last executing test programs: 32.166385995s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x7f}}, 0x0) 31.945263842s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x2, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @private}, @empty, @private1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f00000001c0)="6f132c2a3f52c3f8b317e1349ac0f54a256099d4337a11bed241228ff6477a1b695fecb14707f6b240a1ce4e26843bf6d3597dec1fc4d981b3b758a8a4965d20a6c0b7fbea9877912689a3f6a12f3926230f5415a4980000", &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r1, 0x1}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) r4 = socket$inet6(0xa, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r5, 0x400448e7, 0xfffffffffffffffe) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x6, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x2, &(0x7f0000001040), &(0x7f00000000c0)=0x4) 31.932755025s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000005000031b9473359280000000000425fe37b38970000893e6d"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0xffffffff}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="5ef12819a57873fa63270895369554caece091cb57b1d475bd28f0175bbc660b3ff700439d2c3bcdce3a4fedfe8666fffe4eea2acad4838dc7fd3cb84325070e0c852c69bf4befa73091dad6c7ab7fa19a271a25f014c34c075b859602697eafd5829e11635a6f3f011165616962fc054fe4b609fa7f424d2c35bd7386645b738b8eb6301db8eaf9537c38a450", @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYRES8=r1], 0x194}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, r6, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) read(r5, &(0x7f00000006c0)=""/93, 0x5d) sendto$inet(r6, &(0x7f0000000200)="b179fa568af9459d74e00ac2ca428d6fb2d8295f5089bf81519bf10fdda498d7e59f993e9b8e6af4c72718c3bb3b199bc2640c1a8678f4d8cb41f72939e095d3f5bcd934907547091e60d457d07454e792934bd094a03c8df452fe4b0287c700ce500f0ffdc473ed2dc56f4bbd913cde5c", 0x71, 0x20040004, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9977}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_update\x00', r7}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010200000000000000000000000005000100070000004a0129bee20d5237bc309748f018c244f616bfccbb930200d9d1f798cb2a4383dee8050ef3cf3c6c88594b585f70a61a230141973600655b5aaca3f7150634989b736602847916799615f0561a18e3c9c66fefc6a16c730d1205f11b0dd90d96cedff5ae76d843614b5e98ec811840a16c"], 0x1c}}, 0x0) 31.672271601s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x301, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x2c060000) unshare(0x60020000) r7 = socket(0x11, 0x2, 0xffffffff) sendmmsg$unix(r7, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r9, 0x401054d6, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000220000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000006c0)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x400, 0xfac8, 0x10, 0x9, 0x1, 0x8, 0x8000000000000000}, &(0x7f0000000240)={0x7, 0x700000000000, 0x80, 0x9, 0x40, 0x5a, 0x8000000000000000, 0x8000000000000000}, &(0x7f0000000300)={0x1, 0x4, 0x5, 0x1f, 0x3, 0xffffffffffffff90, 0xfffffffffffffffb, 0xdb7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x7]}, 0x8}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r11, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x900000}, 0xffffffffffffffff, {[0x904, 0x5, 0xffffffff, 0x0, 0xf34, 0x3, 0x4, 0x2]}}, 0x5c) 31.659605196s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="20000000760001b9a9f57ca3e402920008000000ff"], 0x20}], 0x1}, 0x0) 31.472312367s ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b92d29590593c", 0xc5}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944c7992e1c77a13dc4d56603512391ef40b3ebfa64d4008ef85c5fc0efa85f02318", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd3985b6e2d0687f94a8757bb22c4b8c226adc39db9d2d78cb80d28e4c482c5fac2bd579aecaee505da13b3b5b81c7b10cf2fe27b946272df15372e8b92030feed43d801703f0e2e294744679b7e47f8192f8e25a8f34", 0x84}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb8543c4b4a56b104d3a651e7c389022630024bbe0f3a55dd6d2572781d4bd423ab474c5bf958", 0xa2}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 31.411112872s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) 31.392165956s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x7f}}, 0x0) 31.376495559s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r2, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r0, 0x80000000) 31.321189794s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x3, &(0x7f0000000100)="5f4a57db0200002de7000008a800", 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x22, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{0xfffffffd, 0x40000000}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x6}, 0x20) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r5, 0x107, 0x12, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) unshare(0x64020400) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYBLOB="000000001c"], 0x38}}], 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x3, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$kcm(0x21, 0x2, 0x2) sendmmsg$alg(r8, &(0x7f0000000040), 0x0, 0x20000000) 31.280883377s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffee3, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[], 0x28}, 0x1, 0x1000000000000000, 0x0, 0x44}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000005000031b9473359280000000000425fe37b38970000893e6d"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0xffffffff}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="5ef12819a57873fa63270895369554caece091cb57b1d475bd28f0175bbc660b3ff700439d2c3bcdce3a4fedfe8666fffe4eea2acad4838dc7fd3cb84325070e0c852c69bf4befa73091dad6c7ab7fa19a271a25f014c34c075b859602697eafd5829e11635a6f3f011165616962fc054fe4b609fa7f424d2c35bd7386645b738b8eb6301db8eaf9537c38a450", @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYRES8=r1], 0x194}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, r6, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) read(r5, &(0x7f00000006c0)=""/93, 0x5d) sendto$inet(r6, &(0x7f0000000200)="b179fa568af9459d74e00ac2ca428d6fb2d8295f5089bf81519bf10fdda498d7e59f993e9b8e6af4c72718c3bb3b199bc2640c1a8678f4d8cb41f72939e095d3f5bcd934907547091e60d457d07454e792934bd094a03c8df452fe4b0287c700ce500f0ffdc473ed2dc56f4bbd913cde5c1b", 0x72, 0x20040004, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9977}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010200000000000000000000000005000100070000004a0129bee20d5237bc309748f018c244f616bfccbb930200d9d1f798cb2a4383dee8050ef3cf3c6c88594b585f70a61a230141973600655b5aaca3f7150634989b736602847916799615f0561a18e3c9c66fefc6a16c730d1205f11b0dd90d96cedff5ae76d843614b5e98ec811840a16c"], 0x1c}}, 0x0) 31.198823658s ago: executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x70, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x1, 0x7800, 0x80000000, 0x1}}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 31.169501162s ago: executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000008500)="88", 0x34000}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x2d, 0x0, &(0x7f0000000040)="ded61b966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d", 0x0, 0x0, 0x3}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) shutdown(0xffffffffffffffff, 0x2) 31.096811478s ago: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c8", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1500000000000000", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) pread64(r2, &(0x7f0000000280)=""/10, 0xa, 0x80000000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x24004040) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 31.015464432s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="20000000760001b9a9f57ca3e402920008000000ff"], 0x20}], 0x1}, 0x0) 30.999445002s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x2, 0x3, 0x81) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='vxcan1\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) getsockopt$inet_mtu(r2, 0x0, 0xa, 0xfffffffffffffffd, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x2003}, 0x1c) listen(r1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020500090a00000000000000000000000300060000000e0002000000e0000009000000000000000202000100cb0000000000000000100000030005000040000002000000e00000010000000000000000"], 0x50}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0103000002000000000004"], 0x14}}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r12, &(0x7f0000000000), 0x0}, 0x20) recvfrom(r10, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00'}) 30.962028464s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b92d29590593c", 0xc5}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944c7992e1c77a13dc4d56603512391ef40b3ebfa64d4008ef85c5fc0efa85f02318", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd3985b6e2d0687f94a8757bb22c4b8c226adc39db9d2d78cb80d28e4c482c5fac2bd579aecaee505da13b3b5b81c7b10cf2fe27b946272df15372e8b92030feed43d801703f0e2e294744679b7e47f8192f8e25a8f34", 0x84}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb8543c4b4a56b104d3a651e7c389022630024bbe0f3a55dd6d2572781d4bd423ab474c5bf958", 0xa2}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 30.772506775s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x301, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x2c060000) unshare(0x60020000) r7 = socket(0x11, 0x2, 0xffffffff) sendmmsg$unix(r7, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r9, 0x401054d6, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000220000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000006c0)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x400, 0xfac8, 0x10, 0x9, 0x1, 0x8, 0x8000000000000000}, &(0x7f0000000240)={0x7, 0x700000000000, 0x80, 0x9, 0x40, 0x5a, 0x8000000000000000, 0x8000000000000000}, &(0x7f0000000300)={0x1, 0x4, 0x5, 0x1f, 0x3, 0xffffffffffffff90, 0xfffffffffffffffb, 0xdb7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x7]}, 0x8}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r11, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x900000}, 0xffffffffffffffff, {[0x904, 0x5, 0xffffffff, 0x0, 0xf34, 0x3, 0x4, 0x2]}}, 0x5c) 30.739368299s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast1, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80022, r1}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r4}, @exit], 0x0, 0x2, 0xe9, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x90) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xffd, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', r3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x80, 0x51bf, {{0x46, 0x4, 0x0, 0x9, 0x118, 0x67, 0x0, 0x55, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x2c, 0x9, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x3ff}, {@multicast2, 0x8}, {@private=0xa010101, 0x138a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x171c}]}, @ssrr={0x89, 0x3, 0x15}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0xe6, 0x1, 0xf, [{@remote, 0x5}, {@broadcast, 0xffff}, {@remote, 0x4}, {@remote, 0x4}, {@remote, 0x4}, {@private=0xa010102}, {@private=0xa010102, 0x4}, {@loopback}, {@remote, 0x3}, {@loopback, 0x32}]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0xb, "a9ca6c95c57d73b9bd"}, {0x0, 0x9, "1eb8d8dc4e39a3"}]}, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0x9, [{@dev, 0x7}, {@multicast2, 0x1}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@empty, 0x200}, {@private=0xa010102, 0xffffffff}]}, @ssrr={0x89, 0x1b, 0xfd, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @empty]}, @ssrr={0x89, 0x13, 0xfa, [@dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 30.712042041s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000005000031b9473359280000000000425fe37b38970000893e6d"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0xffffffff}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007080100000c0a01020000000000000000010000000900020073797a3200000000dc000380d8000080040001800800034000000001c50006407c2432aaf2e15835aab6f584ce76eb9b9fdd3d4c4b9feafeb308d37bc55ab62bf6fcaff3160414d6f1e7583c04910038802faf6b9c16e453c50ec7cd9286a6c4c1b8a1ba3df077f507cfac147e25e3c38a10be0fe68848bfac13345eaf260064e28dcaa9f994c2d8953b27d25f5890fa18948ab505a92917be71c0e16eb99124f79f22e4c0cd7478c9b0c696ff3c379b491fea694bec8f78cef1c15b33b0f6ac6ddaa777c44269f246f74a63c4c2431bfc62db738998804e13471f087cfff2d0980000000900010073797a30", @ANYRESOCT=r3, @ANYBLOB="5ef12819a57873fa63270895369554caece091cb57b1d475bd28f0175bbc660b3ff700439d2c3bcdce3a4fedfe8666fffe4eea2acad4838dc7fd3cb84325070e0c852c69bf4befa73091dad6c7ab7fa19a271a25f014c34c075b859602697eafd5829e11635a6f3f011165616962fc054fe4b609fa7f424d2c35bd7386645b738b8eb6301db8eaf9537c38a450", @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYRES8=r1], 0x194}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, r6, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) read(r5, &(0x7f00000006c0)=""/93, 0x5d) sendto$inet(r6, &(0x7f0000000200)="b179fa568af9459d74e00ac2ca428d6fb2d8295f5089bf81519bf10fdda498d7e59f993e9b8e6af4c72718c3bb3b199bc2640c1a8678f4d8cb41f72939e095d3f5bcd934907547091e60d457d07454e792934bd094a03c8df452fe4b0287c700ce500f0ffdc473ed2dc56f4bbd913cde5c", 0x71, 0x20040004, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9977}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_update\x00', r7}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010200000000000000000000000005000100070000004a0129bee20d5237bc309748f018c244f616bfccbb930200d9d1f798cb2a4383dee8050ef3cf3c6c88594b585f70a61a230141973600655b5aaca3f7150634989b736602847916799615f0561a18e3c9c66fefc6a16c730d1205f11b0dd90d96cedff5ae76d843614b5e98ec811840a16c"], 0x1c}}, 0x0) 30.571710183s ago: executing program 1: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080), 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x6c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 30.387356305s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) 30.291721142s ago: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r2, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r0, 0x80000000) 