last executing test programs: 1m27.246181003s ago: executing program 4 (id=84): syz_emit_ethernet(0x86, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000003c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r2=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111980000000000180000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', <r6=>0x0}) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}}}], 0x20}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x2d) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 1m12.521018316s ago: executing program 4 (id=84): syz_emit_ethernet(0x86, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000003c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r2=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111980000000000180000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', <r6=>0x0}) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}}}], 0x20}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x2d) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 58.344516895s ago: executing program 4 (id=84): syz_emit_ethernet(0x86, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000003c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r2=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111980000000000180000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', <r6=>0x0}) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}}}], 0x20}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x2d) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 47.381329595s ago: executing program 4 (id=84): syz_emit_ethernet(0x86, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000003c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r2=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111980000000000180000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', <r6=>0x0}) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}}}], 0x20}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x2d) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 36.870490729s ago: executing program 4 (id=84): syz_emit_ethernet(0x86, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000003c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r2=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111980000000000180000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', <r6=>0x0}) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}}}], 0x20}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x2d) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 30.174610543s ago: executing program 0 (id=635): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 30.123822346s ago: executing program 0 (id=636): socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000300)={0x2b, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x18}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/241, 0xf1}], 0x1}, 0x40000104) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) shutdown(r2, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x4c, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x4c}}, 0x0) 29.916483531s ago: executing program 0 (id=638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003780)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffd8e, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x4c}]}], {0x14}}, 0xe8}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)={'c', ' *:* ', 'm\x00'}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r3 = accept(r1, 0x0, &(0x7f0000000140)) sendmmsg$alg(r3, &(0x7f0000002e00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="6705d09895064063dd0e491ec2c03fae88fe855a5a6799073268d3b91293e54f374af14eb56463e68595b49bf7276eb80810f3f1d4eface7cfc9ab71c4c6be29b86a6e1828daa3a61c3c56a2a305c7e0735e75b422a38957f32ecbc02eabe2d90dcce7998c39177ae29b3f28aa41964557fdc9401ec4dbea2983154bb415451f4ccc3d51d43afa4390f62a277fe67830de68a472113fdcb4c6b6519c8a066e927c699472631959a7d1c31a9c5f70fd1142c842425a1b7c50f4a176a659c6645b771c384f09730beb4be60fc06aa4462a2f17f6851ec022cad6b2854e204ad8df0a24a914defc7a26028866cfa1dc77af", 0xf0}, {&(0x7f0000000400)="c696d1fdc4b8cd2976748a3ab452c820bf87932b97b363e22e896ffd00c9188f49e42a868510f9f0ba1c7c6d85c38101ccbc614f998627d7842353f896a7e0383444d950024df13133cb97aae5ba8be153d89f761c3e1493511b4b4bbd3e21ed7eb02b29bdd8cb53a1cf408a09efe936e97c822a86b6ba05098ec6dca372102862e5637bbbcc7815176f93692d95ebf758e822167aae", 0x96}], 0x2, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="854b5fbb429a626413fc437ced336047c5", 0x11}, {&(0x7f0000000500)="26bbd05c7bd134cba654a6c046291a4eda9e3da2081c2a8f545381a833059532a8a05f5bc115e94d36d25037dba2368f87cc74af8d6ecbacfaa255cc633dc3023a019eea5556285b684ea611fb405b97c922b41752f18815e2cdd1c32efcc9c8f640843b07d81169a379276a733c46eae96e31ae17ab87fc083c6c53ac43981b59e92a72", 0x84}], 0x2, 0x0, 0x0, 0x48011}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)="cdbcc8cd7fee578dee522965dee7fd20c5eee023bf713bb2c30eba8385f18e07cb21ea16610eee13077543915116895def8974179c731513", 0x38}], 0x1, &(0x7f0000000680)=[@op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x70, 0x117, 0x2, 0x59, "e89e8b42322861ab59175bb52c679b11e53d672cf36fa2f2a25604d01cb21e50e7ea7c3f54df00b240e1e0d7c00bb68d02487f394e742758957146831e2e1948f35575a1e162b68b87a68b311f332cbaaf4c5b27be4c33506c"}], 0xd0}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)}], 0x2, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x88, "9756958042e40c638b169b1aded652d42974eb7de7e3b456332d052d2ef3652e089a05788eb4b589fdf0d8779b6f0be486218a105caba9b4d112f5dd9b87545c97535a861e190f6e39be57164e1799757038693f8bf5e062d1dbb42ecb817b022c843813592f58cf17d38e97a83658b53436679bba032b1f9e3c72fc3ab515052503a0dc8d34e044"}, @iv={0xe8, 0x117, 0x2, 0xcf, "e102ea4a896badff7ad366bf00569b47f9848825b038e25d6e92d6b54d59adeb9c59ea9e259018fe011f12246df0676eac073f079d379fbf9b97f3d56b968809a631e79013e82c80bc08ab470cf8fd784ccf626a436b4276dd219750d6c1be931f7c2a699800bf31f001dcb1c191fb087a0305b7c92573b5ad211244230bd173cc298e7bfac92c4335187cad4f84a9881fc259104c9bc28dabaa6cc3b96df9a9335840e73487b0e422ec9420e9a7373a90e3cbed856b3fff4cb838cb90c0361bc05d5dcd44bd3b29410d8ebcf7baf0"}], 0x1a0, 0x40010}, {0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f00000019c0)="05c8", 0x2}, {&(0x7f0000001a00)="f1244cd1ff91673f207036842b93a19c5caea792262c8628ada9967956cb2a6f90bfb7053bfedf74384236e91407b367a642785cd034dd784df23e3c1ee76cc9cffa812b86c7a79040f97c30ecb2be9e3e62309972c23adec5591a21605b3c40dbd582c81ee5f5352cc5156f79a50df42d5ae8a9274c009a5f9a2db9e40dd168aefb929a74ced62dcde0f6697d3ddb597fae7ba6bd1bfdd0b27b95c7eab70c3c72ddca0db09d493a540bdcc926ea37e17d8179a3089087482de22e8d14774a1e1f9e43a4f7475c2bd4b304a0cd7d393eb7dc3d2df18d79a850aa155ba6528e610498", 0xe2}, {&(0x7f0000001b00)="c9f41efe2bc3fa2c20a056c8e5659a53bb6c2619f1470d560bd834deae6c06a474bc4b523b372f0af67d4c47202de6d777201bf5a96d275da32f10a84134c91c368931d2617aa96e3467b1c4ec570a60c21cf883a67cf5412a55cb001bb3b1c610c0d358afc319f04cb2ee45d12605649920d6e810114fbe845af5f7f39766010d7c3e09e4f757935d95f255e0fb8668fb732a16709fc03f5ba7f73eb6c596a9a21f675a60f0c801dd91598d5f3375f8e261ace31b39a4541a97c6f8a53f93a4bf3a10f41f", 0xc5}, {&(0x7f0000001c00)="97be4b43101469cd4c343c10c0a264d2cd1c1f72916aa523c499329039da2b066046ac886309851ad468f37cab74c333edf964a74f", 0x35}, {&(0x7f0000001c40)="e28f555a113b106320569319cdbe574d72eb07632237956df8492ed1c3af91dd88d3e9d36876f19576cd31442b4a2e93501f280e0ca831d83e4ebe347ca7ddcbfa64b53cdf50a561ee86fbfe2dac74c869eec1fd6222b1c42f91c47f08aa", 0x5e}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="bf68ce4127939a241fe5c2c3d085fb6819152344b7c8ff59aa475e6246892a2c3413cb95cf0cdd", 0x27}], 0x7, &(0x7f0000002d80)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x18000000}], 0x48, 0x40040}], 0x5, 0x8000) 28.97233914s ago: executing program 0 (id=648): unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000003340), 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000011c0)={0x0, 0x6, 0x8}, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001200)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r8) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x19, &(0x7f0000001480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1de5a839}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0x9c}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000000)='GPL\x00', 0x2, 0x1000, &(0x7f0000000100)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0xd, 0x7fffffff, 0x7d}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[r3, r4, 0x1, r5], &(0x7f0000001300)=[{0x80001, 0x1, 0xf, 0xc}], 0x10, 0xee, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r12, r11, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0x2, 0x2, 0x73) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xcb, r10, 0xfb}, 0xc) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x89a1, &(0x7f0000000040)={'rose0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 28.80943768s ago: executing program 0 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fff}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1400}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f72ba8000070b2000000000000000000", 0xfffffe1a}], 0x1000005a, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924924924924b9, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r6=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000070000100200000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280080001"], 0x24}}, 0x0) 28.515810297s ago: executing program 0 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) bind$tipc(r3, 0x0, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) 26.43000316s ago: executing program 4 (id=84): syz_emit_ethernet(0x86, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000003c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r2=>0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111980000000000180000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', <r6=>0x0}) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}}}], 0x20}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x2d) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 21.416797711s ago: executing program 2 (id=692): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={0x24, r4, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x24}}, 0x0) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ip={@private=0xa010100, @local, 0xff, 0xff, 'batadv_slave_0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x2, 0x95}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xa3, 0xa, [0x23, 0x24, 0x21, 0x1f, 0xe, 0x1b, 0x31, 0x28, 0x34, 0x16, 0x27, 0x35, 0x25, 0x2b, 0xf, 0x31], 0x2, 0xfff, 0x800}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0xff000000, 'ip_vti0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x11, 0x3, 0x1a}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0x3, 0x2, 0xfc8, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$vsock_stream(r6, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @local}, 0x10) bind$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) 20.445538766s ago: executing program 3 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x1, 0xffffffffffffffff, 0xaf, 0x20000160, 0x4cb4], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="ba6aac099b684445dcc96f9e4bbf2410df063ee3834e348a643499", 0x1b}, {&(0x7f0000000080)="36552c99f4a0d3a3f172aa8803f837d78991b1ef54d2f656b266dc1f6b5ebd2798492f376710fe60e9cf793160b01d21e43a949d475e38ff00e55ec1bd618b57feef2328b2fb42f4c04572bc8881c79aa98dc3cc2bb5008fefe599842899a58e0851e18012", 0x65}], 0x2}}], 0x1, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000440)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) (async) r4 = socket$inet6(0xa, 0x40000080806, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000355c7732100000000000000000ebe000a43b966400000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xf, 0x7}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x8}, {0xffffffff, 0x7, 0x2, 0x6, 0x5, 0x2, 0x1}}}]}]}]}}]}, 0x5c}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x170, 0x0, 0xfa08, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3fa, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x3b22ca31, @mcast2, 0x2379}, 0x1c) (async) sendmmsg$inet6(r11, &(0x7f0000006d40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x0, 0x0) 20.260130867s ago: executing program 2 (id=700): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ff06ff00000000180012800e0001007769726567756172640000000381028008000a0061cf"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_delroute={0x24, 0x19, 0x400, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x5, 0x0, 0x0, 0xfe, 0x0, 0x1400}, [@RTA_EXPIRES={0x8, 0x17, 0x7}]}, 0x24}}, 0x40) 20.23181255s ago: executing program 3 (id=701): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xe0028008}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x30100, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 20.11170692s ago: executing program 1 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) socket$inet(0xa, 0x801, 0x100) (async) socket$inet(0xa, 0x801, 0x100) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xa002a008}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r7, 0x0, 0x0, 0x80000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000009900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000009900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r13=>0x0}) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r13}, 0x10) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 19.764018516s ago: executing program 3 (id=703): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x54, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x40, 0x1, [@m_tunnel_key={0x3c, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x9, 0x6, "13885b9622"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) clock_gettime(0x0, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0}) pselect6(0x40, &(0x7f0000000180)={0x7fff, 0x46b, 0x1, 0x4c, 0x100, 0x7fffffff, 0x800, 0x9}, &(0x7f00000001c0)={0x0, 0xffff, 0x2, 0xfffffffffffffffd, 0x7, 0x3, 0x3, 0x5}, &(0x7f0000000200)={0x1, 0x5834, 0x5a4, 0x2, 0x7e56, 0x0, 0x9, 0x4}, &(0x7f00000002c0)={r1, r2+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffff]}, 0x8}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ff"], 0xa0}}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0faf16a001c000000000000000000000008"], 0x38}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 19.652224504s ago: executing program 3 (id=704): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) socket(0x2a, 0x2, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000540), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9e70617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0}) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\a', @ANYRES16=r8, @ANYBLOB="010000000000fddbdf251400000000000300f800"], 0xe}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x9, 0x10, 0xffff, 0xa}}, @void, @void, @void, @void}, 0x3d) (async) nanosleep(0x0, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}]}, @val={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x6, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x7, 0x4}}}, 0x42) 19.256387548s ago: executing program 2 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a0000000350000000000000085000000070000009500000000000000b5e00b0ebefac2325cd01fd071effbba4275f6c3a98095b65a658ca5a63dcf0683e9769c9f0e6cac6f86a0389488370939ef4d6fcc6c5e6fd667ad19733af656382665737822f09545d815b3ea00700d3232851ee9da7de1df478fdd66ab3bbcec087ffbf9c84c734807ef73b796eb8fbcaa"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000a40)={r5, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000004c0)={0x0, 0x1, @start={r5, 0x1, "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", "5774c3b07d76f5f935cb6ca27d17bb397ccdbea7553ec18a8dab26238e77c43149a08b8995b7c8913c893d8d48fb583a7cfbd46a650e48e1cc8c71a275c9a2007473af8a7da007b0a1e38d538a73459d1a6b3ff06ac4a0039d3131f247d1c9cd80959948e24b8e0465dbf0bbdaa5b0dcc3d3bce521e1d6286c3cb464635d9dd599dddec338232f6357cbc2bc47f45c0d5647fbd493af2b01989db129771f57803e451c9dc4e3dbcadaf9ad2a91519a368c6b0a4ff8be2601402f53c7305c55db77d8a147616bdb839e3404f91d4c535d26392356bae2d708a61bc8ea62932e6c059e2b66fec740b7686e11c58e98cb036e9914ad67fb4c78114902f4b002ec42fa551158f9ce27ea363e8ff0da5006c5426c74ceb825f2d6b5fa29686bb45c13aee2f9d158c1e3053fc46513cd17d33dde35b9d57d683592c02080d3d2b4301fb24596879bd77cab114826425b5e05e6da3c6599c54a3507e55fd81b643985b4f1e647f3e1d7250967aa52a4dd41624e54de139e90976094bcb5a608d1374332173aabe27898203860d3c2ebfb2459ce0278ceabff534df1682d5db007ff182e966199347941b78c794582675101b8b8acee89e1203211da2dbd896438f890483c99b66fd731a4feb65ced49d139f0ff841681b11f18e4aab3b8daf52500c5de2687ba0bf7f1b28610ff45c78acd3ceed579758374bb9b519883c09a5e4275dfc594136bc333869314cb41ab76c576698ccbe553a8f2e64d1471041dd11634644b4867ff4f9fce95a3d1483c9a706f36bbbf6b3a51b96ad44904e0627dab4a407cc49f5a016989ea966536576c7635dc02eba4e3a2761c835984e15fc706195c5b9eece310bb446bd35201553220730282af8e9d31a362b3b58ecee11ba173aceee068a85659289d1ef943ef042971c02deca510f0c179ecc4d17538b49e24cd41b1024c4c0603efd5f580e7234d9c3399d65104f8194554bdab37ca391bcf384e46376b2caf3777b51e79630ae8d5541cf97fd850ae5a103b6bc150a76f0f8adc62d9bad54e7b3c76767422e9810e1b26215c4dbb23f34a23c229bce6e14e7a33f21739674f85754a46ae51ebf978024ad0e40b29e935c6c368927208cba0ed422e1346bf84758482196a226a24735b9d6e9e22e126a875b16cbcabcfc8dc74d5e72569019271d3425aca6ffa49aeb8da907107554de19a349859e75a58b92f3214439db1c96152c2e875bcafcdcc5cc8d06ca4080391f966fcba6d0a8f3322e47c80e75f14a8a2771aa19cf8efde51e1a7b5e5118bece9bd9ecd15a334492405c37440e76d6c8b35ea13d196ba85fe09a74bc897810ee94ead11e521a9018d1ae1c933dc1e23adff104f140c9b69241761e5c7038d43f32c5c274a9a4d1aec8fc7dbf77170e6bbe4fe56bc75003d1102ab0ed80e2340e46ad3267b2102b0a57d"}, [0x5, 0x5, 0x4, 0xb330, 0x7, 0x5, 0x0, 0x9, 0x99b, 0x6, 0x9, 0x10001, 0x3, 0x3, 0x500000000000000, 0x0, 0x1, 0x5, 0x2, 0x4, 0x6, 0x2, 0x5, 0x1, 0x81, 0x9, 0x5, 0x1, 0x1000, 0x2, 0x0, 0x2, 0x80000001, 0x101, 0xfffffffffffffff7, 0x1, 0x9, 0x62, 0x9, 0x100000000, 0x7fff, 0x400, 0x4, 0x64979c86, 0x7, 0xffffffffffffff15, 0x0, 0x1, 0x2, 0x5, 0x7, 0x4, 0x1, 0x6, 0xf2bd, 0x80, 0x7, 0x81000000000000, 0x6, 0x7fffffffffffffff, 0x3, 0x8, 0xfffffffffffffff8, 0x7ff]}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001380)={{r2}, {@val={r5}, @max}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={r5, 0x8000000000000000, 0x916, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000005000000000000007700000000009500000000001600"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.131599667s ago: executing program 3 (id=706): unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}]}, 0x34}}, 0x4000) r2 = socket(0x10, 0x803, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80800) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x1070bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x0, 0x10201}}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e0a0000000000001da00000000000009500000000000000c7a199ba5633231d61336a0535434728d609f5658a9359ebbd64de3a6a34e15f0013bcf12b22aa0c3ab50c0bb8a9699b61d63c1241e47dbce83afda45edf8b54d12716bd7070f76846dedd79cd68223be16030753751a8f7d6fb0808bc4cce042a5fbdd42679099493099841879e27ef86c6cbc18c100f732b6fa27e20d0c73ff6998293305c3d9303862e6a2b839b7435b40986a69a5841b71efc1c2407ccfa1538f312633d28d8b183846896f5ea10dcddd1284c2b53432e5c7f10fae683311b25f5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xffdf, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000440)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @from_mac=@device_b, {0x7, 0xb48}, "", @value={0x3, 0x0, 0x3}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x88, "cdd00379995251ab3644c2d59535391e2492adf864c4a0327a4bbdbb781d9f72ab148a5770ba94102091470194dbb4df6ab7a864a781e8714ad2e213c0239c24e24cb3e4d7055c19f887306fa238e173ff059aea2e86c76ec9ff116e828671e90e53921cdbc779e5fa060021517dc5e2eed80645cd381f2e940a835f656ee63dee616530372d9068"}, {@device_b, @broadcast, 0x83, "cac02baf503d7a54589c0e083a80a0b348fe7da501b9cec6ceffc47c133b21e72538085eda3de249b2a610479b3f29d97ae972e50872c988e00ceb328fa59b12b6c2af42e7121c491c3b8a4d641b79356fb134bf6fb1c7a25103cefafb452e06d9901886a226ee1bfdd7c294089f7d94f430fecee9c67a822690553bd21c65abda867b"}, {@broadcast, @broadcast, 0x35, "e7da15f70f0b431a8ee0ef5648705bc95a71f0244819be62a3a848b35cb417b23b1901a269d2f52f12f48d3911c0d81e331a50fd8e"}]}, 0x18e) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, 0x2, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) 19.104857264s ago: executing program 1 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2c, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x20004004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="05003400bb00000004009300040005011e0094"], 0x4c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) 18.792734252s ago: executing program 2 (id=708): r0 = socket$nl_audit(0x10, 0x3, 0x9) write(r0, &(0x7f0000000040)="d93fa730d0e1576c571b7b1b18091b89df", 0x11) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcff1f0000000000000000008b110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x62, &(0x7f0000000080)={@link_local, @random="fdf9a684a51b", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfec0ffffffffffff}, @private2}}}}}}, 0x0) 18.559036316s ago: executing program 2 (id=709): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) unshare(0x22020600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'bridge0\x00', 0x400}) (async) close(r1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000800000000000000000000000000000e00000d300"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)) 17.385132228s ago: executing program 3 (id=710): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x1) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = socket(0x2, 0x3, 0x6) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10) write$tun(r1, &(0x7f0000000100)=ANY=[], 0x72) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0xc, 0x800, 0x0, 0x7, 0x9]}, &(0x7f0000000200)=0x54) 16.786568326s ago: executing program 1 (id=711): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000280)=0x3fa8, 0x4) recvmmsg(r2, &(0x7f0000001c00), 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_sco(r7, &(0x7f0000000040), 0x8) shutdown(r7, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000001c0)={0x1f, @none}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x810) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b63707500986574080000000000000000"], 0x11) socket$nl_route(0x10, 0x3, 0x0) 16.086129669s ago: executing program 2 (id=712): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x405}, 0xc) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x68}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x800000000, 0x57, 0x3}, 0x0, 0x0, 0x0, 0x0) write(r11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000d0427bd70ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163766c616e3000000000000000000800040085070000"], 0x3c}}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xce, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x3, 0xe, 0x0, &(0x7f0000000180)="0000001afa3cb651ce2f2f009ec3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 15.799057259s ago: executing program 1 (id=713): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f0000010000000010000000000000000000ff00"], 0x30}}], 0x1, 0x0) 15.657438192s ago: executing program 1 (id=714): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x54, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x40, 0x1, [@m_tunnel_key={0x3c, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x9, 0x6, "13885b9622"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) clock_gettime(0x0, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0}) pselect6(0x40, &(0x7f0000000180)={0x7fff, 0x46b, 0x1, 0x4c, 0x100, 0x7fffffff, 0x800, 0x9}, &(0x7f00000001c0)={0x0, 0xffff, 0x2, 0xfffffffffffffffd, 0x7, 0x3, 0x3, 0x5}, &(0x7f0000000200)={0x1, 0x5834, 0x5a4, 0x2, 0x7e56, 0x0, 0x9, 0x4}, &(0x7f00000002c0)={r1, r2+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffff]}, 0x8}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ff"], 0xa0}}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0faf16a001c000000000000000000000008"], 0x38}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 15.521014084s ago: executing program 1 (id=715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x14, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="18010000120000000000020000000000850000006d00000018010000202064250000088059e9859f8c570000002020207b1af8ff00000000bfa100000025030007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000380), 0xe) listen(r2, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='vnet_rx_stopped_ack\x00', r0, 0x0, 0x2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a00010000000000000000000a00000000000000000000000800100035000000f4dabb63f5f7d3aa686cdc134eca847c0f12897a6994b17dbb6f5c560b278df23c57e49b89aba1f83153ce9c841c13cc5ed2fe7cff44256912097be863afe2167f39b15ecf6a5536fb11bea60000eba14b3b9aec78b818796016a28b913f718e212d18d254e25ab70e1d48b32d065be2ff305876"], 0x24}}, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ip={@remote, @loopback, 0xff, 0x0, 'xfrm0\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'team0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x2, 0xe, 0x4, 0x2, 0x4], 0x6, 0x6}, {0x1, [0x5, 0x0, 0x1, 0x1, 0x3, 0x3], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x3, 0x5, 0x1, 0x7, 0x7], 0x2, 0x2}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) unshare(0x22020400) r6 = socket(0x29, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x8}}) socket(0x11, 0x800000003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2e0000001c0073fc0000000400fd000007000003", @ANYRES32, @ANYBLOB="020047040a000200bbbbbbbbbbbb00000600050001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r0, &(0x7f0000000d00)={&(0x7f00000005c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000b00)="03add45e50ff6a9f58a7d486535e7055e2d7a6d294b6c98c38830133daf89439649c877c01ee2d3424d920fcde5a175325512481ee869f610a961d3ec36e29c07f406be60673d83a9d76b3ed3f2e9da4e9b7c32e137421e05d2715a5561aca2efe1608a546642aee49633f6b08266c9bcadd04489924dce38f9e3e69e72916c0b92b748937d3c999ec32aee094ccc3c84851e4043a2014bd124f1a452b19190d3e2aec7389f846d8ec491d6e6c1bf7728ceb76efcd3da77f62033d73b211129ba61176768abc1c2c3c4df91f09c5a22f6cff8e31", 0xd4}, {&(0x7f0000000640)="3218ebea936cf9bab4b61239ead8c4df5151907bd3c4fcd060d69e8b58bd15388acb6bea3d9fb0c457fdcc18f96938ee4910f985e592e98012330299cc7b76336870d91ffa340a5584461fae534c47352de50bf4e3099c01bc52f67e9cb5d9beb09fb3985afe20ff057d6611accc50913ea938b3edf4370bfe73c38f9e31b64379edf762ff74c73ffdfacc6c9812eadc62ae289a7bafc6ff7a1f1417f7cc171b1c512bcadd7f8081254256f8da712897e0cbc2f5759bd59d7aca03", 0xbb}, {&(0x7f0000000c00)="c221", 0x2}, {&(0x7f0000000c40)="a335339211dc6a84bad11b283a21a93a68e98928c557b1480163b483e7a7c70a7cd936ae320adb822d6e1eacfc5cabedc949e152eee46da58fa0b7d24dd1171439dd5b1d3bb025e99095ee004a7ff616c5043b1beb1f1d44d4435f12135a181d5008f551daf97b743bc188841081de398f5c", 0x72}, {&(0x7f0000000d80)="233afd5660a91ac1d27e6f0b9565adb82c04aaef313f7e663ebcd72ea1be5f46089be947a675063b7424dad2ae47b8b8c6f98683edd16d6cb7b1dab6e0959fabdc4a8a9021917c740c0eac4822df9d9c559b20c17eb55ee51c22d4a09e004edc7715e6b05c757443ff6317a69018e5fa4c3ff67228a83897d4a77767d8e660118aa277e801b8e3c4961cba35eae146dafcbec03a66e263d136fb942db3cd453c089849bfdfbe035357c46eb9ed47c8df", 0xb0}, {&(0x7f0000000e40)="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", 0xfb}, {&(0x7f0000000f40)="5fe3fbc35cd5e4f60581c78c53e0ba3def2adb5b4ff15ef2861072deaceab4318994caf2b2a7fb2860bbfb5009bbda0af3f124689737fae519e3adda724a6d6ce1234db30b200fc16b56f7a0e9126082b5fa8cae5f4e658e945c8f099772776e543252f374c1d4d087aa6c16290e932a59dee8e25bb599beb925583839a353778d959ab1767b6d10bc4ccf17befd27b3ef6d7222caf4cd598dcc0324f5751b14f9f1c8f243a3b890764d7bf64aa6abc15682d5aeb6a67f3a19fd", 0xba}], 0x7, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/312], 0x138}, 0x48881) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000013c0)=ANY=[@ANYBLOB="74000000c87d9044824043e6b34a5163057b0107e681a0441af0194617b02d9f78ab7f000000000000001d58", @ANYRES32=r3, @ANYBLOB="100e2abd7000000000231771000008000300", @ANYRES32=r9, @ANYBLOB="0c00990007200000790000004c007a80240001008b5860fc836926d2d7c07b5faf903a5e96158003ab46542b2b36c707d0fd0d9d24000100b292beae41752496aa93673b950fb8ef03a91373badaf6806f4a372d3c139cea"], 0x74}}, 0x20000000) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000001540)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) 2.271015955s ago: executing program 32 (id=710): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x1) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = socket(0x2, 0x3, 0x6) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10) write$tun(r1, &(0x7f0000000100)=ANY=[], 0x72) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0xc, 0x800, 0x0, 0x7, 0x9]}, &(0x7f0000000200)=0x54) 1.030627274s ago: executing program 33 (id=712): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x405}, 0xc) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x68}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x800000000, 0x57, 0x3}, 0x0, 0x0, 0x0, 0x0) write(r11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000d0427bd70ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163766c616e3000000000000000000800040085070000"], 0x3c}}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xce, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x3, 0xe, 0x0, &(0x7f0000000180)="0000001afa3cb651ce2f2f009ec3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 34 (id=715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x14, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="18010000120000000000020000000000850000006d00000018010000202064250000088059e9859f8c570000002020207b1af8ff00000000bfa100000025030007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000380), 0xe) listen(r2, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='vnet_rx_stopped_ack\x00', r0, 0x0, 0x2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a00010000000000000000000a00000000000000000000000800100035000000f4dabb63f5f7d3aa686cdc134eca847c0f12897a6994b17dbb6f5c560b278df23c57e49b89aba1f83153ce9c841c13cc5ed2fe7cff44256912097be863afe2167f39b15ecf6a5536fb11bea60000eba14b3b9aec78b818796016a28b913f718e212d18d254e25ab70e1d48b32d065be2ff305876"], 0x24}}, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ip={@remote, @loopback, 0xff, 0x0, 'xfrm0\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'team0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x2, 0xe, 0x4, 0x2, 0x4], 0x6, 0x6}, {0x1, [0x5, 0x0, 0x1, 0x1, 0x3, 0x3], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x3, 0x5, 0x1, 0x7, 0x7], 0x2, 0x2}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) unshare(0x22020400) r6 = socket(0x29, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x8}}) socket(0x11, 0x800000003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2e0000001c0073fc0000000400fd000007000003", @ANYRES32, @ANYBLOB="020047040a000200bbbbbbbbbbbb00000600050001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r0, &(0x7f0000000d00)={&(0x7f00000005c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000b00)="03add45e50ff6a9f58a7d486535e7055e2d7a6d294b6c98c38830133daf89439649c877c01ee2d3424d920fcde5a175325512481ee869f610a961d3ec36e29c07f406be60673d83a9d76b3ed3f2e9da4e9b7c32e137421e05d2715a5561aca2efe1608a546642aee49633f6b08266c9bcadd04489924dce38f9e3e69e72916c0b92b748937d3c999ec32aee094ccc3c84851e4043a2014bd124f1a452b19190d3e2aec7389f846d8ec491d6e6c1bf7728ceb76efcd3da77f62033d73b211129ba61176768abc1c2c3c4df91f09c5a22f6cff8e31", 0xd4}, {&(0x7f0000000640)="3218ebea936cf9bab4b61239ead8c4df5151907bd3c4fcd060d69e8b58bd15388acb6bea3d9fb0c457fdcc18f96938ee4910f985e592e98012330299cc7b76336870d91ffa340a5584461fae534c47352de50bf4e3099c01bc52f67e9cb5d9beb09fb3985afe20ff057d6611accc50913ea938b3edf4370bfe73c38f9e31b64379edf762ff74c73ffdfacc6c9812eadc62ae289a7bafc6ff7a1f1417f7cc171b1c512bcadd7f8081254256f8da712897e0cbc2f5759bd59d7aca03", 0xbb}, {&(0x7f0000000c00)="c221", 0x2}, {&(0x7f0000000c40)="a335339211dc6a84bad11b283a21a93a68e98928c557b1480163b483e7a7c70a7cd936ae320adb822d6e1eacfc5cabedc949e152eee46da58fa0b7d24dd1171439dd5b1d3bb025e99095ee004a7ff616c5043b1beb1f1d44d4435f12135a181d5008f551daf97b743bc188841081de398f5c", 0x72}, {&(0x7f0000000d80)="233afd5660a91ac1d27e6f0b9565adb82c04aaef313f7e663ebcd72ea1be5f46089be947a675063b7424dad2ae47b8b8c6f98683edd16d6cb7b1dab6e0959fabdc4a8a9021917c740c0eac4822df9d9c559b20c17eb55ee51c22d4a09e004edc7715e6b05c757443ff6317a69018e5fa4c3ff67228a83897d4a77767d8e660118aa277e801b8e3c4961cba35eae146dafcbec03a66e263d136fb942db3cd453c089849bfdfbe035357c46eb9ed47c8df", 0xb0}, {&(0x7f0000000e40)="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", 0xfb}, {&(0x7f0000000f40)="5fe3fbc35cd5e4f60581c78c53e0ba3def2adb5b4ff15ef2861072deaceab4318994caf2b2a7fb2860bbfb5009bbda0af3f124689737fae519e3adda724a6d6ce1234db30b200fc16b56f7a0e9126082b5fa8cae5f4e658e945c8f099772776e543252f374c1d4d087aa6c16290e932a59dee8e25bb599beb925583839a353778d959ab1767b6d10bc4ccf17befd27b3ef6d7222caf4cd598dcc0324f5751b14f9f1c8f243a3b890764d7bf64aa6abc15682d5aeb6a67f3a19fd", 0xba}], 0x7, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/312], 0x138}, 0x48881) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000013c0)=ANY=[@ANYBLOB="74000000c87d9044824043e6b34a5163057b0107e681a0441af0194617b02d9f78ab7f000000000000001d58", @ANYRES32=r3, @ANYBLOB="100e2abd7000000000231771000008000300", @ANYRES32=r9, @ANYBLOB="0c00990007200000790000004c007a80240001008b5860fc836926d2d7c07b5faf903a5e96158003ab46542b2b36c707d0fd0d9d24000100b292beae41752496aa93673b950fb8ef03a91373badaf6806f4a372d3c139cea"], 0x74}}, 0x20000000) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000001540)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) kernel console output (not intermixed with test programs): entered promiscuous mode [ 61.249916][ T1828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.259240][ T5248] veth1_vlan: entered promiscuous mode [ 61.275589][ T1828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.289138][ T5243] veth0_vlan: entered promiscuous mode [ 61.342757][ T5243] veth1_vlan: entered promiscuous mode [ 61.357105][ T5240] veth0_macvtap: entered promiscuous mode [ 61.363828][ T1828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.379181][ T1828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.381440][ T5240] veth1_macvtap: entered promiscuous mode [ 61.397245][ T5248] veth0_macvtap: entered promiscuous mode [ 61.414576][ T5238] veth0_macvtap: entered promiscuous mode [ 61.463776][ T5238] veth1_macvtap: entered promiscuous mode [ 61.473398][ T5248] veth1_macvtap: entered promiscuous mode [ 61.500319][ T5233] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.517451][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.528233][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.541806][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.555237][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.565868][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.577998][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.589968][ T5240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.599311][ T5240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.608178][ T5240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.616919][ T5240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.654685][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.676568][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.687710][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.705941][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.724644][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.743997][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.761469][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.774720][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.792393][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.803120][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.820392][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.840345][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.876214][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.893932][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.907191][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.918851][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.931146][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.940254][ T5243] veth0_macvtap: entered promiscuous mode [ 61.963956][ T5238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.973129][ T5238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.982099][ T5238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.993298][ T5238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.019934][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.030858][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.042859][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.053606][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.063570][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.075313][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.090741][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.100281][ T5243] veth1_macvtap: entered promiscuous mode [ 62.110499][ T5248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.119364][ T5248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.128318][ T5248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.137305][ T5248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.214118][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.225147][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.238818][ T5250] Bluetooth: hci0: command tx timeout [ 62.246333][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.257007][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.267853][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.278442][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.289333][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.301569][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.315417][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.347780][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.349685][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.359209][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.380721][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.387592][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.403488][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.413697][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.424663][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.434564][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.445138][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.456051][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.502548][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.515659][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.524548][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.533618][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.548524][ T5250] Bluetooth: hci2: command tx timeout [ 62.593070][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.610437][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.621385][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.631658][ T5247] Bluetooth: hci3: command tx timeout [ 62.632019][ T4627] Bluetooth: hci1: command tx timeout [ 62.637157][ T5250] Bluetooth: hci4: command tx timeout [ 62.648598][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.729588][ T1828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.737494][ T1828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.815417][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.870123][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.941843][ T5325] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 62.977677][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.991801][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.003216][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.055809][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.124221][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.193507][ T1828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.198534][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 63.212301][ T1828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.284326][ T5334] gre0: entered promiscuous mode [ 63.324470][ T5334] gre0: entered allmulticast mode [ 63.507832][ T5325] syzkaller0: entered promiscuous mode [ 63.538202][ T5325] syzkaller0: entered allmulticast mode [ 63.590609][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 63.628689][ T5341] gre0: entered promiscuous mode [ 63.663456][ T5341] gre0: entered allmulticast mode [ 64.288411][ T5356] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.330621][ T5250] Bluetooth: hci0: command tx timeout [ 64.584222][ T5360] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.628896][ T5250] Bluetooth: hci2: command tx timeout [ 64.682202][ T5361] Zero length message leads to an empty skb [ 64.708648][ T4627] Bluetooth: hci4: command tx timeout [ 64.709529][ T5247] Bluetooth: hci3: command tx timeout [ 64.714368][ T5250] Bluetooth: hci1: command tx timeout [ 65.791156][ T5349] team0: Device veth0_vlan failed to register rx_handler [ 65.933171][ T5355] veth0_to_team: entered promiscuous mode [ 65.940772][ T5355] veth0_to_team: entered allmulticast mode [ 65.976264][ T5360] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 65.984024][ T5368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.105559][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 66.119731][ T5372] bridge_slave_1: left allmulticast mode [ 66.122905][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.127123][ T5372] bridge_slave_1: left promiscuous mode [ 66.143460][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.374442][ T5372] bridge_slave_0: left allmulticast mode [ 66.391574][ T5372] bridge_slave_0: left promiscuous mode [ 66.416900][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.610624][ T5388] ip6t_srh: unknown srh match flags 4000 [ 66.677344][ T5388] vlan2: entered promiscuous mode [ 66.959371][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 67.017691][ T5402] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18'. [ 67.036942][ T5395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.063125][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 67.074739][ T5401] netlink: 'syz.1.18': attribute type 7 has an invalid length. [ 67.304734][ T5395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.427637][ T5406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.463408][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 67.488346][ T5420] vxcan1: entered promiscuous mode [ 67.493945][ T5420] vxcan1: entered allmulticast mode [ 67.512860][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 67.597331][ T5395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.657602][ T5406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.730328][ T5395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.825455][ T5406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.917049][ T5406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.047464][ T5395] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075231][ T5395] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.147358][ T5395] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.181597][ T5395] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.224733][ T5406] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.254369][ T5435] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 68.268637][ T5435] netlink: 'syz.1.26': attribute type 8 has an invalid length. [ 68.279122][ T5435] __nla_validate_parse: 1 callbacks suppressed [ 68.279139][ T5435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'. [ 68.331700][ T5406] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.374758][ T5406] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.402244][ T5406] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.550891][ T5449] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 68.654472][ T5449] team0: Port device dummy0 added [ 68.751752][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 68.995847][ T5468] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 69.131254][ T5477] dvmrp1: entered allmulticast mode [ 69.175795][ T5477] dvmrp1: left allmulticast mode [ 69.305419][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 69.426043][ T5477] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 69.452501][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 69.650161][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 69.662246][ T5500] veth1_to_batadv: entered promiscuous mode [ 69.669539][ T5500] veth1_to_batadv: entered allmulticast mode [ 69.973779][ T5507] netlink: 104 bytes leftover after parsing attributes in process `syz.4.44'. [ 70.036525][ T5509] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 70.124565][ T5509] can: request_module (can-proto-0) failed. [ 70.276285][ T5514] netlink: 'syz.1.47': attribute type 20 has an invalid length. [ 70.339980][ T5518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.347529][ T5518] IPv6: NLM_F_CREATE should be set when creating new route [ 70.354933][ T5518] IPv6: NLM_F_CREATE should be set when creating new route [ 70.367069][ T5516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.48'. [ 70.393930][ T5519] netlink: 'syz.1.47': attribute type 6 has an invalid length. [ 70.567617][ T5522] netlink: 'syz.2.50': attribute type 12 has an invalid length. [ 70.576513][ T5526] xt_NFQUEUE: number of total queues is 0 [ 70.586834][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.52'. [ 70.634397][ T5526] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 70.822623][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 70.961350][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 70.976672][ T1174] IPVS: starting estimator thread 0... [ 71.051118][ T5536] 8021q: VLANs not supported on ipvlan1 [ 71.081051][ T5534] IPVS: using max 22 ests per chain, 52800 per kthread [ 71.238672][ T5541] warning: `syz.1.