last executing test programs: 1m36.770316682s ago: executing program 4 (id=86): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000100)=0xf11, &(0x7f00000001c0)=0x4) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)=0x0) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x3af4701e) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r6, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept$alg(r7, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002180)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000002280)=0xe8) (async, rerun: 64) sendmsg$unix(r4, &(0x7f0000000140)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}], 0x20}, 0x40001) (async, rerun: 64) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000380)='hybla\x00', 0x6) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x102, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a0066d5059300bfa10000000007010000f8ffffff000008000000b70300000000000085000000ca000000950000000000000000000000e0b26577c26e132dd6896893ede2d61fe6a023f0ef279c35243f0e51341fefc2c3ce5025270939da1519aa9a7d2b5bc97d96daf254175cf5afc15dc8a1ac172748240f23df0d04fdb94a7035ca9224bfc7031bbbedb9ba030100185663e7f762ea93aaf3c0c21d3c0cb061247486799bc45d29d448c62bc8843a643f01f31f9658967fdd1c7ec7414f556841dd6799762ac09b9a"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 1m36.190392486s ago: executing program 4 (id=90): socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000400)='swiotlb_bounced\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) unshare(0x400) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x75845b31285c6e69) sendto$inet(r6, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m34.29448274s ago: executing program 2 (id=100): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006940)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m33.062228471s ago: executing program 2 (id=105): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791230000000000095000000000000005843212744d1d2dd359cf4f781b23212238b25079a0adcc9753b829c3cbed16be337c862ade1c4687def2a9538e8a28a298077db7cd6b3fbfbf5400ae8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x450178c4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1e573922", @ANYRES16=r4, @ANYBLOB="0b052cbd7000fddbdf25020000000800050009000000200002800800040086000000140001007f0000010000000000000000000000000800040001000000080005007e1500000800050005000000480002800800070000000100060002004e20000008000700fdffffff060002004e240000080008000800000006000f000200000014000100"/150, @ANYRES16=r2, @ANYRES16, @ANYRES16=r2], 0x9c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000005) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000150000001e00000008000300", @ANYRES32=r3, @ANYBLOB="04002f80"], 0x20}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000180)="d2ab57c4783527fe45b974de43dabe6c262caed9fd0cc2335eeea05172aaff0c722df9410b02538801000000", 0x2c, 0xf00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd9) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) 1m17.035460733s ago: executing program 4 (id=90): socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000400)='swiotlb_bounced\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) unshare(0x400) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x75845b31285c6e69) sendto$inet(r6, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m10.849691953s ago: executing program 2 (id=105): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791230000000000095000000000000005843212744d1d2dd359cf4f781b23212238b25079a0adcc9753b829c3cbed16be337c862ade1c4687def2a9538e8a28a298077db7cd6b3fbfbf5400ae8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x450178c4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1e573922", @ANYRES16=r4, @ANYBLOB="0b052cbd7000fddbdf25020000000800050009000000200002800800040086000000140001007f0000010000000000000000000000000800040001000000080005007e1500000800050005000000480002800800070000000100060002004e20000008000700fdffffff060002004e240000080008000800000006000f000200000014000100"/150, @ANYRES16=r2, @ANYRES16, @ANYRES16=r2], 0x9c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000005) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000150000001e00000008000300", @ANYRES32=r3, @ANYBLOB="04002f80"], 0x20}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000180)="d2ab57c4783527fe45b974de43dabe6c262caed9fd0cc2335eeea05172aaff0c722df9410b02538801000000", 0x2c, 0xf00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd9) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) 55.300503588s ago: executing program 4 (id=90): socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000400)='swiotlb_bounced\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) unshare(0x400) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x75845b31285c6e69) sendto$inet(r6, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 53.260002797s ago: executing program 2 (id=105): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791230000000000095000000000000005843212744d1d2dd359cf4f781b23212238b25079a0adcc9753b829c3cbed16be337c862ade1c4687def2a9538e8a28a298077db7cd6b3fbfbf5400ae8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x450178c4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1e573922", @ANYRES16=r4, @ANYBLOB="0b052cbd7000fddbdf25020000000800050009000000200002800800040086000000140001007f0000010000000000000000000000000800040001000000080005007e1500000800050005000000480002800800070000000100060002004e20000008000700fdffffff060002004e240000080008000800000006000f000200000014000100"/150, @ANYRES16=r2, @ANYRES16, @ANYRES16=r2], 0x9c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000005) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000150000001e00000008000300", @ANYRES32=r3, @ANYBLOB="04002f80"], 0x20}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000180)="d2ab57c4783527fe45b974de43dabe6c262caed9fd0cc2335eeea05172aaff0c722df9410b02538801000000", 0x2c, 0xf00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd9) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) 34.942620178s ago: executing program 2 (id=105): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791230000000000095000000000000005843212744d1d2dd359cf4f781b23212238b25079a0adcc9753b829c3cbed16be337c862ade1c4687def2a9538e8a28a298077db7cd6b3fbfbf5400ae8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x450178c4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1e573922", @ANYRES16=r4, @ANYBLOB="0b052cbd7000fddbdf25020000000800050009000000200002800800040086000000140001007f0000010000000000000000000000000800040001000000080005007e1500000800050005000000480002800800070000000100060002004e20000008000700fdffffff060002004e240000080008000800000006000f000200000014000100"/150, @ANYRES16=r2, @ANYRES16, @ANYRES16=r2], 0x9c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000005) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000150000001e00000008000300", @ANYRES32=r3, @ANYBLOB="04002f80"], 0x20}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000180)="d2ab57c4783527fe45b974de43dabe6c262caed9fd0cc2335eeea05172aaff0c722df9410b02538801000000", 0x2c, 0xf00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd9) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) 33.798863131s ago: executing program 4 (id=90): socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000400)='swiotlb_bounced\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) unshare(0x400) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x75845b31285c6e69) sendto$inet(r6, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 14.225398491s ago: executing program 2 (id=105): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791230000000000095000000000000005843212744d1d2dd359cf4f781b23212238b25079a0adcc9753b829c3cbed16be337c862ade1c4687def2a9538e8a28a298077db7cd6b3fbfbf5400ae8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x450178c4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1e573922", @ANYRES16=r4, @ANYBLOB="0b052cbd7000fddbdf25020000000800050009000000200002800800040086000000140001007f0000010000000000000000000000000800040001000000080005007e1500000800050005000000480002800800070000000100060002004e20000008000700fdffffff060002004e240000080008000800000006000f000200000014000100"/150, @ANYRES16=r2, @ANYRES16, @ANYRES16=r2], 0x9c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000005) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000150000001e00000008000300", @ANYRES32=r3, @ANYBLOB="04002f80"], 0x20}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000180)="d2ab57c4783527fe45b974de43dabe6c262caed9fd0cc2335eeea05172aaff0c722df9410b02538801000000", 0x2c, 0xf00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd9) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) 13.227220214s ago: executing program 4 (id=90): socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000400)='swiotlb_bounced\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) unshare(0x400) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x75845b31285c6e69) sendto$inet(r6, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.500525078s ago: executing program 1 (id=521): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x330, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x2a4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x198, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xf8, 0x6, [@m_nat={0xf4, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x0, 0x0, 0x0, 0x3}, @empty, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000}, @multicast1, @private, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9}, @private, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, @remote, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x330}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x0, 0x0, 0x3, 0x8, 0xb, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xf}, 0x90) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x1d, &(0x7f0000000000)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="e2", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='-', 0x1}], 0x1}}], 0x2, 0x0) close(r6) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) 3.067707359s ago: executing program 0 (id=523): syz_emit_ethernet(0x9a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @broadcast]}, @noop, @cipso={0x86, 0x1b, 0x3, [{0x2, 0xb, "f3b957b997b0d75d96"}, {0x6, 0xa, "47f40888ba134c3d"}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@multicast1}, {@multicast1}, {@rand_addr=0x64010101}]}]}}}}}}}, 0x0) 2.835827982s ago: executing program 0 (id=524): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00008000000000"], 0x18}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010101}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff80) close(r0) 2.753987169s ago: executing program 3 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x3c, 0x0, @default_ap_ssid}]}]}, 0x60}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x22}]}}}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1, 0x1, 0xca3259cb0dcaf98d, 0x0, 0x0, {0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x7b76bd3c583ddcf1}]}]}, 0x20}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x10002, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r9, 0x0, 0x0}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41b0b2592d6622864a1a31223a29b309c8513f447a49e3ce5e2d008407117fa3fa15ea5cf4554b30bb7ddfd80ffd8aad67ea97050ffa7643a865e506bd7e0c06da58bc54c870c69168d99b0850d0d17a7465782c7d639868211b96b40b47aee184073e750ec604406d1e389ec69f67d047473e1a15afee98f8c2b77a6e786b1ac832cd23ccc5f9461e9d7cc6a170dfedb1f355c9904c88a5c748e25f7d097a0e76e9", @ANYRES32=r12, @ANYRES32=r3], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x54, r11, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80, 0x20}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8, 0x101, 0x7, 0x101, 0x0, 0x3, 0x6, 0x6, 0x2, 0x5, 0x8, 0x0, 0xe00, 0x1, 0x2, 0x2]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000e00000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r14, 0xc020f509, &(0x7f0000000280)={r7, 0x1, 0x9, 0x1}) bind$bt_hci(r16, &(0x7f00000002c0), 0x6) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 2.608405598s ago: executing program 0 (id=526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x851, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x1b4a4fc3}], 0x1, 0x0, 0x46, 0x407006}, 0x75f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124f00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000760602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006502000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) 2.480727176s ago: executing program 1 (id=527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) epoll_create(0x3ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'net_prio'}, {0x2b, 'cpu'}]}, 0xf) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x25, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc71}, [@ldst={0x2, 0x3, 0x0, 0x7, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000840)='GPL\x00', 0x2, 0x56, &(0x7f0000000880)=""/86, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)=[{0x2, 0x1, 0xb, 0x7}, {0x0, 0x2, 0x0, 0x5}], 0x10, 0x3}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={r4, 0x58, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x14, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000080000000002c03000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500f1ff8200007d92ca9466dc12c800000000000000181200007a615f6ed11349937c72a3f1fa7c074e611e6c657fe4196e41e09822851301561ba3234de75ab11ca11efd108aeff12a160868446c3f957876cb750424f0b023128b77dee336dd4942e196aca404af4eebe81dd30e0a53", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001040)='GPL\x00', 0x4, 0xa4, &(0x7f0000001080)=""/164, 0x41100, 0x20, '\x00', r5, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x10, 0x5}, 0x90) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x12, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfcf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x4, 0xc, 0xb, 0xff, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x21e, 0xe6, &(0x7f0000000f40)=""/230, 0x41000, 0x58, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000006c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x9, 0x3d72, 0x7f}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c40)=[{0x1, 0x1, 0x4, 0x4}, {0x1, 0x4, 0x6, 0xb}, {0x0, 0x3, 0x3}, {0x0, 0x1, 0x5, 0xb}, {0x5, 0x3, 0xa, 0xa}, {0x2, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000800)="5c3cb756e38d95a41dc79beb39868e7870f0247a073bc180448e370b52068baf795dd20bf10754b01ec2fcdeedd37a2697cea8ad285316e72102a14eadbc3c3b80a3c48f9b5df50d6b785c353310c39aa3a2699db6fb65b920", &(0x7f0000000180)=""/33}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@enum={0x4, 0x4, 0x0, 0x6, 0x4, [{}, {0x1, 0x4}, {0x4, 0x7f}, {0xa, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, &(0x7f0000000000)=""/144, 0x5e, 0x90, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x8, 0xffffffff, 0x1, 0x7a, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x0, 0xa40f}, 0x48) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73fc}, [@generic={0x9, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000880)='GPL\x00', 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x0, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8, 0x10, 0x0, 0x0, r9}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x3e) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xdc07, 0x1, 0xbf, 0x802, r1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0xc}, 0x48) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7d, 0xfa, 0xffffffffffffffff, 0x1, '\x00', r8, r7, 0x5, 0x5, 0x0, 0x4}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @var={0x10, 0x0, 0x0, 0xe, 0x5}, @fwd={0xc}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x7, 0x2, 0x7ff}}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {0x2, 0x9, 0x4}, {0x1, 0x15efdf73, 0x81}], 'Q'}, @union={0x3, 0x7, 0x0, 0x5, 0x0, 0xfffffffd, [{0x5, 0x5, 0x7fff}, {0x2, 0x2, 0x800}, {0x6, 0x4, 0x4}, {0xd, 0x1, 0x1c}, {0xd, 0x5, 0x400}, {0x0, 0x4, 0x5}, {0x6, 0x4, 0x4}]}]}, {0x0, [0x30, 0x30, 0x71, 0x30]}}, &(0x7f0000000700)=""/136, 0x116, 0x88}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x9}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f00000007c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x90) 2.274187808s ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x4, 0x1, 0x0, 0x1, 0xd9, 0x3}}, {0xa, 0x2, [0x1000, 0x3ff, 0x9]}}, {{0x1c, 0x1, {0x0, 0xff, 0x8e3, 0x0, 0x0, 0xfffffffc, 0x9, 0x9}}, {0x16, 0x2, [0x8001, 0xfff7, 0x0, 0x4, 0x6, 0x8, 0x3, 0x3, 0x4]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7ff, 0x81, 0x1, 0xfffffffc, 0x6, 0x1}}, {0x6, 0x2, [0x938]}}]}]}, 0xa8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(r11, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) listen(0xffffffffffffffff, 0x0) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000080)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r12, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) close(r5) r13 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r13, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18}}], 0x1, 0x0) 2.178114411s ago: executing program 3 (id=529): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040), 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) unshare(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) sendmmsg(r8, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x44, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0xa040200) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2000011a) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.108863982s ago: executing program 1 (id=530): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x50, r5, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in6}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@func, @union={0x9}, @var, @func={0xc, 0x0, 0x0, 0xc, 0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x58}]}, {0x0, [0x30, 0x30, 0x30]}}, &(0x7f00000008c0)=""/227, 0x61, 0xe3, 0x0, 0xb45}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) 1.938049286s ago: executing program 0 (id=531): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000380)=""/69}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be00000000009500000000005cc8"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f256400000005005300010000000800054002"], 0x54}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r2, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x10, 0x29, 0x8}], 0x18}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000004e96ff459ac7f793f7c78a28186613a523807a6984b4140c1b7b32994ba98ca90a011a2afb00cc8b701122794417d146663228f7433001632992ff62e00e1ae7ea1a53e44c00000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="18005a80140001800500010000000000b0ff020000000000"], 0x34}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f00000001c0)={0xff}, 0x1) 1.683877066s ago: executing program 0 