last executing test programs: 1m43.296880233s ago: executing program 4 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m18.663902335s ago: executing program 4 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m11.51284354s ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc002000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b3d6a3da010000007265646972656374e6000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0100000003000000000000008b357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172700000000000000000000000000000000000000000000000000000000000380000000000000000000000000000000000000000000b00007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000"]}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r9, 0x4) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xee, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) 1m4.536474251s ago: executing program 4 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 56.308924522s ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r9, 0x4) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xee, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) 49.151497069s ago: executing program 4 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 42.091492693s ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r9, 0x4) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xee, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) 33.933194598s ago: executing program 4 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 28.316517775s ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc002000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b3d6a3da010000007265646972656374e6000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0100000003000000000000008b357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172700000000000000000000000000000000000000000000000000000000000380000000000000000000000000000000000000000000b00007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000"]}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r9, 0x4) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xee, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) 19.269628635s ago: executing program 4 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.701192662s ago: executing program 2 (id=1040): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x2, 0xa, 0x0, &(0x7f0000000200)="967ea6141c24565debcb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x9}, 0x50) 17.652307477s ago: executing program 2 (id=1041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x150, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{}, {}, {}, {}, {}, {}, {}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xa8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x64, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x150}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)="2a6964b6e862bbb7ace52f4024afa4a037aa7a2c42a917c9800a8355448b1022eb5829e387283555dbf20602b0befa124cf12670989c944e1e0167", 0x3b}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x57}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x52}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x350}}], 0x4000000000003b4, 0x4de0ff7f00000000, &(0x7f0000003700)={0x77359400}) 17.152526036s ago: executing program 2 (id=1044): socket(0x840000000002, 0x3, 0x100) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0xc040480) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.984799395s ago: executing program 2 (id=1047): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x29) unshare(0x62040200) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, 0x0, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8}]}, 0x38}}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bind$isdn_base(r2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0x4, &(0x7f0000000340)='rose'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000100a3faec5dd9f65a3b785c26052ecbf0d1fd294bf310ee837c"], 0x38}}, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f00000004c0)="9e01", 0xc600}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @local}}}], 0x20}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x17f, 0x4) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r1, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x20, 0x0) 16.717917992s ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r9, 0x4) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xee, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) 15.757120494s ago: executing program 1 (id=1051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x67df, 0x4) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f00000011c0)="94bdaf1609d06d5253a7bfc6bc8894ca5712654d8e1ab3222cf8", 0x1a}], 0x2, &(0x7f0000001380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x30}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), r4) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1, &(0x7f0000001800)=[@assoc={0x18}], 0x18}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) 15.265218846s ago: executing program 1 (id=1055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.171209509s ago: executing program 1 (id=1057): socket(0x840000000002, 0x3, 0x100) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0xc040480) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.820522821s ago: executing program 1 (id=1059): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0x13, 0x0, [@private=0x41, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 14.637262753s ago: executing program 1 (id=1060): pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000300), 0x0) 14.611957847s ago: executing program 1 (id=1061): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x0, 'memory'}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x29}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x70) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xe16e, 0x0, r0, 0x2d1, '\x00', 0x0, r0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f0000000280)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.821217882s ago: executing program 2 (id=1065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) unshare(0x20000400) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0), 0x4) 13.558809131s ago: executing program 2 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1c0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000040a"], 0x3c}, 0x1, 0x0, 0x400000000000000}, 0x0) 5.020511882s ago: executing program 3 (id=1094): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040000000e000000000000070000000011f77dba0c66aab90400000000000000000000000000000e0300000001000000010000000000000a0000000000613000"], 0x0, 0x54, 0x0, 0x0, 0x1cd64e8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x16, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000140)='syzkaller\x00', 0xd02, 0xe2, &(0x7f0000000a80)=""/226, 0x41000, 0x6, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000500)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b80)=[{0x4, 0x5, 0xe, 0x5}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x4}, 0x90) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001f00)={'wlan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xd, 0xa, 0x401}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @empty}]}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x0, 0xca, 0x0, &(0x7f0000000240)=""/202, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="84", 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a"], 0x130}}, 0x0) socket(0x28, 0x5, 0x0) 4.861776329s ago: executing program 3 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000640000000071117c00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 4.769120996s ago: executing program 3 (id=1096): socket(0x840000000002, 0x3, 0x100) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x4, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "f2"}, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x38}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0xc040480) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.723967209s ago: executing program 3 (id=1097): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000ac0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x2c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, '\x00', [@ra, @ra, @generic={0x0, 0xf, "868cedae1376c198b4d7d7f5eb0e30"}]}]}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0xf96, 0x3, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x12, &(0x7f0000000800)="b8fd1fdf94c46626c6166a5f721bdcf00d0c1c2a96041726e11b4913678c21ed040b2018c9df1e21804847e886306635d9d45940a21054b1965f5f268fac6a564be8805a075fb5081f3fbb923c05c1922b7169ac20ec44d62cca5066218c910a3b6639b52551348ee8b66084378f9fb4cd1dcf3a00c7673c1e55dda00e8eb75fed00b315cc339e4d6ba78a1bebabd2b5dde6eeb4592944afef50267de57179b5d99d20c6e9bdf4b313524d0b4bf7e02569eabd2cb0f2964e7c76edf1abc618fa820b8e8cfe8ea30769295e48b0ba2a3b502f39f3e1f3941e974a7e4c88c0ec3d6f030504b2ed0aeb7ab11b9ae67fc3e781a240d14068e141d35b667e2ba6771293c4a9e607ee9d0d51dcc9a964ba0403bff369072985c8eeb5abfcbab498fd12d626a3a30633e3b5d184970664646fc11ca48c7f43a7705b8d873e9d4c136de78d7225177c854983cbf3e6b16f947d81b94a205e0e16019d7089c163eedda2e84e8a4cd49c68b0af0de89f94da6d78ad88cc0482a2e0ba54b46aeca73acc3933ace929c8d841d1a53b197cb9707696871674071b2a0e89a988daaeb4bfd3d0f916154080ba17e573fdc336dd1e4af7d67d3ca030a772b37b11bedc3c421b24b7bbf97b80f7d428f0f235dab63745331554e22a23a2b13358a9d798b9cc92d56196a8832a120d2618661bc8b08d9990dbd0fbf17f157d4fa2c63f9dc5f18a59921a589e63323a34698ba1194a15934e5243d4babc696dd1083b41b4c3751d179aa5e0485190986a4a5bb2569cdb2a7701eaa0652ee79923e9883557f5a0bc74b91a626fdaa529dcb62c01c195855a19c78cec63b81d30295be720fb879ba2f7367ed929b523743dc8b3dbe8347ecbceaff46bb5e2d8b48f91cb56fb0621fc5b7cb9a9e5cd61c0013b9dfc5272d8a10212070629cbd82df267049a400c66dbcde17096ce0e7be016a9e9446deab98166fb6b80c1616dfeed123e4e2a586ab054333db6f1c582dc019b31724314cbe1d0f1d48a347c475e114645d0d6e944efa5201508f7f65741fe9fff33f284649f48b248845ddd5456bd15688d98ad21074e6a78f1c2da3d093162f5134be8bdd1b0c27dd7844f55c888b0e07893c4102d8ed05dd161b84a0c753a329a89657d9f5867caded3294525b70195d9ffde5cc768e704efa5181bf2849e9ba4cf3d7564a3f55c5b33af42876ab0119380ed3cfd6cad8c35d26ba7bb3d7b38b1c96042a0a5b729e8e0533aeb62f273af959ccc7cdda4d5980ebb16bc696016625d606b90be772045292875d21c8ec3dc999f8645888f842d1da65121b1bd5aeb4cb0a0e45c862b90f5dd257c7d8632aaa75bc75b69b586b7555eca1daefbfadde204c5e25ddd00413994a53d30b5061d1a7ee104157cdbfe520dbd18044c60c28a465fda76bb951d232205e0ea877aade8b25734985fc7880517f439cabbd99e6ab6f719ddcca618226a4cf1854221d24f8d03e1896cbbf8587c247eb87be6ba2fca094443e2b388f504697e641e12cb5356f85201ee104d09e5366b3d1d1d5d8a8d78eda238e2f56fba956b954bdd3869c0c8cef6bd4dfbbe65ea76f0f6522add96808a4fb08246f13bd878c479bced743e7d593a4b97713a71eba535bea5c94b71c6437ec7453bc6f6543aa5f2966e58fe1cdf4ad8d98f1fce515188489085711ff99f0d157be8e63bd67b7d98dd5672e753971adb5f55461851624531611ade2626960b5e203b9a2d1259af7952f6e40401215f1786e50f9b54a678ceb25990f21fe3171d8205ca2b3aaf8009e7a0cef0212cbce652642c9f021c89d3cbe798a133be3004df89ea7316e14c080903f6d5664c4d1b8298dea4474e8db6b564e61a6fd4d35ef7f0749fdb35c4fe4cbca373b9ae6558eaaa7e4c45681e6452054fb7f5400449736d2a5d3cf381a6aab50aac94c6581b29a5d0acc3c6cd8b5e2920269279907395d24b142d7327d06ee5eeedc30e5bad81e4fe3c474eb3f6134652f1ded5c1052a6a9a7f97a3a7ca97a4a8a8392e2a83b7ea53e2e8d9d8419766accd62c0d5a6330d3f6255bc029adb1172ae1c664d994a4e538df613f7b549a6b6b487f84e43c340a88003b455b8e0f7b7aaa3043be1f62ef6b0e97cbac5dcaf575094bf987f5caf0d846d70353caa4bf81638a7739c4aa0ab1b4deb6ddbf433506fd47eb2e8774741511c80a3bc7e734360fd9d73b6bb34e7b491c4dc47e6ec08bcb8c4294d5cbc2c84e1770393d4cfe2c71f8550ae5c49fd32b8df8224c1d602034e2f6afb760ecd842d2ff098113ab7a7ec8e9fccd278851f9707ae5a45156c02c67293fe344b101d9e4809ee5daeb624081be54c6ced4e6f92e6ef0d8b9eaff83207f10e3577e868baac6cc5c1669c4b43e0c3d1533450d1ead5c1c42822322096dc670d7826a5e94d7e24b6790026749c587e22a2f2732ad946b255c5b9a7f3396c16cfdf3c892c06ba8cb3a2bee5330ec244e6b4fdb194253972fa822c697dee21cb811cbd244aeb8f6f503434ad742fde98720f7c7e5fd6f6b9c6c11b6bf2b645bdef8531db8197ca844b31671ba307ee59123ebd6093b461b105d65d9a69f608fb93f15562fa0e403e2e3dcaf009dd17dbb0336b57812b5a46b6ed64c101aa37a2d2b3267537e238e869c590c6242f0a16bc5fa2adcfa0b703bc7fa9dcea651c927f55bcec9b00e310b85d3bebd34f138d159712ef576b2bffbe5343c926f8db79dd3ce18c29a557e53bc92f1169a7985fdcb9b4c32dd1d810bfcb111e928b4829373f7e918dc56b7b6b7933cec7e7eef790b349d369b01b0983df9926b9ee2ccc13f5ed06a19e0017213ab4a76b01941a98b3de79d17bb9b19ff9f5afc408cfc86e514f7d4937cd040a9f2ad5a2ac18a4836c70a00d24c3d006b6e0020f340585cc804fded41bd99195d833ca875803df073dd9bed1958e7fcef2e71ca39c56321d53e63e64480a1992fd8e083d6e31eaf2c2e7064c77c8061add951a84c97697386040f0c5f16196f001e57bf9a91dd3ed725e42c2234f13dd9c15ff9ba2e2f38d04a0f4c95043738130c209da88d9d24db33d717d60dd2af6a466f8a3987861ead2c397d1cf6fbfd48e350be8ac4989d5273a134409277ba711cc3260981193d5ea8639f05cc17122fa82b80a202b14fbb0c49d299474c6c081e63694397aed2bdcc36771b1b90a673196be2fd5d4793801435d99878d0ea2bfeaacd972f3a34f0f9b47337ee87f73069640f2a4cca11ba2a121671ef8912c2dd24a6b7e13261da91159ee8b497a4906dd559e68b22727bff379b71bce2e564e802603f46fd2be44c606c58c2142228cd71a2a66e03ce71a057b649dba059bbe660bf65f3ab206afe632f1dbe7193a4f8b094a6362e9a7b4dfa0c6bbab27570c6cd8313e660c591e4edfd98ca79b4545b8b9078afcf5314b6434a82a01494adfca2c00e3836cc4a315387fbe9e0b68c1946fd6bb742994552a44c22b1525ac394f37b61f4e1c3dfc9c71f57df2914037d8f1626bafcdf3789856d9a7607df1ccd66d1e26b2aa6ab89c609e0da42c24fc6db985a8c790843ecc1ad29cb1785daafbbdb70a4fb1b61a8e6d03f06dc9d8d2d1535472d2cf5c04d3c8180c8fa74a842428cb3bcd04e09a342fe6d399640b60fb99315a75a4d9677d7a090995cc5ae32d9743cb34c61c15c69418b832f0690bf5eb28970e08869dbd97817e3dc13c173b9c23fa2e4f8d37974eb231a2c5a4c69408b80f04bd1e7650f457b5acedd01a519a3d4fe82e69f692b3bc9f4d40008bd6f430351d6e4a32dd1f75680c768d2c615b555dbc19481889c97cb2449346d8e7089b31cd752facaa61b048c4b9e9fddc19394c52ac89d546ef3623c1052792b449e1d4f33c8e9b3e5e954590d02d56377493455e3dd2936c61a61d1be2adb4d6b0f5f7f9005ea82919c07b389bd18af41052fd0ab16248d59de9425b850793b6e469009425d8f02dd2772a6c14dba50431ec6505a8bae33dc425d97eb1a1cd3c2e49f74fc9b4a5375ec45a9959e6f2968fd3ac47a1809cceee2cc313fcfef1a25c6d17446dc760735f1ba5c7d4af53b8cf5e1c3b5e1821e4f11669feb0c8d3572e40f09b4af12f58ff6cabc3cff277100086cc3521672fd03e7fa030f6f4ae70f003ef7710ed5c704ace8acea38e80b1d9e8a008dcb31038a2ac96ab2e0365478cc13699a4334d93ee6637b7e052ace4dd68d5e4d32515df9b3d9762ff087406277c9b35fa6068750cabe14b1911946ae68747e14c5bdd7b17eb3de0d515e60f3efe8f3a908836c8148ca76665c178e1d6937864bda473e0a9d75f86a05c65facbccc6269f078c8d97c8fe6807bf56cb6c04b81cd1217462235069bbac4cb496679c9b33f8205239176c85576f7e783a5a55fba1ba825006d56b6987bd5653ab1b389b3cccdf4cb6a18bdd3c71a7faae5967bcc9fb8755ce764f896fa0a681a70c4130eb9862ebe9fcfea5114934ecfb23690ef47ce4265e3fd30510ce2fee10425afc700e89e4a9d947156d8ada2245b3bb37b69426b4f08802017a37ae836cda71f7a88e7a71a8ba21e958e7463f016b86ef8526dbcb9c461f09fd5ca6e6b49cec6c93034a75093651ea85321a5a0f447765c99ef0f31c31acf8214ba4e8899b1ba5b62b7e38fcf080f8b36e027641659bbba983a8120044c7d13bac3da8817c0860ee93694ed591f29c18709e397f33171f72b0744d7cc3bb8a04909a739fac40f7f4ab6d5fd3f769e13ae90384282aacfbd8058c8db4e0348768052354292f514efcff62ab6ac651a30458484a64fd19424c9f14b4eaa0e3e66343045dde185afbe1a1ebb52845a1bc9e4a45abb3937146d9a67b9faf0fd67c56b316711b451bb9d8a9211c84229a6c5ff7c0c57ee4efa29ef1aa57d3d59d5b116c7b7c7fb2cb00a57df59a130c2dcad62a8a6652caf6ad55c0af5e63be23209a21bb9e6d425c213a775634cb08f2e2d8f0d4b7e63b68218efa321ab389d781e079e08a4a1234ef76b7fb603deabc7a9cb0cc56c2723b2482693cb7dba9872c27b7d34a03039b355fdcd13c00667c7fb28d582186e951ec3413a948ea1328549c21e5a560fcce4d19d318ea5a28a506a41624045a27f422444f88e877bf3449b74fcf13c227bae68c613c54a241879bed297e042abda8b60ba07343554226d74461be421530c440e1542ca14cb29f4cee2299cfcae2d076cc02164dd878af5d69ebfedc12502fa53ff9f8b5b61c952eecd42b50cb7040bd735af927f2ef8b212ab54a6ce0b67f2b6e7d3d61f85eb3d9ccb9662ad6e66f94fc2dd2c31063959d6a7dab317294fbe245b7ac995b6164346ace0db6c2d650509e1f9db4739e0e02b107dee4f94138d92f17dedcf4fb9f440cbb9c263d064aea849d6bebe840ec37b14a3438303369e3b2fcdbe471fc92e0146df6d5b589f3215c3ba86d82207079dc58730dbe7255e4ef7e89b27f3bfdad86b67bf4e9d86298ec09c7341c0621c75248feae9f75cdaa4dc38885d9f8b7e8b8b9c611785ee2636a34743c996912c2472ad2ff80321e964975ee49d447de3f48e29b3d752d5036f056a2a865073da4dc8896397c0bd9c4223962e9454259e9466c6f2706be4b07aacc86ac95eba3fd33102954801dbe3dbcd50664ee4393907a7200af6af9f9cbca82322702dc44171cd117444230e25035e7e3fa09b21f34e7b0285ec5e4dad488c1575ca932debae7803f29fbdd9028f9bf3c22d70d0a6dfa72cc5cc8e8e3d6cada6eb1b29156b0b187381bd90907f0677938", 