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.526420][ T5557] openvswitch: netlink: ufid size 26 bytes exceeds the range (1, 16) [ 71.550373][ T5557] openvswitch: netlink: Message has 76 unknown bytes. [ 71.751554][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.772258][ T5567] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.792683][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.972958][ T5575] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 71.994240][ T5573] geneve1: entered promiscuous mode [ 72.021065][ T5573] geneve1: entered allmulticast mode [ 72.258953][ T5592] validate_nla: 1 callbacks suppressed [ 72.258972][ T5592] netlink: 'syz.3.72': attribute type 6 has an invalid length. [ 72.447886][ T5599] veth1_to_bridge: mtu less than device minimum [ 73.809517][ T5627] __nla_validate_parse: 6 callbacks suppressed [ 73.809539][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 73.838400][ T5627] ipvlan0: entered promiscuous mode [ 73.847925][ T5627] ipvlan0: entered allmulticast mode [ 73.857036][ T5627] veth0_vlan: entered allmulticast mode [ 73.869094][ T5628] vlan1: entered promiscuous mode [ 73.888318][ T5628] vlan1: left promiscuous mode [ 74.177481][ T5642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.266387][ T3105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.351192][ T4627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.361150][ T4627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.370316][ T4627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.382871][ T4627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.393244][ T4627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.408475][ T4627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.592903][ T3105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.631697][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'. [ 74.774576][ T3105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.821537][ T5657] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 74.845193][ T5657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.863375][ T5657] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 74.915728][ T3105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.063058][ T5652] chnl_net:caif_netlink_parms(): no params data found [ 75.200053][ T5676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 75.219359][ T5676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 75.337515][ T3105] bridge_slave_1: left allmulticast mode [ 75.356293][ T3105] bridge_slave_1: left promiscuous mode [ 75.371132][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.415215][ T3105] bridge_slave_0: left allmulticast mode [ 75.425323][ T3105] bridge_slave_0: left promiscuous mode [ 75.458154][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.707053][ T5690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.95'. [ 76.464784][ T3105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.473655][ T5250] Bluetooth: hci4: command tx timeout [ 76.484528][ T3105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.501385][ T3105] bond0 (unregistering): Released all slaves [ 76.530898][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 76.558233][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 76.567147][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 76.594783][ T5701] macsec0: entered promiscuous mode [ 76.620020][ T5701] macsec0: entered allmulticast mode [ 76.649577][ T5701] veth1_macvtap: entered allmulticast mode [ 76.709198][ T5703] veth1_macvtap: left allmulticast mode [ 76.741120][ T5703] veth1_macvtap: left promiscuous mode [ 76.871431][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.100'. [ 76.901541][ T25] cfg80211: failed to load regulatory.db [ 77.225282][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.258214][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.306515][ T5652] bridge_slave_0: entered allmulticast mode [ 77.339276][ T5652] bridge_slave_0: entered promiscuous mode [ 77.402243][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.443542][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.459563][ T5652] bridge_slave_1: entered allmulticast mode [ 77.470096][ T5652] bridge_slave_1: entered promiscuous mode [ 77.839830][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.911325][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.056494][ T3105] hsr_slave_0: left promiscuous mode [ 78.083319][ T3105] hsr_slave_1: left promiscuous mode [ 78.256579][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.264357][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.277665][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.287339][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.309997][ T3105] veth1_macvtap: left promiscuous mode [ 78.316057][ T3105] veth0_macvtap: left promiscuous mode [ 78.322207][ T3105] veth1_vlan: left promiscuous mode [ 78.548171][ T5250] Bluetooth: hci4: command tx timeout [ 78.745974][ T3105] team0 (unregistering): Port device team_slave_1 removed [ 78.814584][ T3105] team0 (unregistering): Port device team_slave_0 removed [ 79.214974][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 79.367052][ T5652] team0: Port device team_slave_0 added [ 79.411051][ T5652] team0: Port device team_slave_1 added [ 79.431227][ T5800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.115'. [ 79.455989][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 79.467227][ T5800] netlink: 31 bytes leftover after parsing attributes in process `syz.3.115'. [ 79.492080][ T5791] macvlan0: entered allmulticast mode [ 79.497528][ T5791] veth1_vlan: entered allmulticast mode [ 79.519515][ T5800] netlink: 'syz.3.115': attribute type 2 has an invalid length. [ 79.535852][ T5800] netlink: 'syz.3.115': attribute type 2 has an invalid length. [ 79.580504][ T5800] netlink: 31 bytes leftover after parsing attributes in process `syz.3.115'. [ 79.656379][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.690260][ T5805] IPVS: length: 141 != 24 [ 79.694212][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.764359][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.817496][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.871153][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.926532][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.142869][ T5833] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 80.224958][ T5652] hsr_slave_0: entered promiscuous mode [ 80.243136][ T5652] hsr_slave_1: entered promiscuous mode [ 80.297248][ T5652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.311838][ T5652] Cannot create hsr debugfs directory [ 80.356473][ T5845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.628360][ T5250] Bluetooth: hci4: command tx timeout [ 80.731802][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 81.141802][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 81.210925][ T5871] raw_sendmsg: syz.0.130 forgot to set AF_INET. Fix it! [ 81.496448][ T5893] Bluetooth: MGMT ver 1.23 [ 81.660221][ T5898] netlink: 'syz.0.135': attribute type 3 has an invalid length. [ 81.677135][ T5897] netlink: 'syz.0.135': attribute type 3 has an invalid length. [ 81.890012][ T5910] netlink: 172 bytes leftover after parsing attributes in process `syz.0.139'. [ 81.948576][ T5910] netlink: 172 bytes leftover after parsing attributes in process `syz.0.139'. [ 81.969074][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 82.025597][ T5912] netlink: 'syz.0.139': attribute type 21 has an invalid length. [ 82.100046][ T5652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.114570][ T5652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.178831][ T5652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.196397][ T5652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.205018][ T5925] Bluetooth: MGMT ver 1.23 [ 82.372747][ T5928] Cannot find del_set index 4 as target [ 82.406761][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.456927][ T5931] Illegal XDP return value 814611814 on prog (id 88) dev N/A, expect packet loss! [ 82.472497][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.502239][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.509477][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.566610][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.572664][ T5936] IPVS: Scheduler module ip_vs_sip not found [ 82.573881][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.604221][ T5938] IPVS: Scheduler module ip_vs_sip not found [ 82.708135][ T5250] Bluetooth: hci4: command tx timeout [ 82.974168][ T5961] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 83.066577][ T5961] team0: Port device dummy0 added [ 83.095638][ T5975] erspan0: entered promiscuous mode [ 83.122907][ T5975] erspan0: left promiscuous mode [ 83.258606][ T5978] erspan0: entered promiscuous mode [ 83.265823][ T5978] erspan0: left promiscuous mode [ 83.446719][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.725327][ T6001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.023376][ T6013] tipc: Can't bind to reserved service type 1 [ 84.091351][ T5652] veth0_vlan: entered promiscuous mode [ 84.116481][ T5652] veth1_vlan: entered promiscuous mode [ 84.197395][ T5652] veth0_macvtap: entered promiscuous mode [ 84.267927][ T5652] veth1_macvtap: entered promiscuous mode [ 84.290415][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.303472][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.314159][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.325435][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.337300][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.378751][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.390018][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.400586][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.412202][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.424456][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.435302][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.445245][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.455740][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.467381][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.483542][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.494299][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.505052][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.516241][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.533546][ T6021] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 84.545978][ T6021] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 84.573125][ T5652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.581995][ T5652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.593386][ T5652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.602368][ T5652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.726494][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.735785][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.811754][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.826248][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.134779][ T6041] __nla_validate_parse: 8 callbacks suppressed [ 85.134820][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.162038][ T6041] syz_tun: entered promiscuous mode [ 85.168098][ T6041] macvtap1: entered promiscuous mode [ 85.182349][ T6041] macvtap1: entered allmulticast mode [ 85.187806][ T6041] syz_tun: entered allmulticast mode [ 85.235398][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 85.284065][ T6043] syz_tun: left allmulticast mode [ 85.290939][ T6043] syz_tun: left promiscuous mode [ 85.357551][ T6059] netlink: 'syz.3.175': attribute type 8 has an invalid length. [ 85.492207][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.517448][ T6056] pim6reg1: entered allmulticast mode [ 85.532007][ T6057] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.623665][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.645970][ T6057] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.731287][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.753923][ T6057] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.813856][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.867896][ T6057] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.886355][ T4627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.898414][ T4627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.911004][ T4627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.927322][ T4627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.936239][ T4627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.944043][ T4627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.036812][ T6057] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.097654][ T6057] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.160480][ T6080] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.177469][ T6057] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.207695][ T6057] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.324364][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.180'. [ 86.413084][ T11] bridge_slave_1: left allmulticast mode [ 86.419736][ T11] bridge_slave_1: left promiscuous mode [ 86.428275][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.495908][ T11] bridge_slave_0: left allmulticast mode [ 86.547039][ T11] bridge_slave_0: left promiscuous mode [ 86.563991][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.589258][ T6098] xt_limit: Overflow, try lower: 262144/524288 [ 87.139396][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.153242][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.165102][ T11] bond0 (unregistering): Released all slaves [ 87.193298][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 87.404168][ T6111] team0: entered promiscuous mode [ 87.411763][ T6111] team_slave_0: entered promiscuous mode [ 87.418249][ T6111] team_slave_1: entered promiscuous mode [ 87.437852][ T6117] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 87.466047][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.498641][ T6117] bond0: entered promiscuous mode [ 87.503750][ T6117] bond_slave_0: entered promiscuous mode [ 87.512833][ T6117] bond_slave_1: entered promiscuous mode [ 87.521421][ T6117] team0: Port device bond0 added [ 87.531232][ T6072] chnl_net:caif_netlink_parms(): no params data found [ 87.572729][ T6110] team0: left promiscuous mode [ 87.601043][ T6110] team_slave_0: left promiscuous mode [ 87.607119][ T6110] team_slave_1: left promiscuous mode [ 87.616345][ T6110] bond0: left promiscuous mode [ 87.621965][ T6110] bond_slave_0: left promiscuous mode [ 87.627778][ T6110] bond_slave_1: left promiscuous mode [ 87.971715][ T11] hsr_slave_0: left promiscuous mode [ 87.987498][ T11] hsr_slave_1: left promiscuous mode [ 87.994211][ T4627] Bluetooth: hci4: command tx timeout [ 88.021379][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.029582][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.040791][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.049674][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.079427][ T11] veth1_macvtap: left promiscuous mode [ 88.086041][ T11] veth0_macvtap: left promiscuous mode [ 88.097256][ T11] veth1_vlan: left promiscuous mode [ 88.107390][ T11] veth0_vlan: left promiscuous mode [ 89.006241][ T11] team0 (unregistering): Port device team_slave_1 removed [ 89.060355][ T11] team0 (unregistering): Port device team_slave_0 removed [ 89.502739][ T6152] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 89.533918][ T6152] team0: Device hsr_slave_0 failed to register rx_handler [ 89.597035][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 89.665018][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 89.823766][ T6181] netlink: 'syz.0.203': attribute type 7 has an invalid length. [ 89.863938][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 89.933327][ T6193] netlink: zone id is out of range [ 89.948499][ T6193] netlink: get zone limit has 8 unknown bytes [ 89.964823][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.975848][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.984481][ T6072] bridge_slave_0: entered allmulticast mode [ 89.993463][ T6072] bridge_slave_0: entered promiscuous mode [ 90.015030][ T6194] netlink: 'syz.3.207': attribute type 10 has an invalid length. [ 90.057150][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.068448][ T4627] Bluetooth: hci4: command tx timeout [ 90.075919][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.084700][ T6072] bridge_slave_1: entered allmulticast mode [ 90.107611][ T6072] bridge_slave_1: entered promiscuous mode [ 90.267608][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.298649][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.584155][ T6072] team0: Port device team_slave_0 added [ 90.607091][ T6072] team0: Port device team_slave_1 added [ 90.826021][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.840397][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.870127][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.913239][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.923489][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.999875][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.065168][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 91.075495][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 91.120942][ T6237] netlink: 301 bytes leftover after parsing attributes in process `syz.0.219'. [ 91.287516][ T6072] hsr_slave_0: entered promiscuous mode [ 91.337349][ T6072] hsr_slave_1: entered promiscuous mode [ 91.381292][ T6072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.408965][ T6072] Cannot create hsr debugfs directory [ 91.441704][ T6243] macvlan0: entered allmulticast mode [ 91.447288][ T6243] veth1_vlan: entered allmulticast mode [ 91.637345][ T6246] netlink: 'syz.2.222': attribute type 20 has an invalid length. [ 91.823351][ T6257] netlink: 'syz.2.222': attribute type 6 has an invalid length. [ 92.102042][ T6268] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 92.121532][ T6268] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 92.151944][ T4627] Bluetooth: hci4: command tx timeout [ 92.281788][ T6268] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 92.299136][ T6268] veth1_macvtap: left promiscuous mode [ 92.464275][ T5241] IPVS: starting estimator thread 0... [ 92.517584][ T6269] netlink: 96 bytes leftover after parsing attributes in process `syz.1.226'. [ 92.568768][ T6281] IPVS: using max 18 ests per chain, 43200 per kthread [ 92.595070][ T6287] netlink: 'syz.0.230': attribute type 8 has an invalid length. [ 93.000806][ T6072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.016111][ T6072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.058143][ T6072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.093913][ T6072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.190580][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 93.735766][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 94.228262][ T4627] Bluetooth: hci4: command tx timeout [ 94.485980][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.497432][ T6338] netlink: 'syz.3.241': attribute type 20 has an invalid length. [ 94.503988][ T6343] netlink: 68 bytes leftover after parsing attributes in process `syz.0.243'. [ 94.518729][ T6343] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 94.672270][ T6340] tun0: tun_chr_ioctl cmd 1074025677 [ 94.687098][ T6340] tun0: linktype set to 774 [ 94.809109][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.841208][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.849267][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.893657][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.900876][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.335032][ T6380] syz_tun: entered promiscuous mode [ 95.355348][ T6380] syz_tun: left promiscuous mode [ 95.641480][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 95.672974][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 95.692762][ T6390] ip6gretap0: entered promiscuous mode [ 95.704652][ T6390] macvtap1: entered promiscuous mode [ 95.711623][ T6390] macvtap1: entered allmulticast mode [ 95.717056][ T6390] ip6gretap0: entered allmulticast mode [ 95.746227][ T6392] ip6gretap0: left allmulticast mode [ 95.760219][ T6392] ip6gretap0: left promiscuous mode [ 95.781648][ T6393] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 95.907006][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.084333][ T6399] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 96.118176][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 96.127679][ T6399] ipvlan1: entered promiscuous mode [ 96.178456][ T6399] ipvlan1: entered allmulticast mode [ 96.186331][ T6399] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 96.206795][ T6397] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 96.248578][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 96.265836][ T6397] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 96.641129][ T6433] team0: entered promiscuous mode [ 96.646229][ T6433] team_slave_0: entered promiscuous mode [ 96.694031][ T6433] team_slave_1: entered promiscuous mode [ 96.720885][ T6433] dummy0: entered promiscuous mode [ 96.945824][ T6443] erspan0: entered promiscuous mode [ 96.952508][ T6443] macsec1: entered promiscuous mode [ 96.957875][ T6443] macsec1: entered allmulticast mode [ 96.967526][ T6443] erspan0: entered allmulticast mode [ 97.000058][ T6443] erspan0: left allmulticast mode [ 97.005318][ T6443] erspan0: left promiscuous mode [ 97.029151][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 97.052502][ T6444] ip6gretap0: entered promiscuous mode [ 97.058603][ T6444] macvtap2: entered promiscuous mode [ 97.064170][ T6444] macvtap2: entered allmulticast mode [ 97.070369][ T6444] ip6gretap0: entered allmulticast mode [ 97.084835][ T6447] ip6gretap0: left allmulticast mode [ 97.091468][ T6447] ip6gretap0: left promiscuous mode [ 97.107432][ T6431] team0: left promiscuous mode [ 97.123504][ T6431] team_slave_0: left promiscuous mode [ 97.129681][ T6431] team_slave_1: left promiscuous mode [ 97.135401][ T6431] dummy0: left promiscuous mode [ 97.276113][ T6072] veth0_vlan: entered promiscuous mode [ 97.311810][ T6454] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 97.324018][ T6072] veth1_vlan: entered promiscuous mode [ 97.346895][ T6458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.402333][ T6072] veth0_macvtap: entered promiscuous mode [ 97.414093][ T6072] veth1_macvtap: entered promiscuous mode [ 97.435698][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.448013][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.460337][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.471935][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.482796][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.494999][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.505580][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.518279][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.531081][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.555673][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.568000][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.579381][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.590874][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.602471][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.614341][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.626670][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.639543][ T6072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.649377][ T6072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.658965][ T6072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.668542][ T6072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.799288][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.814404][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.869600][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.879494][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.016326][ T6476] netlink: 'syz.0.276': attribute type 21 has an invalid length. [ 98.034903][ T6476] netlink: 156 bytes leftover after parsing attributes in process `syz.0.276'. [ 98.167447][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.493529][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 98.547684][ T6496] netlink: zone id is out of range [ 98.567893][ T6496] netlink: zone id is out of range [ 98.588252][ T6496] netlink: set zone limit has 8 unknown bytes [ 98.602560][ T6492] ip6gretap0: entered promiscuous mode [ 98.615980][ T6492] macvtap3: entered promiscuous mode [ 98.669451][ T6492] macvtap3: entered allmulticast mode [ 98.738025][ T6492] ip6gretap0: entered allmulticast mode [ 98.775416][ T6497] ip6gretap0: left allmulticast mode [ 98.842923][ T6497] ip6gretap0: left promiscuous mode [ 99.242239][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 99.421795][ T6520] x_tables: duplicate underflow at hook 3 [ 99.588173][ T5250] Bluetooth: hci4: command 0x0405 tx timeout [ 99.982081][ T6542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.340246][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 100.446252][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 100.456172][ T6555] syz_tun: entered promiscuous mode [ 100.474995][ T6555] macvtap4: entered promiscuous mode [ 100.494912][ T6555] macvtap4: entered allmulticast mode [ 100.558931][ T6555] syz_tun: entered allmulticast mode [ 100.583048][ T6567] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 100.596691][ T6558] syz_tun: left allmulticast mode [ 100.607536][ T6558] syz_tun: left promiscuous mode [ 100.735760][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.786064][ T4627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.818953][ T4627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.831792][ T4627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.840930][ T4627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.857126][ T4627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.865272][ T4627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.947989][ C0] hrtimer: interrupt took 157596 ns [ 100.977389][ T6572] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 101.161525][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.189930][ T6597] xt_nat: multiple ranges no longer supported [ 101.283770][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.350434][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 101.554286][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.585535][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 101.704231][ T6608] netlink: 56 bytes leftover after parsing attributes in process `syz.1.311'. [ 101.909364][ T4627] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.064683][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 102.422961][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 102.451666][ T6636] syz_tun: entered promiscuous mode [ 102.458523][ T6636] macvtap1: entered promiscuous mode [ 102.468507][ T6636] macvtap1: entered allmulticast mode [ 102.474558][ T6636] syz_tun: entered allmulticast mode [ 102.489695][ T6637] syz_tun: left allmulticast mode [ 102.495367][ T6637] syz_tun: left promiscuous mode [ 102.507248][ T11] bridge_slave_1: left allmulticast mode [ 102.564131][ T11] bridge_slave_1: left promiscuous mode [ 102.591606][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.693702][ T11] bridge_slave_0: left allmulticast mode [ 102.707689][ T6655] sctp: [Deprecated]: syz.1.322 (pid 6655) Use of int in maxseg socket option. [ 102.707689][ T6655] Use struct sctp_assoc_value instead [ 102.738217][ T11] bridge_slave_0: left promiscuous mode [ 102.744053][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.773602][ T6656] sctp: [Deprecated]: syz.1.322 (pid 6656) Use of int in maxseg socket option. [ 102.773602][ T6656] Use struct sctp_assoc_value instead [ 102.789464][ T6657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.319'. [ 102.948774][ T4627] Bluetooth: hci4: command tx timeout [ 103.376548][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.393918][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.405745][ T11] bond0 (unregistering): Released all slaves [ 103.469637][ T6659] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 103.527451][ T6659] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.567728][ T6665] netlink: 'syz.2.325': attribute type 4 has an invalid length. [ 103.796562][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.813977][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.826890][ T6579] bridge_slave_0: entered allmulticast mode [ 103.847595][ T6579] bridge_slave_0: entered promiscuous mode [ 103.898629][ T6682] netlink: del zone limit has 8 unknown bytes [ 103.916128][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.965888][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.993747][ T6579] bridge_slave_1: entered allmulticast mode [ 104.009958][ T6579] bridge_slave_1: entered promiscuous mode [ 104.063301][ T6689] netlink: 336 bytes leftover after parsing attributes in process `syz.3.331'. [ 104.315368][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 104.344995][ T6699] syz_tun: entered promiscuous mode [ 104.362468][ T6699] macvtap2: entered promiscuous mode [ 104.372408][ T6699] macvtap2: entered allmulticast mode [ 104.377862][ T6699] syz_tun: entered allmulticast mode [ 104.401775][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.425162][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.440406][ T6701] team0: entered promiscuous mode [ 104.445757][ T6701] team_slave_0: entered promiscuous mode [ 104.464011][ T6701] team_slave_1: entered promiscuous mode [ 104.491133][ T6701] bond0: entered promiscuous mode [ 104.496270][ T6701] bond_slave_0: entered promiscuous mode [ 104.510840][ T6701] bond_slave_1: entered promiscuous mode [ 104.516678][ T6701] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 104.535648][ T6695] syz_tun: left allmulticast mode [ 104.556720][ T6695] syz_tun: left promiscuous mode [ 104.696914][ T11] hsr_slave_0: left promiscuous mode [ 104.721447][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 104.743246][ T11] hsr_slave_1: left promiscuous mode [ 104.754462][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.778576][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.800716][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.825895][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.891790][ T11] veth1_macvtap: left promiscuous mode [ 104.914922][ T11] veth0_macvtap: left promiscuous mode [ 104.946322][ T11] veth1_vlan: left promiscuous mode [ 104.978196][ T11] veth0_vlan: left promiscuous mode [ 105.028736][ T4627] Bluetooth: hci4: command tx timeout [ 105.958426][ T6735] netlink: 260 bytes leftover after parsing attributes in process `syz.1.343'. [ 106.363203][ T11] team0 (unregistering): Port device team_slave_1 removed [ 106.413089][ T11] team0 (unregistering): Port device team_slave_0 removed [ 106.892080][ T6700] team0: left promiscuous mode [ 106.897001][ T6700] team_slave_0: left promiscuous mode [ 106.903284][ T6700] team_slave_1: left promiscuous mode [ 106.910793][ T6700] bond0: left promiscuous mode [ 106.916525][ T6700] bond_slave_0: left promiscuous mode [ 106.922915][ T6700] bond_slave_1: left promiscuous mode [ 106.928829][ T6700] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 106.973501][ T6579] team0: Port device team_slave_0 added [ 106.993122][ T6579] team0: Port device team_slave_1 added [ 107.003136][ T6745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'. [ 107.125117][ T4627] Bluetooth: hci4: command tx timeout [ 107.244536][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.288314][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.355547][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.593590][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.600908][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.627338][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.640652][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 107.668857][ T6764] syz_tun: entered promiscuous mode [ 107.677114][ T6764] macvtap5: entered promiscuous mode [ 107.686667][ T6764] macvtap5: entered allmulticast mode [ 107.692409][ T6764] syz_tun: entered allmulticast mode [ 107.711182][ T6768] syz_tun: left allmulticast mode [ 107.716574][ T6768] syz_tun: left promiscuous mode [ 107.724693][ T6767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 107.946924][ T6579] hsr_slave_0: entered promiscuous mode [ 107.988732][ T6579] hsr_slave_1: entered promiscuous mode [ 108.004949][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.013438][ T6579] Cannot create hsr debugfs directory [ 108.249753][ T6791] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.347322][ T6793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.360'. [ 109.042874][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 109.188949][ T4627] Bluetooth: hci4: command tx timeout [ 109.478230][ T6828] netlink: 56 bytes leftover after parsing attributes in process `syz.3.372'. [ 109.529415][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 109.540238][ T6579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.587036][ T6579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.798596][ T6579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.875277][ T6579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.060889][ T6847] unknown channel width for channel at 909000KHz? [ 110.141664][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.164755][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.181586][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.188777][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.282576][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.290386][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.460324][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 110.679330][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.789735][ T25] IPVS: starting estimator thread 0... [ 110.827871][ T6866] netlink: 'syz.3.384': attribute type 21 has an invalid length. [ 110.866714][ T6866] netlink: 156 bytes leftover after parsing attributes in process `syz.3.384'. [ 110.908305][ T6868] IPVS: using max 20 ests per chain, 48000 per kthread [ 111.411653][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.749868][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.392'. [ 112.341553][ T6911] bridge_slave_0: left allmulticast mode [ 112.361094][ T6911] bridge_slave_0: left promiscuous mode [ 112.367004][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.505110][ T6911] bridge_slave_1: left allmulticast mode [ 112.512748][ T6911] bridge_slave_1: left promiscuous mode [ 112.524740][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.540757][ T6911] bond0: (slave bond_slave_0): Releasing backup interface [ 112.576721][ T6911] bond0: (slave bond_slave_1): Releasing backup interface [ 112.621974][ T6911] team0: Port device team_slave_0 removed [ 112.643228][ T6911] team0: Port device team_slave_1 removed [ 112.656159][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.664467][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.674256][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.682675][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.701064][ T6912] netlink: 'syz.1.393': attribute type 10 has an invalid length. [ 112.714588][ T6912] netlink: 2 bytes leftover after parsing attributes in process `syz.1.393'. [ 112.728637][ T6912] team0: entered promiscuous mode [ 112.734224][ T6912] bridge0: port 1(team0) entered blocking state [ 112.741283][ T6912] bridge0: port 1(team0) entered disabled state [ 112.749013][ T6912] team0: entered allmulticast mode [ 112.757006][ T6912] bridge0: port 1(team0) entered blocking state [ 112.764526][ T6912] bridge0: port 1(team0) entered forwarding state [ 112.790353][ T12] bridge0: port 1(team0) entered disabled state [ 112.802613][ T6916] netlink: 'syz.3.394': attribute type 21 has an invalid length. [ 112.811184][ T6916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.394'. [ 112.841047][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 112.865262][ T6579] veth0_vlan: entered promiscuous mode [ 112.878476][ T6579] veth1_vlan: entered promiscuous mode [ 112.904728][ T6579] veth0_macvtap: entered promiscuous mode [ 112.916177][ T6579] veth1_macvtap: entered promiscuous mode [ 112.934320][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.945209][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.956425][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.967104][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.977079][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.987572][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.999122][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.009076][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.019787][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.030606][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.041373][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.057173][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.069464][ T6579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.078268][ T6579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.086998][ T6579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.095825][ T6579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.185255][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 113.275812][ T6938] netlink: 14 bytes leftover after parsing attributes in process `syz.3.399'. [ 113.323429][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.365778][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.462140][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.485275][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.505978][ T6947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:16 [ 114.066733][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 114.351859][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'. [ 114.351980][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.415393][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 114.488118][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 114.662070][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.866659][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.065025][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.417728][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 115.554952][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.575168][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.596210][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.618673][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.638255][ T5250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.649769][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.759051][ T52] bridge_slave_1: left allmulticast mode [ 115.764868][ T52] bridge_slave_1: left promiscuous mode [ 115.771239][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.856071][ T52] bridge_slave_0: left allmulticast mode [ 115.862475][ T52] bridge_slave_0: left promiscuous mode [ 115.878221][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.465940][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.494241][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.512113][ T52] bond0 (unregistering): Released all slaves [ 116.690542][ T7002] netlink: 'syz.3.415': attribute type 12 has an invalid length. [ 116.861291][ T7016] netlink: 'syz.1.419': attribute type 13 has an invalid length. [ 116.870562][ T7016] syz_tun: refused to change device tx_queue_len [ 116.879636][ T7016] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 117.142386][ T52] hsr_slave_0: left promiscuous mode [ 117.190579][ T52] hsr_slave_1: left promiscuous mode [ 117.351418][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.368923][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.383840][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.393995][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.436087][ T52] veth1_macvtap: left promiscuous mode [ 117.453608][ T52] veth0_macvtap: left promiscuous mode [ 117.460157][ T52] veth1_vlan: left promiscuous mode [ 117.466128][ T52] veth0_vlan: left promiscuous mode [ 117.748806][ T4627] Bluetooth: hci4: command tx timeout [ 118.662658][ T52] team0 (unregistering): Port device team_slave_1 removed [ 118.771450][ T52] team0 (unregistering): Port device team_slave_0 removed [ 119.836094][ T4627] Bluetooth: hci4: command tx timeout [ 119.871780][ T6987] chnl_net:caif_netlink_parms(): no params data found [ 119.911929][ T7040] __nla_validate_parse: 3 callbacks suppressed [ 119.911946][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 119.998254][ T7076] netlink: 'syz.0.428': attribute type 21 has an invalid length. [ 120.019245][ T7076] netlink: 'syz.0.428': attribute type 6 has an invalid length. [ 120.047456][ T7076] netlink: 64 bytes leftover after parsing attributes in process `syz.0.428'. [ 120.236142][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.364645][ T7093] netlink: 'syz.1.433': attribute type 6 has an invalid length. [ 120.442138][ T7090] netlink: 'syz.3.432': attribute type 6 has an invalid length. [ 120.481413][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.493584][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.519344][ T6987] bridge_slave_0: entered allmulticast mode [ 120.549392][ T6987] bridge_slave_0: entered promiscuous mode [ 120.570531][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.586785][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.616803][ T6987] bridge_slave_1: entered allmulticast mode [ 120.634187][ T6987] bridge_slave_1: entered promiscuous mode [ 120.654250][ T7102] bond0: Unable to set down delay as MII monitoring is disabled [ 120.690239][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.719498][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.882940][ T6987] team0: Port device team_slave_0 added [ 120.916339][ T6987] team0: Port device team_slave_1 added [ 120.962666][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 120.995680][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.010066][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.039025][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.056439][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.067263][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.094889][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.173583][ T6987] hsr_slave_0: entered promiscuous mode [ 121.183072][ T6987] hsr_slave_1: entered promiscuous mode [ 121.191786][ T6987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.200615][ T6987] Cannot create hsr debugfs directory [ 121.492018][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'. [ 121.504182][ T7138] nbd: device at index 0 is going down [ 121.781793][ T6987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.807241][ T6987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.843741][ T6987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.899750][ T6987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.908649][ T4627] Bluetooth: hci4: command tx timeout [ 122.026179][ T7156] netlink: 260 bytes leftover after parsing attributes in process `syz.1.451'. [ 122.122681][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.198952][ T6987] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.214657][ T7164] netlink: 'syz.1.455': attribute type 3 has an invalid length. [ 122.239512][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.246707][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.281886][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.289098][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.725770][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.737885][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.774986][ T7193] TCP: TCP_TX_DELAY enabled [ 122.874801][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.882066][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.893608][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.900843][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.027692][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.083657][ T7201] syzkaller1: entered promiscuous mode [ 123.092441][ T7201] syzkaller1: entered allmulticast mode [ 123.210921][ T7219] netlink: 256 bytes leftover after parsing attributes in process `syz.2.468'. [ 123.238957][ T7219] netlink: 136 bytes leftover after parsing attributes in process `syz.2.468'. [ 123.460281][ T7228] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 123.840544][ T7249] netlink: 'syz.1.473': attribute type 10 has an invalid length. [ 123.903191][ T7250] syz.2.474 (7250) used greatest stack depth: 17264 bytes left [ 123.926654][ T6987] veth0_vlan: entered promiscuous mode [ 123.966071][ T6987] veth1_vlan: entered promiscuous mode [ 123.998254][ T4627] Bluetooth: hci4: command tx timeout [ 124.053227][ T6987] veth0_macvtap: entered promiscuous mode [ 124.083720][ T7266] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 124.097636][ T7266] geneve0: entered promiscuous mode [ 124.122447][ T7266] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 124.167257][ T7268] Cannot find add_set index 0 as target [ 124.187483][ T7267] netlink: 2 bytes leftover after parsing attributes in process `syz.0.475'. [ 124.204655][ T6987] veth1_macvtap: entered promiscuous mode [ 124.274349][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.299559][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.328059][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.362618][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.383653][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.395553][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.410839][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.427031][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.450189][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.460972][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.472074][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.483743][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.516865][ T6987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.551552][ T6987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.554562][ T7289] netlink: 400 bytes leftover after parsing attributes in process `syz.0.482'. [ 124.577067][ T6987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.589837][ T6987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.603208][ T7287] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 124.633522][ T7292] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 124.675957][ T7287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.685731][ T5964] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 124.711185][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.732765][ T7287] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 124.739228][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.793348][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.808176][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.839827][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 124.876399][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.902523][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.095435][ T7304] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 125.125003][ T7308] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 125.128494][ T7304] __nla_validate_parse: 1 callbacks suppressed [ 125.128512][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 125.133888][ T7308] tap0: tun_chr_ioctl cmd 1074025681 [ 125.154440][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.486'. [ 125.164355][ T7309] tap0: tun_chr_ioctl cmd 1074025681 [ 125.173229][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 125.295941][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.407061][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.475186][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.533740][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.815587][ T52] bridge_slave_1: left allmulticast mode [ 125.822196][ T52] bridge_slave_1: left promiscuous mode [ 125.827987][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.843111][ T52] bridge_slave_0: left allmulticast mode [ 125.849179][ T52] bridge_slave_0: left promiscuous mode [ 125.854865][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.967437][ T7313] Cannot find add_set index 0 as target [ 126.032185][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 126.074926][ T7318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.489'. [ 126.252740][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.279803][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.289798][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.302767][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.315339][ T5250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.331363][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.530554][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.541989][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.554050][ T52] bond0 (unregistering): Released all slaves [ 126.575983][ T7321] ip6gre3: entered allmulticast mode [ 127.063000][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 127.672809][ T52] hsr_slave_0: left promiscuous mode [ 127.728424][ T52] hsr_slave_1: left promiscuous mode [ 127.745382][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.764136][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.810557][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.831627][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.876621][ T52] veth1_macvtap: left promiscuous mode [ 127.892538][ T52] veth0_macvtap: left promiscuous mode [ 127.904285][ T52] veth1_vlan: left promiscuous mode [ 127.907671][ T7388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.916450][ T7388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.919449][ T52] veth0_vlan: left promiscuous mode [ 127.935961][ T7388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.942673][ T7388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.956270][ T7388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.962842][ T7388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.027903][ T7396] netlink: 'syz.1.511': attribute type 11 has an invalid length. [ 128.388587][ T4627] Bluetooth: hci4: command tx timeout [ 128.530352][ T52] team0 (unregistering): Port device team_slave_1 removed [ 128.573447][ T52] team0 (unregistering): Port device team_slave_0 removed [ 129.010453][ T7391] hsr_slave_0: left promiscuous mode [ 129.026218][ T7391] hsr_slave_1: left promiscuous mode [ 129.115016][ T7405] bond2: entered promiscuous mode [ 129.134351][ T7405] bond2: entered allmulticast mode [ 129.149454][ T7405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.201080][ T7409] bridge0: entered promiscuous mode [ 129.214002][ T7409] bridge0: entered allmulticast mode [ 129.434325][ T7430] netlink: 'syz.2.518': attribute type 27 has an invalid length. [ 129.552489][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 129.597099][ T7438] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 129.930396][ T7324] chnl_net:caif_netlink_parms(): no params data found [ 130.244915][ T7458] delete_channel: no stack [ 130.292815][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.301651][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.309846][ T7324] bridge_slave_0: entered allmulticast mode [ 130.317183][ T7324] bridge_slave_0: entered promiscuous mode [ 130.326193][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.333628][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.341334][ T7324] bridge_slave_1: entered allmulticast mode [ 130.356308][ T7324] bridge_slave_1: entered promiscuous mode [ 130.416818][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.437144][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.469116][ T4627] Bluetooth: hci4: command tx timeout [ 130.535655][ T7324] team0: Port device team_slave_0 added [ 130.557820][ T7324] team0: Port device team_slave_1 added [ 130.660057][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.671711][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.714489][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.742156][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.756072][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.773670][ T7476] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 130.783215][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.806730][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 131.021236][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 131.069008][ T7324] hsr_slave_0: entered promiscuous mode [ 131.081907][ T7324] hsr_slave_1: entered promiscuous mode [ 131.097820][ T7324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.119330][ T7324] Cannot create hsr debugfs directory [ 131.249497][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 131.391836][ T7505] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 131.407450][ T7505] netlink: 'syz.2.539': attribute type 9 has an invalid length. [ 131.417220][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.539'. [ 131.631666][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 131.872174][ T7324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.928960][ T7324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.965165][ T7324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.996588][ T7324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.035217][ T7529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.544'. [ 132.304050][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.345897][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.370006][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.377195][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.428126][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 132.499985][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.507161][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.548621][ T4627] Bluetooth: hci4: command tx timeout [ 132.673080][ T7324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.808140][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 132.880423][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 132.896100][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 133.064086][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.191073][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197530][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.230208][ T7587] netlink: 'syz.2.557': attribute type 25 has an invalid length. [ 133.550236][ T7324] veth0_vlan: entered promiscuous mode [ 133.562185][ T7324] veth1_vlan: entered promiscuous mode [ 133.586884][ T7324] veth0_macvtap: entered promiscuous mode [ 133.598582][ T7324] veth1_macvtap: entered promiscuous mode [ 133.613817][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.624594][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.634780][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.646017][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.656397][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.666915][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.679812][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.706046][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.716783][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.727559][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.765678][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.815335][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.850955][ T7324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.876048][ T7324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.891387][ T7619] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 133.899450][ T7324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.918414][ T7619] netlink: 'syz.3.563': attribute type 2 has an invalid length. [ 133.927309][ T7324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.185989][ T7624] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 134.271184][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.296483][ T7624] bond0: (slave team0): Enslaving as an active interface with an up link [ 134.310692][ T7628] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 134.322729][ T7628] bond0: (slave team0): Releasing backup interface [ 134.346213][ T7628] bridge0: port 3(team0) entered blocking state [ 134.356489][ T7628] bridge0: port 3(team0) entered disabled state [ 134.364327][ T7628] team0: entered allmulticast mode [ 134.370662][ T7628] team_slave_0: entered allmulticast mode [ 134.376567][ T7628] team_slave_1: entered allmulticast mode [ 134.382755][ T7628] dummy0: entered allmulticast mode [ 134.390370][ T7628] team0: entered promiscuous mode [ 134.395729][ T7628] team_slave_0: entered promiscuous mode [ 134.402817][ T7628] team_slave_1: entered promiscuous mode [ 134.409225][ T7628] dummy0: entered promiscuous mode [ 134.628976][ T4627] Bluetooth: hci4: command tx timeout [ 134.634776][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.653849][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.726191][ T7648] netlink: 'syz.1.571': attribute type 30 has an invalid length. [ 134.754933][ T7648] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 134.825818][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.868688][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.358497][ T7678] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 135.866331][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.912971][ T7706] netlink: 'syz.1.587': attribute type 2 has an invalid length. [ 136.061363][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.304122][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.375302][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.652654][ T7716] netlink: 'syz.1.589': attribute type 13 has an invalid length. [ 136.689032][ T7717] netlink: 'syz.1.589': attribute type 13 has an invalid length. [ 136.724992][ T7721] __nla_validate_parse: 13 callbacks suppressed [ 136.725011][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 136.964529][ T11] bridge_slave_1: left allmulticast mode [ 137.009255][ T11] bridge_slave_1: left promiscuous mode [ 137.015053][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.076541][ T11] bridge_slave_0: left allmulticast mode [ 137.087032][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.088182][ T11] bridge_slave_0: left promiscuous mode [ 137.109452][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.118253][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.128928][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.137668][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.141406][ T7740] x_tables: duplicate underflow at hook 1 [ 137.158489][ T5250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.166000][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.553026][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.566296][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.580212][ T11] bond0 (unregistering): Released all slaves [ 137.591711][ T7739] netlink: 176 bytes leftover after parsing attributes in process `syz.0.596'. [ 137.601590][ T7739] ip6gretap0: entered promiscuous mode [ 137.614897][ T7746] tun0: tun_chr_ioctl cmd 1074025677 [ 137.621889][ T7746] tun0: linktype set to 774 [ 137.715437][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 137.989097][ T11] hsr_slave_0: left promiscuous mode [ 137.996279][ T11] hsr_slave_1: left promiscuous mode [ 138.003309][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.011948][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.020196][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.046863][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.102601][ T11] veth1_macvtap: left promiscuous mode [ 138.115273][ T11] veth0_macvtap: left promiscuous mode [ 138.121283][ T11] veth1_vlan: left promiscuous mode [ 138.126650][ T11] veth0_vlan: left promiscuous mode [ 138.242733][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 138.397640][ T7777] netlink: 'syz.2.603': attribute type 11 has an invalid length. [ 138.866430][ T11] team0 (unregistering): Port device team_slave_1 removed [ 138.920170][ T11] team0 (unregistering): Port device team_slave_0 removed [ 139.278734][ T4627] Bluetooth: hci4: command tx timeout [ 139.345660][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 139.362073][ T7764] bridge_slave_1: left allmulticast mode [ 139.367773][ T7764] bridge_slave_1: left promiscuous mode [ 139.375027][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.390310][ T7764] bridge2: port 1(bridge_slave_1) entered blocking state [ 139.397476][ T7764] bridge2: port 1(bridge_slave_1) entered disabled state [ 139.404779][ T7764] bridge_slave_1: entered allmulticast mode [ 139.412117][ T7764] bridge_slave_1: entered promiscuous mode [ 139.420450][ T7764] bridge2: port 1(bridge_slave_1) entered blocking state [ 139.427584][ T7764] bridge2: port 1(bridge_slave_1) entered forwarding state [ 139.436073][ T7766] bridge2: port 2(veth1_to_bond) entered blocking state [ 139.443206][ T7766] bridge2: port 2(veth1_to_bond) entered disabled state [ 139.450878][ T7766] veth1_to_bond: entered allmulticast mode [ 139.457385][ T7766] veth1_to_bond: entered promiscuous mode [ 139.463948][ T7766] bridge2: port 2(veth1_to_bond) entered blocking state [ 139.471076][ T7766] bridge2: port 2(veth1_to_bond) entered forwarding state [ 139.479141][ T7771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.602'. [ 139.514541][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 139.539479][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'. [ 139.703954][ T7735] chnl_net:caif_netlink_parms(): no params data found [ 139.813965][ T7788] wg2: entered promiscuous mode [ 139.835562][ T7788] team0: Device wg2 is of different type [ 139.963547][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.971195][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.978863][ T7735] bridge_slave_0: entered allmulticast