last executing test programs: 3m30.537005513s ago: executing program 3 (id=1395): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="464ff4d814851b6e59a5ffe333154967aa08d993471d0ce706624ea35d059ac50934f29d7ee311549d7412fbe0343b465bc358aec0b5eaf47dd445326eb24c523a39a20aa86353ac3de3edcb829bea8662f58f9d5b08f54416e7ce2f64c5b5b6a35a359233023a8db76faae805730558476768ada4f234e5bb7fc32b513f1130542f928db532e9d106de991609bf3cd01d4698ea5055c27fe71ae2bc7d6ebf", @ANYRES8=r0, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f00027673696d30000008008b00000000000000", @ANYRESDEC=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000040), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001070d50dddc0cfab4200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000700000000e00800030000000000140035006d6163766c616e300000000000000000"], 0x60}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc) r12 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r12, 0x6a, 0x1, 0x0, 0x20) setsockopt$inet_tcp_int(r12, 0x6, 0x9, &(0x7f0000000280)=0x10001, 0x4) 3m28.24650333s ago: executing program 3 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r4, @ANYRES32=r6], 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x9, 0x1e, 0x80000001, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) 3m27.484312709s ago: executing program 3 (id=1401): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030500000000000000000020000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[], 0x9) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_subtree(r3, 0x0, 0xfffffe5a) (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) splice(r0, 0x0, r4, 0x0, 0x400000009, 0x0) 3m27.425918265s ago: executing program 3 (id=1402): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x140d, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0xc010) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040)=0xfffff7ff, 0xab) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608c0c0000200600fe8000000000000000000000000000aafe8000000000000000000000000000aafffa4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 3m27.280912784s ago: executing program 3 (id=1403): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200000000000000420dde0e0000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000800)=""/209, 0x41000, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0xbf, 0x24}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f00000005c0)=[{0x5, 0x5, 0x4, 0x7}, {0x4, 0x3, 0xa, 0x6}, {0x0, 0x1, 0x5, 0xc}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000800000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket(0x10, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10) 3m26.897556273s ago: executing program 3 (id=1404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000051) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x81, 0x4) 3m11.401672188s ago: executing program 32 (id=1404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000051) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x81, 0x4) 2m50.140666561s ago: executing program 2 (id=1479): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000000c0)=0x10000, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1823ae60", @ANYRES32, @ANYBLOB="0000000080000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x6d, &(0x7f00000001c0)=""/109, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x10, 0x9, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0x7, 0x5}, {0x1, 0x1, 0x1}, {0x0, 0x5, 0x9}, {0x5, 0x8, 0x1, 0x1}, {0x5, 0x3, 0xf, 0x1}, {0x6e14, 0x2, 0xd, 0x3}, {0x1, 0x2, 0x3, 0x7}], 0x10, 0x30}, 0x94) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)=0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b301d506", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0, 0xf5}, {&(0x7f0000000dc0)="8a", 0x1}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff00003506000002000000170600000ee5e50cbf250000000000001f650000000000007507000002000000170700004c0001000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a3100000000080009"], 0x90}}, 0x0) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/239, 0xef}, 0x2}], 0xa, 0x10162, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800010026bd7000fbdbdf2580201406fd01fe830020000084f30556770413d8dc9845fee61c4dadbff03d2cfa5e80b0371c2440f2da5223b87238a049f4bda64f05c66381fba6a9ed5c4e70a24ca6b7dbbf702f2f8304a33614d5c14d3ca2f14aec495b44e0bdf2b96a0cef"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000740), 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x4044000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001b147df80000000000000000090002007379983268"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x10000005) r9 = socket(0x1000000000000010, 0x80802, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) sendmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000006c0)={0x2, &(0x7f0000000540)=[{}, {}]}) 2m49.813142166s ago: executing program 2 (id=1480): close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m49.433414391s ago: executing program 2 (id=1482): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffea, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r0, 0x58, &(0x7f0000002040)}, 0x6d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f0000000440)=""/73, 0x49}], 0x3}, 0x4cc}], 0x1, 0x10000, &(0x7f0000000540)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) unshare(0x60000) close(0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00022cbd7000d3723412f69e17e7000000000200000008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="628e7889b942da08a50b1ed959deb95c55dd60ca74b63c00f300000040fc1d3c7c65cc096ac44955a93062382d28bbb6f8d82b2318b48ee2"], 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000db8c2ff6d3bb8d45a0e2dd8e67e761380c18f848b4c19e168720ee7e08253e23c2ee2a38315ea22ff11d0ab34b1c9278df7e1bc9e580eb95e1df07b92cf92b3722e1349847c4e636219f5b784062", @ANYRES16=r9, @ANYBLOB="000f2abd7000ffdbdf255a0000000c0099000800000025000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40800d5) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=r11], 0x48) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m42.901870023s ago: executing program 2 (id=1491): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xff, 0xff, 0x3, [@struct={0x2, 0x5, 0x0, 0x4, 0x0, 0xffff70d3, [{0x9, 0x1}, {0x5, 0x1, 0x90}, {0xe, 0x4, 0x8}, {0x4, 0x5, 0x40}, {0x6, 0x2, 0x5}]}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xf, 0x5}, {0xa, 0xa11}, {0x1, 0x5}, {0xa, 0x3}, {0x1, 0x5}]}, @datasec={0xe, 0x2, 0x0, 0xf, 0x3, [{0x3, 0xa, 0x9}, {0x5, 0xfffffffc, 0x5}], "e1c84b"}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @enum64={0xc, 0x2, 0x0, 0x13, 0x1, 0xa, [{0x10, 0x8, 0xb}, {0xd, 0x7fff, 0x100}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f]}}, &(0x7f00000003c0)=""/226, 0x11b, 0xe2, 0x1, 0x1000, 0x10000}, 0x28) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0xff, @loopback, 0x4e20, 0x3, 'fo\x00', 0x34, 0x5, 0x6d}, 0x2c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0x20, &(0x7f0000001800)={&(0x7f0000000740)=""/176, 0xb0, 0x0, &(0x7f0000000800)=""/4096, 0x1000}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_lsm={0x1d, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900009500000000000000180000000800000000000000b7020000000000008500000085000000b7000000000000009500"/112], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x6e, &(0x7f0000000580)=""/110, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xa, 0x1, 0xb6}, 0x10, r3, 0x0, 0x1, &(0x7f0000001880), &(0x7f00000018c0)=[{0x3, 0x2, 0x3}], 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.901203058s ago: executing program 2 (id=1493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0xe4ada3a5ad853726, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x84) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x90) 2m41.69761638s ago: executing program 2 (id=1497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x1014}, 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r0, 0x0, 0x8001}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r8, 0x605, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r6, 0x0, 0xf}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xf, 0x0, &(0x7f0000000840)) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000002500010000000000f100000006", @ANYRES64=r4, @ANYRESDEC=0x0], 0x14}], 0x1, 0x0, 0x0, 0x60008011}, 0x0) 2m26.129495879s ago: executing program 33 (id=1497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x1014}, 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r0, 0x0, 0x8001}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r8, 0x605, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r6, 0x0, 0xf}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xf, 0x0, &(0x7f0000000840)) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000002500010000000000f100000006", @ANYRES64=r4, @ANYRESDEC=0x0], 0x14}], 0x1, 0x0, 0x0, 0x60008011}, 0x0) 2m3.388964985s ago: executing program 6 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x20000881) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x42, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 2m3.2381103s ago: executing program 6 (id=1548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000008a715ac4397c4062e54b105d95023e7649ff3e473d4af99105c4da3a4c57abf2d2cef9955f43797a5e591e7c2dc5bae717f713ee0009dfe0e177d4036f6889ca2833b54a767bed1dc9f0465ac1c163b0f71e8e5babc3460b06286674dd1ccd0433b5122a9f5daa950d1a3bc7857aeb7c2386475c52", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x9, 0x92, {{0x1e, 0x4, 0x0, 0x1f, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x74, 0x1, 0x6, [{@remote, 0x4}, {@rand_addr=0x64010100, 0x2}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x8, [{@empty, 0x800}]}, @ssrr={0x89, 0xb, 0xac, [@rand_addr=0x64010101, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xa3, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x27, 0x1b, [@rand_addr=0x64010101, @loopback, @local, @rand_addr=0x64010101, @empty, @remote, @rand_addr=0x64010100, @multicast1, @loopback]}]}}}}}) 2m1.697063458s ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000ab04000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000f8ff00000000bfa200000000000001020000ffffffb703000008000000b7040000030000fc6b0000001e0000b43e0000000000eddb9ce800"/71], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m57.388756649s ago: executing program 6 (id=1556): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) close(0x3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (async) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x1000f) 1m57.25769409s ago: executing program 6 (id=1557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x102) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f00000003c0)="0f45d9c0b4975d26298129b7b88c82116b255ef97b3c68778f15ba7e467849a4b6a0f4dbeac6a26160bcb7890ec3a7a27f4421d6807072e5bef8d7443d79de2a89495ced60ec05e2f602166377f497a62982accf85b6126da8ea9384363e00ca5474f4c37adb4b17e7a3a27dd934e21fec8100a6593a2d5b", &(0x7f0000000380)=@tcp}, 0x20) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1e, 0x1, 0x0) shutdown(r8, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f80)={'veth0_to_bond\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x25}, 0x20) 1m56.301711522s ago: executing program 6 (id=1558): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000200)=@ethtool_regs={0x11}}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4062, 0xfde}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f00000011c0)=""/209, 0xd1}], 0x4}, 0x40000100) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1m55.854611092s ago: executing program 6 (id=1559): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x7f, @empty, 0x45db}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000000000002900000039000000290202"], 0x40}, 0x40058c0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async, rerun: 32) pipe(&(0x7f0000002740)) (async, rerun: 32) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r10], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x60, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x60}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m48.548634767s ago: executing program 0 (id=1078): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc80}, 0x94) 1m47.246680021s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000001ffb4fb900000000000a2000000000f002000000000000000000010000000900010073797a300104000000000000000001df72797a320000010073797a3000000000080005400000001f290011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100"/137], 0xac}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 