0x1000) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES32=r0], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x9, 0x11, 0x0, @empty, @broadcast}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 3.778101479s ago: executing program 3 (id=1098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 3.61494544s ago: executing program 3 (id=1099): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000403afffe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907880000000605b29ab00001100fc010000000000000000000000000000fe8000000000000000000000000000aa000000000000000001050000eb000000b81ae8d9f082f7bf18e3cf7950b7507559bb85e6de607c4215377ac9441e24ce5d61e83ee0241f363b941c32d7ae8ea5c59fec320f33a944b5c05b1754dd408e8e1647bebe9274a73982a6f52df97ec5344dbb43cce6672c3c3e5e0a97f8e03ac67c35ca3c815b87fece5e67b89e2431504c7c9765e7b3f5"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1000004, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000439000/0x4000)=nil, 0x4000, 0x0, 0x852, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x3, 0x0, 0x0, 0x3}, 0x20) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @link_local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={r6}, 0x8) syz_emit_ethernet(0xc7, &(0x7f0000000280)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaaaa0800412600b90067000002219078640101010a010100890b85ac1414bbac1e010107073affffffff071b2dffffffff00000000ac14142e64010102ac1e0001ffffffff0000004e204e200431907826ef75ba03a2443cc19ebb0c3326cfb048d1d6b6016eda2d2d971f89f98b29809cc52263b7525b78344c926a6438bfe2a153a2bf74b64d4a46dd36bd8c33264971059e982c89c7ce9a27e657e84e31271f11b2f6ffc265524fa57c3c40bfdd169c9020138ef8b2452bc3f331ee"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r7, 0x1000}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@int=0x92, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000f0", @ANYRES16=r10, @ANYBLOB="01020000000000000000020202000900010073797a30000000001400020076657468315f746f5f68737200f73100090003"], 0x40}, 0x1, 0x40030000000000}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 0s ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r9, 0x4) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xee, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): .154640][ T6741] ɶƣ0GC¦: entered promiscuous mode [ 131.161856][ T6743] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.487'. [ 131.192482][ T6710] chnl_net:caif_netlink_parms(): no params data found [ 131.265850][ T761] hsr_slave_0: left promiscuous mode [ 131.288902][ T761] hsr_slave_1: left promiscuous mode [ 131.296845][ T761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.308086][ T761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.320821][ T761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.332192][ T761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.344121][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 131.371075][ T761] veth1_macvtap: left promiscuous mode [ 131.376730][ T761] veth0_macvtap: left promiscuous mode [ 131.382782][ T761] veth1_vlan: left promiscuous mode [ 131.390278][ T761] veth0_vlan: left promiscuous mode [ 131.621360][ T4490] Bluetooth: hci3: command tx timeout [ 131.893969][ T761] team0 (unregistering): Port device team_slave_1 removed [ 131.934487][ T761] team0 (unregistering): Port device team_slave_0 removed [ 132.361261][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'. [ 132.432437][ T6772] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 132.441258][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.496'. [ 132.507026][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.831902][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.846760][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.855905][ T6710] bridge_slave_0: entered allmulticast mode [ 132.872844][ T6710] bridge_slave_0: entered promiscuous mode [ 132.891344][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.902530][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.909984][ T6710] bridge_slave_1: entered allmulticast mode [ 132.920319][ T6710] bridge_slave_1: entered promiscuous mode [ 133.013473][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.059959][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.102479][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 133.163216][ T6710] team0: Port device team_slave_0 added [ 133.180560][ T6710] team0: Port device team_slave_1 added [ 133.222577][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.233469][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.285282][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 133.303702][ T6474] veth0_vlan: entered promiscuous mode [ 133.329766][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.347039][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.393713][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.418440][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.430703][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.459762][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.479514][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 133.504285][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 133.566238][ T6474] veth1_vlan: entered promiscuous mode [ 133.644052][ T6710] hsr_slave_0: entered promiscuous mode [ 133.653580][ T6710] hsr_slave_1: entered promiscuous mode [ 133.661787][ T6710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.675623][ T6710] Cannot create hsr debugfs directory [ 133.682062][ T6813] netlink: 'syz.1.511': attribute type 9 has an invalid length. [ 133.699317][ T4490] Bluetooth: hci3: command tx timeout [ 133.929734][ T6821] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 134.122183][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 134.150168][ T6474] veth0_macvtap: entered promiscuous mode [ 134.182589][ T6474] veth1_macvtap: entered promiscuous mode [ 134.204389][ T6835] netlink: 244 bytes leftover after parsing attributes in process `syz.3.520'. [ 134.391365][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.412348][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.425063][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.437164][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.447294][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.459317][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.471572][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.509618][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.537733][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.554270][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.573783][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.587171][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.605129][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.623933][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.650786][ T6853] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 134.670191][ T6474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.686241][ T6474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.696358][ T6474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.727139][ T6474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.110194][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.131941][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.201020][ T6710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.225917][ T761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.236953][ T761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.297411][ T6710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.314502][ T6710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.334262][ T6710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.564525][ T6876] netlink: 'syz.2.534': attribute type 13 has an invalid length. [ 135.573009][ T6876] netlink: 'syz.2.534': attribute type 11 has an invalid length. [ 135.592905][ T6876] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.605681][ T6876] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.614734][ T6876] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.623652][ T6876] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.634122][ T6876] vxlan0: entered promiscuous mode [ 135.752178][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.778239][ T4490] Bluetooth: hci3: command tx timeout [ 135.785211][ T6888] vlan2: entered promiscuous mode [ 135.790439][ T6888] batadv0: entered promiscuous mode [ 135.796036][ T6888] vlan2: entered allmulticast mode [ 135.807206][ T6888] batadv0: entered allmulticast mode [ 135.817412][ T6888] batadv0: left allmulticast mode [ 135.828424][ T6888] batadv0: left promiscuous mode [ 135.835760][ T6887] netlink: 'syz.3.538': attribute type 3 has an invalid length. [ 135.863524][ T6887] netlink: 'syz.3.538': attribute type 11 has an invalid length. [ 135.933767][ T6710] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.997980][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.005198][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.094981][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.131640][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.138891][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.207966][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.293138][ T6897] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 136.323154][ T6898] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 136.460183][ T6903] __nla_validate_parse: 6 callbacks suppressed [ 136.460209][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 136.632748][ T6912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.544'. [ 136.647939][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.859765][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.872948][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.899446][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.913425][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.929485][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.937646][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.977052][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.114073][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.654906][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 137.667645][ T51] bridge_slave_1: left allmulticast mode [ 137.673362][ T51] bridge_slave_1: left promiscuous mode [ 137.737888][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.766961][ T51] bridge_slave_0: left allmulticast mode [ 137.780894][ T51] bridge_slave_0: left promiscuous mode [ 137.786761][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.860803][ T4490] Bluetooth: hci3: command tx timeout [ 138.374597][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.386966][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.399230][ T51] bond0 (unregistering): Released all slaves [ 138.425954][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 138.481111][ T6920] chnl_net:caif_netlink_parms(): no params data found [ 138.974314][ T6710] veth0_vlan: entered promiscuous mode [ 138.978478][ T4490] Bluetooth: hci0: command tx timeout [ 139.012685][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.021806][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.029339][ T6920] bridge_slave_0: entered allmulticast mode [ 139.037139][ T6920] bridge_slave_0: entered promiscuous mode [ 139.046551][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 139.144466][ T51] hsr_slave_0: left promiscuous mode [ 139.163595][ T51] hsr_slave_1: left promiscuous mode [ 139.171724][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.179940][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.188214][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.195785][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.219586][ T51] veth1_macvtap: left promiscuous mode [ 139.226229][ T51] veth0_macvtap: left promiscuous mode [ 139.232362][ T51] veth1_vlan: left promiscuous mode [ 139.238092][ T51] veth0_vlan: left promiscuous mode [ 139.744664][ T51] team0 (unregistering): Port device team_slave_1 removed [ 139.788742][ T51] team0 (unregistering): Port device team_slave_0 removed [ 140.224637][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.232024][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.242561][ T6920] bridge_slave_1: entered allmulticast mode [ 140.252252][ T6920] bridge_slave_1: entered promiscuous mode [ 140.295026][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 140.373300][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.418434][ T6710] veth1_vlan: entered promiscuous mode [ 140.444933][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.601483][ T6920] team0: Port device team_slave_0 added [ 140.604286][ T7021] netlink: 123 bytes leftover after parsing attributes in process `syz.3.579'. [ 140.620148][ T6920] team0: Port device team_slave_1 added [ 140.735114][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.750246][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.791653][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.831622][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.849195][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.932601][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.966397][ T7034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.584'. [ 141.064895][ T4490] Bluetooth: hci0: command tx timeout [ 141.084187][ T7036] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.585'. [ 141.095205][ T7036] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 141.116278][ T6710] veth0_macvtap: entered promiscuous mode [ 141.161134][ T7045] netlink: 6 bytes leftover after parsing attributes in process `syz.1.587'. [ 141.192947][ T6920] hsr_slave_0: entered promiscuous mode [ 141.248309][ T6920] hsr_slave_1: entered promiscuous mode [ 141.316433][ T7054] nbd: must specify at least one socket [ 141.325020][ T6710] veth1_macvtap: entered promiscuous mode [ 141.399993][ T7057] sctp: [Deprecated]: syz.1.592 (pid 7057) Use of int in max_burst socket option deprecated. [ 141.399993][ T7057] Use struct sctp_assoc_value instead [ 141.429119][ T7056] bridge0: entered promiscuous mode [ 141.479818][ T7055] bridge0: left promiscuous mode [ 141.508248][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.529080][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.542524][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.553813][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.564438][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.575085][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.588647][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.674142][ T7067] __nla_validate_parse: 1 callbacks suppressed [ 141.674166][ T7067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.596'. [ 141.713818][ T7067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.596'. [ 141.736766][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.750494][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.761084][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.771957][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.782219][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.794742][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809150][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.839835][ T6710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.850496][ T6710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.861682][ T6710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.913234][ T6710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.343799][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.358847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.452563][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.463192][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.469228][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 