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_emit_ethernet(0x112, &(0x7f00000001c0)=ANY=[], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="ff0f0000ffffffffffffaaaaaaaaaabb0806000108000604"], 0x2e) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb88a800008100000008004500002c000060000006"], 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000000000006111280000000010180000000000000000000800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x803}, 0x90) 1.377518113s ago: executing program 3 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="5c00000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c00128008000100677265002000028008000600ac14141c08000700e000030a08000200", @ANYRES32=0x0, @ANYBLOB="04001200080004000500000008000a00b035"], 0x5c}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 798.196593ms ago: executing program 1 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r2, 0x22de7750d68715a3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x2c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 793.05438ms ago: executing program 3 (id=535): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x2000}) r1 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4081) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) socket$inet(0x2, 0x1, 0x61) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x294, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xe, @local, 0x9a0}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c19}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4869}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8bf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ba4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x70}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x39}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4040}, 0x20000010) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2dca475e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000084) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc4f1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4a}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xdd7d}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000a00)={0x7ff, {{0xa, 0x4e23, 0x80, @loopback, 0x4}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3e85}}, {{0xa, 0x4e22, 0x6, @remote, 0x3}}, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}, {{0xa, 0x4e23, 0x6c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf3d0}}]}, 0x310) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r10, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000f40)={&(0x7f0000000e80), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x35ed5fca095d6c2c}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r11, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x20000090) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000001800)=@filter={'filter\x00', 0xe, 0x3, 0x6e2, [0x0, 0x20001100, 0x20001130, 0x20001160], 0x0, &(0x7f00000010c0), &(0x7f0000001100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x12, 0x201, 'lo\x00', 'pim6reg0\x00', 'veth0_virt_wifi\x00', 'geneve0\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xfe, 0x176, 0x1c6, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@empty, [0xffffff, 0xff, 0x0, 0xff], 0x4e23, 0x0, 0x1, 0x4e24, 0x10, 0x4}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0xffffff06, 0x0, 0x881d, 0x81}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x27, 0xff, 0x7976, 0x0, 0x0, "9f7f824fe53a69159004be88ec7a79a95da1fe421799405a46b599e81f69427eed3ca1bc9f5bfc46f202ce6a3b90b8bafcfe6439452587da9a9fdbf978901021"}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x48d, 'syz1\x00', {0x7}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x5, 0x3a, 0x6001, 'dvmrp1\x00', 'sit0\x00', 'virt_wifi0\x00', 'wlan1\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0x0, 0xff], 0x106, 0x106, 0x13e, [@limit={{'limit\x00', 0x0, 0x20}, {{0xffffffff, 0xfffffffc, 0xfff, 0x7, 0xc7a, 0x4}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00'}}}], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}, {0x5, 0x63, 0x15, 'macvlan1\x00', 'bridge0\x00', 'veth0_to_bond\x00', 'ip6erspan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2a6, 0x2ee, 0x31e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x1d, [{0x8000, 0x4, 0x2, 0x7}, {0x80, 0x9, 0x1, 0x4}, {0x0, 0x3, 0x0, 0x6}, {0x1, 0x4, 0x50, 0x2}, {0x0, 0xc5, 0x0, 0x6}, {0xc, 0x3, 0x5, 0x9}, {0x1, 0x1, 0x4, 0x9}, {0x80, 0x5, 0x83, 0x2}, {0x4, 0xb5, 0x6, 0x9}, {0x4, 0x2, 0x4, 0x6}, {0xf52b, 0x7f, 0x9}, {0x9, 0x7, 0x9, 0x7ff}, {0x2e, 0x5, 0x1, 0x401}, {0x1, 0x45, 0x1, 0x3}, {0x60f, 0x5, 0x2}, {0x0, 0xf9, 0x2, 0x10000}, {0x1ff, 0x4, 0x9, 0x2}, {0x7fff, 0x9, 0xf, 0x8}, {0x2, 0xff, 0x1, 0x3}, {0xa, 0x6, 0x9, 0x4}, {0x4, 0xc, 0x0, 0xfffffffc}, {0xf, 0x3, 0x0, 0x6}, {0xfffc, 0xc, 0x7e, 0x8}, {0x6, 0x4e, 0xc, 0x3}, {0x3000, 0xa, 0x9, 0xfffffff9}, {0x3, 0xff, 0x59, 0x80}, {0x3, 0xff, 0x10, 0x6}, {0x400, 0xd, 0x7, 0xc}, {0x1, 0xe, 0x7f, 0x81}, {0x10, 0x2, 0x8, 0x5}, {0x806, 0x7, 0xb, 0x72e}, {0x5, 0x9, 0x0, 0x2be053b1}, {0x800, 0x5, 0x9, 0x5}, {0x9, 0x73, 0x0, 0xf}, {0x5, 0xde, 0x7, 0x6}, {0x7, 0x1, 0x4, 0x9}, {0x0, 0x5, 0x10, 0xfffffffc}, {0x5, 0x5, 0x2, 0x89d3}, {0x800, 0xff, 0x2, 0xffffffff}, {0x9, 0x26, 0x8, 0x80}, {0x8000, 0xf8, 0x0, 0x80000001}, {0x7, 0xc, 0x2, 0x10001}, {0x1, 0x3, 0x7, 0x5}, {0x2, 0x2, 0x0, 0xca}, {0xb, 0x8, 0x78, 0x1}, {0x401, 0x77, 0x2, 0xfffff513}, {0xd, 0x4, 0x6, 0x5}, {0x915f, 0xa, 0x2}, {0x2, 0xa, 0x5, 0x7}, {0x4, 0x1, 0xfa, 0xfffffffa}, {0x2, 0x3, 0x0, 0x4}, {0x6, 0x8, 0x90, 0x400}, {0x61, 0x4, 0xb, 0x8}, {0x8, 0x7, 0x3, 0x5}, {0x9, 0x5, 0x8}, {0x22, 0x4, 0xf5, 0x6}, {0x4, 0x4, 0x2, 0xfffffffa}, {0x5, 0x3, 0x1, 0x8}, {0x6, 0x7c, 0x7, 0x8000}, {0x7, 0xac, 0x9, 0x1}, {0x6, 0x0, 0x6, 0x2}, {0x0, 0x5, 0xf9, 0x5}, {0x91, 0x1, 0x10, 0x1aab4b5f}, {0x0, 0x5, 0xf0, 0x8000}], {0xfffffffffffffa53}}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"dae4efd652ae89a8b9c636bbec08c63e80b43dbe4ca663a84fa6d8fad90d"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}]}, 0x75a) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001d00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001cc0)={&(0x7f00000018c0)={0x3ec, r11, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x81]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x2]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x390, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="c901e217fb0d", {0x2, 0x4}}, @void, @val, @val={0x3, 0x1, 0x5}, @val={0x2d, 0x1a, {0x1, 0x2, 0x0, 0x0, {0x3ff, 0x100, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x7}}, @void, [{0xdd, 0xa3, "ce6856e0c3468be3dc9853276243cd9029b2c51d5f8616b514a98647adea064ee6f5bd2175fe833a99c113e3f3866c28e1d0a02fc3def161e1e83144a70de45cd5d3f72e61cfa7af145ddbf282daf58ce54c40fa439f81f94d0cd3cb5d59b75828a4e48e09118f636bd080cf9066f1fdb1a7ee4544dc417d4fddd9134dd8734d2c6faab564b11ece8490b7bbf64c03246afb12e37bd4126f564db413fceae92c21a777"}, {0xdd, 0xf3, "41354276dc8823ee291f7a4ef0e9dd2b92d093c4a964ff74a1e992e718db1e69f161cde57dc9a4bb52efa91ddc000252244de014d16ccfbec0bf3d8dd845980cc47597019a1a7aa7229c1ade8d00045df611aaa130f63ae57c149fd17e7b6d3c79d817c99b086f686ea78c571010a6f90277eca2d6d3dc9f0219368c5a14c33881efc295f37396ea659dc17426807d5e0a5aa433cff70550ec826c2479854fe060defd8301f23e603378e7171c4fb1a60ed422f6299c9f42076ae0593c53d246440ce422c75b70e40a4347ea285a65449e4235d9a96568302f6fc63922e870b2c173ef6c447c9b9804d695d3a10710aed4ecf9"}, {0xdd, 0x91, "38045fd9968d3ad6d989371b711a57ee6a0b89c3dfdd0d3af1a0e8f37a19a1a85cb22e73ef053d7980902632c2c38fe8dfc79e4d32feb28b07d0923b40448dc50ac0ff3ffb62f2b4c27bf95b00e6379be30ebd2a1f8da4cef3d159e13f60027c3275b4c8740232e8fe1b61ae8766f5d6c38726bf556932c2e65befaa1f696ac8fde3860c5835018ac270557e86344b0bd3"}, {0xdd, 0xd6, "8b4974abbd1121750a577c7eacedee93418ed26b7eb8e9edda8cd39783fe72b4ad69cf6d18e5f172f42b0e798a933d01e13df7e0963c8aea6c751e8ce06dd2301da6769bd9e9fb59b56b6a74457632f139040b9e58e87f380448bd9cebd55810406668e6c66214a25b20b1ec8a80f5d9aa8c0102d7b75ee84ad49572882e914426d7887e765a83852845e5b5482164b267c46c164b810353c4fbe9310e4db0e01bde4a8255c10e76109bd7ddc05314cbbcddb3173c269f16cbf7ff84110ee4693b0e466e89d5ea4fa8b5fa3485cc3adfd2974f520c34"}, {0xdd, 0x4c, "1be9266a5b942f1664ec0f1391ebf57230caf44a6470b9a76d44512bd8bcbd8f9d330e8450d22f2a353504dce7bd369358a01ac994ac3f74648e0cb78187b876a472f625cf890971cf8fd7c8"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x3ec}, 0x1, 0x0, 0x0, 0xa040}, 0x408d0) write$binfmt_script(r0, &(0x7f0000001d40)={'#! ', './file0', [{}], 0xa, "40c2ecd857c534baecb8c7274011265c13ef4cbdf9dcf0c6dcb3a9e58c80df747135b48f99729d622a5bc4bb6768a7efa055995265ac9d901ed15be9c4392d6d6052613ebd77193dc6bb341735fde255187275c52aa99e5ee4c3c5101399b9bba5388971e77bf775e41ff8c0f15b6900a364400f8f1abde0d141f2f42882b5f9c345d999cf833454dd6ca039c3aeb80118aabbe9b2a3b759f94c22be13fd011d633dce838fce921ce9f87fd542be1ccaf3842887bfcccd183281de1163c7197920a46cda97fd0ca4b78ef22a2351f984e24694a3"}, 0xe0) read$alg(r5, &(0x7f0000001e40)=""/15, 0xf) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xc000}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x48000) 721.954706ms ago: executing program 1 (id=536): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00008000000000"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010101}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff80) close(r1) 441.820693ms ago: executing program 1 (id=537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='bcache_read\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\x00\x00\x00@\x00Ua\xca`'}, {0x20, '.\\-['}, {0x20, '\x00'}, {0x20, '\f\x8c\xf0\xf1\x86\x9c\xd4ytJ\x00E\x05U\xb4\xb4\x93\r5|]\x95\x0f\x02R\xdd&^\x89xJ\xa4\f-a\xb7\xb4\xff\x81\xc6f\xdbj{\xa2\x0e\x93\x8c\x13\x99Z6\xe9\xf1\x95\xd7\xf0\xf3\x93\x95Abv\xac\x10\x14i=\xb0Rv,\xf1<3\xc9\xa6\xc9\x8e9(\x89\xaa\xc5x{y\xf5K\xcdXt\x0e\xb3\x02\\wB\x17\xfb\b\x99\xd5_\xaa\xe8\x00\xef\xbfz\xa5SB\x88d\xf2W\x8c=\xac\v\x12\x8eV!\x9aV\xd0\x86t\x10r\x11Ju\x8f\x90\x8c\xbf)ul\xe6\xe1\x9f?\x9a\xb3\xf7%\x14_*\x0e\x02\x84(\x982K\xb3\t\x8dY\x9f\x1a\xaam{\f\xac?\xed\xa3u\x9d\x9e\x9f\x81\x1f'}]}, 0xd1) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[], 0xffdd) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socket(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0x337}}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000d00)={'#! ', './file0', [], 0xa, "2e7524d8ce7f784dc5ef1d9fbb7895a87a066e5efe145a4f2d0b9c6ef4d29306cceaea05a1314a5b98d2bcdd0bfeff6d438ab9badc8783b4465c7c471e3b9923933d439ac52de881c3ead5079f98a7e25868fe1182603478871cb02b423db8ceffffffdf00000000d8f88abd00000000000059eed703"}, 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getsockopt$inet_int(r6, 0x0, 0x33, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='rpm_return_int\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000ea000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0xc4}}, 0x0) 282.113744ms ago: executing program 3 (id=538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x178, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff25c9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x53}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014000780090006"], 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x9}, 0x48) 0s ago: executing program 3 (id=539): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000500)='y', 0x8980}], 0x1) kernel console output (not intermixed with test programs): adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.326534][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.348833][ T5755] openvswitch: netlink: Message has 8 unknown bytes. [ 110.357441][ T5748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 110.415726][ T63] veth1_macvtap: left promiscuous mode [ 110.430348][ T63] veth0_macvtap: left promiscuous mode [ 110.450197][ T63] veth1_vlan: left promiscuous mode [ 110.466513][ T63] veth0_vlan: left promiscuous mode [ 110.872234][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.882908][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.897556][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.909962][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.926388][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.943117][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.280656][ T63] team0 (unregistering): Port device team_slave_1 removed [ 111.328358][ T63] team0 (unregistering): Port device team_slave_0 removed [ 111.775079][ T5756] veth1_macvtap: left promiscuous mode [ 111.783775][ T5756] macsec0: entered promiscuous mode [ 111.789153][ T5756] macsec0: entered allmulticast mode [ 111.853860][ T5238] Bluetooth: hci4: command tx timeout [ 112.019714][ T5681] chnl_net:caif_netlink_parms(): no params data found [ 112.383819][ T5781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.439240][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 112.627539][ T5797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.115'. [ 112.703627][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.715122][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.727043][ T5681] bridge_slave_0: entered allmulticast mode [ 112.740148][ T5681] bridge_slave_0: entered promiscuous mode [ 112.752419][ T5795] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 112.798607][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.820109][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.854888][ T5681] bridge_slave_1: entered allmulticast mode [ 112.872707][ T5681] bridge_slave_1: entered promiscuous mode [ 112.892992][ T5793] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 113.053782][ T5238] Bluetooth: hci2: command tx timeout [ 113.307053][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.350021][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.527221][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 113.607504][ T5681] team0: Port device team_slave_0 added [ 113.764554][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.821210][ T5681] team0: Port device team_slave_1 added [ 113.908019][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.937925][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.939346][ T5238] Bluetooth: hci4: command tx timeout [ 113.972742][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.040433][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.078272][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.088955][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.123417][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.142948][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 114.208879][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.464574][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.721002][ T5681] hsr_slave_0: entered promiscuous mode [ 114.776106][ T5681] hsr_slave_1: entered promiscuous mode [ 114.802121][ T5681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.811509][ T5681] Cannot create hsr debugfs directory [ 114.848421][ T5875] netlink: 216 bytes leftover after parsing attributes in process `syz.1.130'. [ 114.886594][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 115.133931][ T5238] Bluetooth: hci2: command tx timeout [ 115.278518][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.303553][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.325661][ T5764] bridge_slave_0: entered allmulticast mode [ 115.342178][ T5764] bridge_slave_0: entered promiscuous mode [ 115.401503][ T5903] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 115.449288][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.461703][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.462124][ T5907] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 115.470472][ T5764] bridge_slave_1: entered allmulticast mode [ 115.481468][ T5907] netlink: 9320 bytes leftover after parsing attributes in process `syz.0.136'. [ 115.494340][ T5764] bridge_slave_1: entered promiscuous mode [ 115.530188][ T5907] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 115.586067][ T5907] netlink: 'syz.0.136': attribute type 2 has an invalid length. [ 115.659397][ T5903] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 115.671138][ T63] bridge_slave_1: left allmulticast mode [ 115.678654][ T63] bridge_slave_1: left promiscuous mode [ 115.689195][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.708883][ T63] bridge_slave_0: left allmulticast mode [ 115.716765][ T63] bridge_slave_0: left promiscuous mode [ 115.722902][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.013562][ T5238] Bluetooth: hci4: command tx timeout [ 116.140222][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.158784][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.180826][ T63] bond0 (unregistering): Released all slaves [ 116.197421][ T5910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.138'. [ 116.357375][ T5919] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 116.386662][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.391357][ T5922] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 116.454203][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.520565][ T5921] netlink: 'syz.0.141': attribute type 3 has an invalid length. [ 116.530678][ T5921] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.141'. [ 116.765274][ T5764] team0: Port device team_slave_0 added [ 116.868616][ T5764] team0: Port device team_slave_1 added [ 116.878661][ T5941] Cannot find set identified by id 0 to match [ 117.191964][ T5951] netlink: 'syz.1.146': attribute type 21 has an invalid length. [ 117.213877][ T5238] Bluetooth: hci2: command tx timeout [ 117.467713][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.485554][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.527644][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.545638][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.554130][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.595470][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.996396][ T63] hsr_slave_0: left promiscuous mode [ 118.023869][ T63] hsr_slave_1: left promiscuous mode [ 118.060062][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.089573][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.119398][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.142811][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.210473][ T63] vlan1: left promiscuous mode [ 118.223916][ T63] veth1_macvtap: left promiscuous mode [ 118.231188][ T63] veth0_macvtap: left promiscuous mode [ 118.243855][ T63] veth1_vlan: left promiscuous mode [ 118.249370][ T63] veth0_vlan: left promiscuous mode [ 118.428670][ T63] team0 (unregistering): Port device macvlan2 removed [ 118.589041][ T63] team0 (unregistering): Port device virt_wifi0 removed [ 118.778657][ T63] team0 (unregistering): Port device team_slave_1 removed [ 118.817512][ T63] team0 (unregistering): Port device team_slave_0 removed [ 119.297254][ T5238] Bluetooth: hci2: command tx timeout [ 119.504174][ T5764] hsr_slave_0: entered promiscuous mode [ 119.535126][ T5764] hsr_slave_1: entered