mode [ 139.989368][ T7735] bridge_slave_0: entered promiscuous mode [ 139.997675][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.006740][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.014389][ T7735] bridge_slave_1: entered allmulticast mode [ 140.021812][ T7735] bridge_slave_1: entered promiscuous mode [ 140.075567][ T7805] team0: entered promiscuous mode [ 140.093179][ T7805] team_slave_0: entered promiscuous mode [ 140.102990][ T7805] team_slave_1: entered promiscuous mode [ 140.109223][ T7805] bond0: entered promiscuous mode [ 140.114690][ T7805] bond_slave_0: entered promiscuous mode [ 140.124877][ T7805] bond_slave_1: entered promiscuous mode [ 140.132363][ T7805] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 140.143687][ T7805] team0: left promiscuous mode [ 140.150377][ T7805] team_slave_0: left promiscuous mode [ 140.156946][ T7805] team_slave_1: left promiscuous mode [ 140.164193][ T7805] bond0: left promiscuous mode [ 140.169213][ T7805] bond_slave_0: left promiscuous mode [ 140.174769][ T7805] bond_slave_1: left promiscuous mode [ 140.180636][ T7805] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 140.191267][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.222173][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.233452][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 140.255772][ T7813] bridge_slave_1: left allmulticast mode [ 140.272004][ T7813] bridge_slave_1: left promiscuous mode [ 140.307849][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.331648][ T7813] bridge1: port 1(bridge_slave_1) entered blocking state [ 140.347821][ T7813] bridge1: port 1(bridge_slave_1) entered disabled state [ 140.358144][ T7813] bridge_slave_1: entered allmulticast mode [ 140.365329][ T7813] bridge_slave_1: entered promiscuous mode [ 140.389702][ T7813] bridge1: port 1(bridge_slave_1) entered blocking state [ 140.396910][ T7813] bridge1: port 1(bridge_slave_1) entered forwarding state [ 140.438952][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.615'. [ 140.508536][ T7826] IPVS: set_ctl: invalid protocol: 50 172.20.20.37:20003 [ 140.535704][ T7735] team0: Port device team_slave_0 added [ 140.609461][ T7820] team0: Port device bond0 removed [ 140.625746][ T7820] bridge_slave_0: left allmulticast mode [ 140.642711][ T7820] bridge_slave_0: left promiscuous mode [ 140.654516][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.982518][ T7820] bridge_slave_1: left allmulticast mode [ 140.988906][ T7820] bridge_slave_1: left promiscuous mode [ 140.994687][ T7820] bridge2: port 1(bridge_slave_1) entered disabled state [ 141.006485][ T7820] bond0: (slave bond_slave_0): Releasing backup interface [ 141.021606][ T7820] veth1_to_bond: left allmulticast mode [ 141.027368][ T7820] veth1_to_bond: left promiscuous mode [ 141.035375][ T7820] bridge2: port 2(veth1_to_bond) entered disabled state [ 141.045499][ T7820] bond0: (slave bond_slave_1): Releasing backup interface [ 141.069325][ T7820] team0: Port device team_slave_0 removed [ 141.087066][ T7820] team0: Port device team_slave_1 removed [ 141.097220][ T7820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.105463][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.115648][ T7820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.123608][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.137385][ T7820] bond0: (slave wlan1): Releasing backup interface [ 141.147125][ T7820] bond1: (slave ip6gretap1): Removing an active aggregator [ 141.156484][ T7820] bond1: (slave ip6gretap1): Releasing backup interface [ 141.191387][ T7735] team0: Port device team_slave_1 added [ 141.254846][ T7833] x_tables: duplicate underflow at hook 1 [ 141.261579][ T7833] sctp: [Deprecated]: syz.0.618 (pid 7833) Use of int in maxseg socket option. [ 141.261579][ T7833] Use struct sctp_assoc_value instead [ 141.349747][ T5250] Bluetooth: hci4: command tx timeout [ 141.377254][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.384774][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.416384][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.477073][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.485806][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.514906][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.600540][ T7735] hsr_slave_0: entered promiscuous mode [ 141.607268][ T7735] hsr_slave_1: entered promiscuous mode [ 141.615708][ T7735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.625990][ T7735] Cannot create hsr debugfs directory [ 141.995868][ T7861] vlan2: entered promiscuous mode [ 142.001599][ T7861] vlan2: entered allmulticast mode [ 142.010951][ T7861] __nla_validate_parse: 2 callbacks suppressed [ 142.010970][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 142.023183][ T7858] can: request_module (can-proto-4) failed. [ 142.098115][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 142.302657][ T7735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.316328][ T7735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.336404][ T7735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.357167][ T7735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.480293][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.521482][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.544527][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.551816][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.562869][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.570135][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.829378][ T7898] team0: Device veth0_vlan failed to register rx_handler [ 142.925458][ T7904] pim6reg1: entered promiscuous mode [ 142.938092][ T7904] pim6reg1: entered allmulticast mode [ 143.050946][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.117902][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 143.318406][ T7919] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 143.364262][ T7919] team0: left allmulticast mode [ 143.388217][ T7919] team0: left promiscuous mode [ 143.393332][ T7919] bridge0: port 1(team0) entered disabled state [ 143.424389][ T7919] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.431716][ T5250] Bluetooth: hci4: command 0x040f tx timeout [ 143.453740][ T7919] bond0: (slave team0): Enslaving as an active interface with an up link [ 143.514644][ T7735] veth0_vlan: entered promiscuous mode [ 143.528654][ T7735] veth1_vlan: entered promiscuous mode [ 143.623875][ T7735] veth0_macvtap: entered promiscuous mode [ 143.643371][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 143.680637][ T7735] veth1_macvtap: entered promiscuous mode [ 143.703108][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.715290][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.725674][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.736705][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.751342][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.762992][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.773685][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.813783][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.844129][ T7735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.862768][ T7735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.880616][ T7735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.891710][ T7735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.048943][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.056826][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.132008][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.229464][ T7942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.651'. [ 144.248703][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.285926][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.316867][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.377121][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.394854][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.405705][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.413853][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.423696][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.431264][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.566859][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.606631][ T7958] netlink: 'syz.1.656': attribute type 4 has an invalid length. [ 144.624741][ T7958] netlink: 17 bytes leftover after parsing attributes in process `syz.1.656'. [ 144.646573][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 144.655976][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 144.730862][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.021686][ T7946] chnl_net:caif_netlink_parms(): no params data found [ 145.143919][ T7977] netlink: 87 bytes leftover after parsing attributes in process `syz.3.658'. [ 145.449977][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.663'. [ 145.512006][ T5247] Bluetooth: hci4: command 0x040f tx timeout [ 145.527515][ T8005] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 145.695518][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.710835][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.723305][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 145.735246][ T12] bond0 (unregistering): Released all slaves [ 146.472614][ T4627] Bluetooth: hci0: command tx timeout [ 147.274415][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.302479][ T5247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.311934][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.320084][ T5247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.327813][ T5247] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.336520][ T5247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.095247][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.155894][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.171759][ T7946] bridge_slave_0: entered allmulticast mode [ 148.187355][ T7946] bridge_slave_0: entered promiscuous mode [ 148.215375][ T8028] __nla_validate_parse: 1 callbacks suppressed [ 148.215401][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'. [ 148.315081][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.339487][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.346752][ T7946] bridge_slave_1: entered allmulticast mode [ 148.370056][ T8040] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 148.389500][ T8040] netlink: 'syz.2.670': attribute type 2 has an invalid length. [ 148.390093][ T7946] bridge_slave_1: entered promiscuous mode [ 148.400718][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 148.422294][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 148.520449][ T8044] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 148.548423][ T5247] Bluetooth: hci0: command tx timeout [ 148.553254][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.606837][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.691470][ T8046] vlan2: entered allmulticast mode [ 148.707794][ T8046] bridge_slave_0: entered allmulticast mode [ 148.724113][ T8046] bridge_slave_0: left allmulticast mode [ 148.773557][ T12] hsr_slave_0: left promiscuous mode [ 148.783055][ T12] hsr_slave_1: left promiscuous mode [ 148.802594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.818606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.826596][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.839823][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.868602][ T12] veth0_macvtap: left promiscuous mode [ 148.874229][ T12] veth1_vlan: left allmulticast mode [ 148.888113][ T12] veth1_vlan: left promiscuous mode [ 148.893459][ T12] veth0_vlan: left promiscuous mode [ 149.095769][ T12] macvlan0 (unregistering): left allmulticast mode [ 149.396928][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.433232][ T5247] Bluetooth: hci4: command tx timeout [ 149.450783][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.739232][ T12] team0 (unregistering): Port device dummy0 removed [ 149.896818][ T7946] team0: Port device team_slave_0 added [ 149.919798][ T7946] team0: Port device team_slave_1 added [ 150.039121][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.046127][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.073039][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.126230][ T8061] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 150.161970][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.169078][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.218326][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.262655][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 150.272786][ T8068] netlink: 'syz.2.677': attribute type 17 has an invalid length. [ 150.280660][ T8068] netlink: 152 bytes leftover after parsing attributes in process `syz.2.677'. [ 150.290249][ T8068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.333789][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 150.434219][ T7946] hsr_slave_0: entered promiscuous mode [ 150.442067][ T7946] hsr_slave_1: entered promiscuous mode [ 150.505040][ T8081] netlink: 'syz.3.681': attribute type 12 has an invalid length. [ 150.517116][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 150.628382][ T5247] Bluetooth: hci0: command tx timeout [ 150.652962][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 150.804497][ T8099] netlink: 'syz.1.686': attribute type 30 has an invalid length. [ 150.816944][ T12] IPVS: stop unused estimator thread 0... [ 150.881572][ T8096] netlink: 56 bytes leftover after parsing attributes in process `syz.3.685'. [ 150.916202][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 150.957039][ T8106] x_tables: duplicate underflow at hook 1 [ 150.957735][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 151.035531][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.044714][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.054385][ T8031] bridge_slave_0: entered allmulticast mode [ 151.062379][ T8031] bridge_slave_0: entered promiscuous mode [ 151.172428][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.197668][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.210543][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.217852][ T8031] bridge_slave_1: entered allmulticast mode [ 151.225716][ T8031] bridge_slave_1: entered promiscuous mode [ 151.232851][ T8112] sch_fq: defrate 0 ignored. [ 151.391080][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.443963][ T8127] syzkaller1: entered promiscuous mode [ 151.449727][ T8127] syzkaller1: entered allmulticast mode [ 151.496874][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.518777][ T5247] Bluetooth: hci4: command tx timeout [ 151.707440][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.955444][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.015384][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.251268][ T8031] team0: Port device team_slave_0 added [ 152.303994][ T8031] team0: Port device team_slave_1 added [ 152.605828][ T8149] wireguard0: entered promiscuous mode [ 152.619586][ T8149] wireguard0: entered allmulticast mode [ 152.708186][ T5247] Bluetooth: hci0: command tx timeout [ 152.834301][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.854891][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.923459][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.108878][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.132984][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.242625][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.589778][ T5247] Bluetooth: hci4: command tx timeout [ 153.711855][ T8031] hsr_slave_0: entered promiscuous mode [ 153.753544][ T8031] hsr_slave_1: entered promiscuous mode [ 153.782549][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.816872][ T8031] Cannot create hsr debugfs directory [ 153.846869][ T12] bridge_slave_1: left allmulticast mode [ 153.858485][ T12] bridge_slave_1: left promiscuous mode [ 153.882202][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.939590][ T12] bridge_slave_0: left allmulticast mode [ 153.957630][ T12] bridge_slave_0: left promiscuous mode [ 153.981825][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.433523][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.520048][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.615197][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.636402][ T12] bond0 (unregistering): Released all slaves [ 155.665886][ T7946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.673331][ T5247] Bluetooth: hci4: command tx timeout [ 155.945034][ T7946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.358721][ T8187] wg2: entered promiscuous mode [ 156.412447][ T8187] team0: Port device wg2 added [ 156.455464][ T7946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.470508][ T7946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.908584][ T4627] Bluetooth: hci4: command 0x0405 tx timeout [ 159.988483][ T4627] Bluetooth: hci4: command 0x0405 tx timeout [ 171.673556][ T4627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.688407][ T4627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.704086][ T4627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.712517][ T4627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.720597][ T4627] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.729314][ T4627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.971116][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.986717][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.996002][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.012426][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.024292][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 172.034277][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.919918][ T4627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 172.936237][ T4627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.948470][ T4627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.956463][ T4627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.964406][ T4627] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 172.972223][ T4627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.828227][ T4627] Bluetooth: hci5: command tx timeout [ 174.068424][ T4627] Bluetooth: hci6: command tx timeout [ 175.028342][ T4627] Bluetooth: hci7: command tx timeout [ 175.908658][ T4627] Bluetooth: hci5: command tx timeout [ 176.148516][ T4627] Bluetooth: hci6: command tx timeout [ 177.108592][ T4627] Bluetooth: hci7: command tx timeout [ 177.806974][ T12] hsr_slave_0: left promiscuous mode [ 177.892965][ T12] hsr_slave_1: left promiscuous mode [ 177.988367][ T4627] Bluetooth: hci5: command tx timeout [ 178.028289][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.035770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.145883][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.175070][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.228500][ T4627] Bluetooth: hci6: command tx timeout [ 178.254090][ T12] veth1_macvtap: left promiscuous mode [ 178.266221][ T12] veth0_macvtap: left promiscuous mode [ 178.273266][ T12] veth1_vlan: left promiscuous mode [ 178.283327][ T12] veth0_vlan: left promiscuous mode [ 179.190544][ T4627] Bluetooth: hci7: command tx timeout [ 179.357786][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.445134][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.086701][ T5247] Bluetooth: hci5: command tx timeout [ 180.308585][ T5247] Bluetooth: hci6: command tx timeout [ 181.268389][ T5247] Bluetooth: hci7: command tx timeout [ 181.348331][ T5247] Bluetooth: hci1: command 0x0406 tx timeout [ 193.027985][ C0] sched: DL replenish lagged too much [ 194.643374][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650400][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.121737][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.160195][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.177084][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.223051][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.258867][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.280442][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.388483][ T4627] Bluetooth: hci2: command tx timeout [ 209.046641][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.058626][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.068095][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.076776][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.085822][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.124473][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.468324][ T4627] Bluetooth: hci2: command tx timeout [ 211.188448][ T4627] Bluetooth: hci3: command tx timeout [ 212.548479][ T4627] Bluetooth: hci2: command tx timeout [ 213.268434][ T4627] Bluetooth: hci3: command tx timeout [ 214.628247][ T4627] Bluetooth: hci2: command tx timeout [ 215.348185][ T4627] Bluetooth: hci3: command tx timeout [ 217.428302][ T4627] Bluetooth: hci3: command tx timeout [ 232.945167][ T5247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 232.954738][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 232.965416][ T5247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 232.973560][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 232.986864][ T5247] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 232.994653][ T5247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 233.260836][ T4627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 233.276709][ T4627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 233.285364][ T4627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 233.296331][ T4627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 233.308148][ T4627] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 