last executing test programs: 1m37.118898548s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) (async) 1m34.468503287s ago: executing program 3 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) 1m30.869860938s ago: executing program 4 (id=946): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x23, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba316000000000000000000080000000000000208000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000000000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b0000000020827903000000000000000000000000000804000000"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m18.343666508s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) (async) 1m17.231126233s ago: executing program 3 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) 1m15.694167031s ago: executing program 4 (id=946): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x23, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 57.139384403s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) (async) 56.438476605s ago: executing program 3 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b2557eb3c5ca683a4b6fc89398f2b9000f224891060017cfaa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f7098696afb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a032de54a2ad9cdac2e981ab59016f81860324b8003029e938858ffa30ce8a55129fa207d2513b711d83d366a7e0df0667a2c8dd2b0665de28cd407db6f8ef6082cb509b628203fab234cef6a77d6016a6cbf19f9687717d399233ef170b5bfdb55cab50aab08c8ddebd55654ea4d0caf2a2409db567260721a9b731cb58810978b60f930b7c92475c3483b06855d3b6ebde0092e67c0020000000000000067badf02c28f8cd94d347888a769591ce0dbb84a7aa02bff13398335aefbd1e874a6568d3f3d96dd30211bd963a45bca24a231d4f0b468a1667762972cdfde32ae7a69c23c50911a3c8a24622889f8aebce8e0bc88f35f5e40e21e4f2bf4b90655667acc84d84d67d6b240ddceafc5cd4fe94b79a00058566f49787d426ce3aae17094ab0078770155481c86c8e9e6ddb9a680af2d65ed710e3e9e370b711f31f865f2c1c5684e834ce38ff08bcc7429a596a7b1b3f45ffd6e2431f101189b00540986c22232521c8a87aecc3131595bac7c28076b55f071459adedd5953e4bde7c5e679739b07baa099338777899d54f13de88e5bdcd671c1742b0fabd0f40d1302e554090649eb2ec27f7b5afd721dab34"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) 56.14537518s ago: executing program 4 (id=946): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x23, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 40.042291902s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) (async) 37.230137826s ago: executing program 3 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b2557eb3c5ca683a4b6fc89398f2b9000f224891060017cfaa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f7098696afb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a032de54a2ad9cdac2e981ab59016f81860324b8003029e938858ffa30ce8a55129fa207d2513b711d83d366a7e0df0667a2c8dd2b0665de28cd407db6f8ef6082cb509b628203fab234cef6a77d6016a6cbf19f9687717d399233ef170b5bfdb55cab50aab08c8ddebd55654ea4d0caf2a2409db567260721a9b731cb58810978b60f930b7c92475c3483b06855d3b6ebde0092e67c0020000000000000067badf02c28f8cd94d347888a769591ce0dbb84a7aa02bff13398335aefbd1e874a6568d3f3d96dd30211bd963a45bca24a231d4f0b468a1667762972cdfde32ae7a69c23c50911a3c8a24622889f8aebce8e0bc88f35f5e40e21e4f2bf4b90655667acc84d84d67d6b240ddceafc5cd4fe94b79a00058566f49787d426ce3aae17094ab0078770155481c86c8e9e6ddb9a680af2d65ed710e3e9e370b711f31f865f2c1c5684e834ce38ff08bcc7429a596a7b1b3f45ffd6e2431f101189b00540986c22232521c8a87aecc3131595bac7c28076b55f071459adedd5953e4bde7c5e679739b07baa099338777899d54f13de88e5bdcd671c1742b0fabd0f40d1302e554090649eb2ec27f7b5afd721dab34"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) 34.852723979s ago: executing program 4 (id=946): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x23, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 20.727716004s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) (async) 18.790807195s ago: executing program 4 (id=946): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x23, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17.896769788s ago: executing program 3 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) 4.548482461s ago: executing program 1 (id=1402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) write(r0, &(0x7f0000000040)="09000000010001", 0x7) 4.370979329s ago: executing program 1 (id=1403): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000827e04f2362f0555000000bf09000000000055de4a4c0055090100f5ffffff9500000800000400e291000000000000b700020043e7b55385000000853a0000b7000000000000009500000000000000000000beed9a58029f3c42b4681099ad995cb6212b490000ab4e0000000000484c3ed7d0e8ea4cff5d3175a39d89025c964f5a05e09a038a0429980cbc3e1e97a1c743590132615e8b1a67cd13fe72aaf4e9320db72756325b40486c3cf90bb63041bfb96a9d7fde6ef0d35afa842844b9db447a4c606f7a057d060ac02753149140ce326f1e9fb6"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000a40)="e7ff", 0x2, 0x20004000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.335484163s ago: executing program 0 (id=1404): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4bf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x86b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7040000080000008500000095000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000000000000000000f9624f14390bc168ec7be1030d1aa9e6c1dacc41d1d692c73d4149940bcbd32b1e24ff1f0a39ebb71d758eca3b0bbd517c", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000f8ca44b8874fdf8a"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x800, 0x7) 3.995249622s ago: executing program 0 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) unshare(0x400) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) (async) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000044000000080003007c4b84b40459f79da44675a483543294d19a1f4c86c013a17843e27701ab726e7b54134ae0348761bb79ee69c3f5dd7e453fb1860a828ce5d657489c7f0573c175e82996d359d78bd6326933f2229db9085c8799de18bfaf0eff9cd5b3ff3d67ae0362d6c9faf2d0f96d074ceb697e39dfea17d41c186106c8de7e79c4092116455c169f3f3b4669f70094d6577e2a2cb44690c3ba41012783a875e53dac57d0bb3042e31f6c90ba62cce47e", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000010005a800c00018006000100120c0000"], 0x38}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @fixed, 0xfff, 0x2}, 0xe) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r1, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c0003"], 0x12c}}, 0x0) 3.450801912s ago: executing program 1 (id=1406): r0 = socket$inet(0x2, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x26, 0x805, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x60, 0x9, 0x9, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x40, 0x7, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x9, 0x9, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x11, 0x2, [{0x5, 0xb, "a23d7bdde2ff1850d8"}]}, @rr={0x7, 0x7, 0x8b, [@rand_addr=0x64010101]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1419880e}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x9, 0xffff8001, 0x22d0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) (fail_nth: 4) 3.404851513s ago: executing program 0 (id=1407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x7, 0xa, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x134, 0x32, 0x20, 0x70bd26, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf99}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3302223f}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60000000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff6}]}, 0x134}}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4dff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[], 0x470}}, 0x48000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r2, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'GP?6\x97L\x00'}, {0x20, 'kmem_cache_free\x00'}, {0x20, '`^4'}, {0x20, 'GPL\x00'}, {}, {0x20, ')}-'}, {0x20, '\x00'}, {0x20, '()!'}, {0x20, 'y&$@'}, {0x20, 'GPL\x00'}], 0xa, "6b256f6cab547e105d8b724a3cca868447449cdd5b59ddde6a4ac1fb1feb69bb24183e8b6279efa8b3d266ae59f777f9d3ebfd1ae5fa84a72c95c489618fb41f5b6e5753716c9c72cdcca9f860c5d48a89cfcbbf8b653f6932254c39b2ce0e81bf69c910a8860e65e5aa7d8318fd08eec49c2c74ffb157cb9256d261138e6d7d54a7eb003effffffff20cc272b3803ac9a7ba4627c5477ee151ab81a72c5617a9ffd7a8e37df64cb85c40a000000000000"}, 0xf3) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r8 = socket$inet(0x2, 0x3, 0x2) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) bind$inet(r9, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pipe(&(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.800299299s ago: executing program 1 (id=1408): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000001400)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="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", 0x1000, 0x0, 0x0, 0x0) 2.678774527s ago: executing program 0 (id=1409): syz_emit_ethernet(0x81, &(0x7f00000004c0)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x47, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x5, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269"}, {0x0, 0x1, "000005000000000026000400"}]}}}}}}, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) listen(0xffffffffffffffff, 0x4) pipe(0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000300)=0xffff, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r4, &(0x7f0000000500)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.429422522s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x1f, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x575}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x34) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7514d9db}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) (async) 2.410554935s ago: executing program 0 (id=1410): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="c300070000000000f9ff000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)=0x4) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@fwd={0x7}, @func_proto, @var={0x4, 0x0, 0x0, 0xe, 0x4}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x55}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/198, 0xc6}], 0xc6}}], 0x2, 0x0, 0x0) 933.967313ms ago: executing program 0 (id=1411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000700000008000500", @ANYRES32=r2, @ANYBLOB="180008801400010002"], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x4d, 0x0, &(0x7f0000000240)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000000)={{}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}}) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002e"], 0x44}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r12, &(0x7f00000063c0)=[{{&(0x7f0000004300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x30}}], 0x1, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10) unshare(0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080), 0xfffffffffffffffd, 0xffff, r0}, 0x38) ioctl$FS_IOC_GETFSLABEL(r10, 0x81009431, &(0x7f00000004c0)) 933.161874ms ago: executing program 1 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="84d53447b56a01", 0xfdef}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x30}, &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000006800090300000000000000000a0000000000000008000500", @ANYRES32=r2, @ANYBLOB="0800010001"], 0x28}}, 0x50) 931.719686ms ago: executing program 4 (id=946): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x23, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 428.443µs ago: executing program 1 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa3, 0xa3, 0xa, [@fwd={0x6}, @enum={0xc, 0x9, 0x0, 0x6, 0x4, [{0x9, 0x268}, {0xc, 0xa}, {0x8, 0x4}, {0x10, 0x9}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x3}, {0x1, 0x2}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x33}, @typedef={0xe}, @datasec={0x1, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x9, 0x5}, {0x4, 0x4, 0x101}], "749ea6"}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e, 0x10, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000080)=""/1, 0xc6, 0x1, 0x1, 0x8}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1f, '\x00', r3, r4, 0x0, 0x3, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 0s ago: executing program 3 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.936804][ T2964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.051353][ T2964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.104764][T10421] team0: Port device team_slave_0 added [ 286.112334][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.120504][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.151047][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.168251][T10484] pim6reg: entered allmulticast mode [ 286.192058][T10448] chnl_net:caif_netlink_parms(): no params data found [ 286.214239][T10486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1244'. [ 286.283792][T10421] team0: Port device team_slave_1 added [ 286.508344][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.515308][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.599585][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.678304][T10434] hsr_slave_0: entered promiscuous mode [ 286.684953][T10434] hsr_slave_1: entered promiscuous mode [ 286.692825][T10434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.701728][T10434] Cannot create hsr debugfs directory [ 286.734923][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.753338][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.794539][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.824909][T10482] pim6reg: left allmulticast mode [ 286.910971][T10448] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.926222][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.937450][T10448] bridge_slave_0: entered allmulticast mode [ 286.957997][T10448] bridge_slave_0: entered promiscuous mode [ 286.988450][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.005880][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.024144][T10499] netlink: 460 bytes leftover after parsing attributes in process `syz.0.1245'. [ 287.026247][T10448] bridge_slave_1: entered allmulticast mode [ 287.050277][T10448] bridge_slave_1: entered promiscuous mode [ 287.087584][ T5239] Bluetooth: hci3: command tx timeout [ 287.163516][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.185164][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.531382][ T2964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.565761][T10448] team0: Port device team_slave_0 added [ 287.583406][T10421] hsr_slave_0: entered promiscuous mode [ 287.591955][T10421] hsr_slave_1: entered promiscuous mode [ 287.598861][T10421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.606506][T10421] Cannot create hsr debugfs directory [ 287.647268][ T5239] Bluetooth: hci7: command tx timeout [ 287.647397][T10448] team0: Port device team_slave_1 added [ 287.699556][ T2964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.755824][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.767330][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.793962][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.814766][ T5239] Bluetooth: hci6: command tx timeout [ 287.880300][ T2964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.917154][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.924884][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.957163][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.034849][ T2964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.079692][T10448] hsr_slave_0: entered promiscuous mode [ 288.092670][T10448] hsr_slave_1: entered promiscuous mode [ 288.101283][T10448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.108996][T10448] Cannot create hsr debugfs directory [ 288.321679][ T2964] bridge_slave_1: left allmulticast mode [ 288.327673][ T2964] bridge_slave_1: left promiscuous mode [ 288.333996][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.344372][ T2964] bridge_slave_0: left allmulticast mode [ 288.350605][ T2964] bridge_slave_0: left promiscuous mode [ 288.356402][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.385375][ T2964] bridge_slave_1: left allmulticast mode [ 288.391357][ T2964] bridge_slave_1: left promiscuous mode [ 288.417336][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.428020][ T2964] bridge_slave_0: left allmulticast mode [ 288.433801][ T2964] bridge_slave_0: left promiscuous mode [ 288.439874][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.175683][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.184532][ T5239] Bluetooth: hci3: command tx timeout [ 289.197035][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.211079][ T2964] bond0 (unregistering): Released all slaves [ 289.344857][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.356256][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.376518][ T2964] bond0 (unregistering): Released all slaves [ 289.629766][T10515] sctp: [Deprecated]: syz.1.1250 (pid 10515) Use of int in max_burst socket option. [ 289.629766][T10515] Use struct sctp_assoc_value instead [ 289.727553][ T5239] Bluetooth: hci7: command tx timeout [ 289.887035][ T5239] Bluetooth: hci6: command tx timeout [ 291.809781][ T5239] Bluetooth: hci7: command tx timeout [ 292.466523][ T2964] hsr_slave_0: left promiscuous mode [ 292.497378][ T2964] hsr_slave_1: left promiscuous mode [ 292.512240][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.520017][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.537991][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.545449][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.559847][ T2964] hsr_slave_0: left promiscuous mode [ 292.565988][ T2964] hsr_slave_1: left promiscuous mode [ 292.573155][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.581965][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.590843][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.598489][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.643569][ T2964] veth1_macvtap: left promiscuous mode [ 292.649314][ T2964] veth0_macvtap: left promiscuous mode [ 292.654871][ T2964] veth1_vlan: left promiscuous mode [ 292.661162][ T2964] veth0_vlan: left promiscuous mode [ 292.668694][ T2964] veth1_macvtap: left promiscuous mode [ 292.674286][ T2964] veth0_macvtap: left promiscuous mode [ 292.681038][ T2964] veth1_vlan: left promiscuous mode [ 292.686576][ T2964] veth0_vlan: left promiscuous mode [ 293.364966][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 293.429180][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 294.336175][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 294.388302][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 294.841454][T10421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.937095][T10421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.965545][T10421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.008877][T10421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.276675][T10536] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1256'. [ 295.287487][T10536] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1256'. [ 295.347268][T10421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.391413][T10421] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.442300][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.449509][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.479565][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.486738][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.679742][T10448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.736238][T10448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.827692][T10448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.868322][T10448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.976230][T10434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.000641][T10434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.030960][T10434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.054034][T10434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.192279][T10421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.447672][T10421] veth0_vlan: entered promiscuous mode [ 296.562918][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.631182][T10421] veth1_vlan: entered promiscuous mode [ 296.654645][T10448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.748758][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.805411][T10448] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.869826][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.877053][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.959239][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.966560][ T8776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.040274][T10421] veth0_macvtap: entered promiscuous mode [ 297.069651][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.076822][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.141606][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.148870][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.232951][T10421] veth1_macvtap: entered promiscuous mode [ 297.378381][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.389521][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.402506][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.414009][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.424800][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.435826][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.465658][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.488457][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.506933][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.518258][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.530388][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.579417][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.607358][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.624849][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.635951][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.646470][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.666172][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.676746][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.687746][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.701538][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.719806][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.739836][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.764379][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.776418][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.802078][T10421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.821167][T10421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.832211][T10421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.849940][T10421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.899795][T10448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.132874][ T8776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.167608][ T8776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.262355][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.279807][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.291629][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.564156][T10434] veth0_vlan: entered promiscuous mode [ 298.591973][T10448] veth0_vlan: entered promiscuous mode [ 298.630113][T10448] veth1_vlan: entered promiscuous mode [ 298.638147][T10434] veth1_vlan: entered promiscuous mode [ 298.720297][T10434] veth0_macvtap: entered promiscuous mode [ 298.736714][T10434] veth1_macvtap: entered promiscuous mode [ 298.776261][T10448] veth0_macvtap: entered promiscuous mode [ 298.779271][T10582] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1264'. [ 298.794426][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.809698][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.830653][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.841680][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.853791][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.865453][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.875565][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.886643][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.896640][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.907226][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.919525][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.934038][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.945508][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.971214][T10448] veth1_macvtap: entered promiscuous mode [ 298.984159][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.995201][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.005550][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.016763][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.032162][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.043211][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.053527][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.064332][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.077300][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.088704][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.099210][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.110155][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.120573][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.133711][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.148673][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.171590][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.190176][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.213480][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.224989][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.236109][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.246758][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.257611][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.268170][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.278525][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.289565][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.299565][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.310826][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.322975][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.337739][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.359361][T10448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.402911][T10434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.427388][T10434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.436141][T10434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.462089][T10434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.499820][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.510656][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.522183][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.534294][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.548800][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.559503][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.570648][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.583008][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.593479][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.604416][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.614464][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.625100][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.635166][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.646739][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.662111][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.672724][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.684381][T10448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.713936][T10448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.723642][T10448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.733710][T10448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.743130][T10448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.807788][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.814443][ T5239] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 299.906289][ T8778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.914804][ T8778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.020445][ T8776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.041311][ T8778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.049580][ T8776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.053490][ T8778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.112223][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.121513][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.420597][T10604] netlink: 'syz.1.1268': attribute type 12 has an invalid length. [ 300.629769][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.903479][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.036806][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.259977][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.457564][ T11] bridge_slave_1: left allmulticast mode [ 301.463267][ T11] bridge_slave_1: left promiscuous mode [ 301.477093][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.491647][ T11] bridge_slave_0: left allmulticast mode [ 301.507337][ T11] bridge_slave_0: left promiscuous mode [ 301.513206][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.582404][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.595891][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.605748][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.613914][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.623539][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 301.639593][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.877733][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.901235][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.913079][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.933283][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.941677][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 301.954849][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.153572][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.170893][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.183174][ T11] bond0 (unregistering): Released all slaves [ 302.945195][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.957003][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.965954][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.975955][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.988411][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 302.996359][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.245472][T10635] netlink: 'syz.1.1274': attribute type 58 has an invalid length. [ 303.266180][T10635] delete_channel: no stack [ 303.456444][T10609] chnl_net:caif_netlink_parms(): no params data found [ 303.543582][ T11] hsr_slave_0: left promiscuous mode [ 303.557476][ T11] hsr_slave_1: left promiscuous mode [ 303.577731][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.585237][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.594484][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.602174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.632633][ T11] veth1_macvtap: left promiscuous mode [ 303.640669][ T11] veth0_macvtap: left promiscuous mode [ 303.646455][ T11] veth1_vlan: left promiscuous mode [ 303.652640][ T11] veth0_vlan: left promiscuous mode [ 303.728916][ T5237] Bluetooth: hci3: command tx timeout [ 304.054443][ T5237] Bluetooth: hci6: command tx timeout [ 304.207800][ T5239] Bluetooth: hci8: command 0x0406 tx timeout [ 304.244634][ T11] team0 (unregistering): Port device team_slave_1 removed [ 304.293669][ T11] team0 (unregistering): Port device team_slave_0 removed [ 305.072403][T10660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1278'. [ 305.082205][T10660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1278'. [ 305.094281][ T5230] Bluetooth: hci7: command tx timeout [ 305.294072][T10661] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1278'. [ 305.376480][T10612] chnl_net:caif_netlink_parms(): no params data found [ 305.406009][T10609] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.422980][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.437616][T10609] bridge_slave_0: entered allmulticast mode [ 305.457555][T10609] bridge_slave_0: entered promiscuous mode [ 305.466263][T10609] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.479421][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.495743][T10609] bridge_slave_1: entered allmulticast mode [ 305.508945][T10609] bridge_slave_1: entered promiscuous mode [ 305.546210][T10665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1279'. [ 305.632309][T10609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.723977][T10609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.807987][ T5230] Bluetooth: hci3: command tx timeout [ 305.868796][T10609] team0: Port device team_slave_0 added [ 305.916815][T10609] team0: Port device team_slave_1 added [ 306.127539][ T5230] Bluetooth: hci6: command tx timeout [ 