30] [ 239.439836][ T30] dump_stack_lvl+0x241/0x360 [ 239.444541][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.449755][ T30] ? __pfx__printk+0x10/0x10 [ 239.454356][ T30] ? vprintk_emit+0x667/0x7c0 [ 239.459048][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 239.464073][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 239.469020][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.474476][ T30] ? _printk+0xd5/0x120 [ 239.478630][ T30] ? __pfx__printk+0x10/0x10 [ 239.483208][ T30] ? __wake_up_klogd+0xcc/0x110 [ 239.488052][ T30] ? __pfx__printk+0x10/0x10 [ 239.492634][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 239.497652][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 239.503626][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 239.509608][ T30] watchdog+0xff4/0x1040 [ 239.513848][ T30] ? watchdog+0x1ea/0x1040 [ 239.518263][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.522934][ T30] kthread+0x2f0/0x390 [ 239.526997][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.531687][ T30] ? __pfx_kthread+0x10/0x10 [ 239.536274][ T30] ret_from_fork+0x4b/0x80 [ 239.540689][ T30] ? __pfx_kthread+0x10/0x10 [ 239.545277][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.550049][ T30] [ 239.553892][ T30] Sending NMI from CPU 1 to CPUs 0: [ 239.559715][ C0] NMI backtrace for cpu 0 [ 239.559729][ C0] CPU: 0 UID: 0 PID: 6073 Comm: udevd Not tainted 6.11.0-rc6-syzkaller-01156-gd5c4546062fd #0 [ 239.559747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.559762][ C0] RIP: 0010:lock_acquire+0xc/0x550 [ 239.559786][ C0] Code: c0 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 00 4c 89 4c 24 28 4c [ 239.559802][ C0] RSP: 0018:ffffc9000359f978 EFLAGS: 00000046 [ 239.559816][ C0] RAX: 0000000080000000 RBX: 1ffff920006b3f38 RCX: 0000000000000001 [ 239.559827][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88806b812158 [ 239.559838][ C0] RBP: ffffc9000359f988 R08: 0000000000000001 R09: 0000000000000000 [ 239.559848][ C0] R10: dffffc0000000000 R11: ffffffff822308b0 R12: 0000000000000046 [ 239.559859][ C0] R13: 1ffff920006b3f34 R14: ffff88806b812140 R15: dffffc0000000000 [ 239.559870][ C0] FS: 00007fd254524c80(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 239.559884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.559895][ C0] CR2: 000056195e90f680 CR3: 000000007b59c000 CR4: 00000000003506f0 [ 239.559909][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.559918][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.559928][ C0] Call Trace: [ 239.559934][ C0] [ 239.559940][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 239.559960][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 239.559980][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.559998][ C0] ? nmi_handle+0x2a/0x5a0 [ 239.560022][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 239.560039][ C0] ? nmi_handle+0x14f/0x5a0 [ 239.560053][ C0] ? nmi_handle+0x2a/0x5a0 [ 239.560069][ C0] ? lock_acquire+0xc/0x550 [ 239.560086][ C0] ? default_do_nmi+0x63/0x160 [ 239.560105][ C0] ? exc_nmi+0x123/0x1f0 [ 239.560124][ C0] ? end_repeat_nmi+0xf/0x53 [ 239.560145][ C0] ? __pfx_ep_poll_callback+0x10/0x10 [ 239.560164][ C0] ? lock_acquire+0xc/0x550 [ 239.560182][ C0] ? lock_acquire+0xc/0x550 [ 239.560201][ C0] ? lock_acquire+0xc/0x550 [ 239.560218][ C0] [ 239.560223][ C0] [ 239.560230][ C0] _raw_read_lock_irqsave+0xdd/0x130 [ 239.560246][ C0] ? ep_poll_callback+0xd2/0xb50 [ 239.560260][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 239.560275][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 239.560297][ C0] ep_poll_callback+0xd2/0xb50 [ 239.560317][ C0] ? __pfx_ep_poll_callback+0x10/0x10 [ 239.560338][ C0] __wake_up_common_lock+0x130/0x1e0 [ 239.560361][ C0] __send_signal_locked+0xbe3/0xdc0 [ 239.560378][ C0] ? __lock_task_sighand+0x29/0x2d0 [ 239.560395][ C0] group_send_sig_info+0x292/0x310 [ 239.560412][ C0] ? __pfx_group_send_sig_info+0x10/0x10 [ 239.560433][ C0] bpf_send_signal_common+0x2dd/0x430 [ 239.560453][ C0] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 239.560470][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 239.560492][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 239.560507][ C0] bpf_send_signal+0x19/0x30 [ 239.560525][ C0] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 239.560540][ C0] bpf_trace_run2+0x2ec/0x540 [ 239.560559][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 239.560572][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.560590][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.560609][ C0] ? do_syscall_64+0x100/0x230 [ 239.560627][ C0] trace_sys_enter+0x93/0xd0 [ 239.560641][ C0] syscall_trace_enter+0xf8/0x150 [ 239.560657][ C0] do_syscall_64+0xcc/0x230 [ 239.560673][ C0] ? clear_bhb_loop+0x35/0x90 [ 239.560693][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.560711][ C0] RIP: 0033:0x7fd254123457 [ 239.560723][ C0] Code: 73 01 c3 48 8b 0d d1 d9 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 76 48 8b 15 a2 d9 0c 00 f7 d8 64 89 02 48 83 [ 239.560735][ C0] RSP: 002b:00007ffea3b2edb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 239.560750][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd254123457 [ 239.560765][ C0] RDX: 0000000000000004 RSI: 00007ffea3b2edf8 RDI: 0000000000000004 [ 239.560775][ C0] RBP: 00007ffea3b2ee04 R08: 0000000000000007 R09: 60d0cf1ef0cfdb14 [ 239.560786][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 000055f079e67cb0 [ 239.560796][ C0] R13: 00007ffea3b2edf8 R14: 0000000000000001 R15: 000055f079d46910 [ 239.560815][ C0] [ 240.448695][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 240.455597][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-01156-gd5c4546062fd #0 [ 240.466119][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.476282][ T30] Call Trace: [ 240.479575][ T30] [ 240.482513][ T30] dump_stack_lvl+0x241/0x360 [ 240.487210][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.492444][ T30] ? __pfx__printk+0x10/0x10 [ 240.497065][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.503086][ T30] ? vscnprintf+0x5d/0x90 [ 240.507453][ T30] panic+0x349/0x860 [ 240.511378][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.517565][ T30] ? __pfx_panic+0x10/0x10 [ 240.522004][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 240.527500][ T30] ? __irq_work_queue_local+0x137/0x410 [ 240.533081][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 240.538561][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.544738][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 240.550932][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 240.557120][ T30] watchdog+0x1033/0x1040 [ 240.561495][ T30] ? watchdog+0x1ea/0x1040 [ 240.565951][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.570660][ T30] kthread+0x2f0/0x390 [ 240.574739][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.579426][ T30] ? __pfx_kthread+0x10/0x10 [ 240.584209][ T30] ret_from_fork+0x4b/0x80 [ 240.588851][ T30] ? __pfx_kthread+0x10/0x10 [ 240.593469][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.598280][ T30] [ 240.601772][ T30] Kernel Offset: disabled [ 240.606229][ T30] Rebooting in 86400 seconds..