233.315607][ T4627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 233.644991][ T5247] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 233.659403][ T5247] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 233.669721][ T5247] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 233.677760][ T5247] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 233.688553][ T5247] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 233.698661][ T5247] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 235.028220][ T5247] Bluetooth: hci8: command tx timeout [ 235.348613][ T5247] Bluetooth: hci9: command tx timeout [ 235.748170][ T5247] Bluetooth: hci10: command tx timeout [ 237.108312][ T5247] Bluetooth: hci8: command tx timeout [ 237.428618][ T5247] Bluetooth: hci9: command tx timeout [ 237.828223][ T5247] Bluetooth: hci10: command tx timeout [ 239.188267][ T5247] Bluetooth: hci8: command tx timeout [ 239.508582][ T5247] Bluetooth: hci9: command tx timeout [ 239.908260][ T5247] Bluetooth: hci10: command tx timeout [ 241.268274][ T5247] Bluetooth: hci8: command tx timeout [ 241.588420][ T5247] Bluetooth: hci9: command tx timeout [ 241.988254][ T5247] Bluetooth: hci10: command tx timeout [ 256.071258][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.077611][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.241702][ T5250] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 267.263661][ T5250] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 267.283711][ T5250] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 267.328351][ T5250] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 267.365225][ T5250] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 267.387009][ T5250] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 268.391774][ T5250] Bluetooth: hci0: command 0x0406 tx timeout [ 269.508332][ T4627] Bluetooth: hci11: command tx timeout [ 270.897209][ T5250] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 270.913680][ T5250] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 270.923378][ T5250] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 270.937116][ T5250] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 270.945333][ T5250] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 270.953143][ T5250] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 271.588370][ T4627] Bluetooth: hci11: command tx timeout [ 273.028238][ T4627] Bluetooth: hci12: command tx timeout [ 273.511835][ T4627] Bluetooth: hci4: command 0x0405 tx timeout [ 273.668420][ T5250] Bluetooth: hci11: command tx timeout [ 275.108459][ T5250] Bluetooth: hci12: command tx timeout [ 275.748226][ T5250] Bluetooth: hci11: command tx timeout [ 277.188707][ T5250] Bluetooth: hci12: command tx timeout [ 279.268510][ T5250] Bluetooth: hci12: command tx timeout [ 293.688236][ T5247] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 293.716823][ T5247] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 293.726269][ T5247] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 293.734932][ T5247] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 293.743097][ T5247] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 293.753095][ T5247] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 293.989596][ T5247] Bluetooth: hci5: command 0x0406 tx timeout [ 294.054645][ T5247] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 294.068550][ T5247] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 294.079280][ T5247] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 294.087287][ T5247] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 294.095211][ T5247] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 294.103128][ T5247] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 294.748748][ T5250] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 294.758692][ T5250] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 294.769395][ T5250] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 294.777795][ T5250] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 294.785784][ T5250] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 294.793779][ T5250] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 295.828345][ T5250] Bluetooth: hci13: command tx timeout [ 296.149403][ T5250] Bluetooth: hci14: command tx timeout [ 296.868269][ T5250] Bluetooth: hci15: command tx timeout [ 297.908555][ T5236] Bluetooth: hci13: command tx timeout [ 298.228398][ T5236] Bluetooth: hci14: command tx timeout [ 298.948282][ T5236] Bluetooth: hci15: command tx timeout [ 299.118460][ T5236] Bluetooth: hci6: command 0x0406 tx timeout [ 299.124552][ T5236] Bluetooth: hci7: command 0x0406 tx timeout [ 299.988462][ T5250] Bluetooth: hci13: command tx timeout [ 300.308167][ T5250] Bluetooth: hci14: command tx timeout [ 301.028275][ T5250] Bluetooth: hci15: command tx timeout [ 302.068174][ T5250] Bluetooth: hci13: command tx timeout [ 302.388350][ T5250] Bluetooth: hci14: command tx timeout [ 303.108380][ T5250] Bluetooth: hci15: command tx timeout [ 317.520738][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.527082][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.747049][ T5236] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 328.773637][ T5236] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 328.796829][ T5236] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 328.837103][ T5236] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 328.863597][ T5236] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 328.883814][ T5236] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 329.848106][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 331.028386][ T5250] Bluetooth: hci16: command tx timeout [ 332.205872][ T5236] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 332.221798][ T5236] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 332.231886][ T5236] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 332.240568][ T5236] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 332.248532][ T5236] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 332.256008][ T5236] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 333.108558][ T5236] Bluetooth: hci16: command tx timeout [ 334.308606][ T5236] Bluetooth: hci17: command tx timeout [ 334.954071][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 335.188426][ T5250] Bluetooth: hci16: command tx timeout [ 336.388400][ T5250] Bluetooth: hci17: command tx timeout [ 337.268271][ T5250] Bluetooth: hci16: command tx timeout [ 337.988922][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 337.996636][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 338.011650][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.021673][ T30] task:kworker/u8:1 state:D stack:22456 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 338.036557][ T30] Workqueue: netns cleanup_net [ 338.041757][ T30] Call Trace: [ 338.052554][ T30] <TASK> [ 338.055544][ T30] __schedule+0x1895/0x4b30 [ 338.073861][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.088191][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.093300][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.177925][ T30] ? kthread_data+0x52/0xd0 [ 338.182578][ T30] ? schedule+0x90/0x320 [ 338.186847][ T30] ? wq_worker_sleeping+0x66/0x240 [ 338.258223][ T30] ? schedule+0x90/0x320 [ 338.262537][ T30] schedule+0x14b/0x320 [ 338.266724][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.318047][ T30] __mutex_lock+0x6a7/0xd70 [ 338.322630][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.327334][ T30] ? wg_destruct+0x25/0x2e0 [ 338.368301][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.373420][ T30] ? __pfx_free_percpu+0x10/0x10 [ 338.408379][ T30] ? kobject_put+0x272/0x480 [ 338.413058][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 338.433885][ T30] wg_destruct+0x25/0x2e0 [ 338.448236][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 338.453255][ T30] netdev_run_todo+0xe1a/0x1000 [ 338.468218][ T5250] Bluetooth: hci17: command tx timeout [ 338.475114][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 338.503659][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 338.509802][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 338.516002][ T30] default_device_exit_batch+0xa21/0xaa0 [ 338.548562][ T30] ? __pfx___might_resched+0x10/0x10 [ 338.553930][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 338.578428][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 338.583973][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 338.598055][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 338.604283][ T30] cleanup_net+0x89d/0xcc0 [ 338.621503][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 338.626522][ T30] ? process_scheduled_works+0x976/0x1850 [ 338.635632][ T30] process_scheduled_works+0xa63/0x1850 [ 338.646086][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.653357][ T30] ? assign_work+0x364/0x3d0 [ 338.662522][ T30] worker_thread+0x870/0xd30 [ 338.667175][ T30] ? __kthread_parkme+0x169/0x1d0 [ 338.673768][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.679582][ T30] kthread+0x2f0/0x390 [ 338.683689][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.694412][ T30] ? __pfx_kthread+0x10/0x10 [ 338.699414][ T30] ret_from_fork+0x4b/0x80 [ 338.703869][ T30] ? __pfx_kthread+0x10/0x10 [ 338.714151][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.719194][ T30] </TASK> [ 338.722385][ T30] INFO: task kworker/u8:9:2923 blocked for more than 144 seconds. [ 338.736156][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 338.744036][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.758320][ T30] task:kworker/u8:9 state:D stack:24496 pid:2923 tgid:2923 ppid:2 flags:0x00004000 [ 338.773535][ T30] Workqueue: events_unbound linkwatch_event [ 338.779641][ T30] Call Trace: [ 338.782942][ T30] <TASK> [ 338.785903][ T30] __schedule+0x1895/0x4b30 [ 338.796852][ T30] ? __pfx___schedule+0x10/0x10 [ 338.801924][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.806989][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.812690][ T30] ? kthread_data+0x52/0xd0 [ 338.817230][ T30] ? schedule+0x90/0x320 [ 338.828183][ T30] ? wq_worker_sleeping+0x66/0x240 [ 338.833362][ T30] ? schedule+0x90/0x320 [ 338.837631][ T30] schedule+0x14b/0x320 [ 338.847450][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.853360][ T30] __mutex_lock+0x6a7/0xd70 [ 338.857905][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.868248][ T30] ? linkwatch_event+0xe/0x60 [ 338.872982][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.883409][ T30] ? process_scheduled_works+0x976/0x1850 [ 338.892871][ T30] linkwatch_event+0xe/0x60 [ 338.897430][ T30] process_scheduled_works+0xa63/0x1850 [ 338.909658][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.915710][ T30] ? assign_work+0x364/0x3d0 [ 338.923827][ T30] worker_thread+0x870/0xd30 [ 338.930739][ T30] ? __kthread_parkme+0x169/0x1d0 [ 338.935824][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.944815][ T30] kthread+0x2f0/0x390 [ 338.951441][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.956603][ T30] ? __pfx_kthread+0x10/0x10 [ 338.964661][ T30] ret_from_fork+0x4b/0x80 [ 338.971678][ T30] ? __pfx_kthread+0x10/0x10 [ 338.976313][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.984584][ T30] </TASK> [ 338.987739][ T30] INFO: task kworker/u8:13:5964 blocked for more than 144 seconds. [ 338.997999][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 339.005666][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.019898][ T30] task:kworker/u8:13 state:D stack:22712 pid:5964 tgid:5964 ppid:2 flags:0x00004000 [ 339.033885][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 339.042679][ T30] Call Trace: [ 339.045998][ T30] <TASK> [ 339.052547][ T30] __schedule+0x1895/0x4b30 [ 339.057126][ T30] ? __pfx___schedule+0x10/0x10 [ 339.064342][ T30] ? __pfx_lock_release+0x10/0x10 [ 339.073215][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 339.081029][ T30] ? kthread_data+0x52/0xd0 [ 339.085577][ T30] ? schedule+0x90/0x320 [ 339.093253][ T30] ? wq_worker_sleeping+0x66/0x240 [ 339.101008][ T30] ? schedule+0x90/0x320 [ 339.105287][ T30] schedule+0x14b/0x320 [ 339.112976][ T30] schedule_preempt_disabled+0x13/0x30 [ 339.121264][ T30] __mutex_lock+0x6a7/0xd70 [ 339.125812][ T30] ? mark_lock+0x9a/0x360 [ 339.134107][ T30] ? __mutex_lock+0x52a/0xd70 [ 339.141149][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 339.146299][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 339.154912][ T30] addrconf_dad_work+0xd0/0x16f0 [ 339.162497][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 339.171385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.177771][ T30] ? process_scheduled_works+0x976/0x1850 [ 339.185874][ T30] process_scheduled_works+0xa63/0x1850 [ 339.195303][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.203671][ T30] ? assign_work+0x364/0x3d0 [ 339.211702][ T30] worker_thread+0x870/0xd30 [ 339.216348][ T30] ? __kthread_parkme+0x169/0x1d0 [ 339.223996][ T30] ? __pfx_worker_thread+0x10/0x10 [ 339.233135][ T30] kthread+0x2f0/0x390 [ 339.237260][ T30] ? __pfx_worker_thread+0x10/0x10 [ 339.244721][ T30] ? __pfx_kthread+0x10/0x10 [ 339.253236][ T30] ret_from_fork+0x4b/0x80 [ 339.257793][ T30] ? __pfx_kthread+0x10/0x10 [ 339.264918][ T30] ret_from_fork_asm+0x1a/0x30 [ 339.274247][ T30] </TASK> [ 339.277343][ T30] INFO: task syz-executor:7946 blocked for more than 144 seconds. [ 339.291551][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 339.300492][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.313988][ T30] task:syz-executor state:D stack:21728 pid:7946 tgid:7946 ppid:1 flags:0x00004004 [ 339.325428][ T30] Call Trace: [ 339.333429][ T30] <TASK> [ 339.336406][ T30] __schedule+0x1895/0x4b30 [ 339.342949][ T30] ? __pfx___schedule+0x10/0x10 [ 339.347855][ T30] ? __pfx_lock_release+0x10/0x10 [ 339.357684][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 339.364490][ T30] ? schedule+0x90/0x320 [ 339.373607][ T30] schedule+0x14b/0x320 [ 339.377823][ T30] schedule_preempt_disabled+0x13/0x30 [ 339.384653][ T30] __mutex_lock+0x6a7/0xd70 [ 339.393723][ T30] ? __mutex_lock+0x52a/0xd70 [ 339.399930][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.405085][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 339.414657][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.420986][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 339.426145][ T30] ? __lock_acquire+0x1384/0x2050 [ 339.436858][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.443602][ T30] netlink_rcv_skb+0x1e3/0x430 [ 339.453412][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.460415][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.465871][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.475996][ T30] netlink_unicast+0x7f6/0x990 [ 339.482125][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 339.487453][ T30] ? __virt_addr_valid+0x183/0x530 [ 339.493141][ T30] ? __check_object_size+0x48e/0x900 [ 339.504098][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 339.509148][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.514484][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 339.525459][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.530929][ T30] __sock_sendmsg+0x221/0x270 [ 339.535652][ T30] __sys_sendto+0x39b/0x4f0 [ 339.545844][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 339.551352][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.557569][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.564196][ T30] __x64_sys_sendto+0xde/0x100 [ 339.575093][ T30] do_syscall_64+0xf3/0x230 [ 339.580167][ T30] ? clear_bhb_loop+0x35/0x90 [ 339.584892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.600313][ T30] RIP: 0033:0x7ff0e51805ac [ 339.604802][ T30] RSP: 002b:00007ffc84752180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 339.615970][ T30] RAX: ffffffffffffffda RBX: 00007ff0e5e64620 RCX: 00007ff0e51805ac [ 339.627449][ T30] RDX: 0000000000000028 RSI: 00007ff0e5e64670 RDI: 0000000000000003 [ 339.637843][ T30] RBP: 0000000000000000 R08: 00007ffc847521d4 R09: 000000000000000c [ 339.647985][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 339.656006][ T30] R13: 0000000000000000 R14: 00007ff0e5e64670 R15: 0000000000000000 [ 339.673741][ T30] </TASK> [ 339.676834][ T30] INFO: task syz-executor:8031 blocked for more than 145 seconds. [ 339.691225][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 339.701514][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.713821][ T30] task:syz-executor state:D stack:21728 pid:8031 tgid:8031 ppid:1 flags:0x00000004 [ 339.726374][ T30] Call Trace: [ 339.733324][ T30] <TASK> [ 339.736299][ T30] __schedule+0x1895/0x4b30 [ 339.743217][ T30] ? __pfx___schedule+0x10/0x10 [ 339.751596][ T30] ? __pfx_lock_release+0x10/0x10 [ 339.756679][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 339.764769][ T30] ? schedule+0x90/0x320 [ 339.772543][ T30] schedule+0x14b/0x320 [ 339.776759][ T30] schedule_preempt_disabled+0x13/0x30 [ 339.784591][ T30] __mutex_lock+0x6a7/0xd70 [ 339.793398][ T30] ? __mutex_lock+0x52a/0xd70 [ 339.800450][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.805613][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 339.814111][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.821794][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 339.826959][ T30] ? __lock_acquire+0x1384/0x2050 [ 339.835452][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.843506][ T30] netlink_rcv_skb+0x1e3/0x430 [ 339.851968][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.857487][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.865207][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.874034][ T30] netlink_unicast+0x7f6/0x990 [ 339.881433][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 339.886775][ T30] ? __virt_addr_valid+0x183/0x530 [ 339.895330][ T30] ? __check_object_size+0x48e/0x900 [ 339.903752][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 339.916011][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.923713][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 339.932276][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.937609][ T30] __sock_sendmsg+0x221/0x270 [ 339.944917][ T30] __sys_sendto+0x39b/0x4f0 [ 339.952908][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 339.960343][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.966381][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.976463][ T30] __x64_sys_sendto+0xde/0x100 [ 339.983629][ T30] do_syscall_64+0xf3/0x230 [ 339.991762][ T30] ? clear_bhb_loop+0x35/0x90 [ 339.996501][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.005037][ T30] RIP: 0033:0x7fdb32b805ac [ 340.013403][ T30] RSP: 002b:00007fff795a6a40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 340.024233][ T30] RAX: ffffffffffffffda RBX: 00007fdb33864620 RCX: 00007fdb32b805ac [ 340.035985][ T30] RDX: 0000000000000050 RSI: 00007fdb33864670 RDI: 0000000000000003 [ 340.044272][ T30] RBP: 0000000000000000 R08: 00007fff795a6a94 R09: 000000000000000c [ 340.057806][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 340.066198][ T30] R13: 0000000000000000 R14: 00007fdb33864670 R15: 0000000000000000 [ 340.078004][ T30] </TASK> [ 340.081075][ T30] INFO: task syz.3.710:8184 blocked for more than 145 seconds. [ 340.094400][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 340.102266][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.116780][ T30] task:syz.3.710 state:D stack:25376 pid:8184 tgid:8183 ppid:5238 flags:0x00004006 [ 340.128058][ T30] Call Trace: [ 340.131379][ T30] <TASK> [ 340.134344][ T30] __schedule+0x1895/0x4b30 [ 340.144782][ T30] ? __pfx___schedule+0x10/0x10 [ 340.150263][ T30] ? __pfx_lock_release+0x10/0x10 [ 340.155353][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 340.166479][ T30] ? schedule+0x90/0x320 [ 340.170832][ T30] schedule+0x14b/0x320 [ 340.175026][ T30] schedule_preempt_disabled+0x13/0x30 [ 340.186508][ T30] __mutex_lock+0x6a7/0xd70 [ 340.191217][ T30] ? __mutex_lock+0x52a/0xd70 [ 340.195934][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 340.206402][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 340.211859][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 340.217108][ T30] ? mpls_net_exit+0x78/0x2a0 [ 340.227521][ T30] ? kfree+0x1a0/0x440 [ 340.231915][ T30] ? mpls_net_exit+0x78/0x2a0 [ 340.236654][ T30] mpls_net_exit+0x7d/0x2a0 [ 340.247529][ T30] setup_net+0x794/0x9e0 [ 340.251895][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 340.257483][ T30] ? __pfx_setup_net+0x10/0x10 [ 340.268391][ T30] copy_net_ns+0x33f/0x570 [ 340.272896][ T30] create_new_namespaces+0x425/0x7b0 [ 340.282928][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 340.289944][ T30] ksys_unshare+0x57d/0xa70 [ 340.294514][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 340.304385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.312964][ T30] ? exc_page_fault+0x590/0x8c0 [ 340.317886][ T30] __x64_sys_unshare+0x38/0x40 [ 340.327448][ T30] do_syscall_64+0xf3/0x230 [ 340.333505][ T30] ? clear_bhb_loop+0x35/0x90 [ 340.342950][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.351033][ T30] RIP: 0033:0x7f456517e719 [ 340.355504][ T30] RSP: 002b:00007f4565f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 340.367991][ T30] RAX: ffffffffffffffda RBX: 00007f4565335f80 RCX: 00007f456517e719 [ 340.376018][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 340.390072][ T30] RBP: 00007f45651f132e R08: 0000000000000000 R09: 0000000000000000 [ 340.401535][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.411872][ T30] R13: 0000000000000001 R14: 00007f4565335f80 R15: 00007fff039125a8 [ 340.423618][ T30] </TASK> [ 340.426697][ T30] INFO: task syz-executor:8207 blocked