promiscuous mode [ 119.577857][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.604477][ T5764] Cannot create hsr debugfs directory [ 120.384861][ T5681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.471545][ T5681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.491759][ T5681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.518871][ T5681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.698472][ T6057] Cannot find add_set index 0 as target [ 120.802913][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 120.848203][ T6061] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.997119][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.060261][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.102236][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.110205][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.137265][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.144756][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.616031][ T5681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.299086][ T6095] netlink: 277 bytes leftover after parsing attributes in process `syz.0.169'. [ 122.461753][ T6106] dccp_v4_rcv: dropped packet with invalid checksum [ 122.499517][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.536665][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.610941][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.651912][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.895458][ T6110] sit0: entered allmulticast mode [ 123.018011][ T5681] veth0_vlan: entered promiscuous mode [ 123.131645][ T5681] veth1_vlan: entered promiscuous mode [ 123.164872][ T6136] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 123.185453][ T6136] netlink: 'syz.1.175': attribute type 3 has an invalid length. [ 123.205471][ T6136] netlink: 224 bytes leftover after parsing attributes in process `syz.1.175'. [ 123.229032][ T6136] NCSI netlink: No device for ifindex 131080 [ 123.392488][ T5681] veth0_macvtap: entered promiscuous mode [ 123.420812][ T5681] veth1_macvtap: entered promiscuous mode [ 123.479208][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.512451][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.573384][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.597926][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.624375][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.624855][ T6148] xt_bpf: check failed: parse error [ 123.636230][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.666920][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.697462][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.783221][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.814544][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.842997][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.854055][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.873532][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.892851][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.914064][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.951631][ T5681] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.971553][ T5681] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.992791][ T5681] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.025623][ T5681] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.068508][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.135626][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.142897][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.248125][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.257000][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.586074][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.614625][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.752346][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.814278][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.957582][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 125.351195][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.547528][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 125.567294][ T5764] veth0_vlan: entered promiscuous mode [ 125.599484][ T5764] veth1_vlan: entered promiscuous mode [ 125.900990][ T3800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.001554][ T6230] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 126.117562][ T6238] pim6reg: entered allmulticast mode [ 126.202175][ T3800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.304807][ T6238] pim6reg: left allmulticast mode [ 126.429811][ T6247] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 126.523167][ T3800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.790992][ T5764] veth0_macvtap: entered promiscuous mode [ 126.886311][ T3800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.970239][ T5764] veth1_macvtap: entered promiscuous mode [ 127.025879][ T6273] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 127.062456][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.073157][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.084997][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.103694][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.111725][ T6273] netlink: 616 bytes leftover after parsing attributes in process `syz.1.201'. [ 127.125484][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.136913][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.147817][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.158112][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.171741][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.183183][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.194061][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.208093][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.251718][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.266852][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.282490][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.295596][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.360015][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.410643][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.460555][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.489690][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.502206][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.521804][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.533102][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.553238][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.627929][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.658842][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.675664][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.693662][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.182792][ T3800] bridge_slave_1: left allmulticast mode [ 128.211862][ T3800] bridge_slave_1: left promiscuous mode [ 128.240794][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.256901][ T3800] bridge_slave_0: left allmulticast mode [ 128.262946][ T3800] bridge_slave_0: left promiscuous mode [ 128.269383][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.819859][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.846011][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.865789][ T3800] bond0 (unregistering): Released all slaves [ 129.139464][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.209967][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.262272][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 129.297132][ T5243] Bluetooth: hci4: command tx timeout [ 129.729111][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.761264][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.764104][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 129.965686][ T3800] hsr_slave_0: left promiscuous mode [ 129.988392][ T3800] hsr_slave_1: left promiscuous mode [ 130.059592][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.091861][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.113869][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.121765][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.198288][ T3800] veth1_macvtap: left promiscuous mode [ 130.223508][ T3800] veth0_macvtap: left promiscuous mode [ 130.238240][ T3800] veth1_vlan: left promiscuous mode [ 130.254147][ T3800] veth0_vlan: left promiscuous mode [ 130.576199][ T6386] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 131.185542][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 131.229785][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 131.377700][ T5243] Bluetooth: hci4: command tx timeout [ 131.674896][ T6369] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 131.685095][ T6369] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.000078][ T6407] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 132.032448][ T6407] batman_adv: batadv0: Adding interface: ip6gretap1 [ 132.041377][ T6407] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.076016][ T6407] batman_adv: batadv0: Interface activated: ip6gretap1 [ 132.138713][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.159081][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.208841][ T6276] bridge_slave_0: entered allmulticast mode [ 132.238467][ T6412] xt_TPROXY: Can be used only with -p tcp or -p udp [ 132.250021][ T6276] bridge_slave_0: entered promiscuous mode [ 132.343994][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.351660][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.405548][ T6276] bridge_slave_1: entered allmulticast mode [ 132.451879][ T6276] bridge_slave_1: entered promiscuous mode [ 132.633532][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.716185][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.859577][ T6423] vlan2: entered promiscuous mode [ 132.876948][ T6423] bond0: entered promiscuous mode [ 132.913673][ T6423] bond_slave_0: entered promiscuous mode [ 132.919727][ T6423] bond_slave_1: entered promiscuous mode [ 132.999222][ T6423] bond0: left promiscuous mode [ 133.022753][ T6423] bond_slave_0: left promiscuous mode [ 133.042114][ T6423] bond_slave_1: left promiscuous mode [ 133.059886][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.069899][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.080033][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.090407][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.108953][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 133.123970][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.295381][ T6456] netlink: 76 bytes leftover after parsing attributes in process `syz.0.228'. [ 133.297415][ T6276] team0: Port device team_slave_0 added [ 133.337083][ T6276] team0: Port device team_slave_1 added [ 133.453456][ T5243] Bluetooth: hci4: command tx timeout [ 133.470224][ T3800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.572985][ T6467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.230'. [ 133.590270][ T6456] ÊügáG: entered promiscuous mode [ 133.763031][ T3800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.782732][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.790775][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.818674][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.866590][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.883415][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.911138][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.962700][ T3800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.009083][ T6480] sctp: [Deprecated]: syz.3.234 (pid 6480) Use of int in maxseg socket option. [ 134.009083][ T6480] Use struct sctp_assoc_value instead [ 134.121047][ T3800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.181377][ T6276] hsr_slave_0: entered promiscuous mode [ 134.191236][ T6276] hsr_slave_1: entered promiscuous mode [ 134.216653][ T6276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.224863][ T6276] Cannot create hsr debugfs directory [ 134.735550][ T6510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.241'. [ 135.046603][ T3800] bridge_slave_1: left allmulticast mode [ 135.083998][ T3800] bridge_slave_1: left promiscuous mode [ 135.091466][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.167558][ T6527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.169923][ T3800] bridge_slave_0: left allmulticast mode [ 135.217527][ T5243] Bluetooth: hci2: command tx timeout [ 135.231844][ T3800] bridge_slave_0: left promiscuous mode [ 135.240449][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.252637][ T1181] IPVS: starting estimator thread 0... [ 135.363599][ T6532] IPVS: using max 17 ests per chain, 40800 per kthread [ 135.536252][ T5243] Bluetooth: hci4: command tx timeout [ 135.848319][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.863150][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.879526][ T3800] bond0 (unregistering): Released all slaves [ 135.948244][ T6531] veth0_macvtap: left promiscuous mode [ 135.980765][ T6531] macvtap0: entered allmulticast mode [ 136.578193][ T943] IPVS: starting estimator thread 0... [ 136.608496][ T6565] Bluetooth: MGMT ver 1.23 [ 136.679198][ T6567] IPVS: using max 16 ests per chain, 38400 per kthread [ 136.862453][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 136.877958][ T6568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 136.933035][ T3800] hsr_slave_0: left promiscuous mode [ 136.940214][ T3800] hsr_slave_1: left promiscuous mode [ 136.950399][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.967900][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.000389][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.024010][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.070821][ T3800] veth1_macvtap: left promiscuous mode [ 137.077474][ T3800] veth0_macvtap: left promiscuous mode [ 137.084058][ T3800] veth1_vlan: left promiscuous mode [ 137.091053][ T3800] veth0_vlan: left promiscuous mode [ 137.268526][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 137.294304][ T5243] Bluetooth: hci2: command tx timeout [ 137.642570][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 137.691191][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 138.329709][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 138.352457][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 138.395744][ T6595] tipc: Started in network mode [ 138.400787][ T6595] tipc: Node identity fc, cluster identity 4711 [ 138.417195][ T6595] tipc: Enabling of bearer rejected, failed to enable media [ 138.449410][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 138.470980][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.482638][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.490722][ T6446] bridge_slave_0: entered allmulticast mode [ 138.498794][ T6446] bridge_slave_0: entered promiscuous mode [ 138.509252][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.517586][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.525639][ T6446] bridge_slave_1: entered allmulticast mode [ 138.532855][ T6446] bridge_slave_1: entered promiscuous mode [ 138.566430][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 138.663713][ T5238] Bluetooth: hci0: command tx timeout [ 138.678402][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.709659][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.739521][ T6602] syz.1.260: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 138.765821][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.1.260 Not tainted 6.11.0-rc1-syzkaller-00185-gb928e7d19dfd #0 [ 138.778510][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 138.789243][ T6602] Call Trace: [ 138.792784][ T6602] [ 138.795923][ T6602] dump_stack_lvl+0x241/0x360 [ 138.800746][ T6602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.806752][ T6602] ? __pfx__printk+0x10/0x10 [ 138.811930][ T6602] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 138.818748][ T6602] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 138.826112][ T6602] warn_alloc+0x278/0x410 [ 138.828471][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.830661][ T6602] ? __pfx_warn_alloc+0x10/0x10 [ 138.830708][ T6602] ? translate_table+0x196/0x21f0 [ 138.830743][ T6602] ? __get_vm_area_node+0x23d/0x270 [ 138.840510][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.842911][ T6602] __vmalloc_node_range_noprof+0x69f/0x1460 [ 138.866040][ T6602] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 138.872350][ T6602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 138.878967][ T6602] ? rcu_is_watching+0x15/0xb0 [ 138.883872][ T6602] ? trace_kmalloc+0x1f/0xd0 [ 138.888843][ T6602] ? __kmalloc_node_noprof+0x247/0x440 [ 138.894335][ T6602] ? __kvmalloc_node_noprof+0x72/0x190 [ 138.899965][ T6602] __kvmalloc_node_noprof+0x142/0x190 [ 138.905746][ T6602] ? translate_table+0x196/0x21f0 [ 138.911356][ T6602] translate_table+0x196/0x21f0 [ 138.917304][ T6602] ? __pfx___might_resched+0x10/0x10 [ 138.922739][ T6602] ? __might_fault+0xaa/0x120 [ 138.927448][ T6602] ? __pfx_translate_table+0x10/0x10 [ 138.933048][ T6602] ? __might_fault+0xaa/0x120 [ 138.937949][ T6602] ? __might_fault+0xc6/0x120 [ 138.942777][ T6602] ? _copy_from_user+0xa6/0xe0 [ 138.948239][ T6602] ? copy_from_sockptr_offset+0x6b/0xb0 [ 138.954032][ T6602] do_arpt_set_ctl+0x101c/0x1650 [ 138.960343][ T6602] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 138.965664][ T6602] ? __pfx___might_resched+0x10/0x10 [ 138.971037][ T6602] ? nf_setsockopt+0x240/0x2c0 [ 138.975842][ T6602] ? __pfx_lock_release+0x10/0x10 [ 138.981021][ T6602] ? __mutex_lock+0x2ef/0xd70 [ 138.986509][ T6602] ? __mutex_unlock_slowpath+0x21d/0x750 [ 138.992699][ T6602] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 138.998202][ T6602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.004317][ T6602] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.009725][ T6602] ? module_put+0x13a/0x2d0 [ 139.014619][ T6602] nf_setsockopt+0x295/0x2c0 [ 139.019830][ T6602] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 139.025876][ T6602] do_sock_setsockopt+0x3af/0x720 [ 139.030976][ T6602] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 139.036758][ T6602] ? __fget_files+0x29/0x470 [ 139.041457][ T6602] ? __fget_files+0x3f6/0x470 [ 139.046260][ T6602] __sys_setsockopt+0x1ae/0x250 [ 139.051430][ T6602] __x64_sys_setsockopt+0xb5/0xd0 [ 139.056498][ T6602] do_syscall_64+0xf3/0x230 [ 139.061127][ T6602] ? clear_bhb_loop+0x35/0x90 [ 139.066027][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.072107][ T6602] RIP: 0033:0x7f68039779f9 [ 139.076817][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.097210][ T6602] RSP: 002b:00007f6804821038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.106106][ T6602] RAX: ffffffffffffffda RBX: 00007f6803b05f80 RCX: 00007f68039779f9 [ 139.114121][ T6602] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 139.122260][ T6602] RBP: 00007f68039e58ee R08: 0000000000000458 R09: 0000000000000000 [ 139.130779][ T6602] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.138999][ T6602] R13: 0000000000000000 R14: 00007f6803b05f80 R15: 00007ffdd7e46b48 [ 139.147905][ T6602] [ 139.156298][ T6602] Mem-Info: [ 139.180485][ T6602] active_anon:3951 inactive_anon:0 isolated_anon:0 [ 139.180485][ T6602] active_file:1394 inactive_file:38159 isolated_file:0 [ 139.180485][ T6602] unevictable:768 dirty:174 writeback:0 [ 139.180485][ T6602] slab_reclaimable:8801 slab_unreclaimable:92105 [ 139.180485][ T6602] mapped:20828 shmem:1261 pagetables:731 [ 139.180485][ T6602] sec_pagetables:0 bounce:0 [ 139.180485][ T6602] kernel_misc_reclaimable:0 [ 139.180485][ T6602] free:1397411 free_pcp:633 free_cma:0 [ 139.269806][ T6602] Node 0 active_anon:15704kB inactive_anon:0kB active_file:5576kB inactive_file:152568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83312kB dirty:692kB writeback:0kB shmem:3508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9988kB pagetables:2724kB sec_pagetables:0kB all_unreclaimable? no [ 139.319688][ T6602] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 139.359550][ T6602] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.368814][ T6446] team0: Port device team_slave_0 added [ 139.395263][ T5238] Bluetooth: hci2: command tx timeout [ 139.410991][ T6602] lowmem_reserve[]: 0 2561 2562 0 0 [ 139.417034][ T6602] Node 0 DMA32 free:1626068kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:15656kB inactive_anon:0kB active_file:5576kB inactive_file:151252kB unevictable:1536kB writepending:688kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:2200kB local_pcp:1168kB free_cma:0kB [ 139.449541][ T6602] lowmem_reserve[]: 0 0 1 0 0 [ 139.455427][ T6602] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 139.485698][ T6602] lowmem_reserve[]: 0 0 0 0 0 [ 139.492376][ T6602] Node 1 Normal free:3948768kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:596kB local_pcp:96kB free_cma:0kB [ 139.530746][ T6602] lowmem_reserve[]: 0 0 [ 139.530977][ T6276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.545198][ T6602] 0 0 0 [ 139.548226][ T6602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.571136][ T6276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.579832][ T6602] Node 0 DMA32: 169*4kB (UE) 169*8kB (UME) 118*16kB (UME) 202*32kB (UME) 109*64kB (UME) 38*128kB (UME) 19*256kB (UM) 32*512kB (UM) 14*1024kB (UME) 4*2048kB (M) 381*4096kB (UM) = 1626572kB [ 139.607461][ T6446] team0: Port device team_slave_1 added [ 139.617339][ T6602] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 139.632023][ T6602] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 4*64kB (UM) 3*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3948768kB [ 139.678219][ T6602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.699966][ T6602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.720170][ T6276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.728752][ T6602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.743017][ T6276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.761687][ T6602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.766204][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.784567][ T6602] 40817 total pagecache pages [ 139.790381][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.806456][ T6602] 0 pages in swap cache [ 139.827137][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.842281][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.850371][ T6602] Free swap = 124996kB [ 139.850849][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.856484][ T6602] Total swap = 124996kB [ 139.891192][ T6602] 2097051 pages RAM [ 139.901594][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.910690][ T6602] 0 pages HighMem/MovableOnly [ 139.920093][ T6602] 402772 pages reserved [ 139.955898][ T6602] 0 pages cma reserved [ 140.087374][ T6446] hsr_slave_0: entered promiscuous mode [ 140.120686][ T6446] hsr_slave_1: entered promiscuous mode [ 140.154832][ T6446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.182930][ T6446] Cannot create hsr debugfs directory [ 140.694353][ T6649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.270'. [ 141.068585][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.229762][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.401123][ T6675] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 141.456971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.465929][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.474273][ T5238] Bluetooth: hci2: command 0x0419 tx timeout [ 141.659487][ T6686] x_tables: unsorted underflow at hook 4 [ 141.788860][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.796240][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.126168][ T6446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.162297][ T6446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.196040][ T6446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.249771][ T6446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.536943][ T6708] ip6t_srh: unknown srh invflags A757 [ 142.647684][ T6708] wireguard0: entered promiscuous mode [ 142.657323][ T6708] wireguard0: entered allmulticast mode [ 142.854747][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.889062][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.981035][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.080272][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.087570][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.150834][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.159590][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.352919][ T6735] dccp_v4_rcv: dropped packet with invalid checksum [ 143.533787][ T5243] Bluetooth: hci2: command 0x0419 tx timeout [ 143.534732][ T6734] bond_slave_0: entered promiscuous mode [ 143.546899][ T6734] bond_slave_1: entered promiscuous mode [ 143.601852][ T6731] bond_slave_0: left promiscuous mode [ 143.607709][ T6731] bond_slave_1: left promiscuous mode [ 143.664674][ T6749] bond0: option miimon: invalid value (18446744073072082944) [ 143.673214][ T6749] bond0: option miimon: allowed values 0 - 2147483647 [ 143.981454][ T6276] veth0_vlan: entered promiscuous mode [ 144.061349][ T6276] veth1_vlan: entered promiscuous mode [ 144.209436][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.342000][ T6276] veth0_macvtap: entered promiscuous mode [ 144.416450][ T6276] veth1_macvtap: entered promiscuous mode [ 144.597432][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.621286][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.632420][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.649835][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.660658][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.681215][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.704828][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.727314][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 144.778581][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.807442][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.840464][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.861340][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.899512][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.926151][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.972846][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.026268][ T6446] veth0_vlan: entered promiscuous mode [ 145.090655][ T6276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.120413][ T6276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.159717][ T6276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.203656][ T6276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.324719][ T6446] veth1_vlan: entered promiscuous mode [ 145.651314][ T6817] netlink: 'syz.3.298': attribute type 21 has an invalid length. [ 145.739542][ T6446] veth0_macvtap: entered promiscuous mode [ 145.769969][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.792382][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.829323][ T6817] bridge0: entered promiscuous mode [ 145.865594][ T6817] team0: entered promiscuous mode [ 145.871520][ T6817] team_slave_0: entered promiscuous mode [ 145.920127][ T6817] team_slave_1: entered promiscuous mode [ 145.968646][ T6446] veth1_macvtap: entered promiscuous mode [ 146.170557][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.189469][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.217471][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.247242][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.280563][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.295450][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.309479][ T6845] dccp_v4_rcv: dropped packet with invalid checksum [ 146.310577][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.332299][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.344130][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.361781][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.380691][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.401449][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'. [ 146.454250][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.480727][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.513522][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.533630][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.560557][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.584500][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.603992][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.628160][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.651436][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.692483][ T6446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.724605][ T6446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.747583][ T6446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.763504][ T6446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.792625][ T6859] netlink: 64 bytes leftover after parsing attributes in process `syz.0.306'. [ 147.001181][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 147.023489][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 147.054530][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 147.317961][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.334640][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.664629][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.785491][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 147.835400][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.867068][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.897849][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 147.919971][ T6888] netlink: 64 bytes leftover after parsing attributes in process `syz.0.310'. [ 148.081071][ T6888] bond1: entered allmulticast mode [ 148.108915][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 148.114597][ T6888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.322628][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.515970][ T6901] bond1: entered promiscuous mode [ 148.521461][ T6901] bond1: entered allmulticast mode [ 148.528250][ T6901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.645049][ T6905] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 148.694662][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.802982][ T6921] dccp_v4_rcv: dropped packet with invalid checksum [ 148.823083][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.837044][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.850149][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.860243][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.887263][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.908252][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.004473][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.768275][ T52] bridge_slave_1: left allmulticast mode [ 149.820351][ T52] bridge_slave_1: left promiscuous mode [ 149.845160][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.886134][ T52] bridge_slave_0: left allmulticast mode [ 149.893226][ T52] bridge_slave_0: left promiscuous mode [ 149.926188][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.709170][ T6970] __nla_validate_parse: 3 callbacks suppressed [ 150.709194][ T6970] netlink: 15 bytes leftover after parsing attributes in process `syz.3.323'. [ 150.872772][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.902291][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.912516][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.922649][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.961487][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.978480][ T54] Bluetooth: hci4: command tx timeout [ 150.986756][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.146997][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.172940][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.190039][ T52] bond0 (unregistering): Released all slaves [ 152.094311][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 152.239375][ T52] hsr_slave_0: left promiscuous mode [ 152.264827][ T52] hsr_slave_1: left promiscuous mode [ 152.279394][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.310143][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.328747][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.338991][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.377775][ T52] veth1_macvtap: left promiscuous mode [ 152.391699][ T52] veth0_macvtap: left promiscuous mode [ 152.399638][ T52] veth1_vlan: left promiscuous mode [ 152.406466][ T52] veth0_vlan: left promiscuous mode [ 153.057962][ T5238] Bluetooth: hci2: command tx timeout [ 153.065145][ T5243] Bluetooth: hci4: command tx timeout [ 153.143159][ T52] team0 (unregistering): Port device team_slave_1 removed [ 153.188887][ T52] team0 (unregistering): Port device team_slave_0 removed [ 153.951176][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.970065][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.982281][ T6922] bridge_slave_0: entered allmulticast mode [ 153.995324][ T6922] bridge_slave_0: entered promiscuous mode [ 154.005301][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.019193][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.029187][ T6922] bridge_slave_1: entered allmulticast mode [ 154.064829][ T6922] bridge_slave_1: entered promiscuous mode [ 154.198984][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.220583][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.330186][ T6922] team0: Port device team_slave_0 added [ 154.346071][ T6975] chnl_net:caif_netlink_parms(): no params data found [ 154.392388][ T6922] team0: Port device team_slave_1 added [ 154.501876][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.510982][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.548889][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.671131][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.690805][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.727308][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.890909][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.923535][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.931403][ T6975] bridge_slave_0: entered allmulticast mode [ 154.951273][ T6975] bridge_slave_0: entered promiscuous mode [ 154.975942][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.994054][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.028035][ T6975] bridge_slave_1: entered allmulticast mode [ 155.054430][ T6975] bridge_slave_1: entered promiscuous mode [ 155.125089][ T6922] hsr_slave_0: entered promiscuous mode [ 155.132655][ T6922] hsr_slave_1: entered promiscuous mode [ 155.139120][ T5238] Bluetooth: hci2: command tx timeout [ 155.139199][ T5238] Bluetooth: hci4: command tx timeout [ 155.157080][ T6922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.167489][ T6922] Cannot create hsr debugfs directory [ 155.250951][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.465106][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.498583][ T6975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.532933][ T6975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.623202][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.722053][ T6975] team0: Port device team_slave_0 added [ 155.760203][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.789839][ T6975] team0: Port device team_slave_1 added [ 155.876009][ T7084] netlink: 100 bytes leftover after parsing attributes in process `syz.1.338'. [ 155.978262][ T7084] sit0: entered allmulticast mode [ 156.013876][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.021837][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.063342][ T6975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.140956][ T7085] sit0: entered promiscuous mode [ 156.258964][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.280818][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.317101][ T6975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.811959][ T6975] hsr_slave_0: entered promiscuous mode [ 156.837015][ T6975] hsr_slave_1: entered promiscuous mode [ 156.863800][ T6975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.891786][ T6975] Cannot create hsr debugfs directory [ 157.143113][ T52] bridge_slave_1: left allmulticast mode [ 157.157625][ T52] bridge_slave_1: left promiscuous mode [ 157.194070][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.223589][ T5243] Bluetooth: hci4: command tx timeout [ 157.229948][ T5243] Bluetooth: hci2: command tx timeout [ 157.255843][ T52] bridge_slave_0: left allmulticast mode [ 157.269259][ T52] bridge_slave_0: left promiscuous mode [ 157.295835][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.970849][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.987180][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.000126][ T52] bond0 (unregistering): Released all slaves [ 158.638415][ T52] hsr_slave_0: left promiscuous mode [ 158.696347][ T52] hsr_slave_1: left promiscuous mode [ 158.714142][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.721915][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.751757][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.761113][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.797804][ T52] veth1_macvtap: left promiscuous mode [ 158.804411][ T52] veth0_macvtap: left promiscuous mode [ 158.810762][ T52] veth1_vlan: left promiscuous mode [ 158.826182][ T52] veth0_vlan: left promiscuous mode [ 159.296821][ T5243] Bluetooth: hci2: command tx timeout [ 159.423316][ T52] team0 (unregistering): Port device team_slave_1 removed [ 159.469887][ T52] team0 (unregistering): Port device team_slave_0 removed [ 159.892648][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 159.912193][ T6922] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.936673][ T6922] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.950751][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 159.963178][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 