306.164836][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.303741][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.325186][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.332832][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.341190][T10612] bridge_slave_0: entered allmulticast mode [ 306.349212][T10612] bridge_slave_0: entered promiscuous mode [ 306.371168][T10609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.380595][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.409502][T10609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.423016][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.432032][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.441884][T10612] bridge_slave_1: entered allmulticast mode [ 306.461749][T10612] bridge_slave_1: entered promiscuous mode [ 306.498751][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.522061][T10626] chnl_net:caif_netlink_parms(): no params data found [ 306.534829][T10609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.542339][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.576941][T10609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.690712][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.721430][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.765568][T10609] hsr_slave_0: entered promiscuous mode [ 306.772845][T10609] hsr_slave_1: entered promiscuous mode [ 306.779338][T10609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.789222][T10609] Cannot create hsr debugfs directory [ 306.797794][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.028349][T10612] team0: Port device team_slave_0 added [ 307.051114][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 307.109835][T10612] team0: Port device team_slave_1 added [ 307.157456][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.164706][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.175648][T10626] bridge_slave_0: entered allmulticast mode [ 307.183476][T10626] bridge_slave_0: entered promiscuous mode [ 307.198156][ T5230] Bluetooth: hci7: command tx timeout [ 307.254808][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.262468][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.289829][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.305082][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.328058][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.347563][T10626] bridge_slave_1: entered allmulticast mode [ 307.354399][T10626] bridge_slave_1: entered promiscuous mode [ 307.435261][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.443037][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.470513][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.555129][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 307.589715][T10699] bond1: entered allmulticast mode [ 307.665829][T10702] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1286'. [ 307.671217][T10626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.675269][T10702] netlink: 'syz.0.1286': attribute type 2 has an invalid length. [ 307.692130][T10702] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1286'. [ 307.819709][T10626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.888070][ T5230] Bluetooth: hci3: command tx timeout [ 307.898148][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.920872][T10708] bond0: (slave syz_tun): Releasing backup interface [ 307.950963][T10708] bridge_slave_0: left allmulticast mode [ 307.956659][T10708] bridge_slave_0: left promiscuous mode [ 307.964155][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.976381][T10708] bridge_slave_1: left allmulticast mode [ 307.986141][T10708] bridge_slave_1: left promiscuous mode [ 307.993653][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.007659][T10708] bond0: (slave bond_slave_0): Releasing backup interface [ 308.028521][T10708] bond0: (slave bond_slave_1): Releasing backup interface [ 308.088451][T10708] team0: Port device team_slave_0 removed [ 308.102212][T10708] team0: Port device team_slave_1 removed [ 308.118357][T10708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.126624][T10708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.137732][T10708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.174127][T10612] hsr_slave_0: entered promiscuous mode [ 308.188691][T10612] hsr_slave_1: entered promiscuous mode [ 308.205073][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.213133][ T5230] Bluetooth: hci6: command tx timeout [ 308.221392][T10612] Cannot create hsr debugfs directory [ 308.313142][T10704] team0: Port device wg2 added [ 308.360046][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.386737][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 308.434698][T10626] team0: Port device team_slave_0 added [ 308.491957][T10626] team0: Port device team_slave_1 added [ 308.536031][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.699765][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.750116][T10626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.760301][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.790475][T10626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.803103][T10717] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.837698][T10626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.844859][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.905390][T10626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.078640][T10626] hsr_slave_0: entered promiscuous mode [ 309.096812][T10626] hsr_slave_1: entered promiscuous mode [ 309.111684][T10626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.121073][T10626] Cannot create hsr debugfs directory [ 309.260765][ T5230] Bluetooth: hci7: command tx timeout [ 309.275000][T10609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.301193][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 309.315643][ T11] bridge_slave_1: left allmulticast mode [ 309.322524][ T11] bridge_slave_1: left promiscuous mode [ 309.329191][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.339673][ T11] bridge_slave_0: left allmulticast mode [ 309.345413][ T11] bridge_slave_0: left promiscuous mode [ 309.352729][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.365219][ T11] bridge_slave_1: left allmulticast mode [ 309.373937][ T11] bridge_slave_1: left promiscuous mode [ 309.380345][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.391379][ T11] bridge_slave_0: left allmulticast mode [ 309.398429][ T11] bridge_slave_0: left promiscuous mode [ 309.404245][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.978168][ T5230] Bluetooth: hci3: command tx timeout [ 310.231784][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.243222][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.255411][ T11] bond0 (unregistering): Released all slaves [ 310.289753][ T5230] Bluetooth: hci6: command tx timeout [ 310.407638][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.446308][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.454158][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 310.471857][ T11] bond0 (unregistering): Released all slaves [ 310.516466][T10609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.558117][T10609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.594278][T10609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.170278][T10609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.246024][T10609] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.265561][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.272772][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.340260][ T5230] Bluetooth: hci7: command tx timeout [ 311.524832][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.532052][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.647636][ T11] hsr_slave_0: left promiscuous mode [ 311.661985][ T11] hsr_slave_1: left promiscuous mode [ 311.669147][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.676616][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.692314][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.702238][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.719167][ T11] hsr_slave_0: left promiscuous mode [ 311.730132][ T11] hsr_slave_1: left promiscuous mode [ 311.749251][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.756766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.766225][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.778755][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.804333][T10753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1303'. [ 311.833651][ T11] veth1_macvtap: left promiscuous mode [ 311.840006][ T11] veth0_macvtap: left promiscuous mode [ 311.845990][ T11] veth1_vlan: left promiscuous mode [ 311.851993][ T11] veth0_vlan: left promiscuous mode [ 311.861384][ T11] veth1_macvtap: left promiscuous mode [ 311.867091][ T11] veth0_macvtap: left promiscuous mode [ 311.872794][ T11] veth1_vlan: left promiscuous mode [ 311.879005][ T11] veth0_vlan: left promiscuous mode [ 311.996060][T10749] netlink: 'syz.0.1302': attribute type 3 has an invalid length. [ 312.023301][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 312.053917][T10749] netlink: 'syz.0.1302': attribute type 3 has an invalid length. [ 312.101591][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 312.659080][ T11] team0 (unregistering): Port device team_slave_1 removed [ 312.705972][ T11] team0 (unregistering): Port device team_slave_0 removed [ 313.610074][ T11] team0 (unregistering): Port device team_slave_1 removed [ 313.670165][ T11] team0 (unregistering): Port device team_slave_0 removed [ 314.216013][T10609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.249377][T10609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.375877][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 314.625244][T10609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.677232][T10612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.727970][T10612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.805712][T10612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.840548][T10609] veth0_vlan: entered promiscuous mode [ 314.847660][T10612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.890355][T10609] veth1_vlan: entered promiscuous mode [ 314.932527][T10626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.978126][T10626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.039237][T10626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.076053][T10626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.181587][T10609] veth0_macvtap: entered promiscuous mode [ 315.204104][T10609] veth1_macvtap: entered promiscuous mode [ 315.230749][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.242064][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.253851][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.265383][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.276266][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.287935][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.298523][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.313532][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.342698][T10609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.401828][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.432866][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.451592][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.466314][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.497127][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.516756][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.537848][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.557111][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.577842][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.588719][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.598731][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.609315][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.622749][T10609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.699514][T10609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.723213][T10609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.732565][T10609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.741738][T10609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.958468][T10626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.981777][T10612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.020027][ T8773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.023872][T10612] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.035618][ T8773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.071141][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.078336][ T8779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.105492][T10626] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.123810][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.131034][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.146092][ T8773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.174391][ T8773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.187879][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.195042][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.229822][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.237010][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.553205][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.661633][T10612] veth0_vlan: entered promiscuous mode [ 316.699022][T10612] veth1_vlan: entered promiscuous mode [ 316.773897][T10626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.800663][T10612] veth0_macvtap: entered promiscuous mode [ 316.895772][T10612] veth1_macvtap: entered promiscuous mode [ 316.961497][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.985894][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.999995][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.011535][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.022113][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.033050][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.043384][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.063202][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.074030][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.084948][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.099912][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.114527][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.147345][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.165016][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.177319][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.188146][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.219305][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.229969][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.240955][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.252281][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.265002][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.275159][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.285848][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.296093][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.306568][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.318532][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.362137][T10612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.375298][T10612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.384604][T10612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.393868][T10612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.405242][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'. [ 319.058574][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.071709][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.081114][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.103724][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.121872][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.134148][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.214084][ T8772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.264105][T10626] veth0_vlan: entered promiscuous mode [ 319.281054][ T8774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.284740][T10626] veth1_vlan: entered promiscuous mode [ 319.327139][ T8774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.389553][T10626] veth0_macvtap: entered promiscuous mode [ 319.404065][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.426236][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.527055][ T8772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.555754][T10626] veth1_macvtap: entered promiscuous mode [ 319.711447][ T8772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.761061][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.772576][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.784693][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.797764][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.808834][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.823032][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.833661][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.844740][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.855393][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.866370][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.876979][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.885969][T10818] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1315'. [ 319.890123][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.910130][T10626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.927790][T10818] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.980029][ T8772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.093377][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.104361][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.114752][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.126737][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.140875][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.152589][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.162557][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.182532][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.192699][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.203388][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.214230][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.224755][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.237769][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.248483][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.259500][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.270110][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.281798][T10626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.295924][T10626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.304836][T10626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.314048][T10626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.322989][T10626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.662114][T10808] chnl_net:caif_netlink_parms(): no params data found [ 320.849969][ T8772] bridge_slave_1: left allmulticast mode [ 320.855659][ T8772] bridge_slave_1: left promiscuous mode [ 320.862507][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.873414][ T8772] bridge_slave_0: left allmulticast mode [ 320.880257][ T8772] bridge_slave_0: left promiscuous mode [ 320.886071][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.177868][ T5239] Bluetooth: hci3: command tx timeout [ 321.332611][ T8772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.344134][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.359101][ T8772] bond0 (unregistering): Released all slaves [ 321.389279][ T8776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.397904][ T8776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.427102][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.434348][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.441711][T10808] bridge_slave_0: entered allmulticast mode [ 321.450186][T10808] bridge_slave_0: entered promiscuous mode [ 321.471407][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.481735][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.492331][T10808] bridge_slave_1: entered allmulticast mode [ 321.500712][T10808] bridge_slave_1: entered promiscuous mode [ 321.684767][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.712130][ T8776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.738984][ T8776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.748699][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 321.780756][T10837] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.789860][T10837] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.798793][T10837] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.807908][T10837] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.823879][T10837] vxlan0: entered promiscuous mode [ 321.920840][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.932046][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.940632][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.963351][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.973725][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 321.981761][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.011574][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.236979][T10808] team0: Port device team_slave_0 added [ 322.292763][T10808] team0: Port device team_slave_1 added [ 322.558521][ T8772] hsr_slave_0: left promiscuous mode [ 322.564658][ T8772] hsr_slave_1: left promiscuous mode [ 322.587392][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.594902][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.617872][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.625321][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.672726][ T8772] veth1_macvtap: left promiscuous mode [ 322.678827][ T8772] veth0_macvtap: left promiscuous mode [ 322.695521][ T8772] veth1_vlan: left promiscuous mode [ 322.701772][ T8772] veth0_vlan: left promiscuous mode [ 323.254824][ T5230] Bluetooth: hci3: command tx timeout [ 323.764256][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 323.826560][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 324.047649][ T5230] Bluetooth: hci6: command tx timeout [ 324.502868][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.517089][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.552764][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 324.566962][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.583425][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 324.592313][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 324.605530][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 324.621005][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 324.633922][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 324.678746][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.686414][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.751404][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.001563][T10808] hsr_slave_0: entered promiscuous mode [ 325.011739][T10808] hsr_slave_1: entered promiscuous mode [ 325.018800][T10808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.028308][T10808] Cannot create hsr debugfs directory [ 325.209981][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 325.259183][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1323'. [ 325.328415][ T5239] Bluetooth: hci3: command tx timeout [ 325.363968][ T8772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.423690][T10865] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1323'. [ 325.884998][ T8772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.033489][ T8772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.067944][T10839] chnl_net:caif_netlink_parms(): no params data found [ 326.101417][ T8772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.128358][ T5239] Bluetooth: hci6: command tx timeout [ 326.457750][T10856] chnl_net:caif_netlink_parms(): no params data found [ 326.524468][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.531981][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.539971][T10839] bridge_slave_0: entered allmulticast mode [ 326.547809][T10839] bridge_slave_0: entered promiscuous mode [ 326.555451][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.563935][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.571473][T10839] bridge_slave_1: entered allmulticast mode [ 326.581063][T10839] bridge_slave_1: entered promiscuous mode [ 326.651229][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.687594][ T5239] Bluetooth: hci7: command tx timeout [ 326.699302][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.774661][T10839] team0: Port device team_slave_0 added [ 326.874079][ T8772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.949367][T10839] team0: Port device team_slave_1 added [ 326.956109][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.977574][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.997743][T10856] bridge_slave_0: entered allmulticast mode [ 327.005151][T10856] bridge_slave_0: entered promiscuous mode [ 327.046306][ T8772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.097025][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.104318][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.127184][T10856] bridge_slave_1: entered allmulticast mode [ 327.134124][T10856] bridge_slave_1: entered promiscuous mode [ 327.163186][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.174205][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.202545][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.232984][ T8772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.306689][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.349780][T10808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.398045][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.405031][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.482555][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.547881][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.610865][ T5239] Bluetooth: hci3: command tx timeout [ 327.634704][ T8772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.656203][T10808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.669832][T10808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.762136][T10856] team0: Port device team_slave_0 added [ 327.778234][T10808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.817133][T10839] hsr_slave_0: entered promiscuous mode [ 327.827710][T10839] hsr_slave_1: entered promiscuous mode [ 327.834176][T10839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.841997][T10839] Cannot create hsr debugfs directory [ 327.867870][T10856] team0: Port device team_slave_1 added [ 327.935731][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.943393][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.971172][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.984140][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.991245][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.019826][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.076977][T10898] veth0_vlan: entered allmulticast mode [ 328.214477][ T5239] Bluetooth: hci6: command tx timeout [ 328.319383][T10856] hsr_slave_0: entered promiscuous mode [ 328.330926][T10856] hsr_slave_1: entered promiscuous mode [ 328.348009][T10856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.355629][T10856] Cannot create hsr debugfs directory [ 328.363927][ T8772] bridge_slave_1: left allmulticast mode [ 328.377419][ T8772] bridge_slave_1: left promiscuous mode [ 328.383233][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.393190][ T8772] bridge_slave_0: left allmulticast mode [ 328.400193][ T8772] bridge_slave_0: left promiscuous mode [ 328.405957][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.432373][ T8772] bridge_slave_1: left allmulticast mode [ 328.446942][ T8772] bridge_slave_1: left promiscuous mode [ 328.452712][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.463113][ T8772] bridge_slave_0: left allmulticast mode [ 328.469685][ T8772] bridge_slave_0: left promiscuous mode [ 328.475387][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.782006][ T5239] Bluetooth: hci7: command tx timeout [ 329.195223][ T8772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.206549][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.220526][ T8772] bond0 (unregistering): Released all slaves [ 329.352621][ T8772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.368119][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.389379][ T8772] bond0 (unregistering): Released all slaves [ 329.583121][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1333'. [ 329.594285][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'. [ 329.726275][T10919] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1334'. [ 330.133345][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 330.154459][T10921] ip6gretap0: entered promiscuous mode [ 330.223097][T10808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.280945][T10808] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.288364][ T5239] Bluetooth: hci6: command tx timeout [ 330.444263][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.451454][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.502703][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.509911][ T8779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.651591][ T8772] hsr_slave_0: left promiscuous mode [ 330.667761][ T8772] hsr_slave_1: left promiscuous mode [ 330.676386][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.685275][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.697359][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.705165][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.737696][ T8772] hsr_slave_0: left promiscuous mode [ 330.752008][ T8772] hsr_slave_1: left promiscuous mode [ 330.758447][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.765930][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.793909][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.817094][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.857393][ T5239] Bluetooth: hci7: command tx timeout [ 330.918538][ T8772] veth1_macvtap: left promiscuous mode [ 330.924133][ T8772] veth0_macvtap: left promiscuous mode [ 330.957226][ T8772] veth1_vlan: left promiscuous mode [ 330.962636][ T8772] veth0_vlan: left promiscuous mode [ 330.980519][ T8772] veth1_macvtap: left promiscuous mode [ 330.986105][ T8772] veth0_macvtap: left promiscuous mode [ 330.997332][ T8772] veth1_vlan: left promiscuous mode [ 331.002711][ T8772] veth0_vlan: left promiscuous mode [ 331.659192][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 331.705485][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 332.606086][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 332.656678][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 332.927475][ T5239] Bluetooth: hci7: command tx timeout [ 333.107648][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'. [ 333.130121][T10928] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 333.480200][T10839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.529673][T10839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.573751][T10839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.601519][T10839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.781599][T10808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.830236][T10856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.884696][T10856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.912932][T10856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.927968][T10953] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1342'. [ 333.933816][T10856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.998260][T10951] batadv_slave_1: entered promiscuous mode [ 334.033808][T10839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.103139][T10958] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1343'. [ 334.136469][T10839] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.200218][T10808] veth0_vlan: entered promiscuous mode [ 334.219010][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.226149][ T8779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.294827][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.301992][ T8779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.381394][T10808] veth1_vlan: entered promiscuous mode [ 334.498316][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.550722][T10808] veth0_macvtap: entered promiscuous mode [ 334.572907][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.593986][T10808] veth1_macvtap: entered promiscuous mode [ 334.644749][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.651908][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.676995][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.684237][ T8772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.719381][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.746733][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.757763][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.771587][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.782047][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.792939][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.806703][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.820807][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.833556][T10808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.844399][T10950] batadv_slave_1: left promiscuous mode [ 334.891516][T10839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.904561][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.920945][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.933765][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.960993][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.977481][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.988550][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.998887][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.009814][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.019752][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.030249][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.042109][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.053478][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.065574][T10808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.096167][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 335.124186][T10808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.134346][T10808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.143613][T10808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.152648][T10808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.305618][T10856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.385724][T10839] veth0_vlan: entered promiscuous mode [ 335.403674][T10973] netlink: 'syz.1.1348': attribute type 10 has an invalid length. [ 335.435614][T10839] veth1_vlan: entered promiscuous mode [ 335.479804][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.497395][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.553073][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.566801][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.610146][T10839] veth0_macvtap: entered promiscuous mode [ 335.635594][T10839] veth1_macvtap: entered promiscuous mode [ 335.685935][T10978] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 335.708893][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 335.734343][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.754973][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.774380][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.785028][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.796405][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.808361][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.819894][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.830475][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.840880][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.851451][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.863708][T10839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.931105][T10982] netlink: 'syz.0.1347': attribute type 12 has an invalid length. [ 335.959858][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.983509][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.994249][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.006312][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.016505][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.027384][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.039527][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.053191][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.066800][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.078031][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.089363][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.102644][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.113261][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.123984][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.138805][T10839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.146359][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 336.177347][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.185186][T10984] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 336.202145][T10984] team0: Device netdevsim0 is of different type [ 336.249521][T10839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.278506][T10839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.297042][T10839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.308797][T10839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.510311][ T8776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.520856][ T8776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.617143][ T8779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.625015][ T8779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.725818][T10856] veth0_vlan: entered promiscuous mode [ 336.741124][T10856] veth1_vlan: entered promiscuous mode [ 336.920290][T10856] veth0_macvtap: entered promiscuous mode [ 336.951806][T11004] vxcan1: entered allmulticast mode [ 337.135070][ T2964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.162093][T11004] netlink: 'syz.1.1354': attribute type 39 has an invalid length. [ 337.172019][T11004] vxcan1: left allmulticast mode [ 337.187993][T10856] veth1_macvtap: entered promiscuous mode [ 337.248433][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.268247][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.284292][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.294830][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.305183][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.316601][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.337268][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.347827][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.357919][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.368458][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.378355][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.389033][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.400713][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.413730][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.426388][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.439172][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.449735][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.459592][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.471650][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.481550][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.492361][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.503264][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.514169][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.524267][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.537707][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.547758][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.558287][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.569818][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.580740][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.591808][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.615614][T10856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.626202][T10856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.637844][T10856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.646575][T10856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.691936][ T2964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.793617][ T2964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.835923][ T8773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.857055][ T8773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.885290][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.900962][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.922073][ T2964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.093676][ T2964] bridge_slave_1: left allmulticast mode [ 338.101047][ T2964] bridge_slave_1: left promiscuous mode [ 338.106721][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.117726][ T2964] bridge_slave_0: left allmulticast mode [ 338.123435][ T2964] bridge_slave_0: left promiscuous mode [ 338.129660][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.594622][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.603908][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.615047][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.644454][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.667193][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.688042][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.908953][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.922913][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.936311][ T2964] bond0 (unregistering): Released all slaves [ 338.952134][T11012] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 338.961969][T11012] geneve0: entered promiscuous mode [ 339.006064][T11012] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 339.687603][ T2964] hsr_slave_0: left promiscuous mode [ 339.700030][ T2964] hsr_slave_1: left promiscuous mode [ 339.730827][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.746976][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.756798][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.777365][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.859699][ T2964] veth1_macvtap: left promiscuous mode [ 339.865307][ T2964] veth0_macvtap: left promiscuous mode [ 339.892308][ T2964] veth1_vlan: left promiscuous mode [ 339.908736][ T2964] veth0_vlan: left promiscuous mode [ 339.951990][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.962819][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.985145][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.996455][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.004737][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.012206][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.569055][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 340.619415][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 340.768454][ T5230] Bluetooth: hci3: command tx timeout [ 340.960755][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.970093][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.991387][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.024806][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.044638][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.052284][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.326558][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 341.337009][T11029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1359'. [ 341.354986][T11029] vlan2: entered allmulticast mode [ 341.361679][T11029] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 341.421329][T11013] chnl_net:caif_netlink_parms(): no params data found [ 341.658906][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.666172][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.688195][T11013] bridge_slave_0: entered allmulticast mode [ 341.718410][T11013] bridge_slave_0: entered promiscuous mode [ 341.771979][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.780794][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.790995][T11013] bridge_slave_1: entered allmulticast mode [ 341.798588][T11013] bridge_slave_1: entered promiscuous mode [ 341.911397][T11013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.955189][T11013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.047654][ T5239] Bluetooth: hci6: command tx timeout [ 342.110402][T11013] team0: Port device team_slave_0 added [ 342.120295][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 342.163351][T11013] team0: Port device team_slave_1 added [ 342.248307][T11013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.286585][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.328040][T11013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.377621][T11013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.384614][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.425839][T11013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.633589][T11013] hsr_slave_0: entered promiscuous mode [ 342.649041][T11013] hsr_slave_1: entered promiscuous mode [ 342.654585][T11071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.668661][T11013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.676263][T11013] Cannot create hsr debugfs directory [ 342.773117][ T2964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.811835][T11077] FAULT_INJECTION: forcing a failure. [ 342.811835][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 342.847049][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.1.1367 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 342.848549][ T5239] Bluetooth: hci3: command tx timeout [ 342.857843][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 342.857867][T11077] Call Trace: [ 342.857876][T11077] [ 342.857885][T11077] dump_stack_lvl+0x241/0x360 [ 342.857917][T11077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.857936][T11077] ? __pfx__printk+0x10/0x10 [ 342.857957][T11077] ? __pfx_lock_release+0x10/0x10 [ 342.857987][T11077] should_fail_ex+0x3b0/0x4e0 [ 342.858013][T11077] _copy_from_iter+0x1f6/0x1960 [ 342.858037][T11077] ? __pfx_validate_chain+0x10/0x10 [ 342.858066][T11077] ? __pfx__copy_from_iter+0x10/0x10 [ 342.858102][T11077] tun_get_user+0x25f/0x4720 [ 342.858128][T11077] ? __pfx_lock_release+0x10/0x10 [ 342.858159][T11077] ? __lock_acquire+0x137a/0x2040 [ 342.858190][T11077] ? __pfx_tun_get_user+0x10/0x10 [ 342.858230][T11077] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 342.858252][T11077] ? tun_get+0x1e/0x2f0 [ 342.858273][T11077] ? __pfx_lock_release+0x10/0x10 [ 342.858312][T11077] ? tun_get+0x1e/0x2f0 [ 342.858338][T11077] ? tun_get+0x27d/0x2f0 [ 342.858360][T11077] tun_chr_write_iter+0x113/0x1f0 [ 342.858385][T11077] vfs_write+0xa72/0xc90 [ 342.858413][T11077] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 342.858437][T11077] ? __pfx_vfs_write+0x10/0x10 [ 342.858481][T11077] ksys_write+0x1a0/0x2c0 [ 342.858508][T11077] ? __pfx_ksys_write+0x10/0x10 [ 342.858531][T11077] ? do_syscall_64+0x100/0x230 [ 342.858554][T11077] ? do_syscall_64+0xb6/0x230 [ 342.858576][T11077] do_syscall_64+0xf3/0x230 [ 342.858596][T11077] ? clear_bhb_loop+0x35/0x90 [ 342.858623][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.858651][T11077] RIP: 0033:0x7fe42b179e79 [ 342.858670][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.858687][T11077] RSP: 002b:00007fe42bf20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.858710][T11077] RAX: ffffffffffffffda RBX: 00007fe42b315f80 RCX: 00007fe42b179e79 [ 342.858726][T11077] RDX: 0000000000000036 RSI: 0000000020000280 RDI: 0000000000000004 [ 342.858739][T11077] RBP: 00007fe42bf20090 R08: 0000000000000000 R09: 0000000000000000 [ 342.858752][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.858763][T11077] R13: 0000000000000000 R14: 00007fe42b315f80 R15: 00007ffc39cebba8 [ 342.858793][T11077] [ 343.156412][ T2964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.168475][ T5239] Bluetooth: hci7: command tx timeout [ 343.265116][ T2964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.354534][T11037] chnl_net:caif_netlink_parms(): no params data found [ 343.386150][ T2964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.549352][T11032] chnl_net:caif_netlink_parms(): no params data found [ 343.606151][T11098] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 343.614698][T11098] team0: Device ipvlan1 is of different type [ 343.840551][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.848652][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.855931][T11037] bridge_slave_0: entered allmulticast mode [ 343.864492][T11037] bridge_slave_0: entered promiscuous mode [ 343.939407][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.946645][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.954592][T11037] bridge_slave_1: entered allmulticast mode [ 343.966349][T11037] bridge_slave_1: entered promiscuous mode [ 344.061974][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.077882][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.104004][T11110] ip6t_srh: unknown srh match flags 4000 [ 344.107330][T11032] bridge_slave_0: entered allmulticast mode [ 344.128225][T11032] bridge_slave_0: entered promiscuous mode [ 344.128391][ T5239] Bluetooth: hci6: command tx timeout [ 344.151419][T11032] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.175069][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.189304][T11032] bridge_slave_1: entered allmulticast mode [ 344.198337][T11032] bridge_slave_1: entered promiscuous mode [ 344.239481][T11037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.322291][ T2964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.344727][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 344.399425][T11037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.490940][ T2964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.711109][T11032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.772438][T11032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.830098][ T2964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.859615][T11037] team0: Port device team_slave_0 added [ 344.931673][T11037] team0: Port device team_slave_1 added [ 344.993945][ T2964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.035770][T11032] team0: Port device team_slave_0 added [ 345.056593][T11140] FAULT_INJECTION: forcing a failure. [ 345.056593][T11140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.071579][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.1.1379 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 345.082386][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.092461][T11140] Call Trace: [ 345.095760][T11140] [ 345.098704][T11140] dump_stack_lvl+0x241/0x360 [ 345.103402][T11140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.108618][T11140] ? __pfx__printk+0x10/0x10 [ 345.113234][T11140] ? __pfx_lock_release+0x10/0x10 [ 345.118373][T11140] ? validate_chain+0x11e/0x5900 [ 345.123335][T11140] should_fail_ex+0x3b0/0x4e0 [ 345.128068][T11140] _copy_from_iter+0x1f6/0x1960 [ 345.132939][T11140] ? __pfx_validate_chain+0x10/0x10 [ 345.138162][T11140] ? __pfx__copy_from_iter+0x10/0x10 [ 345.143464][T11140] tun_get_user+0x445/0x4720 [ 345.148069][T11140] ? __lock_acquire+0x137a/0x2040 [ 345.153118][T11140] ? __pfx_tun_get_user+0x10/0x10 [ 345.158168][T11140] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 345.163624][T11140] ? tun_get+0x1e/0x2f0 [ 345.167773][T11140] ? __pfx_lock_release+0x10/0x10 [ 345.172802][T11140] ? tun_get+0x1e/0x2f0 [ 345.176949][T11140] ? tun_get+0x27d/0x2f0 [ 345.181184][T11140] tun_chr_write_iter+0x113/0x1f0 [ 345.186200][T11140] vfs_write+0xa72/0xc90 [ 345.190440][T11140] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 345.195977][T11140] ? __pfx_vfs_write+0x10/0x10 [ 345.200751][T11140] ksys_write+0x1a0/0x2c0 [ 345.205100][T11140] ? __pfx_ksys_write+0x10/0x10 [ 345.209943][T11140] ? do_syscall_64+0x100/0x230 [ 345.214703][T11140] ? do_syscall_64+0xb6/0x230 [ 345.219379][T11140] do_syscall_64+0xf3/0x230 [ 345.223996][T11140] ? clear_bhb_loop+0x35/0x90 [ 345.228702][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.234604][T11140] RIP: 0033:0x7fe42b179e79 [ 345.239021][T11140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.258643][T11140] RSP: 002b:00007fe42bf20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.267056][T11140] RAX: ffffffffffffffda RBX: 00007fe42b315f80 RCX: 00007fe42b179e79 [ 345.275020][T11140] RDX: 0000000000000036 RSI: 0000000020000280 RDI: 0000000000000004 [ 345.282983][T11140] RBP: 00007fe42bf20090 R08: 0000000000000000 R09: 0000000000000000 [ 345.290947][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.298911][T11140] R13: 0000000000000000 R14: 00007fe42b315f80 R15: 00007ffc39cebba8 [ 345.306896][T11140] [ 345.317706][T11037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.324678][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.327296][ T5230] Bluetooth: hci7: command tx timeout [ 345.357006][ T5239] Bluetooth: hci3: command tx timeout [ 345.363293][T11037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.409080][T11032] team0: Port device team_slave_1 added [ 345.447864][T11037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.455833][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.482237][T11037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.593169][T11032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.601995][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.629909][T11032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.679508][T11032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.686517][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.712815][T11032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.745931][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 345.749733][T11037] hsr_slave_0: entered promiscuous mode [ 345.766351][T11037] hsr_slave_1: entered promiscuous mode [ 345.774513][T11037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.782218][T11037] Cannot create hsr debugfs directory [ 345.884343][T11154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'. [ 345.970281][T11013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.983313][ T2964] bridge_slave_1: left allmulticast mode [ 345.989876][ T2964] bridge_slave_1: left promiscuous mode [ 345.995984][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.006466][ T2964] bridge_slave_0: left allmulticast mode [ 346.013199][ T2964] bridge_slave_0: left promiscuous mode [ 346.020756][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.050106][ T2964] bridge_slave_1: left allmulticast mode [ 346.055823][ T2964] bridge_slave_1: left promiscuous mode [ 346.077927][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.098459][ T2964] bridge_slave_0: left allmulticast mode [ 346.104122][ T2964] bridge_slave_0: left promiscuous mode [ 346.110362][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.217630][ T5239] Bluetooth: hci6: command tx timeout [ 346.817951][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.830876][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.844995][ T2964] bond0 (unregistering): Released all slaves [ 346.968582][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.981681][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.994051][ T2964] bond0 (unregistering): Released all slaves [ 347.022849][T11032] hsr_slave_0: entered promiscuous mode [ 347.029484][T11032] hsr_slave_1: entered promiscuous mode [ 347.035576][T11032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.043347][T11032] Cannot create hsr debugfs directory [ 347.052031][T11013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.064366][T11158] netlink: 'syz.1.1384': attribute type 4 has an invalid length. [ 347.093251][T11162] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 347.152576][T11162] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 347.273204][T11013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.307912][T11013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.386381][T11172] netlink: 'syz.0.1387': attribute type 21 has an invalid length. [ 347.402737][T11172] netlink: 'syz.0.1387': attribute type 20 has an invalid length. [ 347.410844][ T5239] Bluetooth: hci3: command tx timeout [ 347.410892][ T5239] Bluetooth: hci7: command tx timeout [ 347.427564][T11172] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.809243][T11183] macvlan2: entered promiscuous mode [ 347.814586][T11183] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 347.823503][T11183] team0: Port device macvlan2 added [ 348.287418][ T5230] Bluetooth: hci6: command tx timeout [ 348.546490][ T2964] hsr_slave_0: left promiscuous mode [ 348.566281][ T2964] hsr_slave_1: left promiscuous mode [ 348.573584][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.583736][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.608485][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.616020][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.630539][ T2964] hsr_slave_0: left promiscuous mode [ 348.647563][ T2964] hsr_slave_1: left promiscuous mode [ 348.654200][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.661913][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.671250][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.678894][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.736713][ T2964] veth1_macvtap: left promiscuous mode [ 348.742505][ T2964] veth0_macvtap: left promiscuous mode [ 348.749033][ T2964] veth1_vlan: left promiscuous mode [ 348.754460][ T2964] veth0_vlan: left promiscuous mode [ 348.772382][ T2964] veth1_macvtap: left promiscuous mode [ 348.780117][ T2964] veth0_macvtap: left promiscuous mode [ 348.785768][ T2964] veth1_vlan: left promiscuous mode [ 348.794514][ T2964] veth0_vlan: left promiscuous mode [ 348.921931][T11193] FAULT_INJECTION: forcing a failure. [ 348.921931][T11193] name failslab, interval 1, probability 0, space 0, times 1 [ 348.971257][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.0.1392 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 348.982089][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 348.992162][T11193] Call Trace: [ 348.995448][T11193] [ 348.998388][T11193] dump_stack_lvl+0x241/0x360 [ 349.003097][T11193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.008319][T11193] ? __pfx__printk+0x10/0x10 [ 349.012919][T11193] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 349.018921][T11193] ? __pfx___might_resched+0x10/0x10 [ 349.024229][T11193] should_fail_ex+0x3b0/0x4e0 [ 349.028928][T11193] should_failslab+0xac/0x100 [ 349.033622][T11193] ? __alloc_skb+0x1c3/0x440 [ 349.038229][T11193] kmem_cache_alloc_node_noprof+0x71/0x320 [ 349.044069][T11193] __alloc_skb+0x1c3/0x440 [ 349.048518][T11193] ? __pfx___alloc_skb+0x10/0x10 [ 349.053485][T11193] ? __pfx___might_resched+0x10/0x10 [ 349.058798][T11193] alloc_skb_with_frags+0xc3/0x770 [ 349.063935][T11193] ? validate_chain+0x11e/0x5900 [ 349.068900][T11193] sock_alloc_send_pskb+0x91a/0xa60 [ 349.074149][T11193] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 349.079901][T11193] ? iov_iter_advance+0x8f/0x1b0 [ 349.084865][T11193] tun_get_user+0xcf3/0x4720 [ 349.089493][T11193] ? __lock_acquire+0x137a/0x2040 [ 349.094546][T11193] ? __pfx_tun_get_user+0x10/0x10 [ 349.099607][T11193] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 349.105089][T11193] ? tun_get+0x1e/0x2f0 [ 349.109264][T11193] ? __pfx_lock_release+0x10/0x10 [ 349.114324][T11193] ? tun_get+0x1e/0x2f0 [ 349.118497][T11193] ? tun_get+0x27d/0x2f0 [ 349.122755][T11193] tun_chr_write_iter+0x113/0x1f0 [ 349.127799][T11193] vfs_write+0xa72/0xc90 [ 349.132066][T11193] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 349.137635][T11193] ? __pfx_vfs_write+0x10/0x10 [ 349.142442][T11193] ksys_write+0x1a0/0x2c0 [ 349.146799][T11193] ? __pfx_ksys_write+0x10/0x10 [ 349.151661][T11193] ? do_syscall_64+0x100/0x230 [ 349.156451][T11193] ? do_syscall_64+0xb6/0x230 [ 349.161148][T11193] do_syscall_64+0xf3/0x230 [ 349.165673][T11193] ? clear_bhb_loop+0x35/0x90 [ 349.170378][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.176288][T11193] RIP: 0033:0x7f252db79e79 [ 349.180709][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.200319][T11193] RSP: 002b:00007f252e9ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.208766][T11193] RAX: ffffffffffffffda RBX: 00007f252dd16130 RCX: 00007f252db79e79 [ 349.216763][T11193] RDX: 0000000000000036 RSI: 0000000020000280 RDI: 0000000000000004 [ 349.224760][T11193] RBP: 00007f252e9ea090 R08: 0000000000000000 R09: 0000000000000000 [ 349.232751][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.240739][T11193] R13: 0000000000000000 R14: 00007f252dd16130 R15: 00007ffd952f8aa8 [ 349.248791][T11193] [ 349.490179][ T5230] Bluetooth: hci7: command tx timeout [ 349.838728][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 349.886700][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 350.742090][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 350.793604][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 351.271984][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.302187][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.395777][T11199] delete_channel: no stack [ 351.418086][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.425251][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.475619][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.482847][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.506694][T11032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.538390][T11032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.612796][T11032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.683752][T11032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.018825][T11032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.149238][T11032] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.216780][T11013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.228801][T11037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 352.250214][T11037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.269852][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.277133][ T8772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.325020][T11032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.336569][T11032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.371218][T11037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.395567][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.402801][ T8772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.545565][T11037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.628754][T11013] veth0_vlan: entered promiscuous mode [ 352.741573][T11013] veth1_vlan: entered promiscuous mode [ 352.813418][T11225] x_tables: duplicate underflow at hook 1 [ 352.963680][T11032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.027539][T11013] veth0_macvtap: entered promiscuous mode [ 353.071018][T11013] veth1_macvtap: entered promiscuous mode [ 353.148560][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.173643][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.189759][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.220072][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.243509][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.257466][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.277518][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.288292][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.302934][T11013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.341191][T11037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.361663][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.387056][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.404836][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.424308][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.434652][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.445126][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.455260][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.466556][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.479311][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.489913][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.499884][T11013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.511877][T11013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.523754][T11013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.543290][T11013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.567245][T11013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.575992][T11013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.602721][T11013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.702029][T11037] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.771284][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.778514][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.802241][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 353.828910][T11032] veth0_vlan: entered promiscuous mode [ 353.856119][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.863330][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.934671][ T8773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.941296][T11032] veth1_vlan: entered promiscuous mode [ 353.960448][ T8773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.097851][ T8779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.108326][ T8779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.168157][T11032] veth0_macvtap: entered promiscuous mode [ 354.187846][T11032] veth1_macvtap: entered promiscuous mode [ 