for more than 145 seconds. [ 340.436918][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 340.447987][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.456700][ T30] task:syz-executor state:D stack:23360 pid:8207 tgid:8207 ppid:1 flags:0x00004006 [ 340.472388][ T30] Call Trace: [ 340.475725][ T30] <TASK> [ 340.480813][ T30] __schedule+0x1895/0x4b30 [ 340.485389][ T30] ? __pfx___schedule+0x10/0x10 [ 340.495212][ T30] ? __pfx_lock_release+0x10/0x10 [ 340.501626][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 340.507129][ T30] ? schedule+0x90/0x320 [ 340.515931][ T30] schedule+0x14b/0x320 [ 340.521630][ T30] schedule_preempt_disabled+0x13/0x30 [ 340.527132][ T30] __mutex_lock+0x6a7/0xd70 [ 340.536242][ T30] ? __mutex_lock+0x52a/0xd70 [ 340.542385][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 340.547636][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 340.553300][ T5250] Bluetooth: hci17: command tx timeout [ 340.564879][ T30] ? read_word_at_a_time+0xe/0x20 [ 340.570562][ T30] ? sized_strscpy+0x8d/0x220 [ 340.575292][ T30] ip_tunnel_init_net+0x20e/0x720 [ 340.586856][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 340.592655][ T30] ? ops_init+0x75/0x590 [ 340.596946][ T30] ops_init+0x31e/0x590 [ 340.606950][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 340.612714][ T30] setup_net+0x287/0x9e0 [ 340.617001][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 340.628042][ T30] ? __pfx_setup_net+0x10/0x10 [ 340.632892][ T30] copy_net_ns+0x33f/0x570 [ 340.637349][ T30] create_new_namespaces+0x425/0x7b0 [ 340.648849][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 340.654642][ T30] ksys_unshare+0x57d/0xa70 [ 340.663733][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 340.670290][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.676676][ T30] ? do_syscall_64+0x100/0x230 [ 340.686060][ T30] __x64_sys_unshare+0x38/0x40 [ 340.692623][ T30] do_syscall_64+0xf3/0x230 [ 340.697183][ T30] ? clear_bhb_loop+0x35/0x90 [ 340.706729][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.715705][ T30] RIP: 0033:0x7fd827d7ff17 [ 340.724654][ T30] RSP: 002b:00007ffde6ae4ae8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 340.734638][ T30] RAX: ffffffffffffffda RBX: 00007fd827f35f40 RCX: 00007fd827d7ff17 [ 340.747293][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 340.756667][ T30] RBP: 00007fd827f36a38 R08: 0000000000000000 R09: 0000000000000000 [ 340.767989][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 340.776019][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 340.789294][ T30] </TASK> [ 340.792377][ T30] INFO: task syz-executor:8209 blocked for more than 146 seconds. [ 340.804562][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 340.814540][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.826815][ T30] task:syz-executor state:D stack:23360 pid:8209 tgid:8209 ppid:1 flags:0x00004006 [ 340.839699][ T30] Call Trace: [ 340.843022][ T30] <TASK> [ 340.845977][ T30] __schedule+0x1895/0x4b30 [ 340.853987][ T30] ? __pfx___schedule+0x10/0x10 [ 340.861713][ T30] ? __pfx_lock_release+0x10/0x10 [ 340.866804][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 340.875841][ T30] ? schedule+0x90/0x320 [ 340.882472][ T30] schedule+0x14b/0x320 [ 340.886685][ T30] schedule_preempt_disabled+0x13/0x30 [ 340.895963][ T30] __mutex_lock+0x6a7/0xd70 [ 340.902867][ T30] ? __mutex_lock+0x52a/0xd70 [ 340.907600][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 340.916797][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 340.924445][ T30] ip_tunnel_init_net+0x20e/0x720 [ 340.933077][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 340.941095][ T30] ? ops_init+0x75/0x590 [ 340.945397][ T30] ops_init+0x31e/0x590 [ 340.954756][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 340.962517][ T30] setup_net+0x287/0x9e0 [ 340.966811][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 340.975885][ T30] ? __pfx_setup_net+0x10/0x10 [ 340.983319][ T30] copy_net_ns+0x33f/0x570 [ 340.987805][ T30] create_new_namespaces+0x425/0x7b0 [ 340.996680][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 341.005027][ T30] ksys_unshare+0x57d/0xa70 [ 341.013270][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 341.021209][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.027601][ T30] ? do_syscall_64+0x100/0x230 [ 341.035999][ T30] __x64_sys_unshare+0x38/0x40 [ 341.041323][ T30] do_syscall_64+0xf3/0x230 [ 341.045874][ T30] ? clear_bhb_loop+0x35/0x90 [ 341.056215][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.062278][ T30] RIP: 0033:0x7ff31eb7ff17 [ 341.066724][ T30] RSP: 002b:00007ffda2fabba8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 341.081144][ T30] RAX: ffffffffffffffda RBX: 00007ff31ed35f40 RCX: 00007ff31eb7ff17 [ 341.091518][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 341.103337][ T30] RBP: 00007ff31ed36a38 R08: 0000000000000000 R09: 0000000000000000 [ 341.113849][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 341.125270][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 341.134246][ T30] </TASK> [ 341.137310][ T30] INFO: task syz-executor:8212 blocked for more than 146 seconds. [ 341.150760][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 341.161205][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.173325][ T30] task:syz-executor state:D stack:23360 pid:8212 tgid:8212 ppid:1 flags:0x00004006 [ 341.186049][ T30] Call Trace: [ 341.196245][ T30] <TASK> [ 341.203694][ T30] __schedule+0x1895/0x4b30 [ 341.212214][ T30] ? __pfx___schedule+0x10/0x10 [ 341.217137][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.224863][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.233829][ T30] ? schedule+0x90/0x320 [ 341.241004][ T30] schedule+0x14b/0x320 [ 341.245225][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.254425][ T30] __mutex_lock+0x6a7/0xd70 [ 341.261363][ T30] ? __mutex_lock+0x52a/0xd70 [ 341.266102][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 341.274894][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.282599][ T30] ip_tunnel_init_net+0x20e/0x720 [ 341.287683][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 341.296674][ T30] ? ops_init+0x75/0x590 [ 341.303397][ T30] ops_init+0x31e/0x590 [ 341.307700][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 341.316836][ T30] setup_net+0x287/0x9e0 [ 341.323521][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 341.332528][ T30] ? __pfx_setup_net+0x10/0x10 [ 341.337370][ T30] copy_net_ns+0x33f/0x570 [ 341.344504][ T30] create_new_namespaces+0x425/0x7b0 [ 341.357226][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 341.363211][ T30] ksys_unshare+0x57d/0xa70 [ 341.367761][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 341.378963][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.385363][ T30] ? do_syscall_64+0x100/0x230 [ 341.394890][ T30] __x64_sys_unshare+0x38/0x40 [ 341.401194][ T30] do_syscall_64+0xf3/0x230 [ 341.405750][ T30] ? clear_bhb_loop+0x35/0x90 [ 341.415277][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.422576][ T30] RIP: 0033:0x7f186937ff17 [ 341.427030][ T30] RSP: 002b:00007ffd08803108 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 341.441751][ T30] RAX: ffffffffffffffda RBX: 00007f1869535f40 RCX: 00007f186937ff17 [ 341.451040][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 341.464474][ T30] RBP: 00007f1869536a38 R08: 0000000000000000 R09: 0000000000000000 [ 341.473815][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 341.486308][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 341.495883][ T30] </TASK> [ 341.503658][ T30] [ 341.503658][ T30] Showing all locks held in the system: [ 341.513705][ T30] 4 locks held by kworker/u8:1/12: [ 341.523612][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 341.535868][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 341.551127][ T30] #2: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 341.563353][ T30] #3: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 341.572985][ T30] 1 lock held by khungtaskd/30: [ 341.577881][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 341.596589][ T30] 3 locks held by kworker/u8:9/2923: [ 341.605328][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 341.619690][ T30] #1: ffffc90009dbfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 341.634846][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 341.646389][ T30] 2 locks held by getty/4996: [ 341.654533][ T30] #0: ffff8880328520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 341.667039][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 341.681758][ T30] 3 locks held by kworker/u8:13/5964: [ 341.687183][ T30] #0: ffff88814b88c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 341.705233][ T30] #1: ffffc90004077d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 341.724098][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 341.733912][ T30] 6 locks held by kworker/0:13/7050: [ 341.744908][ T30] 3 locks held by kworker/1:14/7065: [ 341.752210][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 341.767988][ T30] #1: ffffc90002f9fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 341.784153][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 341.794234][ T30] 1 lock held by syz-executor/7946: [ 341.805175][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 341.814947][ T30] 1 lock held by syz-executor/8031: [ 341.826560][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 341.837635][ T30] 2 locks held by syz.3.710/8184: [ 341.848280][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 341.857779][ T30] #1: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 341.872159][ T30] 2 locks held by syz.2.712/8197: [ 341.877239][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 341.887797][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 341.905144][ T30] 2 locks held by syz-executor/8207: [ 341.910840][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 341.926082][ T30] #1: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 341.936197][ T30] 2 locks held by syz-executor/8209: [ 341.947484][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 341.957121][ T30] #1: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 341.972811][ T30] 2 locks held by syz-executor/8212: [ 341.978289][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 341.987763][ T30] #1: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 342.004272][ T30] 1 lock held by syz-executor/8215: [ 342.009868][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.025209][ T30] 1 lock held by syz-executor/8218: [ 342.030905][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.046678][ T30] 1 lock held by syz-executor/8221: [ 342.052055][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.067300][ T30] 1 lock held by syz-executor/8224: [ 342.073139][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.087995][ T30] 1 lock held by syz-executor/8227: [ 342.093237][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.108131][ T30] 1 lock held by syz-executor/8230: [ 342.113377][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.127554][ T30] 1 lock held by syz-executor/8233: [ 342.134281][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.152751][ T30] 1 lock held by syz-executor/8237: [ 342.161637][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.171399][ T30] 1 lock held by syz-executor/8239: [ 342.176625][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.191779][ T30] 1 lock held by syz-executor/8242: [ 342.197026][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.208091][ T30] 1 lock held by syz-executor/8245: [ 342.213324][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.227438][ T30] 1 lock held by syz-executor/8248: [ 342.234387][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.248503][ T30] [ 342.250876][ T30] ============================================= [ 342.250876][ T30] [ 342.264609][ T30] NMI backtrace for cpu 1 [ 342.268999][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 342.279536][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.289617][ T30] Call Trace: [ 342.292915][ T30] <TASK> [ 342.295862][ T30] dump_stack_lvl+0x241/0x360 [ 342.300571][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.305796][ T30] ? __pfx__printk+0x10/0x10 [ 342.310423][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 342.315395][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 342.320882][ T30] ? _printk+0xd5/0x120 [ 342.325066][ T30] ? __pfx__printk+0x10/0x10 [ 342.329680][ T30] ? __wake_up_klogd+0xcc/0x110 [ 342.334561][ T30] ? __pfx__printk+0x10/0x10 [ 342.339185][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 342.344245][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 342.350254][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 342.356357][ T30] watchdog+0xff4/0x1040 [ 342.360632][ T30] ? watchdog+0x1ea/0x1040 [ 342.365078][ T30] ? __pfx_watchdog+0x10/0x10 [ 342.369783][ T30] kthread+0x2f0/0x390 [ 342.373883][ T30] ? __pfx_watchdog+0x10/0x10 [ 342.378588][ T30] ? __pfx_kthread+0x10/0x10 [ 342.383202][ T30] ret_from_fork+0x4b/0x80 [ 342.387643][ T30] ? __pfx_kthread+0x10/0x10 [ 342.392256][ T30] ret_from_fork_asm+0x1a/0x30 [ 342.397065][ T30] </TASK> [ 342.400889][ T30] Sending NMI from CPU 1 to CPUs 0: [ 342.406153][ C0] NMI backtrace for cpu 0 [ 342.406169][ C0] CPU: 0 UID: 0 PID: 7050 Comm: kworker/0:13 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 342.406190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.406201][ C0] Workqueue: events nsim_dev_trap_report_work [ 342.406225][ C0] RIP: 0010:trace_irq_disable+0x34/0x120 [ 342.406248][ C0] Code: 67 7e 83 f8 08 73 3f 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 a8 11 1d 90 be 08 00 00 00 e8 14 ee 61 00 48 0f a3 1d 74 65 80 0e <73> 12 e8 d5 29 de ff 84 c0 75 09 80 3d 00 22 6a 0e 00 74 0e 5b 41 [ 342.406275][ C0] RSP: 0018:ffffc90000006e48 EFLAGS: 00000057 [ 342.406288][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff819cac2c [ 342.406299][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d11a8 [ 342.406309][ C0] RBP: ffffc90000006ef0 R08: ffffffff901d11af R09: 1ffffffff203a235 [ 342.406321][ C0] R10: dffffc0000000000 R11: fffffbfff203a236 R12: 0000000000000246 [ 342.406332][ C0] R13: 1ffff92000000dcc R14: ffffffff9a67f730 R15: dffffc0000000000 [ 342.406345][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 342.406358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.406369][ C0] CR2: 00007f56785a2d58 CR3: 000000002edf4000 CR4: 00000000003526f0 [ 342.406384][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.406393][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.406404][ C0] Call Trace: [ 342.406409][ C0] <NMI> [ 342.406417][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 342.406438][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 342.406461][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 342.406480][ C0] ? nmi_handle+0x2a/0x5a0 [ 342.406504][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 342.406522][ C0] ? nmi_handle+0x14f/0x5a0 [ 342.406538][ C0] ? nmi_handle+0x2a/0x5a0 [ 342.406554][ C0] ? trace_irq_disable+0x34/0x120 [ 342.406571][ C0] ? default_do_nmi+0x63/0x160 [ 342.406591][ C0] ? exc_nmi+0x123/0x1f0 [ 342.406609][ C0] ? end_repeat_nmi+0xf/0x53 [ 342.406631][ C0] ? trace_irq_disable+0x2c/0x120 [ 342.406650][ C0] ? trace_irq_disable+0x34/0x120 [ 342.406667][ C0] ? trace_irq_disable+0x34/0x120 [ 342.406686][ C0] ? trace_irq_disable+0x34/0x120 [ 342.406703][ C0] </NMI> [ 342.406708][ C0] <IRQ> [ 342.406714][ C0] _raw_spin_lock_irqsave+0xb0/0x120 [ 342.406732][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 342.406749][ C0] ? ip_finish_output2+0xa14/0x1390 [ 342.406766][ C0] ? skb_release_data+0x6a0/0x8a0 [ 342.406783][ C0] debug_check_no_obj_freed+0x234/0x580 [ 342.406811][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 342.406832][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 342.406850][ C0] ? skb_release_data+0x6a0/0x8a0 [ 342.406865][ C0] ? skb_release_data+0x6a0/0x8a0 [ 342.406882][ C0] kfree+0x11f/0x440 [ 342.406902][ C0] skb_release_data+0x6a0/0x8a0 [ 342.406925][ C0] consume_skb+0x9f/0xf0 [ 342.406941][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 342.406960][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 342.406977][ C0] ? nf_ip_checksum+0x13a/0x500 [ 342.406995][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 342.407014][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 342.407032][ C0] ? __pfx_validate_chain+0x10/0x10 [ 342.407054][ C0] nft_do_chain+0x4ad/0x1da0 [ 342.407078][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 342.407092][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 342.407126][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 342.407146][ C0] nft_do_chain_inet+0x418/0x6b0 [ 342.407163][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 342.407177][ C0] ? ipt_do_table+0x312/0x1860 [ 342.407201][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 342.407216][ C0] nf_hook_slow+0xc3/0x220 [ 342.407236][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 342.407254][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 342.407277][ C0] NF_HOOK+0x29e/0x450 [ 342.407295][ C0] ? NF_HOOK+0x9a/0x450 [ 342.407311][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 342.407330][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 342.407350][ C0] ? ip_rcv_finish+0x406/0x560 [ 342.407368][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 342.407385][ C0] NF_HOOK+0x3a4/0x450 [ 342.407401][ C0] ? __lock_acquire+0x1384/0x2050 [ 342.407421][ C0] ? NF_HOOK+0x9a/0x450 [ 342.407437][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 342.407453][ C0] ? ip_rcv_core+0x801/0xd10 [ 342.407471][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 342.407492][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 342.407509][ C0] __netif_receive_skb+0x2bf/0x650 [ 342.407530][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 342.407550][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 342.407567][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.407586][ C0] ? __pfx_lock_release+0x10/0x10 [ 342.407605][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 342.407627][ C0] process_backlog+0x662/0x15b0 [ 342.407647][ C0] ? process_backlog+0x33b/0x15b0 [ 342.407670][ C0] ? __pfx_process_backlog+0x10/0x10 [ 342.407688][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.407708][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.407729][ C0] __napi_poll+0xcb/0x490 [ 342.407748][ C0] net_rx_action+0x89b/0x1240 [ 342.407778][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 342.407798][ C0] ? sched_clock+0x4a/0x70 [ 342.407824][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.407849][ C0] handle_softirqs+0x2c5/0x980 [ 342.407869][ C0] ? do_softirq+0x11b/0x1e0 [ 342.407888][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 342.407908][ C0] ? rcu_is_watching+0x15/0xb0 [ 342.407926][ C0] do_softirq+0x11b/0x1e0 [ 342.407946][ C0] </IRQ> [ 342.407951][ C0] <TASK> [ 342.407955][ C0] ? __pfx_do_softirq+0x10/0x10 [ 342.407971][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 342.407992][ C0] ? rcu_is_watching+0x15/0xb0 [ 342.408009][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 342.408028][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 342.408045][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 342.408063][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 342.408081][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 342.408101][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 342.408125][ C0] ? process_scheduled_works+0x976/0x1850 [ 342.408144][ C0] process_scheduled_works+0xa63/0x1850 [ 342.408176][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.408199][ C0] ? assign_work+0x364/0x3d0 [ 342.408220][ C0] worker_thread+0x870/0xd30 [ 342.408246][ C0] ? __kthread_parkme+0x169/0x1d0 [ 342.408273][ C0] ? __pfx_worker_thread+0x10/0x10 [ 342.408291][ C0] kthread+0x2f0/0x390 [ 342.408305][ C0] ? __pfx_worker_thread+0x10/0x10 [ 342.408323][ C0] ? __pfx_kthread+0x10/0x10 [ 342.408337][ C0] ret_from_fork+0x4b/0x80 [ 342.408356][ C0] ? __pfx_kthread+0x10/0x10 [ 342.408370][ C0] ret_from_fork_asm+0x1a/0x30 [ 342.408396][ C0] </TASK> [ 343.087669][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 343.094584][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 343.105108][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.115193][ T30] Call Trace: [ 343.118505][ T30] <TASK> [ 343.121450][ T30] dump_stack_lvl+0x241/0x360 [ 343.126155][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.131387][ T30] ? __pfx__printk+0x10/0x10 [ 343.136019][ T30] ? vscnprintf+0x5d/0x90 [ 343.140376][ T30] panic+0x349/0x880 [ 343.144298][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 343.150480][ T30] ? __pfx_panic+0x10/0x10 [ 343.154914][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 343.160309][ T30] ? __irq_work_queue_local+0x137/0x410 [ 343.165879][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 343.171273][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 343.177455][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 343.183640][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 343.189838][ T30] watchdog+0x1033/0x1040 [ 343.194204][ T30] ? watchdog+0x1ea/0x1040 [ 343.198652][ T30] ? __pfx_watchdog+0x10/0x10 [ 343.203353][ T30] kthread+0x2f0/0x390 [ 343.207446][ T30] ? __pfx_watchdog+0x10/0x10 [ 343.212148][ T30] ? __pfx_kthread+0x10/0x10 [ 343.216760][ T30] ret_from_fork+0x4b/0x80 [ 343.221230][ T30] ? __pfx_kthread+0x10/0x10 [ 343.225842][ T30] ret_from_fork_asm+0x1a/0x30 [ 343.230645][ T30] </TASK> [ 343.233976][ T30] Kernel Offset: disabled [ 343.238298][ T30] Rebooting in 86400 seconds..