160.058309][ T6922] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.187845][ T6922] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.315192][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.973198][ T7173] pim6reg1: entered promiscuous mode [ 160.988589][ T7173] pim6reg1: entered allmulticast mode [ 161.317148][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.325115][ T6975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.361234][ T6975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.386674][ T6975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.430306][ T6975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.475273][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.522495][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.529958][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.586173][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.594245][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.615557][ T7185] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 161.647430][ T7185] bond0: (slave netdevsim0): Releasing backup interface [ 161.662297][ T7185] team0: Port device netdevsim0 added [ 161.671600][ T7187] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 161.698601][ T7187] team0: Port device netdevsim0 removed [ 161.710871][ T7187] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.908258][ T6922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.119156][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.189212][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 162.250724][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.330074][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.338681][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.460573][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.469186][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.863088][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.304238][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.325984][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.339528][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.354646][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.370575][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.380006][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.491473][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.797889][ T6975] veth0_vlan: entered promiscuous mode [ 163.921236][ T6975] veth1_vlan: entered promiscuous mode [ 164.259157][ T7282] syzkaller1: entered allmulticast mode [ 164.297389][ T6922] veth0_vlan: entered promiscuous mode [ 164.407119][ T7248] chnl_net:caif_netlink_parms(): no params data found [ 164.509135][ T6922] veth1_vlan: entered promiscuous mode [ 164.560916][ T6975] veth0_macvtap: entered promiscuous mode [ 164.665734][ T7301] xt_CT: No such helper "snmp" [ 164.718506][ T6975] veth1_macvtap: entered promiscuous mode [ 164.856088][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.867134][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.881472][ T7248] bridge_slave_0: entered allmulticast mode [ 164.892270][ T7248] bridge_slave_0: entered promiscuous mode [ 164.911788][ T6922] veth0_macvtap: entered promiscuous mode [ 164.938451][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.954365][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.984858][ T7248] bridge_slave_1: entered allmulticast mode [ 165.006806][ T7248] bridge_slave_1: entered promiscuous mode [ 165.061402][ T7319] netlink: 100 bytes leftover after parsing attributes in process `syz.0.371'. [ 165.062508][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.091899][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.106395][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.118544][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.131370][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.151174][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.167142][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.177879][ T6922] veth1_macvtap: entered promiscuous mode [ 165.226376][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.239102][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.252844][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.264830][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.278228][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.291370][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.305436][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.331753][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.347936][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.402699][ T6975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.433745][ T6975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.453729][ T5238] Bluetooth: hci5: command tx timeout [ 165.462845][ T6975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.475769][ T6975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.707350][ T7248] team0: Port device team_slave_0 added [ 165.724704][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.762725][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.788180][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.804666][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.815512][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.826861][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.837581][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.850051][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.873860][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.898159][ T7248] team0: Port device team_slave_1 added [ 165.981590][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.009275][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.017752][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.031564][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.031590][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.031602][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.031617][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.031648][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.031664][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.034790][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.204337][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.214454][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.250439][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.290717][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.298528][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.343493][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.381271][ T6922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.397935][ T6922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.415719][ T6922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.433978][ T6922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.664022][ T7248] hsr_slave_0: entered promiscuous mode [ 166.679806][ T7248] hsr_slave_1: entered promiscuous mode [ 166.693538][ T7248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.702611][ T7248] Cannot create hsr debugfs directory [ 166.789034][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.813236][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.110501][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.124450][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.226691][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.270728][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.548865][ T5238] Bluetooth: hci5: command tx timeout [ 167.596849][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.646604][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.739331][ T7248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.797311][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.384'. [ 167.824138][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.867573][ T7385] team_slave_0: entered promiscuous mode [ 167.873968][ T7385] team_slave_1: entered promiscuous mode [ 167.896933][ T7385] macvtap1: entered promiscuous mode [ 167.921255][ T7385] team0: entered promiscuous mode [ 167.944539][ T7385] macvtap1: entered allmulticast mode [ 167.961764][ T7385] team0: entered allmulticast mode [ 167.967791][ T7385] team_slave_0: entered allmulticast mode [ 167.977916][ T7385] team_slave_1: entered allmulticast mode [ 167.985062][ T7385] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 168.010285][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 168.042611][ T7388] team0: left allmulticast mode [ 168.050381][ T7388] team_slave_0: left allmulticast mode [ 168.068703][ T7388] team_slave_1: left allmulticast mode [ 168.079165][ T7388] team0: left promiscuous mode [ 168.102504][ T7388] team_slave_0: left promiscuous mode [ 168.108424][ T7388] team_slave_1: left promiscuous mode [ 168.125569][ T7399] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 168.153637][ T7388] macvtap1: left promiscuous mode [ 168.171426][ T7388] macvtap1: left allmulticast mode [ 168.279758][ T1124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.438385][ T7248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.699248][ T1124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.972156][ T7248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.980861][ T7413] netlink: 29 bytes leftover after parsing attributes in process `syz.0.385'. [ 169.247173][ T1124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.331607][ T7420] netlink: 'syz.1.387': attribute type 22 has an invalid length. [ 169.476669][ T7248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.574876][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.586928][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.598578][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.614409][ T54] Bluetooth: hci5: command tx timeout [ 169.625925][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.650752][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.665197][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.667788][ T1124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.074830][ T7449] netlink: 'syz.0.388': attribute type 4 has an invalid length. [ 170.147040][ T1124] bridge_slave_1: left allmulticast mode [ 170.165534][ T1124] bridge_slave_1: left promiscuous mode [ 170.171954][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.230550][ T1124] bridge_slave_0: left allmulticast mode [ 170.243377][ T1124] bridge_slave_0: left promiscuous mode [ 170.249371][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.492567][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.515424][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.525158][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.543201][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.551804][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.560697][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.816419][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.832418][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.849049][ T1124] bond0 (unregistering): Released all slaves [ 170.867370][ T7456] netlink: 10 bytes leftover after parsing attributes in process `syz.1.390'. [ 170.953950][ T7248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.082394][ T7471] dccp_v4_rcv: dropped packet with invalid checksum [ 171.236759][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 171.251042][ T7248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.269633][ T7248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.373812][ T7248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.520902][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 171.694295][ T5243] Bluetooth: hci5: command tx timeout [ 171.730331][ T1124] hsr_slave_0: left promiscuous mode [ 171.751469][ T1124] hsr_slave_1: left promiscuous mode [ 171.762705][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.773758][ T5243] Bluetooth: hci2: command tx timeout [ 171.785801][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.801793][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.815850][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.862584][ T1124] veth1_macvtap: left promiscuous mode [ 171.870831][ T1124] veth0_macvtap: left promiscuous mode [ 171.887114][ T1124] veth1_vlan: left promiscuous mode [ 171.900060][ T1124] veth0_vlan: left promiscuous mode [ 172.658611][ T5243] Bluetooth: hci4: command tx timeout [ 172.821058][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 172.865253][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 173.431915][ T7486] netlink: 43 bytes leftover after parsing attributes in process `syz.1.395'. [ 173.704390][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.712215][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.720636][ T7434] bridge_slave_0: entered allmulticast mode [ 173.731238][ T7434] bridge_slave_0: entered promiscuous mode [ 173.752743][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 173.788622][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.821180][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.852309][ T7434] bridge_slave_1: entered allmulticast mode [ 173.864544][ T5243] Bluetooth: hci2: command tx timeout [ 173.877168][ T7434] bridge_slave_1: entered promiscuous mode [ 174.119046][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.132379][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.284524][ T7523] x_tables: duplicate underflow at hook 3 [ 174.438638][ T7434] team0: Port device team_slave_0 added [ 174.460789][ T7434] team0: Port device team_slave_1 added [ 174.479322][ T7464] chnl_net:caif_netlink_parms(): no params data found [ 174.700598][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 174.735357][ T5243] Bluetooth: hci4: command tx timeout [ 174.758174][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.768377][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.802722][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.831718][ T7537] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 174.832429][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.843612][ T7537] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 174.861849][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.866424][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.0.402'. [ 174.907882][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.943682][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.986321][ T7248] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.100569][ T1124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.257946][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'. [ 175.340614][ T1124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.405387][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.412972][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.431669][ T7464] bridge_slave_0: entered allmulticast mode [ 175.440432][ T7464] bridge_slave_0: entered promiscuous mode [ 175.458802][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.467664][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.517937][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 175.529385][ T7557] IPv6: NLM_F_REPLACE set, but no existing node found! [ 175.562111][ T1124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.592227][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.604130][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.620832][ T7464] bridge_slave_1: entered allmulticast mode [ 175.630230][ T7464] bridge_slave_1: entered promiscuous mode [ 175.710809][ T7434] hsr_slave_0: entered promiscuous mode [ 175.725250][ T7434] hsr_slave_1: entered promiscuous mode [ 175.750549][ T7434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.761975][ T7434] Cannot create hsr debugfs directory [ 175.785551][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.793624][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.821570][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.871785][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.926217][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.945923][ T5243] Bluetooth: hci2: command tx timeout [ 176.118605][ T7464] team0: Port device team_slave_0 added [ 176.157037][ T7464] team0: Port device team_slave_1 added [ 176.337316][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.344679][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.373017][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.387847][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.396477][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.426477][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.537050][ T1124] bridge_slave_1: left allmulticast mode [ 176.548807][ T1124] bridge_slave_1: left promiscuous mode [ 176.556526][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.566910][ T1124] bridge_slave_0: left allmulticast mode [ 176.572735][ T1124] bridge_slave_0: left promiscuous mode [ 176.590498][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.825167][ T5243] Bluetooth: hci4: command tx timeout [ 177.292050][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.307065][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.319734][ T1124] bond0 (unregistering): Released all slaves [ 177.351442][ T7586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.446094][ T7587] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.412'. [ 177.463894][ T7587] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.412'. [ 177.542468][ T7464] hsr_slave_0: entered promiscuous mode [ 177.568838][ T7464] hsr_slave_1: entered promiscuous mode [ 177.580732][ T7464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.596462][ T7464] Cannot create hsr debugfs directory [ 177.706995][ T7579] syz.0.411 (7579) used greatest stack depth: 18584 bytes left [ 178.013865][ T5243] Bluetooth: hci2: command tx timeout [ 178.181534][ T1124] hsr_slave_0: left promiscuous mode [ 178.199193][ T1124] hsr_slave_1: left promiscuous mode [ 178.218733][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.231504][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.260927][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.269312][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.271889][ T7603] tipc: Can't bind to reserved service type 0 [ 178.301878][ T7603] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.307444][ T1124] veth1_macvtap: left promiscuous mode [ 178.317495][ T1124] veth0_macvtap: left promiscuous mode [ 178.323489][ T1124] veth1_vlan: left promiscuous mode [ 178.329792][ T1124] veth0_vlan: left promiscuous mode [ 178.807304][ T7614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.421'. [ 178.893761][ T5243] Bluetooth: hci4: command tx timeout [ 179.255055][ T7630] netlink: 'syz.1.424': attribute type 7 has an invalid length. [ 179.281873][ T7630] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.424'. [ 179.674316][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 