30.222732436s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x2, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @private}, @empty, @private1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f00000001c0)="6f132c2a3f52c3f8b317e1349ac0f54a256099d4337a11bed241228ff6477a1b695fecb14707f6b240a1ce4e26843bf6d3597dec1fc4d981b3b758a8a4965d20a6c0b7fbea9877912689a3f6a12f3926230f5415a4980000", &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r1, 0x1}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) r4 = socket$inet6(0xa, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r5, 0x400448e7, 0xfffffffffffffffe) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x6, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x2, &(0x7f0000001040), &(0x7f00000000c0)=0x4) 30.030248074s ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x7f}}, 0x0) 946.435303ms ago: executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000008500)="88", 0x34000}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x2d, 0x0, &(0x7f0000000040)="ded61b966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d", 0x0, 0x0, 0x3}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) shutdown(0xffffffffffffffff, 0x2) 713.040629ms ago: executing program 4: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x70, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x1, 0x7800, 0x80000000, 0x1}}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 541.323377ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x3, &(0x7f0000000100)="5f4a57db0200002de7000008a800", 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x22, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{0xfffffffd, 0x40000000}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x6}, 0x20) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, &(0x7f0000000240)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) unshare(0x64020400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="000000001c"], 0x38}}], 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x3, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$kcm(0x21, 0x2, 0x2) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x20000000) 201.21341ms ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffee3, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[], 0x28}, 0x1, 0x1000000000000000, 0x0, 0x44}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000005000031b9473359280000000000425fe37b38970000893e6d"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0xffffffff}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="5ef12819a57873fa63270895369554caece091cb57b1d475bd28f0175bbc660b3ff700439d2c3bcdce3a4fedfe8666fffe4eea2acad4838dc7fd3cb84325070e0c852c69bf4befa73091dad6c7ab7fa19a271a25f014c34c075b859602697eafd5829e11635a6f3f011165616962fc054fe4b609fa7f424d2c35bd7386645b738b8eb6301db8eaf9537c38a450", @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYRES8=r1], 0x194}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, r6, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) read(r5, &(0x7f00000006c0)=""/93, 0x5d) sendto$inet(r6, &(0x7f0000000200)="b179fa568af9459d74e00ac2ca428d6fb2d8295f5089bf81519bf10fdda498d7e59f993e9b8e6af4c72718c3bb3b199bc2640c1a8678f4d8cb41f72939e095d3f5bcd934907547091e60d457d07454e792934bd094a03c8df452fe4b0287c700ce500f0ffdc473ed2dc56f4bbd913cde5c1b", 0x72, 0x20040004, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9977}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010200000000000000000000000005000100070000004a0129bee20d5237bc309748f018c244f616bfccbb930200d9d1f798cb2a4383dee8050ef3cf3c6c88594b585f70a61a230141973600655b5aaca3f7150634989b736602847916799615f0561a18e3c9c66fefc6a16c730d1205f11b0dd90d96cedff5ae76d843614b5e98ec811840a16c"], 0x1c}}, 0x0) 0s ago: executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000e000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc002000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0100000003000000000000008b357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172700000000000000000000000000000000000000000000000000000000000380000000000000000000000000000000000000000000b00007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000"]}, 0x3a8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c8", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1500000000000000", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) pread64(r2, &(0x7f0000000280)=""/10, 0xa, 0x80000000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x24004040) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180), &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. 2024/06/07 00:48:15 fuzzer started 2024/06/07 00:48:15 dialing manager at 10.128.0.169:30016 [ 71.484843][ T5092] cgroup: Unknown subsys name 'net' [ 71.712839][ T5092] cgroup: Unknown subsys name 'rlimit' [ 71.871667][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.878432][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/07 00:48:17 starting 5 executor processes [ 73.030012][ T5099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.291195][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.299611][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.307992][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.318146][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.327338][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.329769][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.335435][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.342661][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.358248][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.364559][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.370250][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.374114][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.379832][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.388228][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.396390][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.409035][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.410719][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.417890][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.428606][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.431109][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.437540][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.446866][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.453884][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.458459][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.466342][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.472530][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.479901][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.487393][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.493374][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.509085][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.176483][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 75.239061][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 75.250943][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 75.455817][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.463481][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.471331][ T5116] bridge_slave_0: entered allmulticast mode [ 75.478840][ T5116] bridge_slave_0: entered promiscuous mode [ 75.495180][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 75.512222][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 75.530419][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.538343][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.545805][ T5116] bridge_slave_1: entered allmulticast mode [ 75.553791][ T5116] bridge_slave_1: entered promiscuous mode [ 75.649766][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.657035][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.664200][ T5113] bridge_slave_0: entered allmulticast mode [ 75.672138][ T5113] bridge_slave_0: entered promiscuous mode [ 75.679788][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.687184][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.694365][ T5126] bridge_slave_0: entered allmulticast mode [ 75.704081][ T5126] bridge_slave_0: entered promiscuous mode [ 75.742592][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.767383][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.774617][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.782355][ T5113] bridge_slave_1: entered allmulticast mode [ 75.789714][ T5113] bridge_slave_1: entered promiscuous mode [ 75.810114][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.817549][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.824794][ T5126] bridge_slave_1: entered allmulticast mode [ 75.832527][ T5126] bridge_slave_1: entered promiscuous mode [ 75.858469][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.954595][ T5116] team0: Port device team_slave_0 added [ 75.964004][ T5116] team0: Port device team_slave_1 added [ 75.984012][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.998322][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.010226][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.077128][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.124309][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.131766][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.157888][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.171796][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.182060][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.189877][ T5115] bridge_slave_0: entered allmulticast mode [ 76.197358][ T5115] bridge_slave_0: entered promiscuous mode [ 76.234171][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.241590][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.248927][ T5114] bridge_slave_0: entered allmulticast mode [ 76.255978][ T5114] bridge_slave_0: entered promiscuous mode [ 76.264887][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.272423][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.298726][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.317343][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.324539][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.332505][ T5115] bridge_slave_1: entered allmulticast mode [ 76.340439][ T5115] bridge_slave_1: entered promiscuous mode [ 76.361484][ T5113] team0: Port device team_slave_0 added [ 76.370918][ T5113] team0: Port device team_slave_1 added [ 76.380850][ T5126] team0: Port device team_slave_0 added [ 76.387296][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.394486][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.402796][ T5114] bridge_slave_1: entered allmulticast mode [ 76.410073][ T5114] bridge_slave_1: entered promiscuous mode [ 76.473876][ T5126] team0: Port device team_slave_1 added [ 76.509600][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.520158][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.530157][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.556824][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.577398][ T5130] Bluetooth: hci0: command tx timeout [ 76.577491][ T5127] Bluetooth: hci3: command tx timeout [ 76.583250][ T5130] Bluetooth: hci1: command tx timeout [ 76.588775][ T5118] Bluetooth: hci2: command tx timeout [ 76.600153][ T5128] Bluetooth: hci4: command tx timeout [ 76.623729][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.639097][ T5116] hsr_slave_0: entered promiscuous mode [ 76.646330][ T5116] hsr_slave_1: entered promiscuous mode [ 76.658361][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.681983][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.692676][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.719212][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.745463][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.787095][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.794110][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.820596][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.834126][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.841505][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.867866][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.908480][ T5115] team0: Port device team_slave_0 added [ 76.920816][ T5115] team0: Port device team_slave_1 added [ 76.959191][ T5114] team0: Port device team_slave_0 added [ 77.013801][ T5113] hsr_slave_0: entered promiscuous mode [ 77.020755][ T5113] hsr_slave_1: entered promiscuous mode [ 77.027896][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.036689][ T5113] Cannot create hsr debugfs directory [ 77.055603][ T5114] team0: Port device team_slave_1 added [ 77.110831][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.118011][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.145577][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.160514][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.167666][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.194129][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.212146][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.219418][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.245838][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.274867][ T5126] hsr_slave_0: entered promiscuous mode [ 77.282159][ T5126] hsr_slave_1: entered promiscuous mode [ 77.288750][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.296555][ T5126] Cannot create hsr debugfs directory [ 77.348944][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.355934][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.382759][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.533375][ T5115] hsr_slave_0: entered promiscuous mode [ 77.543494][ T5115] hsr_slave_1: entered promiscuous mode [ 77.550161][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.557833][ T5115] Cannot create hsr debugfs directory [ 77.606706][ T5114] hsr_slave_0: entered promiscuous mode [ 77.613218][ T5114] hsr_slave_1: entered promiscuous mode [ 77.620141][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.628065][ T5114] Cannot create hsr debugfs directory [ 78.037466][ T5116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.063602][ T5116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.075756][ T5116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.111232][ T5116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.173706][ T5113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.199873][ T5113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.211217][ T5113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.224045][ T5113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.290899][ T5126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.307763][ T5126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.336668][ T5126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.350603][ T5126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.469628][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.482571][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.527799][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.539166][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.650886][ T5114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.658271][ T5127] Bluetooth: hci3: command tx timeout [ 78.662132][ T5118] Bluetooth: hci1: command tx timeout [ 78.663694][ T5128] Bluetooth: hci2: command tx timeout [ 78.669395][ T5130] Bluetooth: hci4: command tx timeout [ 78.674650][ T53] Bluetooth: hci0: command tx timeout [ 78.711522][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.727884][ T5114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.754563][ T5114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.771881][ T5114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.792180][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.825606][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.833090][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.867891][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.927344][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.938064][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.945322][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.992391][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.027405][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.034625][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.045006][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.052174][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.114851][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.204366][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.245965][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.253295][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.295800][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.303018][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.433092][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.532973][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.574398][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.663879][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.671777][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.731599][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.748086][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.773306][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.780523][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.805811][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.833002][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.840256][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.880104][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.887345][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.997476][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.052976][ T5116] veth0_vlan: entered promiscuous mode [ 80.100584][ T5113] veth0_vlan: entered promiscuous mode [ 80.160616][ T5113] veth1_vlan: entered promiscuous mode [ 80.169582][ T5116] veth1_vlan: entered promiscuous mode [ 80.225176][ T5126] veth0_vlan: entered promiscuous mode [ 80.291478][ T5126] veth1_vlan: entered promiscuous mode [ 80.345549][ T5116] veth0_macvtap: entered promiscuous mode [ 80.373227][ T5113] veth0_macvtap: entered promiscuous mode [ 80.401345][ T5116] veth1_macvtap: entered promiscuous mode [ 80.423132][ T5113] veth1_macvtap: entered promiscuous mode [ 80.479256][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.513211][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.525924][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.540255][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.556568][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.574831][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.592915][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.601796][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.610872][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.632265][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.643611][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.655604][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.683194][ T5116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.692391][ T5116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.701357][ T5116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.710435][ T5116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.736790][ T5128] Bluetooth: hci2: command tx timeout [ 80.741302][ T5126] veth0_macvtap: entered promiscuous mode [ 80.742658][ T53] Bluetooth: hci1: command tx timeout [ 80.753491][ T5127] Bluetooth: hci0: command tx timeout [ 80.753515][ T5118] Bluetooth: hci4: command tx timeout [ 80.759425][ T5128] Bluetooth: hci3: command tx timeout [ 80.777056][ T5126] veth1_macvtap: entered promiscuous mode [ 80.804804][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.881306][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.943332][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.965817][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.976396][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.995566][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.014580][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.065583][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.077942][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.094212][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.104857][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.117404][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.153085][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.173077][ T5126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.182626][ T5126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.187356][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.195477][ T5126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.214268][ T5126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.234232][ T5115] veth0_vlan: entered promiscuous mode [ 81.349852][ T3835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.359315][ T3835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.369869][ T5115] veth1_vlan: entered promiscuous mode [ 81.415791][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.437930][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.505022][ T3835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.521704][ T3835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.587050][ T3835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.595038][ T3835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.699004][ T5115] veth0_macvtap: entered promiscuous mode [ 81.750338][ T5115] veth1_macvtap: entered promiscuous mode [ 81.760460][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.781297][ T5204] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.804830][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.817379][ T5114] veth0_vlan: entered promiscuous mode [ 81.903756][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.920731][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.946164][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.963514][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.976590][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.991601][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.010501][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.027517][ T5114] veth1_vlan: entered promiscuous mode [ 82.053902][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.106480][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.123379][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.146140][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.177396][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.198889][ T5215] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.212212][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.228434][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.273133][ T5212] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 82.312499][ T5216] bridge0: port 3(vlan2) entered blocking state [ 82.349584][ T5216] bridge0: port 3(vlan2) entered disabled state [ 82.373621][ T5216] vlan2: entered allmulticast mode [ 82.406636][ T5216] vlan2: left allmulticast mode [ 82.452256][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.478129][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.500569][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.518476][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.538247][ T5223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.755059][ T5114] veth0_macvtap: entered promiscuous mode [ 82.816364][ T5127] Bluetooth: hci1: command tx timeout [ 82.821983][ T5127] Bluetooth: hci2: command tx timeout [ 82.826694][ T5118] Bluetooth: hci3: command tx timeout [ 82.828345][ T5128] Bluetooth: hci4: command tx timeout [ 82.832764][ T5118] Bluetooth: hci0: command tx timeout [ 82.910337][ T5114] veth1_macvtap: entered promiscuous mode [ 83.034395][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.077606][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.122924][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.137921][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.153431][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.164192][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.181096][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.194775][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.208486][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.285653][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.312949][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.346092][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.374986][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.396474][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.435069][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.463483][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.489747][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.502571][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.519416][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.561428][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.604593][ T5114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.633385][ T5114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.644429][ T5114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.653825][ T5114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.772270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.830547][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.956430][ T5232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.117654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.125628][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.268585][ T5254] Zero length message leads to an empty skb [ 84.281365][ T5251] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.349240][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.390623][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.708841][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.735813][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.128240][ T5285] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709550493) [ 85.165585][ T5285] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 85.190028][ T5284] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709550493) [ 85.214624][ T5284] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 85.483976][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.551328][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.958461][ T5335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.020062][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.061088][ T5338] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 86.110435][ T5338] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.119791][ T5338] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.128706][ T5338] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.132013][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.137501][ T5338] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.214422][ T5335] net_ratelimit: 2 callbacks suppressed [ 86.214446][ T5335] netlink: zone id is out of range [ 86.239740][ T5335] netlink: zone id is out of range [ 86.248963][ T5335] netlink: zone id is out of range [ 86.254872][ T5335] netlink: zone id is out of range [ 86.277202][ T5335] netlink: zone id is out of range [ 86.285147][ T5335] netlink: zone id is out of range [ 86.291158][ T5348] sch_fq: defrate 0 ignored. [ 86.297387][ T5335] netlink: zone id is out of range [ 86.303061][ T5335] netlink: zone id is out of range [ 86.309019][ T5335] netlink: zone id is out of range [ 86.314373][ T5335] netlink: zone id is out of range [ 86.432019][ T5353] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 86.453009][ T5353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.461840][ T5353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.470660][ T5353] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.479497][ T5353] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.713854][ T5358] team0: Device veth0_to_team is up. Set it down