142.783003][ T7105] netlink: 277 bytes leftover after parsing attributes in process `syz.2.610'. [ 142.840925][ T6920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.008975][ T6920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.074812][ T6920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.137800][ T4490] Bluetooth: hci0: command tx timeout [ 143.179777][ T6920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.352565][ T7125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.617'. [ 143.635174][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 143.742895][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.755817][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.767934][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.800860][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.819043][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.826739][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.874670][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.087815][ T7143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 144.217075][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.239487][ T7147] netlink: 277 bytes leftover after parsing attributes in process `syz.2.623'. [ 144.285443][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.401245][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.408483][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.441522][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.448781][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.540322][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.635000][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.626'. [ 144.655000][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.626'. [ 144.728203][ T7158] netlink: 'syz.1.625': attribute type 63 has an invalid length. [ 144.783945][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.971266][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.217540][ T5103] Bluetooth: hci0: command tx timeout [ 145.594655][ T7131] chnl_net:caif_netlink_parms(): no params data found [ 145.616367][ T12] bridge_slave_1: left allmulticast mode [ 145.626109][ T12] bridge_slave_1: left promiscuous mode [ 145.648044][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.669234][ T12] bridge_slave_0: left allmulticast mode [ 145.684160][ T12] bridge_slave_0: left promiscuous mode [ 145.694115][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.857785][ T5103] Bluetooth: hci3: command tx timeout [ 146.163147][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.178798][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.193728][ T12] bond0 (unregistering): Released all slaves [ 146.339242][ T7219] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.348568][ T7219] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.358195][ T7219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.366951][ T7219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.541450][ T7231] FAULT_INJECTION: forcing a failure. [ 146.541450][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 146.570670][ T7231] CPU: 0 PID: 7231 Comm: syz.3.645 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 146.580715][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.590794][ T7231] Call Trace: [ 146.594080][ T7231] [ 146.597025][ T7231] dump_stack_lvl+0x241/0x360 [ 146.601770][ T7231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.606979][ T7231] ? __pfx__printk+0x10/0x10 [ 146.611585][ T7231] ? ref_tracker_alloc+0x332/0x490 [ 146.616760][ T7231] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 146.622251][ T7231] should_fail_ex+0x3b0/0x4e0 [ 146.626941][ T7231] ? skb_clone+0x20c/0x390 [ 146.631386][ T7231] should_failslab+0x9/0x20 [ 146.635937][ T7231] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 146.636905][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.641339][ T7231] skb_clone+0x20c/0x390 [ 146.641383][ T7231] __netlink_deliver_tap+0x3cc/0x7c0 [ 146.641425][ T7231] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.662916][ T7231] netlink_deliver_tap+0x19d/0x1b0 [ 146.668065][ T7231] netlink_sendskb+0x68/0x140 [ 146.672781][ T7231] netlink_unicast+0x39d/0x990 [ 146.677647][ T7231] ? __asan_memcpy+0x40/0x70 [ 146.682298][ T7231] ? __pfx_netlink_unicast+0x10/0x10 [ 146.687616][ T7231] netlink_rcv_skb+0x262/0x430 [ 146.692398][ T7231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.697890][ T7231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.703209][ T7231] ? __rcu_read_unlock+0xa1/0x110 [ 146.708258][ T7231] netlink_unicast+0x7f0/0x990 [ 146.713043][ T7231] ? __pfx_netlink_unicast+0x10/0x10 [ 146.718346][ T7231] ? __virt_addr_valid+0x183/0x520 [ 146.723571][ T7231] ? __check_object_size+0x49c/0x900 [ 146.728880][ T7231] ? bpf_lsm_netlink_send+0x9/0x10 [ 146.734210][ T7231] netlink_sendmsg+0x8e4/0xcb0 [ 146.739017][ T7231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.744418][ T7231] ? __import_iovec+0x536/0x820 [ 146.749285][ T7231] ? aa_sock_msg_perm+0x91/0x160 [ 146.754241][ T7231] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 146.759528][ T7231] ? security_socket_sendmsg+0x87/0xb0 [ 146.765020][ T7231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.770316][ T7231] __sock_sendmsg+0x221/0x270 [ 146.775214][ T7231] ____sys_sendmsg+0x525/0x7d0 [ 146.780010][ T7231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.785362][ T7231] __sys_sendmsg+0x2b0/0x3a0 [ 146.789996][ T7231] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.795136][ T7231] ? vfs_write+0x7c4/0xc90 [ 146.799703][ T7231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.806140][ T7231] ? do_syscall_64+0x100/0x230 [ 146.810948][ T7231] ? do_syscall_64+0xb6/0x230 [ 146.815654][ T7231] do_syscall_64+0xf3/0x230 [ 146.820179][ T7231] ? clear_bhb_loop+0x35/0x90 [ 146.824875][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.830784][ T7231] RIP: 0033:0x7f9fc4375bd9 [ 146.835213][ T7231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.856064][ T7231] RSP: 002b:00007f9fc5065048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.864632][ T7231] RAX: ffffffffffffffda RBX: 00007f9fc4503f60 RCX: 00007f9fc4375bd9 [ 146.872619][ T7231] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 146.880685][ T7231] RBP: 00007f9fc50650a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.888669][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.896645][ T7231] R13: 000000000000000b R14: 00007f9fc4503f60 R15: 00007ffda7932468 [ 146.904650][ T7231] [ 147.062140][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.069783][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.077186][ T7131] bridge_slave_0: entered allmulticast mode [ 147.087763][ T7131] bridge_slave_0: entered promiscuous mode [ 147.101219][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.109491][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.121388][ T7131] bridge_slave_1: entered allmulticast mode [ 147.134482][ T7131] bridge_slave_1: entered promiscuous mode [ 147.162408][ T7248] __nla_validate_parse: 7 callbacks suppressed [ 147.162430][ T7248] netlink: 3 bytes leftover after parsing attributes in process `syz.3.650'. [ 147.206673][ T7249] netlink: 3 bytes leftover after parsing attributes in process `syz.3.650'. [ 147.387789][ T12] hsr_slave_0: left promiscuous mode [ 147.417239][ T12] hsr_slave_1: left promiscuous mode [ 147.455109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.468948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.480401][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.493371][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.549878][ T12] veth1_macvtap: left promiscuous mode [ 147.565735][ T12] veth0_macvtap: left promiscuous mode [ 147.573004][ T12] veth1_vlan: left promiscuous mode [ 147.587762][ T12] veth0_vlan: left promiscuous mode [ 147.658292][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.657'. [ 147.946337][ T5103] Bluetooth: hci3: command tx timeout [ 148.224964][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.271496][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.691491][ T7131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.705920][ T7131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.885454][ T7131] team0: Port device team_slave_0 added [ 148.914403][ T7131] team0: Port device team_slave_1 added [ 149.076074][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.097892][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.167608][ T7131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.185079][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.192422][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.221593][ T7131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.233774][ T7301] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 149.247412][ T6920] veth0_vlan: entered promiscuous mode [ 149.366054][ T6920] veth1_vlan: entered promiscuous mode [ 149.442041][ T7131] hsr_slave_0: entered promiscuous mode [ 149.473071][ T7131] hsr_slave_1: entered promiscuous mode [ 149.487003][ T7131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.495209][ T7131] Cannot create hsr debugfs directory [ 149.583229][ T6920] veth0_macvtap: entered promiscuous mode [ 149.673512][ T6920] veth1_macvtap: entered promiscuous mode [ 149.788957][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.792867][ T7323] netlink: 248 bytes leftover after parsing attributes in process `syz.2.672'. [ 149.802337][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.820353][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.831861][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.842089][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.854425][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.870401][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.937272][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.959099][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.973645][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.985618][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.995822][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.007331][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.019749][ T5103] Bluetooth: hci3: command tx timeout [ 150.028425][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.093721][ T6920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.106254][ T6920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.115289][ T6920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.124368][ T6920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.269129][ T7339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.678'. [ 150.418407][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.436960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.550791][ T7347] pimreg12: entered allmulticast mode [ 150.618103][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.683'. [ 150.637014][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.672609][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.740995][ T7342] pimreg12: left allmulticast mode [ 150.929525][ T7131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.957774][ T7131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.981932][ T7131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.014103][ T7131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.188777][ T7374] netlink: set zone limit has 4 unknown bytes [ 151.281898][ T761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.355768][ T7131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.396144][ T761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.471484][ T7131] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.516347][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.523594][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.640089][ T761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.696652][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.704004][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.756922][ T7389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.696'. [ 151.832794][ T761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.883467][ T7393] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 151.897198][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.907344][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.916477][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.939016][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.948336][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.956624][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.018056][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 152.030249][ T7389] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 152.098082][ T5103] Bluetooth: hci3: command tx timeout [ 152.344275][ T761] bridge_slave_1: left allmulticast mode [ 152.350229][ T761] bridge_slave_1: left promiscuous mode [ 152.356610][ T761] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.369735][ T7416] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 152.383803][ T761] bridge_slave_0: left allmulticast mode [ 152.389804][ T761] bridge_slave_0: left promiscuous mode [ 152.395711][ T761] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.748631][ T761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.763608][ T761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.775291][ T761] bond0 (unregistering): Released all slaves [ 153.362324][ T7131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.381948][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 153.506131][ T761] hsr_slave_0: left promiscuous mode [ 153.547141][ T761] hsr_slave_1: left promiscuous mode [ 153.569740][ T761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.577224][ T761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.615118][ T761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.645579][ T761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.682221][ T761] veth1_macvtap: left promiscuous mode [ 153.692600][ T761] veth0_macvtap: left promiscuous mode [ 153.702115][ T761] veth1_vlan: left promiscuous mode [ 153.708503][ T761] veth0_vlan: left promiscuous mode [ 154.017868][ T5103] Bluetooth: hci0: command tx timeout [ 154.415548][ T761] team0 (unregistering): Port device team_slave_1 removed [ 154.458220][ T761] team0 (unregistering): Port device team_slave_0 removed [ 155.137376][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.717'. [ 155.443020][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.456054][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.464972][ T7397] bridge_slave_0: entered allmulticast mode [ 155.485714][ T7397] bridge_slave_0: entered promiscuous mode [ 155.516428][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.526394][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.541520][ T7397] bridge_slave_1: entered allmulticast mode [ 155.550533][ T7397] bridge_slave_1: entered promiscuous mode [ 155.631735][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.645526][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.752932][ T7397] team0: Port device team_slave_0 added [ 155.790060][ T7397] team0: Port device team_slave_1 added [ 155.847006][ T7493] netlink: 232 bytes leftover after parsing attributes in process `syz.2.728'. [ 155.889636][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 155.942435][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.957256][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.993389][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.009820][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.030630][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.057279][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.103593][ T5103] Bluetooth: hci0: command tx timeout [ 156.107225][ T7131] veth0_vlan: entered promiscuous mode [ 156.179383][ T7502] netlink: 277 bytes leftover after parsing attributes in process `syz.2.731'. [ 156.280320][ T7397] hsr_slave_0: entered promiscuous