1m40.062755187s ago: executing program 34 (id=1559): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x7f, @empty, 0x45db}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000000000002900000039000000290202"], 0x40}, 0x40058c0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async, rerun: 32) pipe(&(0x7f0000002740)) (async, rerun: 32) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r10], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x60, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x60}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m32.201947203s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000001ffb4fb900000000000a2000000000f002000000000000000000010000000900010073797a300104000000000000000001df72797a320000010073797a3000000000080005400000001f290011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100"/137], 0xac}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 1m29.645270586s ago: executing program 0 (id=1078): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc80}, 0x94) 1m27.512622953s ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000ab04000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000f8ff00000000bfa200000000000001020000ffffffb703000008000000b7040000030000fc6b0000001e0000b43e0000000000eddb9ce800"/71], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m11.636333633s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000001ffb4fb900000000000a2000000000f002000000000000000000010000000900010073797a300104000000000000000001df72797a320000010073797a3000000000080005400000001f290011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100"/137], 0xac}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 1m10.304520209s ago: executing program 0 (id=1078): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc80}, 0x94) 1m8.927575114s ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000ab04000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000f8ff00000000bfa200000000000001020000ffffffb703000008000000b7040000030000fc6b0000001e0000b43e0000000000eddb9ce800"/71], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.493428714s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000001ffb4fb900000000000a2000000000f002000000000000000000010000000900010073797a300104000000000000000001df72797a320000010073797a3000000000080005400000001f290011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100"/137], 0xac}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 51.69680433s ago: executing program 0 (id=1078): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc80}, 0x94) 49.992361749s ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000ab04000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000f8ff00000000bfa200000000000001020000ffffffb703000008000000b7040000030000fc6b0000001e0000b43e0000000000eddb9ce800"/71], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.65277417s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000001ffb4fb900000000000a2000000000f002000000000000000000010000000900010073797a300104000000000000000001df72797a320000010073797a3000000000080005400000001f290011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100"/137], 0xac}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 29.265260247s ago: executing program 0 (id=1078): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc80}, 0x94) 26.641339076s ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000ab04000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000f8ff00000000bfa200000000000001020000ffffffb703000008000000b7040000030000fc6b0000001e0000b43e0000000000eddb9ce800"/71], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.177836449s ago: executing program 0 (id=1078): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc80}, 0x94) 9.316698137s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000001ffb4fb900000000000a2000000000f002000000000000000000010000000900010073797a300104000000000000000001df72797a320000010073797a3000000000080005400000001f290011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100"/137], 0xac}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 7.691490215s ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000ab04000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="000000f8ff00000000bfa200000000000001020000ffffffb703000008000000b7040000030000fc6b0000001e0000b43e0000000000eddb9ce800"/71], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.056042868s ago: executing program 7 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="000000000b000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70c00000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf0000000000000000008500000020000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000018000000000000005000000851000000500000085000000bb000000a7000000000000001800000000000000000000000000000095000000000000009500000200000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r5) 4.952024505s ago: executing program 7 (id=1844): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r1, 0x0, r1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'broute\x00', 0x0, 0x3, 0x13, [0x4, 0x7ff, 0x0, 0x7fffffffffffffff, 0xc7c], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000140)=""/19}, &(0x7f0000000180)=0x78) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18, 0x7000000}, 0xf401}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x1, 0x4, 0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x2e0}}], 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, 0x0, 0x11e) r7 = accept$phonet_pipe(r6, &(0x7f0000000400), &(0x7f0000000440)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000480)={r7}) unshare(0x0) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000240)=0xa, 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x1, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) 4.756630203s ago: executing program 7 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x7, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="67e8664cc0a914aa5cb1629fa2f704c97c7693324fc55882eeb063adccf9647be5e84a73169d489a225acea0d2a70e990cd19a624587dc1d681a108215cfd460c58cfeb3f364fe5c343f51800c2f595497657de81c46f7f5f54f351f26e1b253cbc6822d8909bc0e26230cb820eb46d734dbc1609fd67da94df713513a795e454f99212d7c578da743af35aa6ed2c1", 0x8f, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) shutdown(r1, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @remote, 0x2, "4f6f0100000000000000d47d110b843af297baebb0efcd061784da144a011a00", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900"}, 0x3c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="5f72000000000000080001009810660ffb67f3813b4c69ff3f0300"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.545946761s ago: executing program 7 (id=1849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005680)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x0, 0x3, 0x9}, 0x20) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 4.364785344s ago: executing program 7 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) (async) unshare(0x62040200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-cpuacct +cpuacct -net -rlimit -memory -nen -cpuset '], 0x34) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="100a06000908010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r10 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010000300686173683a69702c6d616300a20fe3"], 0x54}}, 0x0) sendmsg$sock(r9, 0xfffffffffffffffd, 0x4000000) 833.80276ms ago: executing program 7 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYBLOB="97f7f923a9566a8763bf2f06ef962e5f5c81262fb2c6b184e8b0b59c719224c046ed89189bcaaa4eb3a9384fbde086b0f7d44d9c807ac5e2647dfeaa959d717b91c71ef249c90b2af6605fd9b9e8", @ANYRES64=0x0, @ANYRESHEX, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000ef060000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000002c0), &(0x7f0000001840)=@udp6}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12) sendfile(r5, r4, 0x0, 0xf03a0005) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000300)={{0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e23, 0x3, 'lblc\x00', 0x27, 0x9, 0xe}, {@empty, 0x4e23, 0x0, 0x7d, 0x8, 0x800}}, 0x44) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0xaf14234e76d72b58}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, &(0x7f00000006c0)=0x84) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="470d0000000000000280000000d1"], 0x18}}, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r6, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x20040884) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xf1, 0x20}, &(0x7f00000002c0)=0xc) 593.387775ms ago: executing program 5 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@dellink={0x78, 0x11, 0x23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@IFLA_GROUP={0x8, 0x1b, 0xfda}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_TXQLEN={0x8, 0xd, 0xeb}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_EVENT={0xfffffffffffffcea, 0x2c, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) 571.622106ms ago: executing program 5 (id=1861): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feff"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async, rerun: 64) r1 = socket(0x15, 0x5, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x44}}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000011) connect$netrom(r1, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async, rerun: 64) getsockname$tipc(r1, 0x0, &(0x7f0000000080)) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000002b80)=""/4120, 0x1018}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000b80)=""/218, 0xda}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x9, 0x20, 0x0) 308.787027ms ago: executing program 5 (id=1862): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x1000000, 0x40}, 0x4080) 197.431372ms ago: executing program 5 (id=1863): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000220000000a0001007770611df2906995bf7a4a2a6c0000009000004a6eab811aa107fa43942eaf4e36060000000000"], 0x20}}, 0x2000c094) syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$inet6(r1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffff7fff00000041, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 135.691439ms ago: executing program 5 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRESOCT=r0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c002100", @ANYRESDEC], 0x70}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080), 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a1700ff3573905dea82255638e0168dbb7487d62af8e53ccbaea076a6602b38113df4b83696786e699a21680372eee8a3eeb3e370eaa841840f2dfa278ef15628ee399aca1a9dc6a45fda1653dc80eb33521d3c738c1a96ed0801b268e503c6b4744acb00080498eba2a2c1fd17482193cc9bb1fc58741c4cc44b11b4931a32d490c754e92b9a59bc223c5fc862f26b1793f9915ca062958b46d8fd78facaa5f6ecec90aa9bd123c63c242ed11db981bfa6f82ddd490b8b2c58a71abed80489afa0553ad7cb947878b05eb7dc9bd9089de1699ec8ac3fefbca9edb3d61e3f", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000100200100000000000000000000000000020800090005000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x4004084) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000240)={r9, 0xffff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r10, 0x2}, 0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8, 0x6, 0x9, r6}, &(0x7f0000000100)=0x10) 0s ago: executing program 5 (id=1865): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xc6e8fd6a5c3f08ed, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x130, 0x98, 0xffffffff, 0x1c8, 0x98, 0x1c8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x130, 0x98, 0xffffffff, 0x1c8, 0x98, 0x1c8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): mode [ 407.613123][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.705334][ T51] Bluetooth: hci7: command tx timeout [ 407.989554][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.000492][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.011429][ T49] bond0 (unregistering): Released all slaves [ 408.026039][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.035750][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.046757][T12545] veth0_vlan: entered promiscuous mode [ 408.101402][ T1099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.112603][ T1099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.131307][T12545] veth1_vlan: entered promiscuous mode [ 408.418442][ T8460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.429308][ T8460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.477583][T12545] veth0_macvtap: entered promiscuous mode [ 408.569017][T12545] veth1_macvtap: entered promiscuous mode [ 408.632378][ T8459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.643401][T12588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.669787][ T8459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.733700][T12545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.778955][T12545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.822590][ T2949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.873612][ T211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.893405][ T211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.932412][ T211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.273181][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.291014][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.313032][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.332432][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.348972][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.387489][T12706] macvtap1: entered promiscuous mode [ 409.407882][T12706] vlan0: entered promiscuous mode [ 409.428867][T12706] macvtap1: entered allmulticast mode [ 409.484607][T12705] macvtap2: entered promiscuous mode [ 409.502162][T12705] macvtap2: entered allmulticast mode [ 409.618425][ T49] hsr_slave_0: left promiscuous mode [ 409.633655][ T49] hsr_slave_1: left promiscuous mode [ 409.639876][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.647759][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.656706][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.664162][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.698698][ T49] veth1_macvtap: left promiscuous mode [ 409.704264][ T49] veth0_macvtap: left promiscuous mode [ 409.710545][ T49] veth1_vlan: left promiscuous mode [ 409.716014][ T49] veth0_vlan: left promiscuous mode [ 410.200877][ T49] team0 (unregistering): Port device team_slave_1 removed [ 410.248906][ T49] team0 (unregistering): Port device team_slave_0 removed [ 410.718241][T12702] vxcan1 speed is unknown, defaulting to 1000 [ 410.737026][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.746022][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.896191][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.904232][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.970919][T12588] veth0_vlan: entered promiscuous mode [ 411.000997][T12588] veth1_vlan: entered promiscuous mode [ 411.211608][T12714] vlan3: entered promiscuous mode [ 411.229868][T12714] vlan3: entered allmulticast mode [ 411.315280][T12588] veth0_macvtap: entered promiscuous mode [ 411.326611][T12702] lo speed is unknown, defaulting to 1000 [ 411.329386][T12588] veth1_macvtap: entered promiscuous mode [ 411.342928][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1602'. [ 411.387902][ T51] Bluetooth: hci3: command tx timeout [ 411.583845][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.593840][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.603001][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.647883][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.671800][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.700004][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.751538][T12588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.837034][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.854976][T12588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.888060][ T1112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.898027][ T1112] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.920342][T12715] vxcan1 speed is unknown, defaulting to 1000 [ 411.920410][ T1112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.939269][ T1112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.980463][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.093670][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.270380][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.295145][T12715] lo speed is unknown, defaulting to 1000 [ 412.313263][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.379092][T12702] chnl_net:caif_netlink_parms(): no params data found [ 412.495150][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.503001][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.571690][ T49] bridge_slave_1: left allmulticast mode [ 412.577463][ T49] bridge_slave_1: left promiscuous mode [ 412.583253][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.604039][ T49] bridge_slave_0: left allmulticast mode [ 412.609946][ T49] bridge_slave_0: left promiscuous mode [ 412.615871][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.978367][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.989823][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.002093][ T49] bond0 (unregistering): Released all slaves [ 413.106936][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.114202][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.122630][T12702] bridge_slave_0: entered allmulticast mode [ 413.130892][T12702] bridge_slave_0: entered promiscuous mode [ 413.139843][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.149281][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.156671][T12702] bridge_slave_1: entered allmulticast mode [ 413.164657][T12702] bridge_slave_1: entered promiscuous mode [ 413.351818][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.379590][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.472773][ T5841] Bluetooth: hci3: command tx timeout [ 413.705344][ T5841] Bluetooth: hci5: command tx timeout [ 413.823517][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.839642][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.848724][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.857530][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.867212][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.936390][T12702] team0: Port device team_slave_0 added [ 413.957053][T12702] team0: Port device team_slave_1 added [ 414.088936][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1605'. [ 414.117863][ T9] IPVS: starting estimator thread 0... [ 414.244499][T12738] IPVS: using max 33 ests per chain, 79200 per kthread [ 414.342826][T12702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.363143][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.454160][T12742] ieee802154 phy1 wpan1: encryption failed: -126 [ 414.456587][T12702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.485250][T12702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.493332][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.545062][T12702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.604697][ T49] hsr_slave_0: left promiscuous mode [ 414.611089][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1607'. [ 414.620532][ T49] hsr_slave_1: left promiscuous mode [ 414.626765][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.634216][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.643928][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.651495][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.694560][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 414.698909][ T49] veth1_macvtap: left promiscuous mode [ 414.711137][ T49] veth0_macvtap: left promiscuous mode [ 414.718740][ T49] veth1_vlan: left promiscuous mode [ 414.724009][ T49] veth0_vlan: left promiscuous mode [ 414.990496][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1609'. [ 415.322107][ T49] team0 (unregistering): Port device team_slave_1 removed [ 415.371841][ T49] team0 (unregistering): Port device team_slave_0 removed [ 415.545189][ T51] Bluetooth: hci3: command tx timeout [ 415.785191][ T51] Bluetooth: hci5: command tx timeout [ 415.859730][T12731] vxcan1 speed is unknown, defaulting to 1000 [ 415.941364][T12702] hsr_slave_0: entered promiscuous mode [ 415.948242][ T51] Bluetooth: hci6: command tx timeout [ 415.964374][T12702] hsr_slave_1: entered promiscuous mode [ 415.971723][T12702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.991817][T12702] Cannot create hsr debugfs directory [ 416.015398][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1608'. [ 416.097961][T12754] netlink: 'syz.7.1610': attribute type 2 has an invalid length. [ 416.397663][T12731] lo speed is unknown, defaulting to 1000 [ 416.484544][T12715] chnl_net:caif_netlink_parms(): no params data found [ 416.535783][T12768] Bluetooth: MGMT ver 1.23 [ 416.731673][T12775] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1615'. [ 416.755288][T12775] netlink: 'syz.7.1615': attribute type 1 has an invalid length. [ 416.846276][T12783] ieee802154 phy1 wpan1: encryption failed: -126 [ 416.962381][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.964252][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1619'. [ 417.185872][T12786] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.250433][T12715] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.262647][T12715] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.273340][T12715] bridge_slave_0: entered allmulticast mode [ 417.282194][T12715] bridge_slave_0: entered promiscuous mode [ 417.320583][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.373973][T12786] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.392518][T12795] netlink: 'syz.5.1621': attribute type 3 has an invalid length. [ 417.400851][T12715] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.408177][T12715] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.415577][T12715] bridge_slave_1: entered allmulticast mode [ 417.427605][T12715] bridge_slave_1: entered promiscuous mode [ 417.507872][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.553661][T12786] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.635784][ T51] Bluetooth: hci3: command tx timeout [ 417.681584][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.709141][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.723653][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.753547][T12786] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.777179][T12802] netlink: 'syz.5.1623': attribute type 26 has an invalid length. [ 417.863897][T12715] team0: Port device team_slave_0 added [ 417.869851][ T51] Bluetooth: hci5: command tx timeout [ 417.939971][T12803] syzkaller0: entered promiscuous mode [ 417.946005][T12803] syzkaller0: entered allmulticast mode [ 417.964525][T12715] team0: Port device team_slave_1 added [ 418.025212][ T51] Bluetooth: hci6: command tx timeout [ 418.057772][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.064742][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.095072][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.688319][ T8460] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.697455][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.704407][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.731962][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.841368][T12806] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1624'. [ 419.952331][ T2949] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.960738][ T51] Bluetooth: hci5: command tx timeout [ 419.992557][ T49] bridge_slave_1: left allmulticast mode [ 419.999530][ T49] bridge_slave_1: left promiscuous mode [ 420.007173][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.019842][ T49] bridge_slave_0: left allmulticast mode [ 420.027053][ T49] bridge_slave_0: left promiscuous mode [ 420.032753][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.105207][ T51] Bluetooth: hci6: command tx timeout [ 420.379213][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.390428][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.401192][ T49] bond0 (unregistering): Released all slaves [ 420.425196][T12715] hsr_slave_0: entered promiscuous mode [ 420.433043][T12715] hsr_slave_1: entered promiscuous mode [ 420.440165][T12715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.447933][T12715] Cannot create hsr debugfs directory [ 420.482189][ T1099] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.518298][ T8460] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.551190][T12809] bond2: entered promiscuous mode [ 420.556560][T12809] bond2: entered allmulticast mode [ 420.562161][T12809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.660988][T12702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.705207][T12731] chnl_net:caif_netlink_parms(): no params data found [ 420.736193][T12702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.766581][T12702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.791053][T12702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.992027][T12815] vxcan1 speed is