before adding it as a team port [ 87.524702][ T5383] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.634389][ T5396] ip6t_rpfilter: unknown options [ 87.866942][ T5404] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 87.902988][ T5404] __nla_validate_parse: 3 callbacks suppressed [ 87.903012][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.961927][ T5398] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 88.190524][ T5417] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 88.195787][ T5421] sctp: [Deprecated]: syz-executor.3 (pid 5421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.195787][ T5421] Use struct sctp_sack_info instead [ 88.214729][ T5417] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.230139][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.245602][ T5417] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.437142][ T5429] ip6t_rpfilter: unknown options [ 88.768354][ T5442] syzkaller0: entered allmulticast mode [ 88.942501][ T5449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.190163][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029564c00: rx timeout, send abort [ 89.200286][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029564c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.229475][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.460164][ T5472] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.244044][ T5509] tipc: Failed to obtain node identity [ 90.253692][ T5509] tipc: Enabling of bearer rejected, failed to enable media [ 90.387119][ T5502] ip6t_rpfilter: unknown options [ 90.515402][ T5517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.838157][ T5531] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.897307][ T5536] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.025633][ T5543] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 91.162428][ T5548] x_tables: ip_tables: ah match: only valid for protocol 51 [ 91.228912][ T5549] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.341443][ T45] cfg80211: failed to load regulatory.db [ 92.636163][ T5623] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.689372][ T5627] net_ratelimit: 40 callbacks suppressed [ 92.689393][ T5627] openvswitch: netlink: Message has 4 unknown bytes. [ 92.911358][ T5636] x_tables: ip_tables: ah match: only valid for protocol 51 [ 93.438846][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.602552][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.908812][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.111061][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.338845][ T5676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.524455][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.536669][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.545967][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.560059][ T5680] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 94.568881][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.582822][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.590982][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.633479][ T61] bridge_slave_1: left allmulticast mode [ 94.648966][ T61] bridge_slave_1: left promiscuous mode [ 94.655954][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.749195][ T61] bridge_slave_0: left allmulticast mode [ 94.791676][ T61] bridge_slave_0: left promiscuous mode [ 94.797782][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.423647][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.460727][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.484836][ T61] bond0 (unregistering): Released all slaves [ 95.509597][ T5683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 95.981302][ T5727] sctp: [Deprecated]: syz-executor.3 (pid 5727) Use of int in maxseg socket option. [ 95.981302][ T5727] Use struct sctp_assoc_value instead [ 96.030614][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.348552][ T61] hsr_slave_0: left promiscuous mode [ 96.360018][ T61] hsr_slave_1: left promiscuous mode [ 96.369572][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.380856][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.395202][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.411980][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.466642][ T61] veth1_macvtap: left promiscuous mode [ 96.472870][ T61] veth0_macvtap: left promiscuous mode [ 96.481243][ T61] veth1_vlan: left promiscuous mode [ 96.488073][ T61] veth0_vlan: left promiscuous mode [ 96.656744][ T53] Bluetooth: hci1: command tx timeout [ 97.101120][ T61] team0 (unregistering): Port device team_slave_1 removed [ 97.140772][ T61] team0 (unregistering): Port device team_slave_0 removed [ 97.179711][ T5747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.614755][ T5679] chnl_net:caif_netlink_parms(): no params data found [ 97.867973][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.878641][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.885936][ T5679] bridge_slave_0: entered allmulticast mode [ 97.902107][ T5679] bridge_slave_0: entered promiscuous mode [ 97.924177][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.934290][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.976340][ T5679] bridge_slave_1: entered allmulticast mode [ 97.999566][ T5679] bridge_slave_1: entered promiscuous mode [ 98.153408][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.193447][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.301650][ T5679] team0: Port device team_slave_0 added [ 98.359352][ T5679] team0: Port device team_slave_1 added [ 98.458072][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.467423][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.494630][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.564696][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.606268][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.657816][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.738568][ T53] Bluetooth: hci1: command tx timeout [ 98.811343][ T5793] Cannot find map_set index 0 as target [ 98.957693][ T5679] hsr_slave_0: entered promiscuous mode [ 98.981605][ T5679] hsr_slave_1: entered promiscuous mode [ 98.997011][ T5679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.004636][ T5679] Cannot create hsr debugfs directory [ 99.518364][ T5810] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.545726][ T5826] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.895185][ T5679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.916687][ T5679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.930992][ T5679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.943406][ T5679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.119162][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.179058][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.209278][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.216539][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.257009][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.264225][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.732526][ T5854] x_tables: duplicate underflow at hook 2 [ 100.818266][ T53] Bluetooth: hci1: command tx timeout [ 101.518980][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.941106][ T5880] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.959850][ T5885] sctp: [Deprecated]: syz-executor.0 (pid 5885) Use of int in max_burst socket option. [ 101.959850][ T5885] Use struct sctp_assoc_value instead [ 102.393264][ T5899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.509994][ T5903] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.538252][ T5679] veth0_vlan: entered promiscuous mode [ 102.594280][ T5679] veth1_vlan: entered promiscuous mode [ 102.669400][ T5679] veth0_macvtap: entered promiscuous mode [ 102.714685][ T5679] veth1_macvtap: entered promiscuous mode [ 102.802427][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.828840][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.843496][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.866180][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.883169][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.895104][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.906358][ T53] Bluetooth: hci1: command tx timeout [ 102.912846][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.923434][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.937367][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.946387][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.990790][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.011199][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.037225][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.048489][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.058542][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.069139][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.096228][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.114133][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.129703][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.163882][ T5679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.179533][ T5679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.188666][ T5679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.197665][ T5679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.228578][ T5931] Bluetooth: MGMT ver 1.22 [ 103.505164][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.525894][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.637467][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.645524][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.753405][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.891849][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.957232][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.424921][ T5970] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.726746][ T5971] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 104.758443][ T5971] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.785758][ T5971] team0: Port device virt_wifi0 added [ 104.998570][ T5984] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 105.050898][ T5984] batman_adv: batadv0: Adding interface: team0 [ 105.069052][ T5984] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.103389][ T5984] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 105.223706][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.462061][ T6004] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 105.572600][ T6008] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.062000][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.071637][ T6027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.521462][ T6048] openvswitch: netlink: Multiple metadata blocks provided [ 107.090057][ T5113] syz-executor.3 (5113) used greatest stack depth: 18512 bytes left [ 107.243073][ T6076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.290689][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.336152][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.559567][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.607521][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.738685][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.772209][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.870220][ T6091] bond0: entered promiscuous mode [ 107.875831][ T6091] bond_slave_0: entered promiscuous mode [ 107.886922][ T6091] bond_slave_1: entered promiscuous mode [ 107.991900][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.031933][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.144771][ T6097] __nla_validate_parse: 2 callbacks suppressed [ 108.144792][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.324868][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.344064][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.356381][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.369656][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.377934][ T61] bridge_slave_1: left allmulticast mode [ 108.390377][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.397964][ T61] bridge_slave_1: left promiscuous mode [ 108.405139][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.413765][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.456411][ T61] bridge_slave_0: left allmulticast mode [ 108.477280][ T61] bridge_slave_0: left promiscuous mode [ 108.483908][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.497120][ T6108] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.949209][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.963642][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.985373][ T61] bond0 (unregistering): Released all slaves [ 109.003437][ T6106] vcan0: Master is either lo or non-ether device [ 109.557022][ T61] hsr_slave_0: left promiscuous mode [ 109.571089][ T61] hsr_slave_1: left promiscuous mode [ 109.595326][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.624206][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.657509][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.665066][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.722680][ T61] veth1_macvtap: left promiscuous mode [ 109.734899][ T61] veth0_macvtap: left promiscuous mode [ 109.744943][ T61] veth1_vlan: left promiscuous mode [ 109.753101][ T61] veth0_vlan: left promiscuous mode [ 110.461684][ T61] team0 (unregistering): Port device team_slave_1 removed [ 110.504159][ T61] team0 (unregistering): Port device team_slave_0 removed [ 110.506249][ T53] Bluetooth: hci0: command tx timeout [ 110.964835][ T6141] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 111.006418][ T6141] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.145758][ T6148] ipt_REJECT: TCP_RESET invalid for non-tcp [ 111.156590][ T6151] Bluetooth: MGMT ver 1.22 [ 111.161384][ T6151] Bluetooth: hci3: invalid len left 7, exp >= 121 [ 111.300551][ T6101] chnl_net:caif_netlink_parms(): no params data found [ 111.685685][ T6172] tipc: Failed to remove unknown binding: 66,1,1/0:2250927545/2250927547 [ 