mode [ 156.302560][ T7397] hsr_slave_1: entered promiscuous mode [ 156.325843][ T7131] veth1_vlan: entered promiscuous mode [ 156.588744][ T7519] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 156.707238][ T7131] veth0_macvtap: entered promiscuous mode [ 156.784645][ T7131] veth1_macvtap: entered promiscuous mode [ 156.796788][ T7530] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 156.903808][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.924609][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.945843][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.966746][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.982679][ T7536] netlink: set zone limit has 4 unknown bytes [ 156.999711][ T7538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.747'. [ 157.002831][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.029231][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.051439][ T7131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.107084][ T7538] Êü: entered promiscuous mode [ 157.132510][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.145612][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.157285][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.168101][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.178071][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.191877][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.209485][ T7131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.237944][ T7544] netlink: 120 bytes leftover after parsing attributes in process `syz.2.749'. [ 157.341738][ T7131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.370122][ T7131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.397179][ T7131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.416344][ T7131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.685960][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.702461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.848326][ T7573] team0: Port device veth0_to_hsr added [ 157.883402][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 157.893476][ T761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.919544][ T761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.928708][ T7397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.983969][ T7397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.021485][ T7397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.063968][ T7397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.103922][ T7586] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.179320][ T4490] Bluetooth: hci0: command tx timeout [ 158.338799][ T7597] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 158.365326][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 158.454346][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.511480][ T7597] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 158.536895][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 158.574872][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.592890][ T7600] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 158.601604][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 158.671625][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.698856][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.721893][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.729238][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.741646][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.748969][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.776822][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.849336][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.084508][ T7610] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 159.115628][ T7610] openvswitch: netlink: Flow key attr not present in new flow. [ 159.147778][ T51] bridge_slave_1: left allmulticast mode [ 159.153685][ T51] bridge_slave_1: left promiscuous mode [ 159.190305][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.258058][ T51] bridge_slave_0: left allmulticast mode [ 159.263876][ T51] bridge_slave_0: left promiscuous mode [ 159.296033][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.537331][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.556340][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.565490][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.575018][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.586777][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.594476][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.080754][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.093604][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.108843][ T51] bond0 (unregistering): Released all slaves [ 160.139363][ T7624] __nla_validate_parse: 2 callbacks suppressed [ 160.139389][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.772'. [ 160.204688][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'. [ 160.257965][ T5108] Bluetooth: hci0: command 0x0419 tx timeout [ 160.530654][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.733715][ T51] hsr_slave_0: left promiscuous mode [ 160.746780][ T51] hsr_slave_1: left promiscuous mode [ 160.753118][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.761244][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.778888][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.786552][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.814825][ T51] veth1_macvtap: left promiscuous mode [ 160.821293][ T51] veth0_macvtap: left promiscuous mode [ 160.826936][ T51] veth1_vlan: left promiscuous mode [ 160.832966][ T51] veth0_vlan: left promiscuous mode [ 161.387287][ T51] team0 (unregistering): Port device team_slave_1 removed [ 161.435655][ T51] team0 (unregistering): Port device team_slave_0 removed [ 161.697755][ T5103] Bluetooth: hci3: command tx timeout [ 161.717722][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 162.171768][ T7397] veth0_vlan: entered promiscuous mode [ 162.223099][ T7397] veth1_vlan: entered promiscuous mode [ 162.300051][ T7692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.344706][ T5103] Bluetooth: hci0: command 0x0419 tx timeout [ 162.458704][ T7630] chnl_net:caif_netlink_parms(): no params data found [ 162.553668][ T7397] veth0_macvtap: entered promiscuous mode [ 162.651438][ T7397] veth1_macvtap: entered promiscuous mode [ 162.746926][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.755194][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.763109][ T7630] bridge_slave_0: entered allmulticast mode [ 162.772218][ T7630] bridge_slave_0: entered promiscuous mode [ 162.815107][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.825590][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.833120][ T7630] bridge_slave_1: entered allmulticast mode [ 162.841069][ T7630] bridge_slave_1: entered promiscuous mode [ 162.905333][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 162.910263][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.927396][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.942252][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.953103][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.963254][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.974251][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.009380][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.032262][ T7630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.061851][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.073111][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.084730][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.096536][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.109669][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.127628][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.149354][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.182924][ T7630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.199735][ T7725] netlink: 6 bytes leftover after parsing attributes in process `syz.3.800'. [ 163.229527][ T7397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.240466][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 163.258722][ T7397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.281091][ T7397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.305700][ T7397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.416535][ T7630] team0: Port device team_slave_0 added [ 163.431566][ T7630] team0: Port device team_slave_1 added [ 163.525006][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.541228][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.542102][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 163.590118][ T7630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.630842][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.645990][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.685025][ T7630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.787765][ T5103] Bluetooth: hci3: command tx timeout [ 163.872568][ T7630] hsr_slave_0: entered promiscuous mode [ 163.892046][ T7630] hsr_slave_1: entered promiscuous mode [ 163.958623][ T7630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.966258][ T7630] Cannot create hsr debugfs directory [ 164.420010][ T7772] vlan2: entered promiscuous mode [ 164.431579][ T7772] bridge0: entered promiscuous mode [ 164.460083][ T7772] vlan2: entered allmulticast mode [ 164.467098][ T7772] bridge0: entered allmulticast mode [ 164.470633][ T7782] netlink: 1640 bytes leftover after parsing attributes in process `syz.3.808'. [ 164.499918][ T7772] bridge0: left allmulticast mode [ 164.524848][ T7772] bridge0: left promiscuous mode [ 164.609657][ T2431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.624168][ T2431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.863056][ T7765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.893911][ T7765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.048073][ T7804] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.084753][ T7804] netlink: 5 bytes leftover after parsing attributes in process `syz.3.816'. [ 165.140019][ T7804] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 165.160506][ T7804] 0ªX¹¦Dö»: entered allmulticast mode [ 165.281869][ T7810] netlink: 'syz.1.818': attribute type 5 has an invalid length. [ 165.466426][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 165.495043][ T2492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.635726][ T2492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.659970][ T7826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.822'. [ 165.741483][ T2492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.820643][ T7630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.834746][ T7630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.845501][ T7630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.859021][ T5103] Bluetooth: hci3: command tx timeout [ 165.868407][ T7630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.913343][ T2492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.058778][ T2492] bridge_slave_1: left allmulticast mode [ 166.064634][ T2492] bridge_slave_1: left promiscuous mode [ 166.071650][ T2492] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.081641][ T2492] bridge_slave_0: left allmulticast mode [ 166.087988][ T2492] bridge_slave_0: left promiscuous mode [ 166.094091][ T2492] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.198010][ T7831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.559717][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.583104][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.603593][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.622541][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.646275][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.659449][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.722187][ T2492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.736851][ T2492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.751902][ T2492] bond0 (unregistering): Released all slaves [ 166.770402][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.825'. [ 166.820916][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.940865][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.963479][ T7845] netlink: 123 bytes leftover after parsing attributes in process `syz.3.829'. [ 167.165184][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.172443][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.396073][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.403316][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.505623][ T2492] hsr_slave_0: left promiscuous mode [ 167.520553][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 167.529813][ T2492] hsr_slave_1: left promiscuous mode [ 167.558391][ T2492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.575754][ T2492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.584357][ T2492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.593116][ T2492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.645453][ T2492] veth1_macvtap: left promiscuous mode [ 167.651309][ T2492] veth0_macvtap: left promiscuous mode [ 167.657323][ T2492] veth1_vlan: left promiscuous mode [ 167.663160][ T2492] veth0_vlan: left promiscuous mode [ 167.688348][ T7871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.835'. [ 167.941802][ T5103] Bluetooth: hci3: command tx timeout [ 168.165060][ T2492] team0 (unregistering): Port device team_slave_1 removed [ 168.213385][ T2492] team0 (unregistering): Port device team_slave_0 removed [ 168.604805][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'. [ 168.739977][ T5103] Bluetooth: hci0: command tx timeout [ 168.838210][ T7888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.840'. [ 168.851036][ T7888] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 169.043351][ T7841] chnl_net:caif_netlink_parms(): no params data found [ 169.620150][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.850'. [ 169.656283][ T7919] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 169.685995][ T7919] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.849'. [ 169.712395][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.728640][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.735940][ T7841] bridge_slave_0: entered allmulticast mode [ 169.762337][ T7841] bridge_slave_0: entered promiscuous mode [ 169.791484][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.805137][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.816286][ T7841] bridge_slave_1: entered allmulticast mode [ 169.847814][ T7841] bridge_slave_1: entered promiscuous mode [ 169.880597][ T7630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.140627][ T7940] netlink: 'syz.1.858': attribute type 28 has an invalid length. [ 170.153381][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.221038][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.336061][ T7841] team0: Port device team_slave_0 added [ 170.371534][ T7841] team0: Port device team_slave_1 added [ 170.514542][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.530256][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.557949][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.596037][ T7955] __nla_validate_parse: 2 callbacks suppressed [ 170.596061][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 170.626424][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.651183][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.708004][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.720939][ T7959] FAULT_INJECTION: forcing a failure. [ 170.720939][ T7959] name failslab, interval 1, probability 0, space 0, times 0 [ 170.764678][ T7959] CPU: 1 PID: 7959 Comm: syz.1.864 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 170.774734][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 170.784836][ T7959] Call Trace: [ 170.788154][ T7959] [ 170.791101][ T7959] dump_stack_lvl+0x241/0x360 [ 170.795800][ T7959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.801017][ T7959] ? __pfx__printk+0x10/0x10 [ 170.805624][ T7959] ? __pfx___might_resched+0x10/0x10 [ 170.810932][ T7959] should_fail_ex+0x3b0/0x4e0 [ 170.815630][ T7959] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 170.821893][ T7959] should_failslab+0x9/0x20 [ 170.826426][ T7959] __kmalloc_noprof+0xd8/0x400 [ 170.831206][ T7959] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 170.837300][ T7959] genl_rcv_msg+0x802/0xec0 [ 170.841836][ T7959] ? mark_lock+0x9a/0x350 [ 170.846202][ T7959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.851368][ T7959] ? __pfx_lock_acquire+0x10/0x10 [ 170.856437][ T7959] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 170.861842][ T7959] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 170.867147][ T7959] ? __pfx_nl80211_post_doit+0x10/0x10 [ 170.872634][ T7959] ? __pfx___might_resched+0x10/0x10 [ 170.877948][ T7959] netlink_rcv_skb+0x1e3/0x430 [ 170.882731][ T7959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.887772][ T7959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.893082][ T7959] ? __netlink_deliver_tap+0x77e/0x7c0 [ 170.898567][ T7959] genl_rcv+0x28/0x40 [ 170.902571][ T7959] netlink_unicast+0x7f0/0x990 [ 170.907350][ T7959] ? __pfx_netlink_unicast+0x10/0x10 [ 170.912644][ T7959] ? __virt_addr_valid+0x183/0x520 [ 170.917777][ T7959] ? __check_object_size+0x49c/0x900 [ 170.923098][ T7959] ? bpf_lsm_netlink_send+0x9/0x10 [ 170.928231][ T7959] netlink_sendmsg+0x8e4/0xcb0 [ 170.933021][ T7959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.938321][ T7959] ? __import_iovec+0x536/0x820 [ 170.943288][ T7959] ? aa_sock_msg_perm+0x91/0x160 [ 170.948268][ T7959] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.953584][ T7959] ? security_socket_sendmsg+0x87/0xb0 [ 170.959067][ T7959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.964366][ T7959] __sock_sendmsg+0x221/0x270 [ 170.969149][ T7959] ____sys_sendmsg+0x525/0x7d0 [ 170.973962][ T7959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.979300][ T7959] __sys_sendmsg+0x2b0/0x3a0 [ 170.983939][ T7959] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.989077][ T7959] ? vfs_write+0x7c4/0xc90 [ 170.993550][ T7959] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.999893][ T7959] ? do_syscall_64+0x100/0x230 [ 171.004693][ T7959] ? do_syscall_64+0xb6/0x230 [ 171.009385][ T7959] do_syscall_64+0xf3/0x230 [ 171.013902][ T7959] ? clear_bhb_loop+0x35/0x90 [ 171.018598][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.024508][ T7959] RIP: 0033:0x7efffaf75bd9 [ 171.028937][ T7959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.048574][ T7959] RSP: 002b:00007efffbdfc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.057032][ T7959] RAX: ffffffffffffffda RBX: 00007efffb103f60 RCX: 00007efffaf75bd9 [ 171.065029][ T7959] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 171.073021][ T7959] RBP: 00007efffbdfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.081451][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.089876][ T7959] R13: 000000000000000b R14: 00007efffb103f60 R15: 00007ffd5ea89568 [ 171.097969][ T7959] [ 171.120255][ T5103] Bluetooth: hci0: command tx timeout [ 171.182852][ T7841] hsr_slave_0: entered promiscuous mode [ 171.218538][ T7841] hsr_slave_1: entered promiscuous mode [ 171.296184][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 171.325308][ T7967] netlink: 'syz.1.867': attribute type 33 has an invalid length. [ 171.354916][ T7967] netlink: 152 bytes leftover after parsing attributes in process `syz.1.867'. [ 171.595316][ T7630] veth0_vlan: entered promiscuous mode [ 171.732214][ T7630] veth1_vlan: entered promiscuous mode [ 171.873535][ T7630] veth0_macvtap: entered promiscuous mode [ 171.996063][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 172.023156][ T7630] veth1_macvtap: entered promiscuous mode [ 172.167167][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.193663][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.204853][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.226829][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.243453][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.262419][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.284031][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.325027][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.341022][ T7996] delete_channel: no stack [ 172.363005][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.392613][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.415131][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.430815][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.444373][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.458269][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.483628][ T7630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.509997][ T7630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.520990][ T8005] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.532054][ T7630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.543471][ T7630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.730360][ T7841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.763936][ T8016] x_tables: duplicate underflow at hook 3 [ 172.806452][ T7841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.848260][ T7841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.886095][ T7841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.926760][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 172.951120][ T7765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.979218][ T7765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.042785][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 173.074550][ T7765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.089169][ T7765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.148728][ T5103] Bluetooth: hci0: command tx timeout [ 173.347666][ T8039] netlink: set zone limit has 4 unknown bytes [ 173.413016][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.474806][ T7841] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.518844][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.526098][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.725104][ T2431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.785918][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.793189][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.927028][ T2431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.962518][ T7841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.135852][ T7841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.182571][ T2431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.229671][ T7841] veth0_vlan: entered promiscuous mode [ 174.242929][ T7841] veth1_vlan: entered promiscuous mode [ 174.284911][ T7841] veth0_macvtap: entered promiscuous mode [ 174.295879][ T7841] veth1_macvtap: entered promiscuous mode [ 174.318009][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.328978][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.340516][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.352189][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.362287][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.372915][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.382842][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.393608][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.405356][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.428157][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.438996][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.451134][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.462639][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.472712][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.483711][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.497487][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.544388][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.582080][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.655913][ T2431] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.710469][ T7841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.759487][ T7841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.769782][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 174.777645][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 174.787723][ T7841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.787767][ T7841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.096440][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.106995][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.116782][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.141924][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.150133][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.158608][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.207796][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.225944][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.232221][ T5103] Bluetooth: hci0: command tx timeout [ 175.317090][ T2431] bridge_slave_1: left allmulticast mode [ 175.338696][ T2431] bridge_slave_1: left promiscuous mode [ 175.353430][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.365534][ T2431] bridge_slave_0: left allmulticast mode [ 175.373934][ T2431] bridge_slave_0: left promiscuous mode [ 175.399138][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.584841][ T8102] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 175.601634][ T8102] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 175.610082][ T8102] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 175.619431][ T8102] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 175.627341][ T8102] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 175.635444][ T8102] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 175.644549][ T8102] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 175.955674][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 176.004231][ T2431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.024353][ T2431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.042745][ T2431] bond0 (unregistering): Released all slaves [ 176.075244][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 176.120425][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.147868][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.323763][ T8116] FAULT_INJECTION: forcing a failure. [ 176.323763][ T8116] name failslab, interval 1, probability 0, space 0, times 0 [ 176.368928][ T8116] CPU: 0 PID: 8116 Comm: syz.1.916 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 176.378992][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 176.389081][ T8116] Call Trace: [ 176.392372][ T8116] [ 176.395318][ T8116] dump_stack_lvl+0x241/0x360 [ 176.400209][ T8116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.405417][ T8116] ? __pfx__printk+0x10/0x10 [ 176.410014][ T8116] ? __pfx___might_resched+0x10/0x10 [ 176.415304][ T8116] ? __asan_memset+0x23/0x50 [ 176.419918][ T8116] ? lockdep_init_map_type+0xa1/0x910 [ 176.425315][ T8116] should_fail_ex+0x3b0/0x4e0 [ 176.430029][ T8116] should_failslab+0x9/0x20 [ 176.434579][ T8116] __kmalloc_node_noprof+0xdf/0x440 [ 176.439809][ T8116] ? kvmalloc_node_noprof+0x72/0x190 [ 176.445169][ T8116] kvmalloc_node_noprof+0x72/0x190 [ 176.450297][ T8116] alloc_netdev_mqs+0xa1f/0xff0 [ 176.455167][ T8116] rtnl_create_link+0x2f9/0xc20 [ 176.460047][ T8116] rtnl_newlink+0x1423/0x20a0 [ 176.464749][ T8116] ? rtnl_newlink+0xb11/0x20a0 [ 176.469554][ T8116] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.474602][ T8116] ? do_raw_spin_unlock+0x13c/0x8b0 [ 176.479851][ T8116] ? __mutex_lock+0x9a5/0xd70 [ 176.484550][ T8116] ? __mutex_lock+0x527/0xd70 [ 176.489262][ T8116] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.494300][ T8116] rtnetlink_rcv_msg+0x89b/0x1180 [ 176.499345][ T8116] ? rtnetlink_rcv_msg+0x208/0x1180 [ 176.504559][ T8116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.510035][ T8116] ? __local_bh_enable_ip+0x168/0x200 [ 176.515417][ T8116] ? lockdep_hardirqs_on+0x99/0x150 [ 176.520665][ T8116] ? __local_bh_enable_ip+0x168/0x200 [ 176.526043][ T8116] ? dev_hard_start_xmit+0x773/0x7e0 [ 176.531348][ T8116] ? __dev_queue_xmit+0x2da/0x3e90 [ 176.536475][ T8116] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 176.542210][ T8116] ? __dev_queue_xmit+0x2da/0x3e90 [ 176.547339][ T8116] ? __dev_queue_xmit+0x1763/0x3e90 [ 176.552553][ T8116] ? kasan_save_track+0x51/0x80 [ 176.557429][ T8116] ? do_syscall_64+0xf3/0x230 [ 176.562118][ T8116] ? __dev_queue_xmit+0x2da/0x3e90 [ 176.567260][ T8116] ? __pfx___dev_queue_xmit+0x10/0x10 [ 176.572661][ T8116] ? ref_tracker_free+0x643/0x7e0 [ 176.577719][ T8116] netlink_rcv_skb+0x1e3/0x430 [ 176.582508][ T8116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.588071][ T8116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.593392][ T8116] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.598701][ T8116] netlink_unicast+0x7f0/0x990 [ 176.603484][ T8116] ? __pfx_netlink_unicast+0x10/0x10 [ 176.608781][ T8116] ? __virt_addr_valid+0x183/0x520 [ 176.613912][ T8116] ? __check_object_size+0x49c/0x900 [ 176.619217][ T8116] ? bpf_lsm_netlink_send+0x9/0x10 [ 176.624351][ T8116] netlink_sendmsg+0x8e4/0xcb0 [ 176.629154][ T8116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.634451][ T8116] ? __import_iovec+0x536/0x820 [ 176.639311][ T8116] ? aa_sock_msg_perm+0x91/0x160 [ 176.644265][ T8116] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.649556][ T8116] ? security_socket_sendmsg+0x87/0xb0 [ 176.655033][ T8116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.660420][ T8116] __sock_sendmsg+0x221/0x270 [ 176.665135][ T8116] ____sys_sendmsg+0x525/0x7d0 [ 176.669936][ T8116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.675255][ T8116] __sys_sendmsg+0x2b0/0x3a0 [ 176.679881][ T8116] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.685003][ T8116] ? vfs_write+0x7c4/0xc90 [ 176.689467][ T8116] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.695802][ T8116] ? do_syscall_64+0x100/0x230 [ 176.700576][ T8116] ? do_syscall_64+0xb6/0x230 [ 176.705266][ T8116] do_syscall_64+0xf3/0x230 [ 176.709782][ T8116] ? clear_bhb_loop+0x35/0x90 [ 176.714476][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.720552][ T8116] RIP: 0033:0x7efffaf75bd9 [ 176.724975][ T8116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.744601][ T8116] RSP: 002b:00007efffbdfc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.753026][ T8116] RAX: ffffffffffffffda RBX: 00007efffb103f60 RCX: 00007efffaf75bd9 [ 176.761118][ T8116] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 176.769181][ T8116] RBP: 00007efffbdfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.777167][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.785247][ T8116] R13: 000000000000000b R14: 00007efffb103f60 R15: 00007ffd5ea89568 [ 176.793253][ T8116] [ 176.818490][ T8125] bridge_slave_1: left allmulticast mode [ 176.824211][ T8125] bridge_slave_1: left promiscuous mode [ 176.842772][ T8125] bridge2: port 1(bridge_slave_1) entered disabled state [ 176.975362][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'. [ 177.169700][ T8137] netlink: 104 bytes leftover after parsing attributes in process `syz.2.922'. [ 177.217833][ T5103] Bluetooth: hci3: command tx timeout [ 177.264992][ T8142] team_slave_0: entered allmulticast mode [ 177.280173][ T8145] xt_TCPMSS: Only works on TCP SYN packets [ 177.306591][ T8142] team0: Port device team_slave_0 removed [ 177.451493][ T2431] hsr_slave_0: left promiscuous mode [ 177.465500][ T2431] hsr_slave_1: left promiscuous mode [ 177.481387][ T2431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.488964][ T2431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.505552][ T2431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.514533][ T2431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.553648][ T2431] veth1_macvtap: left promiscuous mode [ 177.567727][ T2431] veth0_macvtap: left promiscuous mode [ 177.573577][ T2431] veth1_vlan: left promiscuous mode [ 177.579423][ T2431] veth0_vlan: left promiscuous mode [ 177.600218][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 178.176338][ T2431] team0 (unregistering): Port device team_slave_1 removed [ 178.215455][ T2431] team0 (unregistering): Port device team_slave_0 removed [ 178.807162][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 178.958245][ T8170] ɶƣ0GC¦: entered promiscuous mode [ 179.103086][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.123799][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.131781][ T8085] bridge_slave_0: entered allmulticast mode [ 179.140215][ T8085] bridge_slave_0: entered promiscuous mode [ 179.150746][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.159084][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.176862][ T8085] bridge_slave_1: entered allmulticast mode [ 179.185582][ T8085] bridge_slave_1: entered promiscuous mode [ 179.294246][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.308681][ T5103] Bluetooth: hci3: command tx timeout [ 179.335132][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.434463][ T8085] team0: Port device team_slave_0 added [ 179.444759][ T8085] team0: Port device team_slave_1 added [ 179.504841][ T2431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.524031][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.531362][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.558311][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.573541][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.580665][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.606825][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.636842][ T2431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.703244][ T8085] hsr_slave_0: entered promiscuous mode [ 179.712175][ T8085] hsr_slave_1: entered promiscuous mode [ 179.721244][ T8085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.730330][ T8085] Cannot create hsr debugfs directory [ 179.752533][ T2431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.851638][ T2431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.232615][ T2431] bridge_slave_1: left allmulticast mode [ 180.234792][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 180.255514][ T2431] bridge_slave_1: left promiscuous mode [ 180.268444][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.311704][ T2431] bridge_slave_0: left allmulticast mode [ 180.334209][ T2431] bridge_slave_0: left promiscuous mode [ 180.338233][ T8202] vcan0: tx drop: invalid da for name 0x0010000000000000 [ 180.348388][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.454550][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.465217][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.475109][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.489338][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.511773][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.526941][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.542344][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 180.830509][ T2431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.842537][ T2431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.855335][ T2431] bond0 (unregistering): Released all slaves [ 180.882407][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 181.074974][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.946'. [ 181.387512][ T5108] Bluetooth: hci3: command tx timeout [ 181.454825][ T8234] netlink: 56 bytes leftover after parsing attributes in process `syz.2.951'. [ 181.525831][ T2431] hsr_slave_0: left promiscuous mode [ 181.546417][ T2431] hsr_slave_1: left promiscuous mode [ 181.556054][ T2431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.564828][ T2431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.573692][ T2431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.582174][ T2431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.616431][ T2431] veth1_macvtap: left promiscuous mode [ 181.622702][ T2431] veth0_macvtap: left promiscuous mode [ 181.628959][ T2431] veth1_vlan: left promiscuous mode [ 181.634444][ T2431] veth0_vlan: left promiscuous mode [ 181.661058][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 182.163464][ T2431] team0 (unregistering): Port device team_slave_1 removed [ 182.230626][ T2431] team0 (unregistering): Port device team_slave_0 removed [ 182.412345][ T8246] sctp: [Deprecated]: syz.3.955 (pid 8246) Use of int in maxseg socket option. [ 182.412345][ T8246] Use struct sctp_assoc_value instead [ 182.563467][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'. [ 182.586267][ T5108] Bluetooth: hci0: command tx timeout [ 182.766624][ T8085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.857389][ T8085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.929083][ T8254] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.958'. [ 182.971683][ T8085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.008592][ T8085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.147906][ T8209] chnl_net:caif_netlink_parms(): no params data found [ 183.249317][ T8270] netlink: 'syz.1.963': attribute type 6 has an invalid length. [ 183.277613][ T8269] netlink: 'syz.1.963': attribute type 6 has an invalid length. [ 183.328024][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.963'. [ 183.468211][ T5108] Bluetooth: hci3: command tx timeout [ 183.514532][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.966'. [ 183.568522][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.576039][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.598377][ T8209] bridge_slave_0: entered allmulticast mode [ 183.627825][ T8209] bridge_slave_0: entered promiscuous mode [ 183.639560][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.646737][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.655248][ T8209] bridge_slave_1: entered allmulticast mode [ 183.664378][ T8209] bridge_slave_1: entered promiscuous mode [ 183.722508][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 183.761787][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.799391][ T8209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.851515][ T8209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.025507][ T8209] team0: Port device team_slave_0 added [ 184.056630][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.102728][ T8209] team0: Port device team_slave_1 added [ 184.230947][ T8209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.246700][ T8209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.274457][ T8209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.340671][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.347922][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.401937][ T8209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.416026][ T8209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.446164][ T8209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.460231][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.467439][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.493865][ T8322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.979'. [ 184.498909][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 184.651938][ T8209] hsr_slave_0: entered promiscuous mode [ 184.661547][ T8209] hsr_slave_1: entered promiscuous mode [ 184.668850][ T5108] Bluetooth: hci0: command tx timeout [ 185.231210][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.294957][ T8366] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 185.868317][ T8391] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 185.897885][ T8209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.931740][ T8209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.979152][ T8209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.019953][ T8209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.210458][ T8085] veth0_vlan: entered promiscuous mode [ 186.304610][ T8409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 186.305243][ T8085] veth1_vlan: entered promiscuous mode [ 186.333977][ T8409] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 186.460286][ T8085] veth0_macvtap: entered promiscuous mode [ 186.474958][ T8085] veth1_macvtap: entered promiscuous mode [ 186.536331][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.548586][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.559919][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.577787][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.597530][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.616157][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.629350][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.642801][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.658841][ T8422] __nla_validate_parse: 7 callbacks suppressed [ 186.658863][ T8422] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1011'. [ 186.705998][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.735049][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.747731][ T5108] Bluetooth: hci0: command tx timeout [ 186.748167][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 186.770940][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.785673][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.795897][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.806628][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.833518][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.896701][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 186.924815][ T8085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.945787][ T8085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.956586][ T8085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.965873][ T8085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.988356][ T8209] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.122998][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.130267][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.166581][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.173905][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.228979][ T8438] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1017'. [ 187.316558][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.350444][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.464552][ T8442] can: request_module (can-proto-0) failed. [ 187.509550][ T8443] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 187.555031][ T2492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.646183][ T2492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.124986][ T8209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.188709][ T8486] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.331128][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.401128][ T8209] veth0_vlan: entered promiscuous mode [ 188.417112][ T8209] veth1_vlan: entered promiscuous mode [ 188.476349][ T8209] veth0_macvtap: entered promiscuous mode [ 188.493567][ T8209] veth1_macvtap: entered promiscuous mode [ 188.515216][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.526485][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.538461][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.549107][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.561012][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.571929][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.583216][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.593892][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.605965][ T8209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.633331][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.644436][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.655824][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.666551][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.676598][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.687842][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.698079][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.709643][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.721746][ T8209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.751587][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.775324][ T8209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.784939][ T8209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.795946][ T8209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.804732][ T8209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.817895][ T5108] Bluetooth: hci0: command tx timeout [ 188.901112][ T2431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.909258][ T2431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.943134][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.951884][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.155271][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.258988][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 189.317727][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.607102][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.618407][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.630700][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.644931][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.654219][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.665410][ T8514] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 189.673369][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.705963][ T35] bridge_slave_1: left allmulticast mode [ 189.714218][ T35] bridge_slave_1: left promiscuous mode [ 189.720103][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.732790][ T35] bridge_slave_0: left allmulticast mode [ 189.744782][ T35] bridge_slave_0: left promiscuous mode [ 189.750960][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.843171][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 190.244930][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.260126][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.274134][ T35] bond0 (unregistering): Released all slaves [ 190.310370][ T8524] macvtap4: entered promiscuous mode [ 190.338039][ T8524] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 190.607699][ T8533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.676839][ T8535] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 190.706590][ T8535] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 191.074106][ T35] hsr_slave_0: left promiscuous mode [ 191.091026][ T35] hsr_slave_1: left promiscuous mode [ 191.105740][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.116214][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.127207][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.135051][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.160241][ T35] veth1_macvtap: left promiscuous mode [ 191.165834][ T35] veth0_macvtap: left promiscuous mode [ 191.171838][ T35] veth1_vlan: left promiscuous mode [ 191.177276][ T35] veth0_vlan: left promiscuous mode [ 191.689517][ T35] team0 (unregistering): Port device team_slave_1 removed [ 191.699350][ T5103] Bluetooth: hci0: command tx timeout [ 191.795366][ T35] team0 (unregistering): Port device team_slave_0 removed [ 192.031805][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.042693][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.051481][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.060188][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.070286][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 192.078011][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.480814][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 193.277191][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 193.486038][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.605760][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 193.741932][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.753263][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.764880][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.774459][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.781553][ T4490] Bluetooth: hci0: command tx timeout [ 193.797793][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.807810][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.816067][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.892173][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.915996][ T8591] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 