unknown, defaulting to 1000 [ 421.038963][T12823] ieee802154 phy1 wpan1: encryption failed: -126 [ 421.252749][T12826] netlink: 'syz.5.1626': attribute type 2 has an invalid length. [ 421.313617][T12836] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1631'. [ 421.332068][T12836] xt_TCPMSS: Only works on TCP SYN packets [ 421.373695][T12731] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.403902][T12731] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.411411][T12731] bridge_slave_0: entered allmulticast mode [ 421.419632][T12731] bridge_slave_0: entered promiscuous mode [ 421.461683][T12815] lo speed is unknown, defaulting to 1000 [ 421.467433][T12731] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.467529][T12731] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.467690][T12731] bridge_slave_1: entered allmulticast mode [ 421.469446][T12731] bridge_slave_1: entered promiscuous mode [ 421.691156][T12731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.724441][T12731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.851012][T12731] team0: Port device team_slave_0 added [ 421.954704][T12731] team0: Port device team_slave_1 added [ 421.988569][T12702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.033947][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1634'. [ 422.052370][T12846] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1634'. [ 422.125587][T12845] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 422.147032][T12731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.153999][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.190815][ T51] Bluetooth: hci6: command tx timeout [ 422.233223][T12731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.254777][T12848] netlink: 'syz.7.1635': attribute type 5 has an invalid length. [ 422.273530][T12848] netlink: 'syz.7.1635': attribute type 1 has an invalid length. [ 422.282238][T12848] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.1635'. [ 422.292774][T12731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.305001][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.341617][T12731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.383428][ T49] hsr_slave_0: left promiscuous mode [ 422.389896][ T49] hsr_slave_1: left promiscuous mode [ 422.397861][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.405338][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.414181][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.421835][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.451236][ T49] veth1_macvtap: left promiscuous mode [ 422.457250][ T49] veth0_macvtap: left promiscuous mode [ 422.462991][ T49] veth1_vlan: left promiscuous mode [ 422.469141][ T49] veth0_vlan: left promiscuous mode [ 422.489737][T12852] netlink: 'syz.7.1636': attribute type 15 has an invalid length. [ 423.006847][ T49] team0 (unregistering): Port device team_slave_1 removed [ 423.052800][ T49] team0 (unregistering): Port device team_slave_0 removed [ 423.537767][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1637'. [ 423.699295][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.751101][T12731] hsr_slave_0: entered promiscuous mode [ 423.764173][T12731] hsr_slave_1: entered promiscuous mode [ 423.771065][T12731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.779227][T12731] Cannot create hsr debugfs directory [ 423.876033][T12865] ieee802154 phy1 wpan1: encryption failed: -126 [ 423.923790][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.931004][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.201621][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.208840][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.364293][T12715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.408943][T12715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.454329][T12715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.522802][T12715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.873230][T12715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.993952][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.005724][T12731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.023642][T12731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.037727][T12731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.059212][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.066399][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.082846][T12731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.104699][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.130895][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.138085][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.291273][T12903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1645'. [ 425.331005][T12899] vxcan1 speed is unknown, defaulting to 1000 [ 425.390148][T12702] veth0_vlan: entered promiscuous mode [ 425.431597][T12702] veth1_vlan: entered promiscuous mode [ 425.555111][T12702] veth0_macvtap: entered promiscuous mode [ 425.599837][T12702] veth1_macvtap: entered promiscuous mode [ 425.682209][T12731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.719974][T12702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.777120][T12702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.823912][T12731] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.879055][T12899] lo speed is unknown, defaulting to 1000 [ 425.956971][T12911] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1648'. [ 425.970907][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.978094][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.988048][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1648'. [ 426.027817][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.047229][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.078939][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.086159][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.141610][T12911] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 426.164031][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.231127][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.308632][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.493785][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.567903][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.712965][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.715260][T12715] veth0_vlan: entered promiscuous mode [ 426.733108][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.763354][T12715] veth1_vlan: entered promiscuous mode [ 426.851768][T12715] veth0_macvtap: entered promiscuous mode [ 426.895603][T12917] netlink: 'syz.7.1649': attribute type 23 has an invalid length. [ 426.923581][T12715] veth1_macvtap: entered promiscuous mode [ 427.016977][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.057834][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.109201][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.199115][T12922] ieee802154 phy1 wpan1: encryption failed: -126 [ 427.255784][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.292868][ T1099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.301907][ T1099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.541722][ T211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.661418][T12731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.755432][ T211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.828163][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.840236][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.887710][ T211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.951046][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.964930][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.095259][ T211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.237452][T12731] veth0_vlan: entered promiscuous mode [ 428.250281][T12731] veth1_vlan: entered promiscuous mode [ 428.282995][T12731] veth0_macvtap: entered promiscuous mode [ 428.293686][T12731] veth1_macvtap: entered promiscuous mode [ 428.317724][T12731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.340800][T12731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.357443][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.388654][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.412813][ T1099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.431676][ T1099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.517832][ T211] bridge_slave_1: left allmulticast mode [ 428.525126][ T211] bridge_slave_1: left promiscuous mode [ 428.531744][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.543101][ T211] bridge_slave_0: left allmulticast mode [ 428.549192][ T211] bridge_slave_0: left promiscuous mode [ 428.556201][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.994561][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.011459][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.026393][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.042796][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.058288][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.132654][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.149938][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.160081][ T211] bond0 (unregistering): Released all slaves [ 429.261768][T12937] vxcan1 speed is unknown, defaulting to 1000 [ 429.263394][ T8459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.296819][ T8459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.389164][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.397745][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.579995][T12937] lo speed is unknown, defaulting to 1000 [ 430.191984][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1654'. [ 430.448903][ T211] hsr_slave_0: left promiscuous mode [ 430.458934][ T211] hsr_slave_1: left promiscuous mode [ 430.466741][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.474279][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.482700][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.490941][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.517724][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.534085][ T211] veth1_macvtap: left promiscuous mode [ 430.540170][ T211] veth0_macvtap: left promiscuous mode [ 430.540223][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.545908][ T211] veth1_vlan: left promiscuous mode [ 430.559661][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.559746][ T211] veth0_vlan: left promiscuous mode [ 430.580240][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.596515][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.094513][ T211] team0 (unregistering): Port device team_slave_1 removed [ 431.148936][ T5156] Bluetooth: hci3: command tx timeout [ 431.163136][ T211] team0 (unregistering): Port device team_slave_0 removed [ 431.869158][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 432.168151][T12984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.239789][T12984] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.1660'. [ 432.249370][T12984] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 432.301141][T12937] chnl_net:caif_netlink_parms(): no params data found [ 432.378299][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 432.388653][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 432.394638][T12951] vxcan1 speed is unknown, defaulting to 1000 [ 432.404172][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 432.427916][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.447075][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 432.651263][T12997] ieee802154 phy1 wpan1: encryption failed: -126 [ 432.675222][ T5841] Bluetooth: hci5: command tx timeout [ 432.718125][T12937] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.731812][T12937] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.740803][T12937] bridge_slave_0: entered allmulticast mode [ 432.757922][T12937] bridge_slave_0: entered promiscuous mode [ 432.785058][T12937] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.805017][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.815638][T12937] bridge_slave_1: entered allmulticast mode [ 432.824456][T12937] bridge_slave_1: entered promiscuous mode [ 432.858287][T12951] lo speed is unknown, defaulting to 1000 [ 432.862513][T12989] vxcan1 speed is unknown, defaulting to 1000 [ 433.023763][T12937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.086405][T12937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.224330][T12937] team0: Port device team_slave_0 added [ 433.225862][ T5841] Bluetooth: hci3: command tx timeout [ 433.266896][T12937] team0: Port device team_slave_1 added [ 433.331752][ T211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.401133][T12989] lo speed is unknown, defaulting to 1000 [ 433.403016][T12937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.415386][T12937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.450926][T12937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.492812][T12937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.500150][T12937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.526501][T12937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.570778][ T211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.689674][ T211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.779484][ T211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.808788][T12937] hsr_slave_0: entered promiscuous mode [ 433.816152][T12937] hsr_slave_1: entered promiscuous mode [ 433.825485][T12937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.833077][T12937] Cannot create hsr debugfs directory [ 434.046822][T13012] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1666'. [ 434.138618][T13012] xt_CT: No such helper "snmp" [ 434.275544][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1668'. [ 434.368230][T12951] chnl_net:caif_netlink_parms(): no params data found [ 434.504994][ T5841] Bluetooth: hci6: command tx timeout [ 434.574205][T13027] xt_hashlimit: size too large, truncated to 1048576 [ 434.595250][T13027] xt_hashlimit: overflow, try lower: 3/0 [ 434.656929][ T211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.670054][T13031] Unsupported ieee802154 address type: 0 [ 434.678574][T13032] netlink: 'syz.7.1670': attribute type 8 has an invalid length. [ 434.738271][T12989] chnl_net:caif_netlink_parms(): no params data found [ 434.745335][ T5841] Bluetooth: hci5: command tx timeout [ 434.783746][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1671'. [ 434.819268][ T211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.898418][T13031] geneve0: left allmulticast mode [ 434.904251][T12951] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.920633][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.928048][T12951] bridge_slave_0: entered allmulticast mode [ 434.945679][T12951] bridge_slave_0: entered promiscuous mode [ 435.018695][ T211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.043242][T12951] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.066255][T12951] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.077566][T12951] bridge_slave_1: entered allmulticast mode [ 435.084585][T12951] bridge_slave_1: entered promiscuous mode [ 435.154789][ T211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.306701][ T5841] Bluetooth: hci3: command tx timeout [ 435.313695][T12951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.409516][T12951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.455706][T13057] netlink: 'syz.5.1677': attribute type 1 has an invalid length. [ 435.464569][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 435.475596][T12989] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.482671][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.492231][T12989] bridge_slave_0: entered allmulticast mode [ 435.500273][T12989] bridge_slave_0: entered promiscuous mode [ 435.509139][T12989] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.518340][T12989] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.526010][T12989] bridge_slave_1: entered allmulticast mode [ 435.533171][T12989] bridge_slave_1: entered promiscuous mode [ 435.582263][T13059] netlink: 'syz.7.1676': attribute type 10 has an invalid length. [ 435.662460][T12989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.697066][T12951] team0: Port device team_slave_0 added [ 435.708719][T12951] team0: Port device team_slave_1 added [ 435.748612][T12989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.792900][T12951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.804694][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.831931][T12951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.878923][T12951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.896536][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.923062][T12951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.058915][T12989] team0: Port device team_slave_0 added [ 436.083254][T12989] team0: Port device team_slave_1 added [ 436.156280][ T211] bridge_slave_1: left allmulticast mode [ 436.161958][ T211] bridge_slave_1: left promiscuous mode [ 436.170057][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.196703][ T211] bridge_slave_0: left allmulticast mode [ 436.203161][ T211] bridge_slave_0: left promiscuous mode [ 436.209210][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.221434][ T211] bridge_slave_1: left allmulticast mode [ 436.227296][ T211] bridge_slave_1: left promiscuous mode [ 436.233147][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.244011][ T211] bridge_slave_0: left allmulticast mode [ 436.252442][ T211] bridge_slave_0: left promiscuous mode [ 436.258537][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.589547][ T5841] Bluetooth: hci6: command tx timeout [ 436.724314][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.737457][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.752818][ T211] bond0 (unregistering): Released all slaves [ 436.830033][ T5841] Bluetooth: hci5: command tx timeout [ 437.085595][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.101038][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.111162][ T211] bond0 (unregistering): Released all slaves [ 437.152765][T12951] hsr_slave_0: entered promiscuous mode [ 437.165910][T12951] hsr_slave_1: entered promiscuous mode [ 437.172375][T12951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.180371][T12951] Cannot create hsr debugfs directory [ 437.385051][ T5841] Bluetooth: hci3: command tx timeout [ 437.443571][T12989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.485994][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.513418][T12989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.590751][T12989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.600079][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.631616][T12989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.683075][T12937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.734512][T13088] netlink: 'syz.7.1686': attribute type 1 has an invalid length. [ 437.772227][T12937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.810388][T13088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.836722][T12937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.860938][T13092] bond1: (slave veth0_to_bond): making interface the new active one [ 437.875953][T13092] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 437.962396][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1689'. [ 437.969831][T13088] vlan2: entered allmulticast mode [ 437.979233][T13088] veth1: entered allmulticast mode [ 437.984609][T12937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.069409][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1689'. [ 438.147089][T12989] hsr_slave_0: entered promiscuous mode [ 438.153887][T12989] hsr_slave_1: entered promiscuous mode [ 438.161299][T12989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.169382][T12989] Cannot create hsr debugfs directory [ 438.440068][T13117] netlink: 'syz.5.1694': attribute type 1 has an invalid length. [ 438.653567][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1694'. [ 438.667997][ T5841] Bluetooth: hci6: command tx timeout [ 438.730519][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1695'. [ 438.781442][T13118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 438.845392][T13118] bond3: (slave bond4): making interface the new active one [ 438.859144][T13118] bond3: (slave bond4): Enslaving as an active interface with an up link [ 438.915072][ T5841] Bluetooth: hci5: command tx timeout [ 439.042924][T13123] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 439.090236][T13117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.099865][T13127] tipc: Started in network mode [ 439.115007][T13127] tipc: Node identity _, cluster identity 4711 [ 439.165477][T13128] pimreg: entered allmulticast mode [ 439.623136][ T211] hsr_slave_0: left promiscuous mode [ 439.629497][ T211] hsr_slave_1: left promiscuous mode [ 439.647705][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.655251][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.666518][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.674222][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.708656][ T211] hsr_slave_0: left promiscuous mode [ 439.722949][ T211] hsr_slave_1: left promiscuous mode [ 439.729081][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.736644][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.744750][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.753210][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.790594][ T211] veth1_macvtap: left promiscuous mode [ 439.796236][ T211] veth0_macvtap: left promiscuous mode [ 439.801929][ T211] veth1_vlan: left promiscuous mode [ 439.807637][ T211] veth0_vlan: left promiscuous mode [ 439.813885][ T211] veth1_macvtap: left promiscuous mode [ 439.820566][ T211] veth0_macvtap: left promiscuous mode [ 439.826300][ T211] veth1_vlan: left promiscuous mode [ 439.831625][ T211] veth0_vlan: left promiscuous mode [ 440.030414][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037146][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.484187][ T211] team0 (unregistering): Port device team_slave_1 removed [ 440.532701][ T211] team0 (unregistering): Port device team_slave_0 removed [ 440.755165][ T5841] Bluetooth: hci6: command tx timeout [ 441.371856][ T211] team0 (unregistering): Port device team_slave_1 removed [ 441.418207][ T211] team0 (unregistering): Port device team_slave_0 removed [ 441.854619][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'. [ 441.863782][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'. [ 442.022452][T12937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.122518][T12937] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.189499][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.196701][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.250288][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.257487][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.396312][T12951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.436069][T13156] syzkaller1: entered promiscuous mode [ 442.441562][T13156] syzkaller1: entered allmulticast mode [ 442.459578][T12951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.544581][T12951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.564195][T12951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.026342][T12951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.140023][T12951] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.157212][T12937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.221780][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.228965][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.259289][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.266481][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.300663][T13186] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 443.340633][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1708'. [ 443.349888][T13182] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 443.422780][T12989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.440049][T12989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.490811][T12989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.524147][T12989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.648762][T12937] veth0_vlan: entered promiscuous mode [ 443.698918][T12937] veth1_vlan: entered promiscuous mode [ 443.902025][T12937] veth0_macvtap: entered promiscuous mode [ 443.939996][T12937] veth1_macvtap: entered promiscuous mode [ 443.998366][T12989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.054007][T12989] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.123786][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.131023][ T8460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.162529][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.169737][ T8460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.202575][T12937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.217877][T13228] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1718'. [ 