354.320808][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.361880][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.371980][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.382734][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.392784][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.403666][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.414022][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.424872][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.449136][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.477213][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.489574][T11032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.565575][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.580114][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.591831][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.602431][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.616895][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.634477][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.644800][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.656081][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.666123][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.677866][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.690861][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.701688][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.711596][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.722312][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.733733][T11032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.750552][T11037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.805639][T11032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.826992][T11032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.835734][T11032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.847528][T11032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.928366][T11037] veth0_vlan: entered promiscuous mode [ 354.975595][T11037] veth1_vlan: entered promiscuous mode [ 355.053770][T11269] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1409'. [ 355.057842][ T8772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.082340][ T8772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.089652][T11269] ax25_connect(): syz.0.1409 uses autobind, please contact jreuter@yaina.de [ 355.111895][T11037] veth0_macvtap: entered promiscuous mode [ 355.125376][T11037] veth1_macvtap: entered promiscuous mode [ 355.274810][ T2964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.337552][T11271] netlink: 'syz.0.1410': attribute type 10 has an invalid length. [ 355.416201][T11271] batman_adv: batadv0: Adding interface: team0 [ 355.423364][T11271] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.455253][T11271] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 355.534589][ T2964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.556200][ T8772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.571440][ T8772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.623387][ T2964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.660291][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.678004][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.690025][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.701045][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.712371][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.723533][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.734513][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.745209][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.755772][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.767834][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.778277][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.789196][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.823067][T11037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.911779][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.923415][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.934375][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.945043][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.956238][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.969868][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.980324][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.991269][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.002072][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.013824][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.024789][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.035503][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.046118][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.070247][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.080602][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.091513][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.103794][T11037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.132659][T11037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.143610][T11037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.154836][T11037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.163802][T11037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.239680][ T2964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.302030][ T8772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.316264][ T8772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.345471][ T8773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.354347][ T8773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.495988][ T2964] bridge_slave_1: left allmulticast mode [ 356.502676][ T2964] bridge_slave_1: left promiscuous mode [ 356.509986][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.520362][ T2964] bridge_slave_0: left allmulticast mode [ 356.526025][ T2964] bridge_slave_0: left promiscuous mode [ 356.534366][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.124788][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.134171][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.143840][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.154784][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.162545][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.171282][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.329793][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.377868][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.413019][ T2964] bond0 (unregistering): Released all slaves [ 357.461629][T11277] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 359.247147][ T5230] Bluetooth: hci3: command tx timeout [ 360.533002][ T5230] Bluetooth: hci9: command 0x0406 tx timeout [ 360.676761][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 360.880791][T11282] netlink: 'syz.0.1411': attribute type 12 has an invalid length. [ 361.327100][ T5230] Bluetooth: hci3: command tx timeout [ 363.407081][ T5230] Bluetooth: hci3: command tx timeout [ 363.987342][T11282] netlink: 'syz.0.1411': attribute type 14 has an invalid length. [ 365.489310][ T5239] Bluetooth: hci3: command tx timeout [ 483.409279][ T5230] Bluetooth: hci3: command 0x0406 tx timeout [ 501.821976][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 501.843999][ T30] Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 501.856864][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.865572][ T30] task:kworker/0:0 state:D stack:22896 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 501.926887][ T30] Workqueue: events switchdev_deferred_process_work [ 501.933561][ T30] Call Trace: [ 501.956869][ T30] [ 501.959860][ T30] __schedule+0x1800/0x4a60 [ 501.964408][ T30] ? __pfx___schedule+0x10/0x10 [ 501.990139][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.996184][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.015116][ T30] ? kick_pool+0x1bd/0x620 [ 502.020226][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.025453][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 502.057727][ T30] ? schedule+0x90/0x320 [ 502.062032][ T30] schedule+0x14b/0x320 [ 502.066207][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.096876][ T30] __mutex_lock+0x6a4/0xd70 [ 502.101452][ T30] ? __mutex_lock+0x527/0xd70 [ 502.106161][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 502.127474][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.132579][ T30] ? process_scheduled_works+0x945/0x1830 [ 502.157337][ T30] switchdev_deferred_process_work+0xe/0x20 [ 502.163372][ T30] process_scheduled_works+0xa2c/0x1830 [ 502.177470][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.183504][ T30] ? assign_work+0x364/0x3d0 [ 502.207994][ T30] worker_thread+0x86d/0xd40 [ 502.212657][ T30] ? __kthread_parkme+0x169/0x1d0 [ 502.219319][ T30] ? __pfx_worker_thread+0x10/0x10 [ 502.224459][ T30] kthread+0x2f0/0x390 [ 502.247314][ T30] ? __pfx_worker_thread+0x10/0x10 [ 502.252542][ T30] ? __pfx_kthread+0x10/0x10 [ 502.267432][ T30] ret_from_fork+0x4b/0x80 [ 502.271898][ T30] ? __pfx_kthread+0x10/0x10 [ 502.276511][ T30] ret_from_fork_asm+0x1a/0x30 [ 502.322263][ T30] [ 502.325446][ T30] INFO: task kworker/u8:8:2964 blocked for more than 143 seconds. [ 502.347036][ T30] Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 502.354722][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.406879][ T30] task:kworker/u8:8 state:D stack:21008 pid:2964 tgid:2964 ppid:2 flags:0x00004000 [ 502.427289][ T30] Workqueue: netns cleanup_net [ 502.432118][ T30] Call Trace: [ 502.435404][ T30] [ 502.446879][ T30] __schedule+0x1800/0x4a60 [ 502.451530][ T30] ? __pfx___schedule+0x10/0x10 [ 502.456411][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.477292][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 502.482806][ T30] ? kthread_data+0x52/0xd0 [ 502.507540][ T30] ? schedule+0x90/0x320 [ 502.511847][ T30] ? wq_worker_sleeping+0x66/0x240 [ 502.536903][ T30] ? schedule+0x90/0x320 [ 502.541202][ T30] schedule+0x14b/0x320 [ 502.545376][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.587297][ T30] __mutex_lock+0x6a4/0xd70 [ 502.591868][ T30] ? __mutex_lock+0x527/0xd70 [ 502.596562][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 502.616882][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.621966][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 502.637545][ T30] ? rcu_is_watching+0x15/0xb0 [ 502.642387][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 502.656882][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 502.662481][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 502.690450][ T30] hwsim_exit_net+0x5c1/0x670 [ 502.695198][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 502.717354][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 502.723236][ T30] cleanup_net+0x802/0xcc0 [ 502.746899][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 502.751912][ T30] ? process_scheduled_works+0x945/0x1830 [ 502.786432][ T30] process_scheduled_works+0xa2c/0x1830 [ 502.817349][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.823424][ T30] ? assign_work+0x364/0x3d0 [ 502.857454][ T30] worker_thread+0x86d/0xd40 [ 502.862132][ T30] ? __kthread_parkme+0x169/0x1d0 [ 502.877261][ T30] ? __pfx_worker_thread+0x10/0x10 [ 502.882427][ T30] kthread+0x2f0/0x390 [ 502.886518][ T30] ? __pfx_worker_thread+0x10/0x10 [ 502.908633][ T30] ? __pfx_kthread+0x10/0x10 [ 502.913299][ T30] ret_from_fork+0x4b/0x80 [ 502.926891][ T30] ? __pfx_kthread+0x10/0x10 [ 502.931540][ T30] ret_from_fork_asm+0x1a/0x30 [ 502.936431][ T30] [ 502.957364][ T30] INFO: task kworker/u8:16:8772 blocked for more than 144 seconds. [ 502.965309][ T30] Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 502.987321][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.996035][ T30] task:kworker/u8:16 state:D stack:20536 pid:8772 tgid:8772 ppid:2 flags:0x00004000 [ 503.037516][ T30] Workqueue: events_unbound linkwatch_event [ 503.043482][ T30] Call Trace: [ 503.046771][ T30] [ 503.088546][ T30] __schedule+0x1800/0x4a60 [ 503.093140][ T30] ? __pfx___schedule+0x10/0x10 [ 503.116974][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.122064][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.156901][ T30] ? kthread_data+0x52/0xd0 [ 503.161470][ T30] ? schedule+0x90/0x320 [ 503.165729][ T30] ? wq_worker_sleeping+0x66/0x240 [ 503.206888][ T30] ? schedule+0x90/0x320 [ 503.211184][ T30] schedule+0x14b/0x320 [ 503.219586][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.225090][ T30] __mutex_lock+0x6a4/0xd70 [ 503.267496][ T30] ? __mutex_lock+0x527/0xd70 [ 503.272240][ T30] ? linkwatch_event+0xe/0x60 [ 503.287271][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.292355][ T30] ? process_scheduled_works+0x945/0x1830 [ 503.306868][ T30] linkwatch_event+0xe/0x60 [ 503.311402][ T30] process_scheduled_works+0xa2c/0x1830 [ 503.337665][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.343724][ T30] ? assign_work+0x364/0x3d0 [ 503.356911][ T30] worker_thread+0x86d/0xd40 [ 503.361568][ T30] ? __kthread_parkme+0x169/0x1d0 [ 503.366618][ T30] ? __pfx_worker_thread+0x10/0x10 [ 503.384741][ T30] kthread+0x2f0/0x390 [ 503.394892][ T30] ? __pfx_worker_thread+0x10/0x10 [ 503.406870][ T30] ? __pfx_kthread+0x10/0x10 [ 503.411508][ T30] ret_from_fork+0x4b/0x80 [ 503.415949][ T30] ? __pfx_kthread+0x10/0x10 [ 503.458631][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.463489][ T30] [ 503.466532][ T30] INFO: task kworker/u8:17:8773 blocked for more than 145 seconds. [ 503.517139][ T30] Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 503.526436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.546873][ T30] task:kworker/u8:17 state:D stack:20240 pid:8773 tgid:8773 ppid:2 flags:0x00004000 [ 503.566888][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 503.573018][ T30] Call Trace: [ 503.576408][ T30] [ 503.588337][ T30] __schedule+0x1800/0x4a60 [ 503.592920][ T30] ? __pfx___schedule+0x10/0x10 [ 503.617242][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.622324][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.656935][ T30] ? kthread_data+0x52/0xd0 [ 503.661515][ T30] ? schedule+0x90/0x320 [ 503.665778][ T30] ? wq_worker_sleeping+0x66/0x240 [ 503.696873][ T30] ? schedule+0x90/0x320 [ 503.701173][ T30] schedule+0x14b/0x320 [ 503.705350][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.743759][ T30] __mutex_lock+0x6a4/0xd70 [ 503.766878][ T30] ? mark_lock+0x9a/0x350 [ 503.771272][ T30] ? __mutex_lock+0x527/0xd70 [ 503.775968][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 503.806882][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.811990][ T30] addrconf_dad_work+0xd0/0x16f0 [ 503.847444][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 503.852973][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.887770][ T30] ? process_scheduled_works+0x945/0x1830 [ 503.893559][ T30] process_scheduled_works+0xa2c/0x1830 [ 503.926948][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.956930][ T30] ? assign_work+0x364/0x3d0 [ 503.961592][ T30] worker_thread+0x86d/0xd40 [ 503.966217][ T30] ? __kthread_parkme+0x169/0x1d0 [ 503.996929][ T30] ? __pfx_worker_thread+0x10/0x10 [ 504.002107][ T30] kthread+0x2f0/0x390 [ 504.006198][ T30] ? __pfx_worker_thread+0x10/0x10 [ 504.027044][ T30] ? __pfx_kthread+0x10/0x10 [ 504.031692][ T30] ret_from_fork+0x4b/0x80 [ 504.047324][ T30] ? __pfx_kthread+0x10/0x10 [ 504.051976][ T30] ret_from_fork_asm+0x1a/0x30 [ 504.056776][ T30] [ 504.067213][ T30] INFO: task syz.0.1411:11283 blocked for more than 145 seconds. [ 504.075378][ T30] Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 504.096937][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.105644][ T30] task:syz.0.1411 state:D stack:26800 pid:11283 tgid:11276 ppid:5225 flags:0x00000004 [ 504.156996][ T30] Call Trace: [ 504.160341][ T30] [ 504.163386][ T30] __schedule+0x1800/0x4a60 [ 504.177300][ T30] ? __pfx___schedule+0x10/0x10 [ 504.182420][ T30] ? __pfx_lock_release+0x10/0x10 [ 504.196923][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 504.202434][ T30] ? schedule+0x90/0x320 [ 504.206696][ T30] schedule+0x14b/0x320 [ 504.226950][ T30] schedule_preempt_disabled+0x13/0x30 [ 504.232471][ T30] __mutex_lock+0x6a4/0xd70 [ 504.247045][ T30] ? __mutex_lock+0x527/0xd70 [ 504.251787][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 504.266927][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 504.272021][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 504.286986][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 504.292156][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.326922][ T30] ? ref_tracker_free+0x643/0x7e0 [ 504.332028][ T30] netlink_rcv_skb+0x1e3/0x430 [ 504.336812][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.372569][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.396941][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.402209][ T30] netlink_unicast+0x7f6/0x990 [ 504.426955][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 504.432304][ T30] ? __virt_addr_valid+0x183/0x530 [ 504.456910][ T30] ? __check_object_size+0x49c/0x900 [ 504.462244][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 504.490126][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 504.494970][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.527549][ T30] ? __import_iovec+0x536/0x820 [ 504.532493][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 504.548679][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 504.554020][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 504.587367][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.592704][ T30] __sock_sendmsg+0x221/0x270 [ 504.618789][ T30] ____sys_sendmsg+0x525/0x7d0 [ 504.623626][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.647323][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 504.655210][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.666897][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.672925][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.697376][ T30] ? exc_page_fault+0x590/0x8c0 [ 504.702286][ T30] ? do_syscall_64+0xb6/0x230 [ 504.717379][ T30] do_syscall_64+0xf3/0x230 [ 504.721932][ T30] ? clear_bhb_loop+0x35/0x90 [ 504.726632][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.747344][ T30] RIP: 0033:0x7f252db79e79 [ 504.754988][ T30] RSP: 002b:00007f252e9a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.797548][ T30] RAX: ffffffffffffffda RBX: 00007f252dd162e0 RCX: 00007f252db79e79 [ 504.805604][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 504.839042][ T30] RBP: 00007f252dbe793e R08: 0000000000000000 R09: 0000000000000000 [ 504.867358][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.875389][ T30] R13: 0000000000000001 R14: 00007f252dd162e0 R15: 00007ffd952f8aa8 [ 504.897446][ T30] [ 504.907393][ T30] INFO: task syz-executor:11278 blocked for more than 146 seconds. [ 504.915344][ T30] Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 504.946889][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.977303][ T30] task:syz-executor state:D stack:24992 pid:11278 tgid:11278 ppid:11273 flags:0x00000000 [ 505.017339][ T30] Call Trace: [ 505.020680][ T30] [ 505.023635][ T30] __schedule+0x1800/0x4a60 [ 505.046897][ T30] ? __pfx___schedule+0x10/0x10 [ 505.051818][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.087025][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 505.092560][ T30] ? schedule+0x90/0x320 [ 505.116946][ T30] schedule+0x14b/0x320 [ 505.121164][ T30] schedule_preempt_disabled+0x13/0x30 [ 505.126639][ T30] __mutex_lock+0x6a4/0xd70 [ 505.170926][ T30] ? __mutex_lock+0x527/0xd70 [ 505.175664][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 505.196910][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 505.202007][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 505.227297][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 505.232472][ T30] ? __lock_acquire+0x137a/0x2040 [ 505.257768][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.277332][ T30] netlink_rcv_skb+0x1e3/0x430 [ 505.282150][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.317321][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.322691][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.336962][ T30] netlink_unicast+0x7f6/0x990 [ 505.341786][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 505.356872][ T30] ? __virt_addr_valid+0x183/0x530 [ 505.362032][ T30] ? __check_object_size+0x49c/0x900 [ 505.376872][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 505.382037][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 505.397325][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.402665][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 505.427353][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 505.432719][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 505.457329][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.462664][ T30] __sock_sendmsg+0x221/0x270 [ 505.486887][ T30] __sys_sendto+0x3a4/0x4f0 [ 505.491463][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 505.496520][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.527292][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 505.533451][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 505.557296][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 505.563687][ T30] __x64_sys_sendto+0xde/0x100 [ 505.586921][ T30] do_syscall_64+0xf3/0x230 [ 505.591483][ T30] ? clear_bhb_loop+0x35/0x90 [ 505.596179][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.617299][ T30] RIP: 0033:0x7fd99617bd0c [ 505.621777][ T30] RSP: 002b:00007ffd6e8fe210 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 505.637322][ T30] RAX: ffffffffffffffda RBX: 00007fd996e44620 RCX: 00007fd99617bd0c [ 505.645515][ T30] RDX: 000000000000002c RSI: 00007fd996e44670 RDI: 0000000000000003 [ 505.696874][ T30] RBP: 0000000000000000 R08: 00007ffd6e8fe264 R09: 000000000000000c [ 505.704993][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 505.747298][ T30] R13: 0000000000000000 R14: 00007fd996e44670 R15: 0000000000000000 [ 505.755461][ T30] [ 505.778036][ T30] [ 505.778036][ T30] Showing all locks held in the system: [ 505.785800][ T30] 3 locks held by kworker/0:0/8: [ 505.827170][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 505.856910][ T30] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 505.907300][ T30] #2: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 505.947587][ T30] 1 lock held by khungtaskd/30: [ 505.952493][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 506.007130][ T30] 3 locks held by kworker/1:2/58: [ 506.012205][ T30] #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 506.047283][ T30] #1: ffffc9000133fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 506.087316][ T30] #2: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 506.116896][ T30] 4 locks held by kworker/u8:8/2964: [ 506.122221][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 506.177150][ T30] #1: ffffc90009f2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 506.217135][ T30] #2: ffffffff8fc780d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 506.226620][ T30] #3: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 506.277335][ T30] 2 locks held by getty/4985: [ 506.282061][ T30] #0: ffff88802c6180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 506.336873][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 506.367611][ T30] 3 locks held by kworker/u8:16/8772: [ 506.373027][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 506.416914][ T30] #1: ffffc900038a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 506.447181][ T30] #2: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 506.456328][ T30] 3 locks held by kworker/u8:17/8773: [ 506.497309][ T30] #0: ffff88802ac5b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 506.527542][ T30] #1: ffffc90003937d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 506.567323][ T30] #2: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 506.576818][ T30] 2 locks held by kworker/u8:19/8776: [ 506.592736][ T30] 1 lock held by syz.0.1411/11276: [ 506.617370][ T30] 1 lock held by syz.0.1411/11280: [ 506.622533][ T30] #0: ffff88802070fc68 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd60/0x1a40 [ 506.668796][ T30] 3 locks held by syz.0.1411/11282: [ 506.674040][ T30] 1 lock held by syz.0.1411/11283: [ 506.697452][ T30] #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 506.727076][ T30] 1 lock held by syz-executor/11278: [ 506.732406][ T30] #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 506.767921][ T30] [ 506.770381][ T30] ============================================= [ 506.770381][ T30] [ 506.797321][ T30] NMI backtrace for cpu 0 [ 506.801706][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 506.812219][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 506.822289][ T30] Call Trace: [ 506.825576][ T30] [ 506.828517][ T30] dump_stack_lvl+0x241/0x360 [ 506.833214][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.838436][ T30] ? __pfx__printk+0x10/0x10 [ 506.843030][ T30] ? vprintk_emit+0x667/0x7c0 [ 506.847722][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 506.852773][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 506.857742][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 506.863218][ T30] ? _printk+0xd5/0x120 [ 506.867390][ T30] ? __pfx__printk+0x10/0x10 [ 506.871989][ T30] ? __wake_up_klogd+0xcc/0x110 [ 506.876851][ T30] ? __pfx__printk+0x10/0x10 [ 506.881451][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 506.886662][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 506.892663][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 506.898672][ T30] watchdog+0xff4/0x1040 [ 506.902951][ T30] ? watchdog+0x1ea/0x1040 [ 506.907402][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.912106][ T30] kthread+0x2f0/0x390 [ 506.916201][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.920898][ T30] ? __pfx_kthread+0x10/0x10 [ 506.925508][ T30] ret_from_fork+0x4b/0x80 [ 506.929944][ T30] ? __pfx_kthread+0x10/0x10 [ 506.934553][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.939346][ T30] [ 506.949357][ T30] Sending NMI from CPU 0 to CPUs 1: [ 506.954622][ C1] NMI backtrace for cpu 1 [ 506.954635][ C1] CPU: 1 UID: 0 PID: 5214 Comm: syz-executor Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 506.954655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 506.954664][ C1] RIP: 0010:__lock_acquire+0xe8f/0x2040 [ 506.954692][ C1] Code: eb 8f 89 d8 25 ff 1f 00 00 c1 eb 03 81 e3 00 60 00 00 09 c3 4c 89 f0 48 c1 e8 20 29 c3 89 c1 c1 c1 04 31 d9 44 01 f0 41 29 ce <89> ca c1 c2 06 44 31 f2 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 [ 506.954705][ C1] RSP: 0018:ffffc900034373f0 EFLAGS: 00000012 [ 506.954720][ C1] RAX: 000000002ffad9ca RBX: 00000000bd27fd68 RCX: 0000000090a3d6fc [ 506.954735][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 506.954746][ C1] RBP: ffff88807e2b4708 R08: ffffffff93735847 R09: 1ffffffff26e6b08 [ 506.954757][ C1] R10: dffffc0000000000 R11: fffffbfff26e6b09 R12: 0000000000000000 [ 506.954768][ C1] R13: ffff88807e2b46d8 R14: 000000005c7ec015 R15: ffff88807e2b4728 [ 506.954780][ C1] FS: 000055556a8ff500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 506.954794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.954805][ C1] CR2: 0000001b31f20218 CR3: 0000000020978000 CR4: 00000000003506f0 [ 506.954819][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 506.954828][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 506.954838][ C1] Call Trace: [ 506.954844][ C1] [ 506.954850][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 506.954872][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 506.954893][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 506.954921][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 506.954941][ C1] ? nmi_handle+0x14f/0x5a0 [ 506.954956][ C1] ? nmi_handle+0x2a/0x5a0 [ 506.954971][ C1] ? __lock_acquire+0xe8f/0x2040 [ 506.954990][ C1] ? default_do_nmi+0x63/0x160 [ 506.955011][ C1] ? exc_nmi+0x123/0x1f0 [ 506.955030][ C1] ? end_repeat_nmi+0xf/0x53 [ 506.955058][ C1] ? __lock_acquire+0xe8f/0x2040 [ 506.955078][ C1] ? __lock_acquire+0xe8f/0x2040 [ 506.955098][ C1] ? __lock_acquire+0xe8f/0x2040 [ 506.955118][ C1] [ 506.955123][ C1] [ 506.955137][ C1] lock_acquire+0x1ed/0x550 [ 506.955156][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 506.955181][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 506.955200][ C1] ? deref_stack_reg+0x1c7/0x260 [ 506.955225][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 506.955246][ C1] ? deref_stack_reg+0x1c7/0x260 [ 506.955271][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.955291][ C1] is_bpf_text_address+0x46/0x2a0 [ 506.955311][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 506.955331][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 506.955350][ C1] ? is_module_text_address+0x128/0x190 [ 506.955370][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.955389][ C1] kernel_text_address+0xa7/0xe0 [ 506.955406][ C1] __kernel_text_address+0xd/0x40 [ 506.955422][ C1] unwind_get_return_address+0x5d/0xc0 [ 506.955443][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.955463][ C1] arch_stack_walk+0x125/0x1b0 [ 506.955483][ C1] stack_trace_save+0x118/0x1d0 [ 506.955503][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 506.955522][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 506.955540][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 506.955557][ C1] ? __pfx_lock_release+0x10/0x10 [ 506.955579][ C1] kasan_save_track+0x3f/0x80 [ 506.955598][ C1] ? kasan_save_track+0x3f/0x80 [ 506.955616][ C1] ? kasan_save_free_info+0x40/0x50 [ 506.955632][ C1] ? poison_slab_object+0xe0/0x150 [ 506.955651][ C1] ? __kasan_slab_free+0x37/0x60 [ 506.955670][ C1] ? kmem_cache_free+0x145/0x350 [ 506.955685][ C1] ? __dequeue_signal+0x4ac/0x5c0 [ 506.955699][ C1] ? dequeue_signal+0x169/0x5a0 [ 506.955712][ C1] ? get_signal+0x602/0x1740 [ 506.955728][ C1] ? arch_do_signal_or_restart+0x96/0x860 [ 506.955751][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 506.955767][ C1] ? do_syscall_64+0x100/0x230 [ 506.955782][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.955821][ C1] ? __dequeue_signal+0x4ac/0x5c0 [ 506.955835][ C1] kasan_save_free_info+0x40/0x50 [ 506.955851][ C1] poison_slab_object+0xe0/0x150 [ 506.955872][ C1] ? __dequeue_signal+0x4ac/0x5c0 [ 506.955886][ C1] __kasan_slab_free+0x37/0x60 [ 506.955906][ C1] kmem_cache_free+0x145/0x350 [ 506.955924][ C1] __dequeue_signal+0x4ac/0x5c0 [ 506.955942][ C1] dequeue_signal+0x169/0x5a0 [ 506.955959][ C1] ? __pfx_dequeue_signal+0x10/0x10 [ 506.955973][ C1] ? cgroup_freezing+0x20/0x350 [ 506.955992][ C1] ? cgroup_freezing+0x2a8/0x350 [ 506.956011][ C1] ? freezing_slow_path+0x130/0x180 [ 506.956029][ C1] get_signal+0x602/0x1740 [ 506.956053][ C1] ? __pfx_get_signal+0x10/0x10 [ 506.956075][ C1] arch_do_signal_or_restart+0x96/0x860 [ 506.956095][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 506.956114][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.956141][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 506.956158][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 506.956176][ C1] do_syscall_64+0x100/0x230 [ 506.956192][ C1] ? clear_bhb_loop+0x35/0x90 [ 506.956213][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.956232][ C1] RIP: 0033:0x7fefebf78bc9 [ 506.956245][ C1] Code: c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff [ 506.956257][ C1] RSP: 002b:00007ffd7ddaa4e8 EFLAGS: 00000246 [ 506.956270][ C1] RAX: 0000000000000000 RBX: 000055556a918560 RCX: 00007fefebf78bc9 [ 506.956280][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd7ddaa4f8 [ 506.956290][ C1] RBP: 000055556a914700 R08: 000000001ef10080 R09: 7fffffffffffffff [ 506.956301][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.956311][ C1] R13: 0000000000010000 R14: 00007ffd7ddaa5d0 R15: 0000000000000000 [ 506.956329][ C1] [ 507.667051][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 507.673945][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 507.684453][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 507.694511][ T30] Call Trace: [ 507.697792][ T30] [ 507.700723][ T30] dump_stack_lvl+0x241/0x360 [ 507.705426][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.710630][ T30] ? __pfx__printk+0x10/0x10 [ 507.715225][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 507.721224][ T30] ? vscnprintf+0x5d/0x90 [ 507.725567][ T30] panic+0x349/0x860 [ 507.729474][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 507.735644][ T30] ? __pfx_panic+0x10/0x10 [ 507.740060][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 507.745448][ T30] ? __irq_work_queue_local+0x137/0x410 [ 507.751005][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 507.756380][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 507.762542][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 507.768708][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 507.774873][ T30] watchdog+0x1033/0x1040 [ 507.779217][ T30] ? watchdog+0x1ea/0x1040 [ 507.783648][ T30] ? __pfx_watchdog+0x10/0x10 [ 507.788334][ T30] kthread+0x2f0/0x390 [ 507.792420][ T30] ? __pfx_watchdog+0x10/0x10 [ 507.797106][ T30] ? __pfx_kthread+0x10/0x10 [ 507.801708][ T30] ret_from_fork+0x4b/0x80 [ 507.806139][ T30] ? __pfx_kthread+0x10/0x10 [ 507.810746][ T30] ret_from_fork_asm+0x1a/0x30 [ 507.815541][ T30] [ 507.818795][ T30] Kernel Offset: disabled [ 507.823114][ T30] Rebooting in 86400 seconds..