179.808339][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 180.468116][ T7640] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 180.538350][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.805814][ T7434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.925439][ T7434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.048835][ T7434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.089132][ T7434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.162631][ T7248] veth0_vlan: entered promiscuous mode [ 181.224304][ T7248] veth1_vlan: entered promiscuous mode [ 181.352695][ T7671] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 181.499287][ T7248] veth0_macvtap: entered promiscuous mode [ 181.569934][ T7248] veth1_macvtap: entered promiscuous mode [ 181.730488][ T7690] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 181.766501][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.813457][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.843918][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.882504][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.899284][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.914192][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.931331][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.939954][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.012636][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.027154][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.038996][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.051376][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.061554][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.074203][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.087075][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.098903][ T7694] bond_slave_0: entered promiscuous mode [ 182.104773][ T7694] bond_slave_1: entered promiscuous mode [ 182.110654][ T7694] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.129228][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.152630][ T7699] bond0: entered promiscuous mode [ 182.176524][ T7464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.190479][ T7464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.223168][ T7248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.243584][ T7248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.252359][ T7248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.277829][ T7248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.305915][ T7693] bond0: left promiscuous mode [ 182.316584][ T7693] bond_slave_0: left promiscuous mode [ 182.322094][ T7693] bond_slave_1: left promiscuous mode [ 182.327817][ T7693] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 182.339220][ T7464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.369816][ T7464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.398753][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.449801][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.457340][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.513023][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.520824][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.739553][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.751316][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.877830][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.907396][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.130255][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.251139][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 183.276294][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.315924][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.355'. [ 183.343033][ T7728] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 183.397183][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.404815][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.438978][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.446733][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.602289][ T7734] syzkaller0: entered promiscuous mode [ 183.612527][ T7734] syzkaller0: entered allmulticast mode [ 183.640005][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.700804][ T7738] raw_sendmsg: syz.3.450 forgot to set AF_INET. Fix it! [ 183.708271][ T7734] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 183.767447][ T7734] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 183.779835][ T7734] syzkaller0: Linktype set failed because interface is up [ 183.796282][ T7464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.022566][ T35] syzkaller0: tun_net_xmit 48 [ 184.442633][ T7767] dccp_v4_rcv: dropped packet with invalid checksum [ 185.884791][ T7756] netlink: 'syz.1.453': attribute type 6 has an invalid length. [ 185.996014][ T7434] veth0_vlan: entered promiscuous mode [ 186.016582][ T7434] veth1_vlan: entered promiscuous mode [ 186.193031][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'. [ 186.221380][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 186.233675][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 186.257356][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.314387][ T7434] veth0_macvtap: entered promiscuous mode [ 186.374642][ T7434] veth1_macvtap: entered promiscuous mode [ 186.446705][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 186.460651][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.483700][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.521345][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.545056][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.556350][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.567208][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.591178][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.624661][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.646734][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.700184][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.723528][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.778044][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.816484][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.827777][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.845554][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.856161][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.867022][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.879564][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.898965][ T7802] netlink: 'syz.1.465': attribute type 4 has an invalid length. [ 186.917083][ T7802] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.465'. [ 186.931844][ T7804] netlink: 'syz.3.464': attribute type 15 has an invalid length. [ 186.953564][ T7804] netlink: 46 bytes leftover after parsing attributes in process `syz.3.464'. [ 187.008522][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 187.022268][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 187.043161][ T7434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.066524][ T7434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.076898][ T7434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.087887][ T7434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.181804][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 187.208515][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 187.417274][ T7464] veth0_vlan: entered promiscuous mode [ 187.557654][ T7464] veth1_vlan: entered promiscuous mode [ 187.589832][ T7836] xt_hashlimit: invalid interval [ 187.618999][ T7824] netlink: 'syz.1.469': attribute type 6 has an invalid length. [ 187.656739][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.667464][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.777938][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.793086][ T7464] veth0_macvtap: entered promiscuous mode [ 187.812079][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.824515][ T7464] veth1_macvtap: entered promiscuous mode [ 187.880757][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.893665][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.912953][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.924911][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.936498][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.948029][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.958361][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.969192][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.979467][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.991340][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.012065][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.187352][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.218193][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.243981][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.282198][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.303456][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.318041][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.332693][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.351187][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.365862][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.378075][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.391648][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.428071][ T7464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.442243][ T7464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.456770][ T7464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.466097][ T7464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.552188][ T133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.612707][ T7848] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 188.716566][ T133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.737182][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b1a5800: rx timeout, send abort [ 188.812339][ T133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.908447][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.947457][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.998412][ T133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.015178][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.023058][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.250961][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b1a5800: abort rx timeout. Force session deactivation [ 189.325066][ T133] bridge_slave_1: left allmulticast mode [ 189.353140][ T133] bridge_slave_1: left promiscuous mode [ 189.360716][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.400220][ T133] bridge_slave_0: left allmulticast mode [ 189.409513][ T133] bridge_slave_0: left promiscuous mode [ 189.422837][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.554256][ T7865] dccp_invalid_packet: P.Data Offset(0) too small [ 189.881554][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.911885][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.926224][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.939049][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.951886][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.962812][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.209876][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.222181][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.235342][ T133] bond0 (unregistering): Released all slaves [ 190.265012][ T7868] tipc: Enabling of bearer rejected, failed to enable media [ 190.537565][ T7876] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 190.800915][ T7879] delete_channel: no stack [ 190.956549][ T133] hsr_slave_0: left promiscuous mode [ 190.966685][ T7887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.988548][ T133] hsr_slave_1: left promiscuous mode [ 191.013932][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.028465][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.037090][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.048646][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.058474][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.067668][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.077719][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.085695][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.093186][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.107527][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.180063][ T133] veth1_macvtap: left promiscuous mode [ 191.188162][ T133] veth0_macvtap: left promiscuous mode [ 191.195213][ T133] veth1_vlan: left promiscuous mode [ 191.202082][ T133] veth0_vlan: left promiscuous mode [ 191.804679][ T133] team0 (unregistering): Port device team_slave_1 removed [ 191.852672][ T133] team0 (unregistering): Port device team_slave_0 removed [ 192.013903][ T5243] Bluetooth: hci2: command tx timeout [ 192.402764][ T7896] __nla_validate_parse: 2 callbacks suppressed [ 192.402788][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 192.733306][ T7909] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 192.788003][ T7909] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 192.815702][ T7909] team0: Failed to send options change via netlink (err -105) [ 192.831922][ T7909] team0: Port device netdevsim0 added [ 193.050634][ T7918] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1620) ! [ 193.088808][ T7869] chnl_net:caif_netlink_parms(): no params data found [ 193.214396][ T5243] Bluetooth: hci4: command tx timeout [ 193.314246][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.404645][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 193.539067][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.560870][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.570326][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.581345][ T7869] bridge_slave_0: entered allmulticast mode [ 193.595660][ T7869] bridge_slave_0: entered promiscuous mode [ 193.624364][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 193.661312][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.695966][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.710000][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.718583][ T7869] bridge_slave_1: entered allmulticast mode [ 193.734294][ T7869] bridge_slave_1: entered promiscuous mode [ 193.945664][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.094423][ T5243] Bluetooth: hci2: command tx timeout [ 194.116995][ T7869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.133682][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.152417][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.162888][ T7892] bridge_slave_0: entered allmulticast mode [ 194.177629][ T7892] bridge_slave_0: entered promiscuous mode [ 194.206097][ T7869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.220708][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.233473][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.242990][ T7892] bridge_slave_1: entered allmulticast mode [ 194.252193][ T7892] bridge_slave_1: entered promiscuous mode [ 194.433171][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 194.457574][ T7953] tipc: Started in network mode [ 194.462599][ T7953] tipc: Node identity cgroup.pn, cluster identity 8 [ 194.561139][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.626377][ T7869] team0: Port device team_slave_0 added [ 194.649892][ T7869] team0: Port device team_slave_1 added [ 194.671612][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.825959][ T7958] netlink: 'syz.1.499': attribute type 8 has an invalid length. [ 194.834694][ T7958] netlink: 'syz.1.499': attribute type 7 has an invalid length. [ 194.842505][ T7958] netlink: 187184 bytes leftover after parsing attributes in process `syz.1.499'. [ 194.895478][ T1101] bridge_slave_1: left allmulticast mode [ 194.907768][ T1101] bridge_slave_1: left promiscuous mode [ 194.915890][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.927650][ T1101] bridge_slave_0: left allmulticast mode [ 194.934248][ T1101] bridge_slave_0: left promiscuous mode [ 194.942034][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.298178][ T5243] Bluetooth: hci4: command tx timeout [ 195.417146][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.430737][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.444211][ T1101] bond0 (unregistering): Released all slaves [ 195.468154][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.483779][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.516683][ T7869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.559083][ T7892] team0: Port device team_slave_0 added [ 195.727716][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.744634][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.803798][ T7869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.828998][ T7892] team0: Port device team_slave_1 added [ 195.975771][ T7976] xt_policy: output policy not valid in PREROUTING and INPUT [ 195.994283][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.001589][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.029291][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.092823][ T7974] netlink: 47 bytes leftover after parsing attributes in process `syz.0.504'. [ 196.104387][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.506'. [ 196.151925][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.164005][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.191936][ T5243] Bluetooth: hci2: command tx timeout [ 196.199753][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.279559][ T1101] hsr_slave_0: left promiscuous mode [ 196.288571][ T1101] hsr_slave_1: left promiscuous mode [ 196.301550][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.315349][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.329704][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.339708][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.370585][ T1101] veth1_macvtap: left promiscuous mode [ 196.376514][ T1101] veth0_macvtap: left promiscuous mode [ 196.382535][ T1101] veth1_vlan: left promiscuous mode [ 196.388397][ T1101] veth0_vlan: left promiscuous mode [ 196.926075][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 196.968969][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 197.383847][ T5243] Bluetooth: hci4: command tx timeout [ 197.435161][ T7869] hsr_slave_0: entered promiscuous mode [ 197.446289][ T7869] hsr_slave_1: entered promiscuous mode [ 197.494555][ T7869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.502290][ T7869] Cannot create hsr debugfs directory [ 197.532464][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 197.771065][ T8004] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.510'. [ 197.856244][ T8007] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 197.892730][ T7892] hsr_slave_0: entered promiscuous mode [ 197.907621][ T7892] hsr_slave_1: entered promiscuous mode [ 197.922175][ T7892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.933167][ T7892] Cannot create hsr debugfs directory [ 198.081516][ T8009] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.512'. [ 198.253742][ T5243] Bluetooth: hci2: command tx timeout [ 198.542602][ T8018] netlink: 36 bytes leftover after parsing attributes in process `syz.3.515'. [ 198.589101][ T8021] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 198.864989][ T8030] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 198.930280][ T8030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.519'. [ 198.991307][ T8030] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 199.011434][ T8030] team0: Port device netdevsim0 removed [ 199.021874][ T8030] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 199.041472][ T8016] mac80211_hwsim hwsim25 wlan1: left promiscuous mode [ 199.098919][ T7869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.200553][ T7869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.228645][ T7869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.285220][ T7869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.454504][ T5243] Bluetooth: hci4: command tx timeout [ 199.616686][ T7869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.683110][ T7869] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.725001][ T8043] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 199.758522][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.765761][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.812416][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.819690][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.009743][ T7892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.059806][ T7892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.098594][ T7892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.174682][ T7892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.268050][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.275089][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.556841][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 200.690156][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.804111][ T8083] netlink: 'syz.0.531': attribute type 11 has an invalid length. [ 200.805840][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.905168][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.912472][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.969918][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.977394][ T8074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.018758][ T7869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.384288][ T8089] netlink: 'syz.3.533': attribute type 2 has an invalid length. [ 201.729775][ T7869] veth0_vlan: entered promiscuous mode [ 201.805160][ T7869] veth1_vlan: entered promiscuous mode [ 201.951584][ T7869] veth0_macvtap: entered promiscuous mode [ 201.984161][ T7869] veth1_macvtap: entered promiscuous mode [ 202.074284][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.096358][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.106430][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.122629][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.146006][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.160475][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.185808][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.205079][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.230286][ T7869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.328952][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.340767][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.360800][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.373784][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.403815][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.418869][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.431359][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.443112][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.454764][ T8111] netlink: 'syz.3.538': attribute type 6 has an invalid length. [ 202.463036][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 202.475828][ T7869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.501567][ T7869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.519525][ T7869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.528847][ T7869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.545673][ T7869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.391755][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.401818][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.410701][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.422364][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.432176][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.439822][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.089529][ T5246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.100779][ T5246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.117863][ T5246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.133046][ T5246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.156918][ T5246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.171165][ T5246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.253878][ T5244] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 214.276849][ T5244] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 214.289273][ T5244] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 214.302748][ T5244] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 214.319290][ T5244] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 214.329596][ T5244] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 214.493936][ T5246] Bluetooth: hci3: command 0x0406 tx timeout [ 214.500090][ T5244] Bluetooth: hci0: command 0x0406 tx timeout [ 214.653823][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 215.853569][ T5244] Bluetooth: hci6: command tx timeout [ 216.254528][ T5244] Bluetooth: hci7: command tx timeout [ 216.413440][ T5244] Bluetooth: hci8: command tx timeout [ 217.647359][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.953405][ T5244] Bluetooth: hci6: command tx timeout [ 218.333492][ T5244] Bluetooth: hci7: command tx timeout [ 218.495432][ T5244] Bluetooth: hci8: command tx timeout [ 220.013512][ T5243] Bluetooth: hci6: command tx timeout [ 221.156940][ T5243] Bluetooth: hci7: command tx timeout [ 221.163444][ T5243] Bluetooth: hci8: command tx timeout [ 222.093486][ T5238] Bluetooth: hci6: command tx timeout [ 223.223502][ T5238] Bluetooth: hci8: command tx timeout [ 223.228991][ T5238] Bluetooth: hci7: command tx timeout [ 265.015210][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.021753][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.656657][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.666119][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.675051][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.683439][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.693807][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.701663][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.610399][ T5238] Bluetooth: hci1: command tx timeout [ 300.687674][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 300.696837][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 300.705639][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.714453][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.734931][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 300.743572][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 300.751489][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.759346][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.779737][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 300.787280][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 300.795227][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.802333][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.175906][ T5233] Bluetooth: hci1: command tx timeout [ 307.609528][ T5246] Bluetooth: hci1: command tx timeout [ 308.992339][ T5246] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 308.999814][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.006988][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.030484][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.038483][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 309.045810][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.062925][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.070563][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 309.083401][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 309.090529][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.109745][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 309.129069][ T5244] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 311.218663][ T54] Bluetooth: hci1: command tx timeout [ 315.934668][ T5243] Bluetooth: hci3: command tx timeout [ 315.940620][ T5243] Bluetooth: hci9: command tx timeout [ 315.946714][ T5243] Bluetooth: hci5: command tx timeout [ 315.952630][ T5243] Bluetooth: hci10: command tx timeout [ 320.413872][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 320.419968][ T5244] Bluetooth: hci4: command tx timeout [ 320.425595][ T5246] Bluetooth: hci10: command tx timeout [ 320.431508][ T5246] Bluetooth: hci5: command tx timeout [ 320.437045][ T5238] Bluetooth: hci9: command tx timeout [ 320.442464][ T5238] Bluetooth: hci3: command tx timeout [ 330.284034][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.290486][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.302841][ T5244] Bluetooth: hci3: command tx timeout [ 330.308340][ T5244] Bluetooth: hci5: command tx timeout [ 330.313851][ T5244] Bluetooth: hci9: command tx timeout [ 330.319272][ T5244] Bluetooth: hci10: command tx timeout [ 344.637260][ T5238] Bluetooth: hci10: command tx timeout [ 344.643015][ T5238] Bluetooth: hci9: command tx timeout [ 344.648722][ T5238] Bluetooth: hci5: command tx timeout [ 344.654320][ T5238] Bluetooth: hci3: command tx timeout [ 347.719619][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 347.727007][ T5233] Bluetooth: hci7: command 0x0406 tx timeout [ 347.733067][ T5233] Bluetooth: hci8: command 0x0406 tx timeout [ 352.394605][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 352.533471][ T5233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 352.671558][ T5233] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 352.804181][ T5243] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 352.825612][ T5229] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 352.875962][ T5229] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 352.883498][ T5229] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 352.913644][ T5229] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 352.923957][ T5229] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 352.931183][ T5229] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 352.988815][ T5229] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 352.999111][ T5243] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 360.586297][ T5240] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 360.611790][ T5240] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 360.623110][ T5240] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 360.631419][ T5240] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 360.639866][ T5240] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 360.647929][ T5240] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 360.655775][ T5240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 360.677129][ T5240] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 360.692726][ T5240] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 360.702806][ T5240] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 360.710967][ T5240] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 360.719974][ T5240] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 362.275216][ T4618] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 362.310067][ T4618] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 362.351880][ T4618] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 362.413673][ T4618] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 362.455005][ T4618] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 362.468827][ T4618] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 386.810157][ T5241] Bluetooth: hci11: command tx timeout [ 386.816400][ T5241] Bluetooth: hci12: command tx timeout [ 389.183429][ T5244] Bluetooth: hci13: command tx timeout [ 389.189659][ T5244] Bluetooth: hci14: command tx timeout [ 389.195883][ T5244] Bluetooth: hci12: command tx timeout [ 389.201404][ T5244] Bluetooth: hci11: command tx timeout [ 389.207053][ T5244] Bluetooth: hci15: command tx timeout [ 391.465712][ T54] Bluetooth: hci15: command tx timeout [ 391.471276][ T54] Bluetooth: hci11: command tx timeout [ 391.476921][ T54] Bluetooth: hci12: command tx timeout [ 391.482427][ T54] Bluetooth: hci14: command tx timeout [ 391.487967][ T54] Bluetooth: hci13: command tx timeout [ 393.829870][ T5244] Bluetooth: hci13: command tx timeout [ 393.835554][ T5244] Bluetooth: hci14: command tx timeout [ 393.841180][ T5244] Bluetooth: hci12: command tx timeout [ 393.846915][ T5244] Bluetooth: hci11: command tx timeout [ 393.853558][ T5244] Bluetooth: hci15: command tx timeout [ 396.155201][ T54] Bluetooth: hci15: command tx timeout [ 396.160772][ T54] Bluetooth: hci14: command tx timeout [ 396.166386][ T54] Bluetooth: hci13: command tx timeout [ 396.193855][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.200203][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.134719][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 418.086647][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.095561][ T5240] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 418.120019][ T5240] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 418.132773][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.165387][ T5240] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 418.172982][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.213698][ T5241] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 418.222431][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.283937][ T5241] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 418.293378][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 418.322931][ T5241] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 418.333339][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 423.589799][ T5241] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 423.597747][ T5240] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 423.669377][ T5241] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 423.680016][ T5241] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 423.697013][ T5241] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 423.710308][ T5241] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 423.718533][ T5241] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 423.726377][ T5241] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 430.790403][ T5229] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 430.807229][ T5229] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 430.826665][ T5229] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 430.840813][ T5229] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 430.851102][ T5229] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 430.863523][ T5229] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 438.951531][ T8209] Bluetooth: hci5: command 0x0406 tx timeout [ 438.957732][ T8209] Bluetooth: hci9: command 0x0406 tx timeout [ 438.963813][ T8209] Bluetooth: hci3: command 0x0406 tx timeout [ 438.969961][ T8209] Bluetooth: hci10: command 0x0406 tx timeout [ 443.558588][ T30] INFO: task kworker/u8:14:8074 blocked for more than 154 seconds. [ 443.566810][ T30] Not tainted 6.11.0-rc1-syzkaller-00185-gb928e7d19dfd #0 [ 443.591099][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.623207][ T30] task:kworker/u8:14 state:D stack:19736 pid:8074 tgid:8074 ppid:2 flags:0x00004000 [ 443.653225][ T30] Workqueue: events_unbound linkwatch_event [ 443.659228][ T30] Call Trace: [ 443.662615][ T30] [ 443.693346][ T30] __schedule+0x1800/0x4a60 [ 443.698405][ T30] ? __pfx___schedule+0x10/0x10 [ 443.723233][ T30] ? __pfx_lock_release+0x10/0x10 [ 443.728344][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 443.760781][ T30] ? kthread_data+0x52/0xd0 [ 443.765427][ T30] ? schedule+0x90/0x320 [ 443.769819][ T30] ? wq_worker_sleeping+0x66/0x240 [ 443.783198][ T30] ? schedule+0x90/0x320 [ 443.787507][ T30] schedule+0x14b/0x320 [ 443.791694][ T30] schedule_preempt_disabled+0x13/0x30 [ 443.821514][ T30] __mutex_lock+0x6a4/0xd70 [ 443.830578][ T30] ? __mutex_lock+0x527/0xd70 [ 443.843265][ T30] ? linkwatch_event+0xe/0x60 [ 443.848025][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 443.853098][ T30] ? process_scheduled_works+0x945/0x1830 [ 443.863186][ T30] linkwatch_event+0xe/0x60 [ 443.867744][ T30] process_scheduled_works+0xa2c/0x1830 [ 443.883303][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.889379][ T30] ? assign_work+0x364/0x3d0 [ 443.903242][ T30] worker_thread+0x86d/0xd40 [ 443.907933][ T30] ? __kthread_parkme+0x169/0x1d0 [ 443.912997][ T30] ? __pfx_worker_thread+0x10/0x10 [ 443.933248][ T30] kthread+0x2f0/0x390 [ 443.937399][ T30] ? __pfx_worker_thread+0x10/0x10 [ 443.942543][ T30] ? __pfx_kthread+0x10/0x10 [ 443.963442][ T30] ret_from_fork+0x4b/0x80 [ 443.967947][ T30] ? __pfx_kthread+0x10/0x10 [ 443.972588][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.993292][ T30] [ 443.996480][ T30] INFO: task syz-executor:8146 blocked for more than 155 seconds. [ 444.013238][ T30] Not tainted 6.11.0-rc1-syzkaller-00185-gb928e7d19dfd #0 [ 444.020932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.060726][ T30] task:syz-executor state:D stack:24992 pid:8146 tgid:8146 ppid:1 flags:0x00000004 [ 444.083380][ T30] Call Trace: [ 444.086720][ T30] [ 444.089687][ T30] __schedule+0x1800/0x4a60 [ 444.113229][ T30] ? __pfx___schedule+0x10/0x10 [ 444.118171][ T30] ? __pfx_lock_release+0x10/0x10 [ 444.133276][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 444.138837][ T30] ? schedule+0x90/0x320 [ 444.143117][ T30] schedule+0x14b/0x320 [ 444.151292][ T30] schedule_preempt_disabled+0x13/0x30 [ 444.157327][ T30] __mutex_lock+0x6a4/0xd70 [ 444.161973][ T30] ? __mutex_lock+0x527/0xd70 [ 444.166813][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 444.171966][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 444.177088][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 444.182147][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 444.201813][ T30] ? __lock_acquire+0x137a/0x2040 [ 444.217954][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.230061][ T30] netlink_rcv_skb+0x1e3/0x430 [ 444.242968][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.248605][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.254184][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.259441][ T30] netlink_unicast+0x7f0/0x990 [ 444.264321][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 444.269637][ T30] ? __virt_addr_valid+0x183/0x530 [ 444.274880][ T30] ? __check_object_size+0x49c/0x900 [ 444.280194][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 444.285489][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 444.290344][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.295700][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 444.300758][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 444.306227][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 444.311729][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.317124][ T30] __sock_sendmsg+0x221/0x270 [ 444.321845][ T30] __sys_sendto+0x3a4/0x4f0 [ 444.326655][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 444.332786][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 444.338873][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.345317][ T30] ? exc_page_fault+0x590/0x8c0 [ 444.350205][ T30] __x64_sys_sendto+0xde/0x100 [ 444.355069][ T30] do_syscall_64+0xf3/0x230 [ 444.359608][ T30] ? clear_bhb_loop+0x35/0x90 [ 444.364401][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.370344][ T30] RIP: 0033:0x7fe8b0f7978c [ 444.374841][ T30] RSP: 002b:00007ffc28e24090 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 444.383439][ T30] RAX: ffffffffffffffda RBX: 00007fe8b1c34620 RCX: 00007fe8b0f7978c [ 444.391529][ T30] RDX: 0000000000000028 RSI: 00007fe8b1c34670 RDI: 0000000000000003 [ 444.399580][ T30] RBP: 0000000000000000 R08: 00007ffc28e240e4 R09: 000000000000000c [ 444.407624][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 444.415725][ T30] R13: 0000000000000000 R14: 00007fe8b1c34670 R15: 0000000000000000 [ 444.423823][ T30] [ 444.426885][ T30] [ 444.426885][ T30] Showing all locks held in the system: [ 444.435328][ T30] 1 lock held by pool_workqueue_/3: [ 444.440562][ T30] #0: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 444.452472][ T30] 3 locks held by kworker/0:1/9: [ 444.457517][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.468736][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.479803][ T30] #2: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 444.490316][ T30] 3 locks held by kworker/u8:0/11: [ 444.496012][ T30] #0: ffff88802a97e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.507936][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.520969][ T30] #2: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 444.530548][ T30] 2 locks held by kworker/1:0/25: [ 444.536265][ T30] 1 lock held by khungtaskd/30: [ 444.541148][ T30] #0: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 444.552034][ T30] 3 locks held by kworker/1:1/46: [ 444.557168][ T30] #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.569660][ T30] #1: ffffc90000b67d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.580990][ T30] #2: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 444.590685][ T30] 4 locks held by kworker/u9:0/54: [ 444.595854][ T30] #0: ffff88806a1ea948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.607140][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.619261][ T30] #2: ffff888023050078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 444.629367][ T30] #3: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 444.640614][ T30] 2 locks held by kworker/1:2/943: [ 444.646327][ T30] 5 locks held by kworker/u9:1/4618: [ 444.651637][ T30] #0: ffff888023ac4948 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.663807][ T30] #1: ffffc9000cb5fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.676506][ T30] #2: ffff88807c3f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 444.686545][ T30] #3: ffff88807c3f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 444.696327][ T30] #4: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 444.706412][ T30] 2 locks held by getty/4981: [ 444.711106][ T30] #0: ffff88802f9690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.721015][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 444.731326][ T30] 5 locks held by kworker/u9:2/5229: [ 444.736999][ T30] #0: ffff888061518948 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.748594][ T30] #1: ffffc90002dffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.761690][ T30] #2: ffff888059670d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 444.771658][ T30] #3: ffff888059670078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 444.781458][ T30] #4: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 444.791468][ T30] 5 locks held by kworker/u9:4/5238: [ 444.796831][ T30] #0: ffff8880163e4948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.807817][ T30] #1: ffffc900020ffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.822666][ T30] #2: ffff8880796c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 444.841008][ T30] #3: ffff8880796c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 444.853248][ T30] #4: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 444.863092][ T30] 4 locks held by kworker/u9:5/5240: [ 444.868533][ T30] #0: ffff8880356e7948 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 444.943240][ T30] #1: ffffc900020efd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 444.988322][ T30] #2: ffff88807a62c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 445.013269][ T30] #3: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 445.029955][ T30] 4 locks held by kworker/u9:6/5241: [ 445.035306][ T30] #0: ffff88805e498948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 445.046783][ T30] #1: ffffc900020dfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 445.059586][ T30] #2: ffff888023990078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 445.070097][ T30] #3: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 445.080678][ T30] 5 locks held by kworker/u9:7/5243: [ 445.086051][ T30] #0: ffff88807af68148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 445.097203][ T30] #1: ffffc900020cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 445.109877][ T30] #2: ffff88805c230d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 445.119837][ T30] #3: ffff88805c230078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 445.129808][ T30] #4: ffffffff8fdebaa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 445.139674][ T30] 4 locks held by kworker/u9:8/5244: [ 445.145042][ T30] 4 locks held by kworker/u9:9/5246: [ 445.151416][ T30] #0: ffff88802e292148 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 445.162542][ T30] #1: ffffc90003cb7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 445.175273][ T30] #2: ffff888011be4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 445.185207][ T30] #3: ffff888011be4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 445.195019][ T30] 7 locks held by kworker/0:5/5312: [ 445.200238][ T30] 1 lock held by syz-executor/7869: [ 445.205506][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 445.214623][ T30] 1 lock held by syz-executor/7892: [ 445.219856][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 445.228967][ T30] 4 locks held by kworker/u8:10/8067: [ 445.234478][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 445.245516][ T30] #1: ffffc9000346fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 445.256889][ T30] #2: ffffffff8fc73610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 445.266923][ T30] #3: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 445.275939][ T30] 3 locks held by kworker/u8:14/8074: [ 445.281589][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 445.293429][ T30] #1: ffffc9000305fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 445.304520][ T30] #2: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 445.313640][ T30] 1 lock held by syz.3.539/8120: [ 445.318603][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 445.327744][ T30] 2 locks held by syz-executor/8126: [ 445.333044][ T30] #0: ffffffff8fc73610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 445.342563][ T30] #1: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x83d/0xca0 [ 445.351401][ T30] 2 locks held by syz-executor/8129: [ 445.357502][ T30] #0: ffffffff8fc73610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 445.367435][ T30] #1: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 445.377030][ T30] 2 locks held by syz-executor/8131: [ 445.382353][ T30] #0: ffffffff8fc73610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 445.391873][ T30] #1: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 445.401313][ T30] 1 lock held by syz-executor/8146: [ 445.406599][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.427142][ T30] 1 lock held by syz-executor/8152: [ 445.432394][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.446446][ T30] 1 lock held by syz-executor/8153: [ 445.451677][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.492220][ T30] 1 lock held by syz-executor/8154: [ 445.506173][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.515842][ T30] 1 lock held by syz-executor/8155: [ 445.521152][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.530806][ T30] 2 locks held by syz-executor/8169: [ 445.536365][ T30] #0: ffffffff8fc73610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 445.545949][ T30] #1: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 445.563979][ T30] 1 lock held by syz-executor/8175: [ 445.569251][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.586632][ T30] 1 lock held by syz-executor/8180: [ 445.591878][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.602050][ T30] 1 lock held by syz-executor/8181: [ 445.607578][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.617295][ T30] 1 lock held by syz-executor/8186: [ 445.622520][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.632067][ T30] 1 lock held by syz-executor/8196: [ 445.637342][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.646846][ T30] 1 lock held by syz-executor/8198: [ 445.652062][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.662420][ T30] 1 lock held by syz-executor/8201: [ 445.668237][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.677801][ T30] 1 lock held by syz-executor/8204: [ 445.683122][ T30] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.692653][ T30] [ 445.695275][ T30] ============================================= [ 445.695275][ T30] [ 445.704009][ T30] NMI backtrace for cpu 1 [ 445.708354][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00185-gb928e7d19dfd #0 [ 445.718873][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 445.728950][ T30] Call Trace: [ 445.732267][ T30] [ 445.735227][ T30] dump_stack_lvl+0x241/0x360 [ 445.739957][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.745197][ T30] ? __pfx__printk+0x10/0x10 [ 445.749817][ T30] ? vprintk_emit+0x631/0x770 [ 445.754530][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 445.759592][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 445.764592][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.770083][ T30] ? _printk+0xd5/0x120 [ 445.774267][ T30] ? __pfx__printk+0x10/0x10 [ 445.778884][ T30] ? __wake_up_klogd+0xcc/0x110 [ 445.783765][ T30] ? __pfx__printk+0x10/0x10 [ 445.788387][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 445.793439][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.799462][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 445.805490][ T30] watchdog+0xfee/0x1030 [ 445.809773][ T30] ? watchdog+0x1ea/0x1030 [ 445.814228][ T30] ? __pfx_watchdog+0x10/0x10 [ 445.818936][ T30] kthread+0x2f0/0x390 [ 445.823029][ T30] ? __pfx_watchdog+0x10/0x10 [ 445.827736][ T30] ? __pfx_kthread+0x10/0x10 [ 445.832348][ T30] ret_from_fork+0x4b/0x80 [ 445.836798][ T30] ? __pfx_kthread+0x10/0x10 [ 445.841409][ T30] ret_from_fork_asm+0x1a/0x30 [ 445.846223][ T30] [ 445.850012][ T30] Sending NMI from CPU 1 to CPUs 0: [ 445.855866][ C0] NMI backtrace for cpu 0 [ 445.855940][ C0] CPU: 0 UID: 0 PID: 5312 Comm: kworker/0:5 Not tainted 6.11.0-rc1-syzkaller-00185-gb928e7d19dfd #0 [ 445.855962][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 445.855974][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 445.856002][ C0] RIP: 0010:__lock_acquire+0x890/0x2040 [ 445.856030][ C0] Code: c0 0f 85 4d 01 00 00 41 8b 5d 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 98 72 93 be 08 00 00 00 e8 f0 e8 8a 00 <48> 0f a3 1d 48 de 02 12 73 1a 48 69 c3 c8 00 00 00 48 8d 98 00 f7 [ 445.856046][ C0] RSP: 0018:ffffc900041e6910 EFLAGS: 00000056 [ 445.856060][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff816fb9b0 [ 445.856074][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff93729800 [ 445.856086][ C0] RBP: 0000000000000002 R08: ffffffff93729807 R09: 1ffffffff26e5300 [ 445.856099][ C0] R10: dffffc0000000000 R11: fffffbfff26e5301 R12: 0000000000000004 [ 445.856112][ C0] R13: ffff88802fa665a0 R14: 0000000000000004 R15: ffff88802fa665a0 [ 445.856125][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 445.856141][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.856153][ C0] CR2: 00007fc4473df5b0 CR3: 000000000e734000 CR4: 00000000003506f0 [ 445.856169][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.856180][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.856192][ C0] Call Trace: [ 445.856199][ C0] [ 445.856207][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 445.856235][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 445.856261][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.856315][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 445.856338][ C0] ? nmi_handle+0x14f/0x5a0 [ 445.856355][ C0] ? nmi_handle+0x2a/0x5a0 [ 445.856374][ C0] ? __lock_acquire+0x890/0x2040 [ 445.856397][ C0] ? default_do_nmi+0x63/0x160 [ 445.856415][ C0] ? exc_nmi+0x123/0x1f0 [ 445.856431][ C0] ? end_repeat_nmi+0xf/0x53 [ 445.856452][ C0] ? __lock_acquire+0x890/0x2040 [ 445.856476][ C0] ? __lock_acquire+0x890/0x2040 [ 445.856502][ C0] ? __lock_acquire+0x890/0x2040 [ 445.856528][ C0] ? __lock_acquire+0x890/0x2040 [ 445.856552][ C0] [ 445.856558][ C0] [ 445.856574][ C0] lock_acquire+0x1ed/0x550 [ 445.856597][ C0] ? get_random_u16+0x1a2/0xab0 [ 445.856628][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 445.856655][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.856681][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.856712][ C0] get_random_u16+0x1bf/0xab0 [ 445.856736][ C0] ? get_random_u16+0x1a2/0xab0 [ 445.856767][ C0] ? get_random_u16+0x1a2/0xab0 [ 445.856794][ C0] ? __pfx_get_random_u16+0x10/0x10 [ 445.856819][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.856849][ C0] ? irqentry_exit+0x63/0x90 [ 445.856870][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 445.856896][ C0] ? get_random_u16+0x576/0xab0 [ 445.856920][ C0] ? cake_dequeue+0x2a61/0x4690 [ 445.856949][ C0] cake_dequeue+0x296a/0x4690 [ 445.856974][ C0] ? __pfx_cake_enqueue+0x10/0x10 [ 445.857004][ C0] ? mark_lock+0x9a/0x350 [ 445.857046][ C0] ? __pfx_cake_dequeue+0x10/0x10 [ 445.857076][ C0] __qdisc_run+0x272/0x2170 [ 445.857110][ C0] __dev_queue_xmit+0x1119/0x3e90 [ 445.857136][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 445.857156][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 445.857185][ C0] ? mark_lock+0x9a/0x350 [ 445.857213][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.857242][ C0] ? ip_finish_output2+0xa14/0x1390 [ 445.857266][ C0] ? ip_finish_output2+0x45f/0x1390 [ 445.857287][ C0] ip_finish_output2+0xd41/0x1390 [ 445.857310][ C0] ? ip_finish_output2+0x45f/0x1390 [ 445.857336][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 445.857360][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 445.857381][ C0] ? __ip_finish_output+0x349/0x400 [ 445.857405][ C0] iptunnel_xmit+0x540/0x9b0 [ 445.857435][ C0] udp_tunnel_xmit_skb+0x234/0x350 [ 445.857461][ C0] send4+0x99f/0xfb0 [ 445.857487][ C0] ? send4+0x2c3/0xfb0 [ 445.857509][ C0] ? __local_bh_disable_ip+0x187/0x220 [ 445.857534][ C0] ? __pfx_send4+0x10/0x10 [ 445.857557][ C0] ? mod_peer_timer+0x21/0x260 [ 445.857577][ C0] wg_socket_send_skb_to_peer+0xd5/0x1d0 [ 445.857602][ C0] wg_packet_send_handshake_response+0x198/0x2e0 [ 445.857626][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 445.857647][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc9/0x120 [ 445.857677][ C0] ? wg_packet_handshake_receive_worker+0xd2/0xf50 [ 445.857702][ C0] wg_packet_handshake_receive_worker+0x5e6/0xf50 [ 445.857732][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 445.857767][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 445.857792][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.857818][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.857850][ C0] ? process_scheduled_works+0x945/0x1830 [ 445.857873][ C0] process_scheduled_works+0xa2c/0x1830 [ 445.857912][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.857940][ C0] ? assign_work+0x364/0x3d0 [ 445.857965][ C0] worker_thread+0x86d/0xd40 [ 445.857995][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 445.858018][ C0] ? __kthread_parkme+0x169/0x1d0 [ 445.858045][ C0] ? __pfx_worker_thread+0x10/0x10 [ 445.858069][ C0] kthread+0x2f0/0x390 [ 445.858084][ C0] ? __pfx_worker_thread+0x10/0x10 [ 445.858108][ C0] ? __pfx_kthread+0x10/0x10 [ 445.858124][ C0] ret_from_fork+0x4b/0x80 [ 445.858149][ C0] ? __pfx_kthread+0x10/0x10 [ 445.858165][ C0] ret_from_fork_asm+0x1a/0x30 [ 445.858199][ C0] [ 445.858867][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 446.414575][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00185-gb928e7d19dfd #0 [ 446.425103][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 446.435174][ T30] Call Trace: [ 446.438472][ T30] [ 446.441424][ T30] dump_stack_lvl+0x241/0x360 [ 446.446242][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.451467][ T30] ? __pfx__printk+0x10/0x10 [ 446.456080][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.462097][ T30] ? vscnprintf+0x5d/0x90 [ 446.466460][ T30] panic+0x349/0x860 [ 446.470388][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 446.476577][ T30] ? __pfx_panic+0x10/0x10 [ 446.481015][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 446.486413][ T30] ? __irq_work_queue_local+0x137/0x410 [ 446.492171][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 446.497566][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 446.503758][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 446.509952][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 446.516143][ T30] watchdog+0x102d/0x1030 [ 446.520504][ T30] ? watchdog+0x1ea/0x1030 [ 446.524964][ T30] ? __pfx_watchdog+0x10/0x10 [ 446.529669][ T30] kthread+0x2f0/0x390 [ 446.533758][ T30] ? __pfx_watchdog+0x10/0x10 [ 446.538465][ T30] ? __pfx_kthread+0x10/0x10 [ 446.543075][ T30] ret_from_fork+0x4b/0x80 [ 446.547523][ T30] ? __pfx_kthread+0x10/0x10 [ 446.552130][ T30] ret_from_fork_asm+0x1a/0x30 [ 446.556939][ T30] [ 446.560225][ T30] Kernel Offset: disabled [ 446.564554][ T30] Rebooting in 86400 seconds..