194.098093][ T5103] Bluetooth: hci3: command tx timeout [ 194.104575][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.381216][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.400889][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.437781][ T8509] bridge_slave_0: entered allmulticast mode [ 194.445257][ T8509] bridge_slave_0: entered promiscuous mode [ 194.471594][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.478872][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.486235][ T8509] bridge_slave_1: entered allmulticast mode [ 194.495083][ T8509] bridge_slave_1: entered promiscuous mode [ 194.503253][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.506640][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.517648][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.532327][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.541260][ T8553] bridge_slave_0: entered allmulticast mode [ 194.541507][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.549009][ T8553] bridge_slave_0: entered promiscuous mode [ 194.557298][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.569338][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.576803][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.664233][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.677507][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.715543][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.735261][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.746420][ T8553] bridge_slave_1: entered allmulticast mode [ 194.754934][ T8553] bridge_slave_1: entered promiscuous mode [ 194.806308][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.837244][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.950905][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.016450][ T8509] team0: Port device team_slave_0 added [ 195.041073][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.079775][ T35] bridge_slave_1: left allmulticast mode [ 195.085479][ T35] bridge_slave_1: left promiscuous mode [ 195.097832][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.108866][ T35] bridge_slave_0: left allmulticast mode [ 195.114778][ T35] bridge_slave_0: left promiscuous mode [ 195.120946][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.532886][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.548392][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.562174][ T35] bond0 (unregistering): Released all slaves [ 195.585491][ T8509] team0: Port device team_slave_1 added [ 195.686565][ T8553] team0: Port device team_slave_0 added [ 195.759015][ T8553] team0: Port device team_slave_1 added [ 195.837760][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.844862][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.873065][ T5103] Bluetooth: hci0: command tx timeout [ 195.873111][ T5108] Bluetooth: hci1: command tx timeout [ 195.895098][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.909626][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.916693][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.944013][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.046453][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.053696][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.083399][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.173208][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.180921][ T5108] Bluetooth: hci3: command tx timeout [ 196.182529][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.221519][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.336969][ T35] hsr_slave_0: left promiscuous mode [ 196.344096][ T35] hsr_slave_1: left promiscuous mode [ 196.351310][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.359308][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.367689][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.375300][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.399660][ T35] veth1_macvtap: left promiscuous mode [ 196.405208][ T35] veth0_macvtap: left promiscuous mode [ 196.410978][ T35] veth1_vlan: left promiscuous mode [ 196.416333][ T35] veth0_vlan: left promiscuous mode [ 196.657675][ T5108] Bluetooth: hci4: command tx timeout [ 196.943364][ T35] team0 (unregistering): Port device team_slave_1 removed [ 196.995038][ T35] team0 (unregistering): Port device team_slave_0 removed [ 197.415425][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 197.444957][ T8509] hsr_slave_0: entered promiscuous mode [ 197.456691][ T8509] hsr_slave_1: entered promiscuous mode [ 197.609568][ T8553] hsr_slave_0: entered promiscuous mode [ 197.629782][ T8553] hsr_slave_1: entered promiscuous mode [ 197.647611][ T8553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.656471][ T8553] Cannot create hsr debugfs directory [ 197.683563][ T8644] netlink: zone id is out of range [ 197.691526][ T8644] netlink: zone id is out of range [ 197.698553][ T8644] netlink: zone id is out of range [ 197.704205][ T8644] netlink: zone id is out of range [ 197.710346][ T8644] netlink: zone id is out of range [ 197.715616][ T8644] netlink: zone id is out of range [ 197.720924][ T8644] netlink: zone id is out of range [ 197.726618][ T8644] netlink: zone id is out of range [ 197.734678][ T8644] netlink: zone id is out of range [ 197.749325][ T8644] netlink: zone id is out of range [ 197.937681][ T5108] Bluetooth: hci1: command tx timeout [ 197.937792][ T5103] Bluetooth: hci0: command tx timeout [ 197.976702][ T8656] Bluetooth: MGMT ver 1.22 [ 198.127073][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.135218][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.145837][ T8584] bridge_slave_0: entered allmulticast mode [ 198.153574][ T8584] bridge_slave_0: entered promiscuous mode [ 198.162889][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.170298][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.178897][ T8584] bridge_slave_1: entered allmulticast mode [ 198.186594][ T8584] bridge_slave_1: entered promiscuous mode [ 198.200560][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 198.257721][ T5103] Bluetooth: hci3: command tx timeout [ 198.314778][ T8659] "syz.3.1083" (8659) uses obsolete ecb(arc4) skcipher [ 198.399949][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.442081][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.628214][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.640881][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.742698][ T8584] team0: Port device team_slave_0 added [ 198.749039][ T5103] Bluetooth: hci4: command tx timeout [ 198.864303][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.874868][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.895149][ T8584] team0: Port device team_slave_1 added [ 198.964911][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.986058][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.999996][ T8606] bridge_slave_0: entered allmulticast mode [ 199.008074][ T8606] bridge_slave_0: entered promiscuous mode [ 199.017189][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.027474][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.034801][ T8606] bridge_slave_1: entered allmulticast mode [ 199.043385][ T8606] bridge_slave_1: entered promiscuous mode [ 199.077795][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.097876][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.123005][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.131145][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.197715][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.274165][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.285828][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.308390][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.315383][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.342735][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.362284][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.415975][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.522390][ T8606] team0: Port device team_slave_0 added [ 199.538161][ T8584] hsr_slave_0: entered promiscuous mode [ 199.545043][ T8584] hsr_slave_1: entered promiscuous mode [ 199.552085][ T8584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.559752][ T8584] Cannot create hsr debugfs directory [ 199.575151][ T8509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.591452][ T8606] team0: Port device team_slave_1 added [ 199.639506][ T8509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.720519][ T8509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.732790][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.741298][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.768477][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.799659][ T8509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.818851][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.825945][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.853415][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.964934][ T35] bridge_slave_1: left allmulticast mode [ 199.971372][ T35] bridge_slave_1: left promiscuous mode [ 199.977469][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.989223][ T35] bridge_slave_0: left allmulticast mode [ 199.994972][ T35] bridge_slave_0: left promiscuous mode [ 200.001577][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.017841][ T5108] Bluetooth: hci1: command tx timeout [ 200.337868][ T5108] Bluetooth: hci3: command tx timeout [ 200.447339][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.461121][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.473908][ T35] bond0 (unregistering): Released all slaves [ 200.527337][ T8606] hsr_slave_0: entered promiscuous mode [ 200.534890][ T8606] hsr_slave_1: entered promiscuous mode [ 200.546301][ T8606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.564741][ T8606] Cannot create hsr debugfs directory [ 200.817690][ T5108] Bluetooth: hci4: command tx timeout [ 200.884945][ T35] hsr_slave_0: left promiscuous mode [ 200.891471][ T35] hsr_slave_1: left promiscuous mode [ 200.901197][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.917532][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.925975][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.933678][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.958322][ T35] veth1_macvtap: left promiscuous mode [ 200.963993][ T35] veth0_macvtap: left promiscuous mode [ 200.969756][ T35] veth1_vlan: left promiscuous mode [ 200.976154][ T35] veth0_vlan: left promiscuous mode [ 201.401456][ T35] team0 (unregistering): Port device veth0_to_hsr removed [ 201.490477][ T35] team0 (unregistering): Port device team_slave_1 removed [ 201.531516][ T35] team0 (unregistering): Port device team_slave_0 removed [ 201.860752][ T5108] Bluetooth: hci2: command 0x0406 tx timeout [ 202.040453][ T8553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.101995][ T5103] Bluetooth: hci1: command tx timeout [ 202.111773][ T8553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.136471][ T8553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.195869][ T8584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.208184][ T8584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.249156][ T8553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.344476][ T8584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.355064][ T8584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.483341][ T8584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.497710][ T8584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.577035][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.601773][ T8584] bond0: (slave netdevsim0): Releasing backup interface [ 202.626092][ T8584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.642077][ T8584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.743556][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.783568][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.790851][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.835192][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.842466][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.897552][ T5103] Bluetooth: hci4: command tx timeout [ 202.906847][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.978167][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.009963][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.017120][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.056719][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.064046][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.392367][ T8606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.412954][ T8606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.471661][ T8606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.490310][ T8606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.545415][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.603905][ T8584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.617338][ T8584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.645724][ T8584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.671747][ T8584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.712281][ T8553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.885750][ T8553] veth0_vlan: entered promiscuous mode [ 203.964112][ T8553] veth1_vlan: entered promiscuous mode [ 204.050304][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.078491][ T8721] sctp: [Deprecated]: syz.3.1099 (pid 8721) Use of int in max_burst socket option deprecated. [ 204.078491][ T8721] Use struct sctp_assoc_value instead [ 204.104209][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.135535][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.180890][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.188165][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.217708][ T8553] veth0_macvtap: entered promiscuous mode [ 204.253998][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.266797][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.274051][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.322522][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.329807][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.346411][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.353703][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.458488][ T8553] veth1_macvtap: entered promiscuous mode [ 204.535694][ T8509] veth0_vlan: entered promiscuous mode [ 204.703408][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.703784][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.722503][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.726359][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.742715][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.750874][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.763240][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.775275][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.783414][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.790547][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.808911][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.848486][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.867631][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.887749][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.912750][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.934698][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.963594][ T8584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.031881][ T7765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.138211][ T8509] veth1_vlan: entered promiscuous mode [ 205.170906][ T8553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.197628][ T8553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.206520][ T8553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.267523][ T8553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.349635][ T7765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.509559][ T7765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.662174][ T7765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.765984][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.844148][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.858966][ T8509] veth0_macvtap: entered promiscuous mode [ 205.898051][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.905923][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.932447][ T8509] veth1_macvtap: entered promiscuous mode [ 205.987267][ T7765] bridge_slave_0: left allmulticast mode [ 205.994898][ T7765] bridge_slave_0: left promiscuous mode [ 206.001471][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.315640][ T7765] team0: Port device vlan2 removed [ 206.606982][ T7765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.624641][ T7765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.638502][ T7765] bond0 (unregistering): Released all slaves [ 206.653975][ T7765] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 206.668163][ T7765] bond1 (unregistering): Released all slaves [ 206.750999][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.756631][ T8584] veth0_vlan: entered promiscuous mode [ 206.773649][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.796499][ T7765] ɶƣ0GC¦: left promiscuous mode [ 206.845009][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.860155][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.871347][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.882978][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.893137][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.903783][ T5103] Bluetooth: hci2: command tx timeout [ 206.903827][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.906050][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.960414][ T7765] tipc: Disabling bearer [ 206.973057][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.973341][ T7765] tipc: Left network mode [ 206.986689][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.999646][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.010271][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.021171][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.032152][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.045018][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.069809][ T8584] veth1_vlan: entered promiscuous mode [ 207.119908][ T8509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.131913][ T8509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.144046][ T8509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.153117][ T8509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.243335][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 207.405861][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.416320][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.425332][ T8723] bridge_slave_0: entered allmulticast mode [ 207.432892][ T8723] bridge_slave_0: entered promiscuous mode [ 207.445472][ T8584] veth0_macvtap: entered promiscuous mode [ 207.472006][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.489879][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.497288][ T8723] bridge_slave_1: entered allmulticast mode [ 207.517299][ T8723] bridge_slave_1: entered promiscuous mode [ 207.580736][ T8584] veth1_macvtap: entered promiscuous mode [ 207.684509][ T8606] veth0_vlan: entered promiscuous mode [ 207.726951][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.739493][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.749643][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.760363][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.770533][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.782139][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.792133][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.802755][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.815785][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.827293][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.841675][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.890721][ T7765] hsr_slave_0: left promiscuous mode [ 207.896663][ T7765] hsr_slave_1: left promiscuous mode [ 207.903463][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.911034][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.921270][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.928830][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.950413][ T7765] team0: left promiscuous mode [ 207.955607][ T7765] team_slave_0: left promiscuous mode [ 207.961365][ T7765] team_slave_1: left promiscuous mode [ 207.967086][ T7765] veth1_macvtap: left promiscuous mode [ 207.972751][ T7765] veth0_macvtap: left promiscuous mode [ 207.978712][ T7765] veth1_vlan: left promiscuous mode [ 207.984072][ T7765] veth0_vlan: left promiscuous mode [ 208.583110][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 208.644374][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 208.696420][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.710969][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.724616][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.739889][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.749881][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.758382][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.767683][ T8740] ================================================================== [ 208.775784][ T8740] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x39/0x250 [ 208.784066][ T8740] Read of size 8 at addr ffff88801fc6da58 by task syz-executor/8740 [ 208.792044][ T8740] [ 208.794391][ T8740] CPU: 0 PID: 8740 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 208.804616][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.814680][ T8740] Call Trace: [ 208.817954][ T8740] [ 208.820879][ T8740] dump_stack_lvl+0x241/0x360 [ 208.825555][ T8740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.830763][ T8740] ? __pfx__printk+0x10/0x10 [ 208.835375][ T8740] ? _printk+0xd5/0x120 [ 208.839550][ T8740] ? __virt_addr_valid+0x183/0x520 [ 208.844759][ T8740] ? __virt_addr_valid+0x183/0x520 [ 208.849876][ T8740] print_report+0x169/0x550 [ 208.854400][ T8740] ? __virt_addr_valid+0x183/0x520 [ 208.859551][ T8740] ? __virt_addr_valid+0x183/0x520 [ 208.864665][ T8740] ? __virt_addr_valid+0x44e/0x520 [ 208.869795][ T8740] ? __phys_addr+0xba/0x170 [ 208.874303][ T8740] ? skb_release_head_state+0x39/0x250 [ 208.879800][ T8740] kasan_report+0x143/0x180 [ 208.884334][ T8740] ? skb_release_head_state+0x39/0x250 [ 208.889837][ T8740] skb_release_head_state+0x39/0x250 [ 208.895122][ T8740] sk_skb_reason_drop+0x170/0x3d0 [ 208.900160][ T8740] __hci_req_sync+0x631/0x950 [ 208.904843][ T8740] ? __pfx___hci_req_sync+0x10/0x10 [ 208.910049][ T8740] ? __pfx___mutex_lock+0x10/0x10 [ 208.915092][ T8740] ? __pfx_autoremove_wake_function+0x10/0x10 [ 208.921196][ T8740] ? __pfx_hci_scan_req+0x10/0x10 [ 208.926327][ T8740] hci_req_sync+0xa9/0xd0 [ 208.930686][ T8740] hci_dev_cmd+0x4c5/0xa50 [ 208.935145][ T8740] ? security_capable+0x90/0xb0 [ 208.940015][ T8740] ? __pfx_hci_dev_cmd+0x10/0x10 [ 208.944968][ T8740] ? hci_sock_ioctl+0x6c6/0xa40 [ 208.949825][ T8740] sock_do_ioctl+0x158/0x460 [ 208.954424][ T8740] ? __pfx_sock_do_ioctl+0x10/0x10 [ 208.959580][ T8740] sock_ioctl+0x629/0x8e0 [ 208.963942][ T8740] ? __pfx_sock_ioctl+0x10/0x10 [ 208.968794][ T8740] ? __fget_files+0x29/0x470 [ 208.973393][ T8740] ? __fget_files+0x3f6/0x470 [ 208.977879][ T5108] Bluetooth: hci2: command tx timeout [ 208.978062][ T8740] ? __fget_files+0x29/0x470 [ 208.988051][ T8740] ? bpf_lsm_file_ioctl+0x9/0x10 [ 208.993016][ T8740] ? security_file_ioctl+0x87/0xb0 [ 208.998160][ T8740] ? __pfx_sock_ioctl+0x10/0x10 [ 209.003035][ T8740] __se_sys_ioctl+0xfc/0x170 [ 209.007637][ T8740] do_syscall_64+0xf3/0x230 [ 209.012143][ T8740] ? clear_bhb_loop+0x35/0x90 [ 209.016822][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.022722][ T8740] RIP: 0033:0x7f7ae05757db [ 209.027163][ T8740] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 209.046779][ T8740] RSP: 002b:00007fff35d67390 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.055223][ T8740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7ae05757db [ 209.063220][ T8740] RDX: 00007fff35d67408 RSI: 00000000400448dd RDI: 0000000000000003 [ 209.071212][ T8740] RBP: 0000555580fec4a8 R08: 0000000000000000 R09: 0000000000000000 [ 209.079202][ T8740] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 209.087198][ T8740] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 209.095198][ T8740] [ 209.098232][ T8740] [ 209.100580][ T8740] Allocated by task 5108: [ 209.104908][ T8740] kasan_save_track+0x3f/0x80 [ 209.109595][ T8740] __kasan_slab_alloc+0x66/0x80 [ 209.114448][ T8740] kmem_cache_alloc_noprof+0x135/0x2a0 [ 209.119911][ T8740] skb_clone+0x20c/0x390 [ 209.124182][ T8740] hci_cmd_work+0x2a2/0x670 [ 209.128709][ T8740] process_scheduled_works+0xa2c/0x1830 [ 209.134279][ T8740] worker_thread+0x86d/0xd50 [ 209.138970][ T8740] kthread+0x2f0/0x390 [ 209.143063][ T8740] ret_from_fork+0x4b/0x80 [ 209.147485][ T8740] ret_from_fork_asm+0x1a/0x30 [ 209.152268][ T8740] [ 209.154584][ T8740] Freed by task 5108: [ 209.158552][ T8740] kasan_save_track+0x3f/0x80 [ 209.163249][ T8740] kasan_save_free_info+0x40/0x50 [ 209.168288][ T8740] poison_slab_object+0xe0/0x150 [ 209.173232][ T8740] __kasan_slab_free+0x37/0x60 [ 209.178004][ T8740] kmem_cache_free+0x145/0x350 [ 209.182787][ T8740] hci_req_sync_complete+0xe8/0x290 [ 209.188033][ T8740] hci_event_packet+0xc75/0x1540 [ 209.192973][ T8740] hci_rx_work+0x3e8/0xca0 [ 209.197405][ T8740] process_scheduled_works+0xa2c/0x1830 [ 209.202979][ T8740] worker_thread+0x86d/0xd50 [ 209.207572][ T8740] kthread+0x2f0/0x390 [ 209.211644][ T8740] ret_from_fork+0x4b/0x80 [ 209.216064][ T8740] ret_from_fork_asm+0x1a/0x30 [ 209.220853][ T8740] [ 209.223219][ T8740] The buggy address belongs to the object at ffff88801fc6da00 [ 209.223219][ T8740] which belongs to the cache skbuff_head_cache of size 240 [ 209.237820][ T8740] The buggy address is located 88 bytes inside of [ 209.237820][ T8740] freed 240-byte region [ffff88801fc6da00, ffff88801fc6daf0) [ 209.251561][ T8740] [ 209.253904][ T8740] The buggy address belongs to the physical page: [ 209.260366][ T8740] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fc6d [ 209.269158][ T8740] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 209.276625][ T8740] page_type: 0xffffefff(slab) [ 209.281332][ T8740] raw: 00fff00000000000 ffff888018ea2780 ffffea0001e61e40 dead000000000003 [ 209.290031][ T8740] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 209.298608][ T8740] page dumped because: kasan: bad access detected [ 209.305034][ T8740] page_owner tracks the page as allocated [ 209.310758][ T8740] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5262, tgid 5260 (syz.0.33), ts 87940761354, free_ts 87927193457 [ 209.329632][ T8740] post_alloc_hook+0x1f3/0x230 [ 209.334428][ T8740] get_page_from_freelist+0x2e4c/0x2f10 [ 209.340059][ T8740] __alloc_pages_noprof+0x256/0x6c0 [ 209.345262][ T8740] alloc_slab_page+0x5f/0x120 [ 209.349934][ T8740] allocate_slab+0x5a/0x2f0 [ 209.354434][ T8740] ___slab_alloc+0xcd1/0x14b0 [ 209.359102][ T8740] __slab_alloc+0x58/0xa0 [ 209.363423][ T8740] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 209.369321][ T8740] __alloc_skb+0x1c3/0x440 [ 209.373734][ T8740] netlink_ack+0x13f/0xa30 [ 209.378160][ T8740] netlink_rcv_skb+0x262/0x430 [ 209.382946][ T8740] netlink_unicast+0x7f0/0x990 [ 209.387819][ T8740] netlink_sendmsg+0x8e4/0xcb0 [ 209.392632][ T8740] __sock_sendmsg+0x221/0x270 [ 209.397302][ T8740] ____sys_sendmsg+0x525/0x7d0 [ 209.402068][ T8740] __sys_sendmsg+0x2b0/0x3a0 [ 209.406751][ T8740] page last free pid 5261 tgid 5259 stack trace: [ 209.413068][ T8740] free_unref_folios+0xf23/0x19e0 [ 209.418105][ T8740] folios_put_refs+0x93a/0xa60 [ 209.422863][ T8740] free_pages_and_swap_cache+0x5c8/0x690 [ 209.428506][ T8740] tlb_flush_mmu+0x3a3/0x680 [ 209.433141][ T8740] tlb_finish_mmu+0xd4/0x200 [ 209.437775][ T8740] exit_mmap+0x44f/0xc80 [ 209.442013][ T8740] __mmput+0x115/0x3c0 [ 209.446072][ T8740] exit_mm+0x220/0x310 [ 209.450139][ T8740] do_exit+0x9aa/0x27e0 [ 209.454310][ T8740] do_group_exit+0x207/0x2c0 [ 209.458919][ T8740] get_signal+0x16a1/0x1740 [ 209.463421][ T8740] arch_do_signal_or_restart+0x96/0x860 [ 209.468966][ T8740] syscall_exit_to_user_mode+0xc9/0x370 [ 209.474531][ T8740] do_syscall_64+0x100/0x230 [ 209.479151][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.485072][ T8740] [ 209.487407][ T8740] Memory state around the buggy address: [ 209.493065][ T8740] ffff88801fc6d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 209.501171][ T8740] ffff88801fc6d980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 209.509225][ T8740] >ffff88801fc6da00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.517280][ T8740] ^ [ 209.524212][ T8740] ffff88801fc6da80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 209.532286][ T8740] ffff88801fc6db00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 209.540354][ T8740] ================================================================== [ 209.566246][ T8740] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.573514][ T8740] CPU: 1 PID: 8740 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 209.583788][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.593873][ T8740] Call Trace: [ 209.597173][ T8740] [ 209.600124][ T8740] dump_stack_lvl+0x241/0x360 [ 209.604834][ T8740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.610063][ T8740] ? __pfx__printk+0x10/0x10 [ 209.614681][ T8740] ? preempt_schedule+0xe1/0xf0 [ 209.619659][ T8740] ? vscnprintf+0x5d/0x90 [ 209.624027][ T8740] panic+0x349/0x860 [ 209.628044][ T8740] ? check_panic_on_warn+0x21/0xb0 [ 209.633216][ T8740] ? __pfx_panic+0x10/0x10 [ 209.637663][ T8740] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 209.643681][ T8740] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 209.650044][ T8740] ? print_report+0x502/0x550 [ 209.654762][ T8740] check_panic_on_warn+0x86/0xb0 [ 209.659741][ T8740] ? skb_release_head_state+0x39/0x250 [ 209.665669][ T8740] end_report+0x77/0x160 [ 209.669944][ T8740] kasan_report+0x154/0x180 [ 209.674486][ T8740] ? skb_release_head_state+0x39/0x250 [ 209.679988][ T8740] skb_release_head_state+0x39/0x250 [ 209.685311][ T8740] sk_skb_reason_drop+0x170/0x3d0 [ 209.690371][ T8740] __hci_req_sync+0x631/0x950 [ 209.695087][ T8740] ? __pfx___hci_req_sync+0x10/0x10 [ 209.700518][ T8740] ? __pfx___mutex_lock+0x10/0x10 [ 209.705586][ T8740] ? __pfx_autoremove_wake_function+0x10/0x10 [ 209.711695][ T8740] ? __pfx_hci_scan_req+0x10/0x10 [ 209.716748][ T8740] hci_req_sync+0xa9/0xd0 [ 209.721128][ T8740] hci_dev_cmd+0x4c5/0xa50 [ 209.725549][ T8740] ? security_capable+0x90/0xb0 [ 209.730450][ T8740] ? __pfx_hci_dev_cmd+0x10/0x10 [ 209.735432][ T8740] ? hci_sock_ioctl+0x6c6/0xa40 [ 209.740315][ T8740] sock_do_ioctl+0x158/0x460 [ 209.744916][ T8740] ? __pfx_sock_do_ioctl+0x10/0x10 [ 209.750056][ T8740] sock_ioctl+0x629/0x8e0 [ 209.754417][ T8740] ? __pfx_sock_ioctl+0x10/0x10 [ 209.759319][ T8740] ? __fget_files+0x29/0x470 [ 209.763955][ T8740] ? __fget_files+0x3f6/0x470 [ 209.768649][ T8740] ? __fget_files+0x29/0x470 [ 209.773297][ T8740] ? bpf_lsm_file_ioctl+0x9/0x10 [ 209.778274][ T8740] ? security_file_ioctl+0x87/0xb0 [ 209.783507][ T8740] ? __pfx_sock_ioctl+0x10/0x10 [ 209.788377][ T8740] __se_sys_ioctl+0xfc/0x170 [ 209.793015][ T8740] do_syscall_64+0xf3/0x230 [ 209.797565][ T8740] ? clear_bhb_loop+0x35/0x90 [ 209.802272][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.808190][ T8740] RIP: 0033:0x7f7ae05757db [ 209.812636][ T8740] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 209.832283][ T8740] RSP: 002b:00007fff35d67390 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.840731][ T8740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7ae05757db [ 209.848714][ T8740] RDX: 00007fff35d67408 RSI: 00000000400448dd RDI: 0000000000000003 [ 209.856723][ T8740] RBP: 0000555580fec4a8 R08: 0000000000000000 R09: 0000000000000000 [ 209.864703][ T8740] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 209.872685][ T8740] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 209.880702][ T8740] [ 209.884040][ T8740] Kernel Offset: disabled [ 209.888366][ T8740] Rebooting in 86400 seconds..