111.726285][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.733937][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.752662][ T6101] bridge_slave_0: entered allmulticast mode [ 111.753665][ T6172] tipc: Failed to remove unknown binding: 66,1,1/0:2250927545/2250927547 [ 111.771687][ T6101] bridge_slave_0: entered promiscuous mode [ 111.797291][ T6172] tipc: Failed to remove unknown binding: 66,1,1/0:2250927545/2250927547 [ 111.816257][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.839218][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.857649][ T6101] bridge_slave_1: entered allmulticast mode [ 111.875054][ T6101] bridge_slave_1: entered promiscuous mode [ 111.999039][ T6101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.030309][ T6101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.231372][ T6101] team0: Port device team_slave_0 added [ 112.241285][ T6101] team0: Port device team_slave_1 added [ 112.302448][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.313353][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.346699][ T6101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.369787][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.382792][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.435286][ T6101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.553103][ T6101] hsr_slave_0: entered promiscuous mode [ 112.568515][ T6101] hsr_slave_1: entered promiscuous mode [ 112.576671][ T5118] Bluetooth: hci0: command tx timeout [ 112.583332][ T6101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.596204][ T6101] Cannot create hsr debugfs directory [ 112.749639][ T6214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.823639][ T6217] netlink: 780 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.852606][ T6217] unsupported nla_type 152 [ 112.892388][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.083007][ T6227] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.402713][ T6101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.444922][ T6101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.483678][ T6101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.512851][ T6101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.715848][ T6245] bond0: entered promiscuous mode [ 113.721216][ T6245] bond_slave_0: entered promiscuous mode [ 113.732495][ T6245] bond_slave_1: entered promiscuous mode [ 113.914560][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.138334][ T6263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.197661][ T6266] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.373026][ T6274] x_tables: duplicate underflow at hook 3 [ 114.502313][ T6101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.656586][ T5118] Bluetooth: hci0: command 0x040f tx timeout [ 114.768857][ T6101] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.830793][ T6284] ipvlan2: entered promiscuous mode [ 114.924428][ T6284] ipvlan2: entered allmulticast mode [ 114.971714][ T6284] team0: entered allmulticast mode [ 115.029928][ T6284] team_slave_0: entered allmulticast mode [ 115.035740][ T6284] team_slave_1: entered allmulticast mode [ 115.058448][ T6284] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 115.239141][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.246397][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.305825][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.313057][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.565476][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.673364][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.913638][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.232458][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.312697][ T6101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.339707][ T6358] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 116.567950][ T6364] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.676889][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.703361][ T6101] veth0_vlan: entered promiscuous mode [ 116.736196][ T53] Bluetooth: hci0: command 0x040f tx timeout [ 116.791084][ T6101] veth1_vlan: entered promiscuous mode [ 116.819924][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.930087][ T6101] veth0_macvtap: entered promiscuous mode [ 116.937968][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.952092][ T6101] veth1_macvtap: entered promiscuous mode [ 117.041324][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.091040][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.118617][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.135273][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.150126][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.183265][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.220316][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.249444][ T6386] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.278616][ T6386] 0ªX¹¦À: renamed from caif0 [ 117.281413][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.315559][ T6386] 0ªX¹¦À: entered allmulticast mode [ 117.323929][ T6386] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 117.382080][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.428339][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.464558][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.486806][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.503059][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.518021][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.534214][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.547403][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.558925][ T6403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.568377][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.589764][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.724027][ T6101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.752369][ T6101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.772194][ T6101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.789466][ T6101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.071058][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.100405][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.168611][ T955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.183776][ T955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.293671][ T6417] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 118.334026][ T6417] syz_tun: entered promiscuous mode [ 118.383494][ T6417] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 118.585238][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.817407][ T53] Bluetooth: hci0: command 0x040f tx timeout [ 119.043178][ T6453] __nla_validate_parse: 4 callbacks suppressed [ 119.043200][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.228857][ T6462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.289962][ T6465] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.328609][ T6463] ipvlan2: entered promiscuous mode [ 119.353305][ T6463] ipvlan2: entered allmulticast mode [ 119.377592][ T6463] team0: entered allmulticast mode [ 119.396890][ T6463] team_slave_0: entered allmulticast mode [ 119.410635][ T6463] team_slave_1: entered allmulticast mode [ 119.440088][ T6463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.476419][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.558463][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.578551][ T6473] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 119.616088][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.635240][ T6473] syz_tun: entered promiscuous mode [ 119.722899][ T6473] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 119.900035][ T6479] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 119.941699][ T6483] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 119.955918][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.980368][ T6483] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 119.991645][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.551258][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.640872][ T6510] ipvlan2: entered promiscuous mode [ 120.657758][ T6510] ipvlan2: entered allmulticast mode [ 120.665198][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.691947][ T6510] team0: entered allmulticast mode [ 120.710046][ T6510] team_slave_0: entered allmulticast mode [ 120.723853][ T6510] team_slave_1: entered allmulticast mode [ 120.758315][ T6510] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 121.004024][ T6527] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 121.034952][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.060941][ T6527] ip6tnl1: entered allmulticast mode [ 121.068146][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.084884][ T6531] netlink: 209316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.116832][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.621605][ T29] audit: type=1804 audit(1717721345.949:2): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3060287755/syzkaller.s7lcdL/39/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 121.731349][ T29] audit: type=1804 audit(1717721346.059:3): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3060287755/syzkaller.s7lcdL/39/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 122.119966][ T6588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.087631][ T6621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.694444][ T6648] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.061050][ T6660] __nla_validate_parse: 8 callbacks suppressed [ 124.061072][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.759974][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.811841][ T6684] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 124.877412][ T6691] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.904075][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.084042][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.299130][ T6709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.345779][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.431345][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.483088][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.200385][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.266957][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.377901][ T6741] unknown channel width for channel at 909000KHz? [ 126.443614][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.459383][ T6741] bond1: entered promiscuous mode [ 126.474739][ T6741] bond0: (slave bond1): Enslaving as an active interface with an up link [ 126.570034][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.590135][ T6749] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 126.605240][ T6749] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 127.235854][ T6793] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 127.552103][ T6805] unknown channel width for channel at 909000KHz? [ 127.686504][ T6805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.719128][ T6805] bond1: entered promiscuous mode [ 127.738614][ T6805] bond0: (slave bond1): Enslaving as an active interface with an up link [ 127.833036][ T6825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.871561][ T6825] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 127.893600][ T6825] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 128.052928][ T6839] xt_time: unknown flags 0x4 [ 128.785760][ T6885] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 128.807255][ T6885] xt_connbytes: Forcing CT accounting to be enabled [ 128.815641][ T6885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.128914][ T6899] __nla_validate_parse: 11 callbacks suppressed [ 129.128934][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.192493][ T6910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.325401][ T6915] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 129.533836][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.766966][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.146533][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.990797][ T6973] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.239551][ T6990] ipt_REJECT: TCP_RESET invalid for non-tcp [ 131.545417][ T7005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.834816][ T7016] Bluetooth: MGMT ver 1.22 [ 132.141371][ T7032] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.207626][ T29] audit: type=1804 audit(1717721356.539:4): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3060287755/syzkaller.s7lcdL/65/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 132.441277][ T7046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.472058][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.666281][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.709644][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.728404][ T7062] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.746651][ T7069] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 132.910868][ T7073] dccp_invalid_packet: P.Data Offset(4) too small [ 133.125603][ T7087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.300356][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.311720][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.813204][ T7125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.556120][ T7159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.877338][ T7172] sit0: entered promiscuous mode [ 134.910404][ T7172] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 134.952782][ T7172] __nla_validate_parse: 3 callbacks suppressed [ 134.952806][ T7172] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.183534][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.288601][ T7195] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.395749][ T7200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.509293][ T7205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.089369][ T7216] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 136.508393][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.526804][ T7231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.536470][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.591970][ T7232] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.601482][ T7232] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.610794][ T7232] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.620172][ T7232] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.656283][ T7241] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 136.669963][ T9] IPVS: starting estimator thread 0... [ 136.737196][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.753277][ T7246] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.767639][ T7242] IPVS: using max 17 ests per chain, 40800 per kthread [ 136.795710][ T7248] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.881889][ T7251] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 137.345082][ T7265] Can't find ip_set type hash:ip³'*àt,ip [ 137.391041][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.109167][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.535298][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.565489][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.592925][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.602830][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.614716][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.631063][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.639702][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.650710][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.809225][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.846158][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.869767][ T7329] macvtap0: entered promiscuous mode [ 138.877121][ T7329] macvtap0: left promiscuous mode [ 138.986991][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.019493][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.159238][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.175244][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.348748][ T7348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.624346][ T1105] bridge_slave_1: left allmulticast mode [ 139.644050][ T1105] bridge_slave_1: left promiscuous mode [ 139.656561][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.673694][ T1105] bridge_slave_0: left allmulticast mode [ 139.680136][ T1105] bridge_slave_0: left promiscuous mode [ 139.687010][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.455178][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.464346][ T1105] bond_slave_0: left promiscuous mode [ 140.484482][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.494081][ T1105] bond_slave_1: left promiscuous mode [ 140.505119][ T1105] bond0 (unregistering): (slave bond1): Releasing backup interface [ 140.514560][ T1105] bond0 (unregistering): Released all slaves [ 140.619132][ T1105] bond1 (unregistering): Released all slaves [ 140.636681][ T7364] __nla_validate_parse: 59 callbacks suppressed [ 140.636702][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.675781][ T7364] macvtap0: entered promiscuous mode [ 140.694569][ T7364] macvtap0: left promiscuous mode [ 140.729376][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.746217][ T5118] Bluetooth: hci2: command tx timeout [ 141.103075][ T7318] chnl_net:caif_netlink_parms(): no params data found [ 141.500806][ T7415] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 141.511837][ T7411] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.704808][ T7423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.719178][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.756256][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.763568][ T7318] bridge_slave_0: entered allmulticast mode [ 141.778392][ T7318] bridge_slave_0: entered promiscuous mode [ 141.820593][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.844826][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.856722][ T7318] bridge_slave_1: entered allmulticast mode [ 141.864452][ T7318] bridge_slave_1: entered promiscuous mode [ 141.926996][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.969869][ T1105] hsr_slave_0: left promiscuous mode [ 141.983742][ T1105] hsr_slave_1: left promiscuous mode [ 142.000544][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.014960][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.059764][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.068000][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.116446][ T1105] veth1_macvtap: left promiscuous mode [ 142.122129][ T1105] veth0_macvtap: left promiscuous mode [ 142.131943][ T1105] veth1_vlan: left promiscuous mode [ 142.142989][ T1105] veth0_vlan: left promiscuous mode [ 142.195724][ T29] audit: type=1804 audit(1717721366.519:5): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3060287755/syzkaller.s7lcdL/96/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 142.826410][ T5118] Bluetooth: hci2: command tx timeout [ 142.984871][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 143.072962][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 143.786523][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.084244][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.192749][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.433989][ T7318] team0: Port device team_slave_0 added [ 144.480189][ T7318] team0: Port device team_slave_1 added [ 144.721978][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.765802][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.780213][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.851931][ T7318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.887603][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.894634][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.925923][ T7318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.948021][ T5118] Bluetooth: hci2: command tx timeout [ 145.152535][ T7481] IPVS: persistence engine module ip_vs_pe_€ not found [ 145.229167][ T7477] IPVS: persistence engine module ip_vs_pe_€ not found [ 145.333944][ T7318] hsr_slave_0: entered promiscuous mode [ 145.354978][ T7318] hsr_slave_1: entered promiscuous mode [ 145.463975][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.484826][ T7494] macvtap0: entered promiscuous mode [ 145.492054][ T7494] macvtap0: left promiscuous mode [ 145.510548][ T7495] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.151387][ T7318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.168921][ T7318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.204256][ T7318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.232170][ T7318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.298376][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.467691][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.481746][ T7531] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.522031][ T7318] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.548245][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.555446][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.601377][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.609149][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.976442][ T5118] Bluetooth: hci2: command tx timeout [ 147.117566][ T7550] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.129564][ T7318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.156872][ T7550] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 147.165094][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.298328][ T7555] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.303873][ T7318] veth0_vlan: entered promiscuous mode [ 147.413198][ T7318] veth1_vlan: entered promiscuous mode [ 147.564290][ T7318] veth0_macvtap: entered promiscuous mode [ 147.579603][ T7318] veth1_macvtap: entered promiscuous mode [ 147.755421][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.774750][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.791076][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.806757][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.817200][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.846331][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.869554][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.934313][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.968782][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.981526][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.003778][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.053269][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.067590][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.087879][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.136092][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.164879][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.184100][ T7318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.193674][ T7318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.212545][ T7318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.226582][ T7318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.437383][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.469190][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.487636][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.535811][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.556123][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.652513][ T7588] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 149.191336][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.179719][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.648155][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.502767][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.764517][ T7852] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.534107][ T5115] bond0: (slave syz_tun): Releasing backup interface [ 158.571353][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.592586][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.604305][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.612927][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.622844][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.631920][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.784570][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.824862][ T7879] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.001367][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.160476][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.381406][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.827395][ T12] bridge_slave_1: left allmulticast mode [ 159.833111][ T12] bridge_slave_1: left promiscuous mode [ 159.847916][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.881126][ T12] bridge_slave_0: left allmulticast mode [ 159.898965][ T12] bridge_slave_0: left promiscuous mode [ 159.904868][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.518927][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.534933][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.548544][ T12] bond0 (unregistering): Released all slaves [ 160.561577][ T7921] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.572228][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 160.625057][ T7932] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.736686][ T5118] Bluetooth: hci3: command tx timeout [ 161.105913][ T12] hsr_slave_0: left promiscuous mode [ 161.145741][ T12] hsr_slave_1: left promiscuous mode [ 161.155101][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.184790][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.202405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.212552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.253485][ T12] veth1_macvtap: left promiscuous mode [ 161.260623][ T12] veth0_macvtap: left promiscuous mode [ 161.266662][ T12] veth1_vlan: left promiscuous mode [ 161.272132][ T12] veth0_vlan: left promiscuous mode [ 162.063829][ T12] team_slave_1 (unregistering): left allmulticast mode [ 162.074144][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.121919][ T12] team_slave_0 (unregistering): left allmulticast mode [ 162.133839][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.602895][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.610291][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.618273][ T7874] bridge_slave_0: entered allmulticast mode [ 162.625854][ T7874] bridge_slave_0: entered promiscuous mode [ 162.648287][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.655486][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.664434][ T7874] bridge_slave_1: entered allmulticast mode [ 162.688982][ T7874] bridge_slave_1: entered promiscuous mode [ 162.817394][ T5118] Bluetooth: hci3: command tx timeout [ 162.865443][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.917955][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.040950][ T7983] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.052222][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.069328][ T7874] team0: Port device team_slave_0 added [ 163.108387][ T7874] team0: Port device team_slave_1 added [ 163.216289][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.223521][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.290881][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.326982][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.334034][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.396821][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.508669][ T7874] hsr_slave_0: entered promiscuous mode [ 163.515717][ T7874] hsr_slave_1: entered promiscuous mode [ 163.527224][ T7874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.534837][ T7874] Cannot create hsr debugfs directory [ 164.385093][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.896281][ T5118] Bluetooth: hci3: command tx timeout [ 164.931349][ T7874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.992530][ T8041] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.019397][ T7874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.062677][ T7874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.130760][ T7874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.392991][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.443032][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.465173][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.472461][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.531074][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.538438][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.579991][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.307795][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.482621][ T7874] veth0_vlan: entered promiscuous mode [ 166.535377][ T7874] veth1_vlan: entered promiscuous mode [ 166.615882][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.659812][ T7874] veth0_macvtap: entered promiscuous mode [ 166.687681][ T7874] veth1_macvtap: entered promiscuous mode [ 166.741555][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.756882][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.784307][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.805617][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.824626][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.840198][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.858672][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.881437][ T8097] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.913593][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.955886][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.976098][ T5118] Bluetooth: hci3: command tx timeout [ 166.992926][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.041510][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.080211][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.100035][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.111438][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.124040][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.138898][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.154517][ T7874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.165243][ T7874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.189865][ T7874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.201111][ T7874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.512071][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.520724][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.584530][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.613565][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.183959][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.775679][ T8153] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.237154][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.197655][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.538634][ T8221] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.870196][ T3712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.130320][ T3712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.339025][ T3712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.372391][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.493833][ T3712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.620330][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.630623][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.641824][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.650459][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.659054][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.669691][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.883867][ T3712] bridge_slave_1: left allmulticast mode [ 171.906939][ T3712] bridge_slave_1: left promiscuous mode [ 171.912881][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.965653][ T3712] bridge_slave_0: left allmulticast mode [ 171.979175][ T3712] bridge_slave_0: left promiscuous mode [ 171.985635][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.435882][ T3712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.450389][ T3712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.463180][ T3712] bond0 (unregistering): Released all slaves [ 172.755311][ T8269] syz-executor.2 (8269) used greatest stack depth: 17680 bytes left [ 172.916235][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.964173][ T3712] hsr_slave_0: left promiscuous mode [ 172.985561][ T3712] hsr_slave_1: left promiscuous mode [ 173.007001][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.017806][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.026769][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.035397][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.092287][ T3712] veth1_macvtap: left promiscuous mode [ 173.102234][ T3712] veth0_macvtap: left promiscuous mode [ 173.115474][ T3712] veth1_vlan: left promiscuous mode [ 173.134978][ T3712] veth0_vlan: left promiscuous mode [ 173.754154][ T3712] team0 (unregistering): Port device team_slave_1 removed [ 173.779042][ T5118] Bluetooth: hci2: command tx timeout [ 173.811829][ T3712] team0 (unregistering): Port device team_slave_0 removed [ 174.642048][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 174.859559][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.869098][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.876790][ T8259] bridge_slave_0: entered allmulticast mode [ 174.884934][ T8259] bridge_slave_0: entered promiscuous mode [ 174.907611][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.923083][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.936460][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.946815][ T8259] bridge_slave_1: entered allmulticast mode [ 174.954539][ T8259] bridge_slave_1: entered promiscuous mode [ 175.025864][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.068882][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.190394][ T8259] team0: Port device team_slave_0 added [ 175.264564][ T8259] team0: Port device team_slave_1 added [ 175.354166][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.372681][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.406653][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.449986][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.463032][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.505573][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.650593][ T8259] hsr_slave_0: entered promiscuous mode [ 175.660928][ T8259] hsr_slave_1: entered promiscuous mode [ 175.866392][ T5118] Bluetooth: hci2: command tx timeout [ 176.281129][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.443029][ T8259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.472607][ T8259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.529088][ T8259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.553894][ T8259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.876813][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.950424][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.998496][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.005704][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.023594][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.030852][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.477007][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.714415][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.882387][ T8259] veth0_vlan: entered promiscuous mode [ 177.921364][ T8259] veth1_vlan: entered promiscuous mode [ 177.936249][ T5118] Bluetooth: hci2: command tx timeout [ 178.075364][ T8259] veth0_macvtap: entered promiscuous mode [ 178.112347][ T8259] veth1_macvtap: entered promiscuous mode [ 178.188661][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.205493][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.215725][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.230659][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.244674][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.258512][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.271969][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.319700][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.341782][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.364591][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.378669][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.390045][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.410575][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.446163][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.458526][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.488091][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.499301][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.533148][ T8259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.549043][ T8259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.559109][ T8259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.572452][ T8259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.993665][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.024166][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.142335][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.189909][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.658685][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.018717][ T5118] Bluetooth: hci2: command tx timeout [ 180.552978][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.887666][ T8530] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 181.565216][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.980381][ T8574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.966931][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.962864][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.896969][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.910558][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.919829][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.943811][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.953983][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.964480][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.054030][ T2894] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.271079][ T2894] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.441670][ T2894] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.603733][ T2894] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.271782][ T2894] bridge_slave_1: left allmulticast mode [ 186.284447][ T2894] bridge_slave_1: left promiscuous mode [ 186.297507][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.329651][ T2894] bridge_slave_0: left allmulticast mode [ 186.343826][ T2894] bridge_slave_0: left promiscuous mode [ 186.359141][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.888975][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.904230][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.916442][ T2894] bond0 (unregistering): Released all slaves [ 186.931320][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 187.060462][ T53] Bluetooth: hci1: command tx timeout [ 187.628546][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.658840][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.675642][ T8668] bridge_slave_0: entered allmulticast mode [ 187.702201][ T8668] bridge_slave_0: entered promiscuous mode [ 187.753362][ T2894] hsr_slave_0: left promiscuous mode [ 187.777198][ T2894] hsr_slave_1: left promiscuous mode [ 187.801878][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.822714][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.855123][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.885510][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.944521][ T2894] veth1_macvtap: left promiscuous mode [ 187.960817][ T2894] veth0_macvtap: left promiscuous mode [ 187.980822][ T2894] veth1_vlan: left promiscuous mode [ 187.986509][ T2894] veth0_vlan: left promiscuous mode [ 188.623656][ T2894] team_slave_1 (unregistering): left allmulticast mode [ 188.634013][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 188.671822][ T2894] team_slave_0 (unregistering): left allmulticast mode [ 188.688357][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 189.136305][ T53] Bluetooth: hci1: command tx timeout [ 189.163096][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.171895][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.179322][ T8668] bridge_slave_1: entered allmulticast mode [ 189.186952][ T8668] bridge_slave_1: entered promiscuous mode [ 189.270281][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.302810][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.436734][ T8668] team0: Port device team_slave_0 added [ 189.455649][ T8668] team0: Port device team_slave_1 added [ 189.582319][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.595924][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.644906][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.682304][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.694719][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.730224][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.843861][ T8668] hsr_slave_0: entered promiscuous mode [ 189.867404][ T8668] hsr_slave_1: entered promiscuous mode [ 189.884525][ T8668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.892266][ T8668] Cannot create hsr debugfs directory [ 189.931236][ T2894] IPVS: stop unused estimator thread 0... [ 190.875298][ T8668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.909671][ T8668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.938947][ T8668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.965607][ T8668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.215325][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.226350][ T53] Bluetooth: hci1: command tx timeout [ 191.273066][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.289359][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.296606][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.324364][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.331627][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.900166][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.594920][ T8668] veth0_vlan: entered promiscuous mode [ 192.633977][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.659264][ T8668] veth1_vlan: entered promiscuous mode [ 192.818513][ T8668] veth0_macvtap: entered promiscuous mode [ 192.849355][ T8668] veth1_macvtap: entered promiscuous mode [ 192.911095][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.934850][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.962173][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.976521][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.006029][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.036168][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.049417][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.076068][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.101876][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.121687][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.132349][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.166108][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.187731][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.204329][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.223247][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.233319][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.244180][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.258038][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.272985][ T8668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.296400][ T53] Bluetooth: hci1: command tx timeout [ 193.321229][ T8668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.333583][ T8668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.366333][ T8668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.604727][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.625074][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.643596][ T8908] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.727267][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.746808][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.891693][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.099267][ T8932] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.685674][ T8953] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.743765][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.752098][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.768590][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.503972][ T8989] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.631794][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.312028][ T9036] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 196.354897][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.372631][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.826693][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 227.407234][ T5128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.417031][ T5128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.427766][ T5128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 227.436582][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.446880][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 227.455074][ T5128] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.469239][ T5128] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 227.476779][ T5128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.485212][ T5128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 227.499689][ T5128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 227.507774][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 227.508085][ T5128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 227.524781][ T5128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.526243][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 227.540786][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 227.551518][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 227.563442][ T5128] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 227.573052][ T5128] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 227.921269][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 227.939007][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 227.948883][ T5128] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 227.957769][ T5128] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 227.967555][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 227.975836][ T5128] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 227.983500][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 227.998462][ T5118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 228.005031][ T5128] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 228.006870][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 228.022181][ T5128] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 228.029841][ T5128] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 229.536888][ T5128] Bluetooth: hci5: command tx timeout [ 229.616606][ T53] Bluetooth: hci7: command tx timeout [ 229.625084][ T5128] Bluetooth: hci6: command tx timeout [ 230.096460][ T5128] Bluetooth: hci9: command tx timeout [ 230.103760][ T5128] Bluetooth: hci8: command tx timeout [ 231.616217][ T5128] Bluetooth: hci5: command tx timeout [ 231.696428][ T5128] Bluetooth: hci6: command tx timeout [ 231.701898][ T5128] Bluetooth: hci7: command tx timeout [ 232.176185][ T5118] Bluetooth: hci9: command tx timeout [ 232.182756][ T5128] Bluetooth: hci8: command tx timeout [ 232.663293][ T53] Bluetooth: hci0: command 0x040f tx timeout [ 233.696252][ T53] Bluetooth: hci5: command tx timeout [ 233.776992][ T5128] Bluetooth: hci7: command tx timeout [ 233.782478][ T5128] Bluetooth: hci6: command tx timeout [ 234.256108][ T5128] Bluetooth: hci8: command tx timeout [ 234.256344][ T53] Bluetooth: hci9: command tx timeout [ 235.777111][ T53] Bluetooth: hci5: command tx timeout [ 235.856592][ T53] Bluetooth: hci6: command tx timeout [ 235.862057][ T53] Bluetooth: hci7: command tx timeout [ 236.336210][ T53] Bluetooth: hci9: command tx timeout [ 236.346743][ T53] Bluetooth: hci8: command tx timeout [ 256.189202][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.195564][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.871728][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 293.091081][ T5123] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 293.099163][ T5131] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 293.109564][ T5123] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 293.118953][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 293.118986][ T5130] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 293.142926][ T5123] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 293.150256][ T4489] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 293.158247][ T5121] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 293.173175][ T4489] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 293.180860][ T5123] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 293.188176][ T5132] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 293.196817][ T5132] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 293.198164][ T4489] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 293.208833][ T5123] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 293.217842][ T4489] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 293.222104][ T5123] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 293.227237][ T4489] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 293.236160][ T5123] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 293.248960][ T5132] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 293.249032][ T4489] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 293.264602][ T4489] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 293.275338][ T9093] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 293.285873][ T5127] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 293.294005][ T5127] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 293.313183][ T5127] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 293.330760][ T4489] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 293.341907][ T4489] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 293.366589][ T4489] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 293.376842][ T4489] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 293.384537][ T4489] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 294.106482][ T4489] Bluetooth: hci2: command 0x0406 tx timeout [ 295.296438][ T53] Bluetooth: hci11: command tx timeout [ 295.302815][ T4489] Bluetooth: hci12: command tx timeout [ 295.376317][ T53] Bluetooth: hci14: command tx timeout [ 295.387504][ T53] Bluetooth: hci10: command tx timeout [ 295.466154][ T4489] Bluetooth: hci13: command tx timeout [ 297.376426][ T4489] Bluetooth: hci11: command tx timeout [ 297.381980][ T4489] Bluetooth: hci12: command tx timeout [ 297.456194][ T4489] Bluetooth: hci10: command tx timeout [ 297.461747][ T4489] Bluetooth: hci14: command tx timeout [ 297.536075][ T4489] Bluetooth: hci13: command tx timeout [ 299.456306][ T53] Bluetooth: hci11: command tx timeout [ 299.463053][ T4489] Bluetooth: hci12: command tx timeout [ 299.536206][ T4489] Bluetooth: hci14: command tx timeout [ 299.541755][ T4489] Bluetooth: hci10: command tx timeout [ 299.616135][ T4489] Bluetooth: hci13: command tx timeout [ 301.536430][ T53] Bluetooth: hci11: command tx timeout [ 301.542014][ T4489] Bluetooth: hci12: command tx timeout [ 301.616163][ T4489] Bluetooth: hci10: command tx timeout [ 301.616238][ T53] Bluetooth: hci14: command tx timeout [ 301.696305][ T53] Bluetooth: hci13: command tx timeout [ 309.464575][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 317.625864][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.632418][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.416195][ T9093] Bluetooth: hci8: command 0x0406 tx timeout [ 350.422429][ T9093] Bluetooth: hci7: command 0x0406 tx timeout [ 350.430584][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 350.436364][ T9093] Bluetooth: hci6: command 0x0406 tx timeout [ 350.437039][ T5123] Bluetooth: hci9: command 0x0406 tx timeout [ 357.966498][ T30] INFO: task kworker/u8:4:61 blocked for more than 143 seconds. [ 357.974203][ T30] Not tainted 6.10.0-rc1-syzkaller-00199-gb0c9a2643541 #0 2024/06/07 00:53:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 358.047322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.077470][ T30] task:kworker/u8:4 state:D stack:21648 pid:61 tgid:61 ppid:2 flags:0x00004000 [ 358.125971][ T30] Workqueue: netns cleanup_net [ 358.130855][ T30] Call Trace: [ 358.134173][ T30] [ 358.185975][ T30] __schedule+0x17e8/0x4a20 [ 358.190613][ T30] ? __pfx___schedule+0x10/0x10 [ 358.195608][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.245955][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 358.251509][ T30] ? kthread_data+0x52/0xd0 [ 358.295951][ T30] ? schedule+0x90/0x320 [ 358.300283][ T30] ? wq_worker_sleeping+0x66/0x240 [ 358.305435][ T30] ? schedule+0x90/0x320 [ 358.360073][ T30] schedule+0x14b/0x320 [ 358.364309][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.375997][ T30] __mutex_lock+0x6a4/0xd70 [ 358.380662][ T30] ? __mutex_lock+0x527/0xd70 [ 358.385406][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 358.415954][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.421084][ T30] ? net_generic+0x1f/0x240 [ 358.425627][ T30] ppp_exit_net+0xe3/0x3d0 [ 358.445952][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 358.451137][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 358.469047][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 358.474929][ T30] cleanup_net+0x802/0xcc0 [ 358.485962][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 358.490971][ T30] ? process_scheduled_works+0x945/0x1830 [ 358.515949][ T30] process_scheduled_works+0xa2c/0x1830 [ 358.521595][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.535972][ T30] ? assign_work+0x364/0x3d0 [ 358.540912][ T30] worker_thread+0x86d/0xd70 [ 358.545563][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 358.565973][ T30] ? __kthread_parkme+0x169/0x1d0 [ 358.571084][ T30] ? __pfx_worker_thread+0x10/0x10 [ 358.595961][ T30] kthread+0x2f0/0x390 [ 358.600115][ T30] ? __pfx_worker_thread+0x10/0x10 [ 358.605262][ T30] ? __pfx_kthread+0x10/0x10 [ 358.625941][ T30] ret_from_fork+0x4b/0x80 [ 358.630434][ T30] ? __pfx_kthread+0x10/0x10 [ 358.635068][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.655974][ T30] [ 358.659181][ T30] INFO: task syz-executor.4:9045 blocked for more than 144 seconds. [ 358.676009][ T30] Not tainted 6.10.0-rc1-syzkaller-00199-gb0c9a2643541 #0 [ 358.683706][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.715967][ T30] task:syz-executor.4 state:D stack:28464 pid:9045 tgid:9042 ppid:8668 flags:0x00000006 [ 358.736147][ T30] Call Trace: [ 358.739499][ T30] [ 358.742463][ T30] __schedule+0x17e8/0x4a20 [ 358.747183][ T30] ? __pfx___schedule+0x10/0x10 [ 358.752081][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.757225][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 358.762734][ T30] ? schedule+0x90/0x320 [ 358.767102][ T30] schedule+0x14b/0x320 [ 358.772156][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.779287][ T30] __mutex_lock+0x6a4/0xd70 [ 358.783853][ T30] ? __mutex_lock+0x527/0xd70 [ 358.788647][ T30] ? ipv6_route_ioctl+0x4cb/0x870 [ 358.793973][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.800450][ T30] ? bpf_lsm_capable+0x9/0x10 [ 358.805170][ T30] ? security_capable+0x90/0xb0 [ 358.819988][ T30] ? ipv6_route_ioctl+0x242/0x870 [ 358.825098][ T30] ipv6_route_ioctl+0x4cb/0x870 [ 358.831570][ T30] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 358.841735][ T30] ? __might_fault+0xc6/0x120 [ 358.847793][ T30] inet6_ioctl+0x21a/0x280 [ 358.852266][ T30] ? __pfx_inet6_ioctl+0x10/0x10 [ 358.857514][ T30] sock_do_ioctl+0x158/0x460 [ 358.862159][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 358.886154][ T30] sock_ioctl+0x629/0x8e0 [ 358.890570][