444.233747][T12951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.259709][T12937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.302556][ T2949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.350352][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.368483][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.422926][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.451860][T13224] vxcan1 speed is unknown, defaulting to 1000 [ 444.560012][T12951] veth0_vlan: entered promiscuous mode [ 444.616389][T12951] veth1_vlan: entered promiscuous mode [ 444.662781][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.708840][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.835467][T12951] veth0_macvtap: entered promiscuous mode [ 444.861071][T12951] veth1_macvtap: entered promiscuous mode [ 444.939771][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.973055][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.980838][T13224] lo speed is unknown, defaulting to 1000 [ 444.984640][T12951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.040934][T12951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.099825][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.171635][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.195367][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.233429][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.296916][T12989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.796353][ T8459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.993067][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.017281][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.074156][ T8459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.178185][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.201296][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.444178][ T8459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.578217][ T8459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.721586][T12989] veth0_vlan: entered promiscuous mode [ 446.749677][T12989] veth1_vlan: entered promiscuous mode [ 447.094589][T12989] veth0_macvtap: entered promiscuous mode [ 447.323438][ T8459] bridge_slave_1: left allmulticast mode [ 447.343556][ T8459] bridge_slave_1: left promiscuous mode [ 447.355130][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.395145][ T8459] bridge_slave_0: left allmulticast mode [ 447.400829][ T8459] bridge_slave_0: left promiscuous mode [ 447.413159][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.740220][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.750730][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.759765][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.767948][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.779475][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.104769][ T8459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.120881][ T8459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.134976][ T8459] bond0 (unregistering): Released all slaves [ 448.149014][T12989] veth1_macvtap: entered promiscuous mode [ 448.213639][T12989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.250277][T12989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.260487][T13260] vxcan1 speed is unknown, defaulting to 1000 [ 448.331645][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.353026][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.399441][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.435265][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.541878][T13260] lo speed is unknown, defaulting to 1000 [ 448.588781][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.601791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.657512][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.676127][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.589295][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.599434][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.608169][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.618443][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.631835][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.661339][ T8459] hsr_slave_0: left promiscuous mode [ 449.667486][ T8459] hsr_slave_1: left promiscuous mode [ 449.673287][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.680778][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.688746][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.696283][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.721242][ T8459] veth1_macvtap: left promiscuous mode [ 449.727086][ T8459] veth0_macvtap: left promiscuous mode [ 449.732788][ T8459] veth1_vlan: left promiscuous mode [ 449.739365][ T8459] veth0_vlan: left promiscuous mode [ 449.881388][ T5156] Bluetooth: hci3: command tx timeout [ 450.218157][ T8459] team0 (unregistering): Port device team_slave_1 removed [ 450.288270][ T8459] team0 (unregistering): Port device team_slave_0 removed [ 450.914656][T13274] vxcan1 speed is unknown, defaulting to 1000 [ 450.997220][T13260] chnl_net:caif_netlink_parms(): no params data found [ 451.224406][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.238710][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.247599][T13260] bridge_slave_0: entered allmulticast mode [ 451.257586][T13260] bridge_slave_0: entered promiscuous mode [ 451.267073][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.274272][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.284197][T13260] bridge_slave_1: entered allmulticast mode [ 451.292610][T13260] bridge_slave_1: entered promiscuous mode [ 451.331086][T13274] lo speed is unknown, defaulting to 1000 [ 451.449630][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.508068][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.582188][T13292] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 451.640575][T13293] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 451.705212][ T5156] Bluetooth: hci5: command tx timeout [ 451.735262][T13292] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 451.746461][T13292] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 451.790336][T13260] team0: Port device team_slave_0 added [ 451.945842][ T5156] Bluetooth: hci3: command tx timeout [ 451.954586][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.964577][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.974884][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.988072][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.002225][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 453.785075][ T5841] Bluetooth: hci5: command tx timeout [ 454.025158][ T5156] Bluetooth: hci6: command tx timeout [ 454.030944][ T5841] Bluetooth: hci3: command tx timeout [ 454.058594][T13260] team0: Port device team_slave_1 added [ 454.156406][ T8459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.304212][ T8459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.322682][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.332645][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.359033][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.398885][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.424634][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.458780][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.493145][ T8459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.607603][ T8459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.629224][T13300] vxcan1 speed is unknown, defaulting to 1000 [ 454.681468][T13260] hsr_slave_0: entered promiscuous mode [ 454.690581][T13260] hsr_slave_1: entered promiscuous mode [ 454.715565][T13260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.743666][T13260] Cannot create hsr debugfs directory [ 455.035955][T13300] lo speed is unknown, defaulting to 1000 [ 455.303117][T13274] chnl_net:caif_netlink_parms(): no params data found [ 455.400435][ T8459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.553061][ T8459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.708979][ T8459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.849594][ T8459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.865168][ T5841] Bluetooth: hci5: command tx timeout [ 455.959797][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.969597][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.982106][T13274] bridge_slave_0: entered allmulticast mode [ 455.990993][T13274] bridge_slave_0: entered promiscuous mode [ 456.018225][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.030393][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.037938][T13274] bridge_slave_1: entered allmulticast mode [ 456.052694][T13274] bridge_slave_1: entered promiscuous mode [ 456.115188][ T5156] Bluetooth: hci6: command tx timeout [ 456.120649][ T5841] Bluetooth: hci3: command tx timeout [ 456.152593][T13357] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1744'. [ 456.167260][T13357] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1744'. [ 456.187015][T13357] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1744'. [ 456.196383][T13357] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1744'. [ 456.294410][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.328644][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.430445][T13300] chnl_net:caif_netlink_parms(): no params data found [ 456.466761][T13355] vxcan1 speed is unknown, defaulting to 1000 [ 456.469688][T13274] team0: Port device team_slave_0 added [ 456.483765][T13274] team0: Port device team_slave_1 added [ 456.538571][ T8459] bridge_slave_1: left allmulticast mode [ 456.544265][ T8459] bridge_slave_1: left promiscuous mode [ 456.558587][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.572988][ T8459] bridge_slave_0: left allmulticast mode [ 456.590032][ T8459] bridge_slave_0: left promiscuous mode [ 456.599996][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.622542][ T8459] bridge_slave_1: left allmulticast mode [ 456.632820][ T8459] bridge_slave_1: left promiscuous mode [ 456.644227][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.663478][ T8459] bridge_slave_0: left allmulticast mode [ 456.672956][ T8459] bridge_slave_0: left promiscuous mode [ 456.679108][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.194541][ T8459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.210608][ T8459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.221407][ T8459] bond0 (unregistering): Released all slaves [ 457.564120][ T8459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.575369][ T8459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.586015][ T8459] bond0 (unregistering): Released all slaves [ 457.663968][T13355] lo speed is unknown, defaulting to 1000 [ 457.757355][T13274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.764337][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.791151][T13274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.821911][T13260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.940439][T13274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.954915][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.955988][ T5841] Bluetooth: hci5: command tx timeout [ 458.004063][T13274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.035968][T13260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.091341][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.099683][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.107059][T13300] bridge_slave_0: entered allmulticast mode [ 458.115894][T13300] bridge_slave_0: entered promiscuous mode [ 458.134046][T13260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.170552][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.180046][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.190837][T13300] bridge_slave_1: entered allmulticast mode [ 458.197562][ T5841] Bluetooth: hci6: command tx timeout [ 458.202544][T13300] bridge_slave_1: entered promiscuous mode [ 458.220398][T13260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.231295][T13371] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 458.241031][T13371] CPU: 1 UID: 0 PID: 13371 Comm: syz.5.1748 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 458.241049][T13371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.241061][T13371] Call Trace: [ 458.241069][T13371] [ 458.241074][T13371] dump_stack_lvl+0x189/0x250 [ 458.241098][T13371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.241114][T13371] ? __pfx__printk+0x10/0x10 [ 458.241125][T13371] ? kernfs_path_from_node+0x2c/0x260 [ 458.241137][T13371] ? kernfs_path_from_node+0x2c/0x260 [ 458.241147][T13371] ? kernfs_path_from_node+0x2c/0x260 [ 458.241159][T13371] ? kernfs_path_from_node+0x22c/0x260 [ 458.241169][T13371] ? kernfs_path_from_node+0x2c/0x260 [ 458.241182][T13371] sysfs_warn_dup+0x8e/0xa0 [ 458.241197][T13371] sysfs_do_create_link_sd+0xc0/0x110 [ 458.241217][T13371] device_add_class_symlinks+0x1cf/0x240 [ 458.241239][T13371] device_add+0x475/0xb50 [ 458.241261][T13371] wiphy_register+0x199a/0x26b0 [ 458.241300][T13371] ? __pfx_wiphy_register+0x10/0x10 [ 458.241319][T13371] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 458.241339][T13371] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 458.241355][T13371] ieee80211_register_hw+0x33e1/0x4120 [ 458.241381][T13371] ? ieee80211_register_hw+0x1401/0x4120 [ 458.241400][T13371] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 458.241416][T13371] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 458.241435][T13371] ? __hrtimer_setup+0x187/0x210 [ 458.241448][T13371] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 458.241464][T13371] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 458.241494][T13371] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 458.241509][T13371] ? trace_kmalloc+0x1f/0xd0 [ 458.241523][T13371] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 458.241540][T13371] ? kstrndup+0xbf/0x160 [ 458.241571][T13371] hwsim_new_radio_nl+0xea4/0x1b10 [ 458.241591][T13371] ? __pfx___nla_validate_parse+0x10/0x10 [ 458.241614][T13371] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 458.241633][T13371] ? __nla_parse+0x40/0x60 [ 458.241649][T13371] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 458.241665][T13371] genl_family_rcv_msg_doit+0x215/0x300 [ 458.241679][T13371] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 458.241696][T13371] ? bpf_lsm_capable+0x9/0x20 [ 458.241705][T13371] ? security_capable+0x7e/0x2e0 [ 458.241722][T13371] genl_rcv_msg+0x60e/0x790 [ 458.241736][T13371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.241745][T13371] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 458.241765][T13371] netlink_rcv_skb+0x205/0x470 [ 458.241778][T13371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.241788][T13371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.241810][T13371] ? down_read+0x1ad/0x2e0 [ 458.241823][T13371] genl_rcv+0x28/0x40 [ 458.241836][T13371] netlink_unicast+0x758/0x8d0 [ 458.241854][T13371] netlink_sendmsg+0x805/0xb30 [ 458.241872][T13371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.241887][T13371] ? aa_sock_msg_perm+0x94/0x160 [ 458.241901][T13371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.241912][T13371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.241925][T13371] __sock_sendmsg+0x219/0x270 [ 458.241938][T13371] ____sys_sendmsg+0x505/0x830 [ 458.241964][T13371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.241984][T13371] ? import_iovec+0x74/0xa0 [ 458.241997][T13371] ___sys_sendmsg+0x21f/0x2a0 [ 458.242013][T13371] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.242050][T13371] ? __fget_files+0x2a/0x420 [ 458.242061][T13371] ? __fget_files+0x3a0/0x420 [ 458.242079][T13371] __x64_sys_sendmsg+0x19b/0x260 [ 458.242095][T13371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.242115][T13371] ? rcu_is_watching+0x15/0xb0 [ 458.242133][T13371] ? do_syscall_64+0xbe/0x3b0 [ 458.242146][T13371] do_syscall_64+0xfa/0x3b0 [ 458.242155][T13371] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.242165][T13371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.242174][T13371] ? clear_bhb_loop+0x60/0xb0 [ 458.242187][T13371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.242201][T13371] RIP: 0033:0x7f581638e929 [ 458.242215][T13371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.242224][T13371] RSP: 002b:00007f581719c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.242236][T13371] RAX: ffffffffffffffda RBX: 00007f58165b5fa0 RCX: 00007f581638e929 [ 458.242244][T13371] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 458.242250][T13371] RBP: 00007f5816410b39 R08: 0000000000000000 R09: 0000000000000000 [ 458.242257][T13371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.242263][T13371] R13: 0000000000000000 R14: 00007f58165b5fa0 R15: 00007ffe098be798 [ 458.242281][T13371] [ 458.727072][T13274] hsr_slave_0: entered promiscuous mode [ 458.734655][T13274] hsr_slave_1: entered promiscuous mode [ 458.741276][T13274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.751270][T13274] Cannot create hsr debugfs directory [ 458.856804][T13375] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 458.922443][T13300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.943953][T13300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.014067][T13383] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.125687][T13386] netlink: 'syz.5.1751': attribute type 7 has an invalid length. [ 459.378855][T13300] team0: Port device team_slave_0 added [ 459.452966][T13300] team0: Port device team_slave_1 added [ 459.665124][T13300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.674303][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.709910][T13300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.757809][T13300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.771894][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.824572][T13300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.237678][T13300] hsr_slave_0: entered promiscuous mode [ 460.244400][T13300] hsr_slave_1: entered promiscuous mode [ 460.251275][T13300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.259289][T13300] Cannot create hsr debugfs directory [ 460.265544][ T5841] Bluetooth: hci6: command tx timeout [ 460.278139][ T8459] hsr_slave_0: left promiscuous mode [ 460.284284][ T8459] hsr_slave_1: left promiscuous mode [ 460.290529][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.301849][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.310357][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.318298][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.329378][ T8459] hsr_slave_0: left promiscuous mode [ 460.339346][ T8459] hsr_slave_1: left promiscuous mode [ 460.345408][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.352856][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.361214][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.369137][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.408086][ T8459] veth1_macvtap: left promiscuous mode [ 460.413614][ T8459] veth0_macvtap: left promiscuous mode [ 460.421345][ T8459] veth1_vlan: left promiscuous mode [ 460.426787][ T8459] veth0_vlan: left promiscuous mode [ 460.446180][ T8459] veth1_macvtap: left promiscuous mode [ 460.451731][ T8459] veth0_macvtap: left promiscuous mode [ 460.457542][ T8459] veth1_vlan: left promiscuous mode [ 460.462908][ T8459] veth0_vlan: left promiscuous mode [ 461.113800][ T8459] team0 (unregistering): Port device team_slave_1 removed [ 461.164924][ T8459] team0 (unregistering): Port device team_slave_0 removed [ 462.074763][ T8459] team0 (unregistering): Port device team_slave_1 removed [ 462.127936][ T8459] team0 (unregistering): Port device team_slave_0 removed [ 464.920034][T13400] vxcan1 speed is unknown, defaulting to 1000 [ 465.080624][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.323796][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.367609][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.374784][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.401714][T13400] lo speed is unknown, defaulting to 1000 [ 465.432395][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.439611][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.508838][T13274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.551591][T13274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.570047][T13274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.588655][T13274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 466.140980][T13274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.192225][T13424] pim6reg: entered allmulticast mode [ 466.255808][T13424] pim6reg: left allmulticast mode [ 466.340861][T13274] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.349390][T13300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.385749][T13300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.418142][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.446144][T13300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.488717][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.495916][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.513704][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.520859][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.543203][T13300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.594037][T13429] vxcan1 speed is unknown, defaulting to 1000 [ 466.794003][T13260] veth0_vlan: entered promiscuous mode [ 466.844552][T13260] veth1_vlan: entered promiscuous mode [ 466.969936][T13260] veth0_macvtap: entered promiscuous mode [ 466.984009][T13300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.036794][T13260] veth1_macvtap: entered promiscuous mode [ 467.068045][T13441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 467.092055][T13429] lo speed is unknown, defaulting to 1000 [ 467.094720][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.098957][T13441] sctp: [Deprecated]: syz.7.1761 (pid 13441) Use of int in max_burst socket option. [ 467.098957][T13441] Use struct sctp_assoc_value instead [ 467.120030][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.149160][T13300] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.173100][ T8459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.189245][T13274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.223291][ T8459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.243722][ T8459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.303991][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.311241][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.334202][ T8459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.383990][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.391199][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.581267][T13448] openvswitch: netlink: Multiple metadata blocks provided [ 467.611577][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.634443][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.663832][T13274] veth0_vlan: entered promiscuous mode [ 467.772970][ T8459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.794366][T13274] veth1_vlan: entered promiscuous mode [ 467.806681][ T8459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.937773][T13274] veth0_macvtap: entered promiscuous mode [ 467.983032][T13274] veth1_macvtap: entered promiscuous mode [ 468.099397][T13274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.162402][T13274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.202843][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.232736][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.261459][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.282395][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.428782][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.532869][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.592479][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.719779][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.765153][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.773004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.844129][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.902991][ T8459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.915495][ T8459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.011848][T13300] veth0_vlan: entered promiscuous mode [ 469.062292][T13300] veth1_vlan: entered promiscuous mode [ 469.122665][ T49] bridge_slave_1: left allmulticast mode [ 469.128417][ T49] bridge_slave_1: left promiscuous mode [ 469.134105][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.143323][ T49] bridge_slave_0: left allmulticast mode [ 469.150692][ T49] bridge_slave_0: left promiscuous mode [ 469.156759][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.663174][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.676556][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.689430][ T49] bond0 (unregistering): Released all slaves [ 469.797712][T13300] veth0_macvtap: entered promiscuous mode [ 469.890511][T13300] veth1_macvtap: entered promiscuous mode [ 469.987270][T13300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.019384][T13300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.061875][ T2949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.078143][ T2949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.081545][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.087581][ T2949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.099293][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.106074][ T2949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.116774][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.127548][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.135373][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.330311][T13464] vxcan1 speed is unknown, defaulting to 1000 [ 470.341426][ T8459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.356575][ T8459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.452180][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.461296][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.660875][ T49] hsr_slave_0: left promiscuous mode [ 470.669149][ T49] hsr_slave_1: left promiscuous mode [ 470.684565][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.692528][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.707576][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.717453][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.748784][ T49] veth1_macvtap: left promiscuous mode [ 470.754564][ T49] veth0_macvtap: left promiscuous mode [ 470.760488][ T49] veth1_vlan: left promiscuous mode [ 470.766300][ T49] veth0_vlan: left promiscuous mode [ 471.263405][ T49] team0 (unregistering): Port device team_slave_1 removed [ 471.348005][ T49] team0 (unregistering): Port device team_slave_0 removed [ 471.433816][T13472] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1766'. [ 471.508620][T13474] xt_hashlimit: invalid interval [ 471.709930][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.731117][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.742260][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 471.754472][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 471.763024][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.131060][T13464] lo speed is unknown, defaulting to 1000 [ 472.194982][ T5841] Bluetooth: hci3: command tx timeout [ 472.214149][T13478] vxcan1 speed is unknown, defaulting to 1000 [ 472.503365][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1770'. [ 472.536387][T13487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.641297][T13487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.732157][T13487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.891588][T13478] lo speed is unknown, defaulting to 1000 [ 472.895093][T13481] vxcan1 speed is unknown, defaulting to 1000 [ 472.953094][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.069817][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.209177][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.296871][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.405049][T13481] lo speed is unknown, defaulting to 1000 [ 473.544303][T13464] chnl_net:caif_netlink_parms(): no params data found [ 473.778909][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.795784][ T5841] Bluetooth: hci5: command tx timeout [ 473.930415][T13464] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.944143][T13464] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.952697][T13464] bridge_slave_0: entered allmulticast mode [ 473.965937][T13464] bridge_slave_0: entered promiscuous mode [ 473.999903][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.013742][T13464] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.021524][T13464] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.031082][T13464] bridge_slave_1: entered allmulticast mode [ 474.040452][T13464] bridge_slave_1: entered promiscuous mode [ 474.124559][T13478] chnl_net:caif_netlink_parms(): no params data found [ 474.204934][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.265593][ T5841] Bluetooth: hci3: command tx timeout [ 474.344101][T13464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.409106][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.427270][T13464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.493710][T13464] team0: Port device team_slave_0 added [ 474.543032][T13464] team0: Port device team_slave_1 added [ 474.790937][T13478] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.801048][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.811490][T13478] bridge_slave_0: entered allmulticast mode [ 474.819916][T13478] bridge_slave_0: entered promiscuous mode [ 474.843047][T13464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.856711][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.883298][T13464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.897308][T13478] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.905883][T13478] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.915530][T13478] bridge_slave_1: entered allmulticast mode [ 474.923603][T13478] bridge_slave_1: entered promiscuous mode [ 474.948645][T13464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.963302][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.965391][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.001651][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 475.013421][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 475.023365][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 475.032343][T13464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.048339][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 475.076573][T13515] ieee802154 phy1 wpan1: encryption failed: -126 [ 475.141666][T13478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.164291][T13478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.266271][T13478] team0: Port device team_slave_0 added [ 475.272716][ T49] bridge_slave_1: left allmulticast mode [ 475.279382][ T49] bridge_slave_1: left promiscuous mode [ 475.285720][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.299673][ T49] bridge_slave_0: left allmulticast mode [ 475.305903][ T49] bridge_slave_0: left promiscuous mode [ 475.311674][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.329184][ T49] bridge_slave_1: left allmulticast mode [ 475.335156][ T49] bridge_slave_1: left promiscuous mode [ 475.340909][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.352655][ T49] bridge_slave_0: left allmulticast mode [ 475.359019][ T49] bridge_slave_0: left promiscuous mode [ 475.364768][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.881352][ T5156] Bluetooth: hci5: command tx timeout [ 475.892904][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.905125][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.916107][ T49] bond0 (unregistering): Released all slaves [ 476.248041][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.259351][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.270352][ T49] bond0 (unregistering): Released all slaves [ 476.302725][T13464] hsr_slave_0: entered promiscuous mode [ 476.311068][T13464] hsr_slave_1: entered promiscuous mode [ 476.317636][T13464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.326395][T13464] Cannot create hsr debugfs directory [ 476.333318][T13478] team0: Port device team_slave_1 added [ 476.346286][ T51] Bluetooth: hci3: command tx timeout [ 476.486037][T13512] vxcan1 speed is unknown, defaulting to 1000 [ 476.534050][T13478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.547821][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.594161][T13478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.697400][T13478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.704357][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.742646][T13478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.820751][T13512] lo speed is unknown, defaulting to 1000 [ 477.068412][T13478] hsr_slave_0: entered promiscuous mode [ 477.089213][T13478] hsr_slave_1: entered promiscuous mode [ 477.104277][T13478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.111996][T13478] Cannot create hsr debugfs directory [ 477.155112][ T51] Bluetooth: hci6: command tx timeout [ 477.950612][ T51] Bluetooth: hci5: command tx timeout [ 477.950819][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 478.227822][T13560] can: request_module (can-proto-0) failed. [ 478.435593][ T5841] Bluetooth: hci3: command tx timeout [ 479.227622][ T5841] Bluetooth: hci6: command tx timeout [ 480.025517][ T5841] Bluetooth: hci5: command tx timeout [ 480.047138][T13583] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1791'. [ 480.875266][ T49] hsr_slave_0: left promiscuous mode [ 480.887423][ T49] hsr_slave_1: left promiscuous mode [ 480.893730][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.913824][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.931112][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.969454][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.010218][ T49] hsr_slave_0: left promiscuous mode [ 481.020332][ T49] hsr_slave_1: left promiscuous mode [ 481.032156][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.039897][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.048181][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.056475][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.095681][ T49] veth1_macvtap: left promiscuous mode [ 481.101222][ T49] veth0_macvtap: left promiscuous mode [ 481.107551][ T49] veth1_vlan: left promiscuous mode [ 481.112920][ T49] veth0_vlan: left promiscuous mode [ 481.119500][ T49] veth1_macvtap: left promiscuous mode [ 481.125288][ T49] veth0_macvtap: left promiscuous mode [ 481.130956][ T49] veth1_vlan: left promiscuous mode [ 481.136481][ T49] veth0_vlan: left promiscuous mode [ 481.305145][ T5841] Bluetooth: hci6: command tx timeout [ 481.680752][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1797'. [ 481.698976][T13603] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1797'. [ 481.880514][ T49] team0 (unregistering): Port device team_slave_1 removed [ 481.933641][ T49] team0 (unregistering): Port device team_slave_0 removed [ 482.764364][ T49] team0 (unregistering): Port device team_slave_1 removed [ 482.811781][ T49] team0 (unregistering): Port device team_slave_0 removed [ 483.275313][T13608] batman_adv: batadv0: Adding interface: ip6gretap1 [ 483.295430][T13608] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 483.329528][T13611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.343172][T13611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.348913][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1800'. [ 483.361019][T13611] batman_adv: batadv0: Removing interface: macvlan2 [ 483.371408][T13611] batman_adv: batadv0: Removing interface: ip6gretap1 [ 483.385242][ T5841] Bluetooth: hci6: command tx timeout [ 483.481721][T13512] chnl_net:caif_netlink_parms(): no params data found [ 483.586864][T13621] FAULT_INJECTION: forcing a failure. [ 483.586864][T13621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.608091][T13621] CPU: 1 UID: 0 PID: 13621 Comm: syz.5.1803 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 483.608117][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.608127][T13621] Call Trace: [ 483.608134][T13621] [ 483.608142][T13621] dump_stack_lvl+0x189/0x250 [ 483.608170][T13621] ? __pfx____ratelimit+0x10/0x10 [ 483.608187][T13621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.608208][T13621] ? __pfx__printk+0x10/0x10 [ 483.608226][T13621] ? __might_fault+0xb0/0x130 [ 483.608252][T13621] should_fail_ex+0x414/0x560 [ 483.608278][T13621] _copy_from_user+0x2d/0xb0 [ 483.608295][T13621] ___sys_sendmsg+0x158/0x2a0 [ 483.608320][T13621] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.608380][T13621] ? __fget_files+0x2a/0x420 [ 483.608398][T13621] ? __fget_files+0x3a0/0x420 [ 483.608428][T13621] __x64_sys_sendmsg+0x19b/0x260 [ 483.608454][T13621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.608487][T13621] ? __pfx_ksys_write+0x10/0x10 [ 483.608502][T13621] ? rcu_is_watching+0x15/0xb0 [ 483.608528][T13621] ? do_syscall_64+0xbe/0x3b0 [ 483.608559][T13621] do_syscall_64+0xfa/0x3b0 [ 483.608575][T13621] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.608592][T13621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.608609][T13621] ? clear_bhb_loop+0x60/0xb0 [ 483.608630][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.608647][T13621] RIP: 0033:0x7f581638e929 [ 483.608664][T13621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.608679][T13621] RSP: 002b:00007f581719c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.608698][T13621] RAX: ffffffffffffffda RBX: 00007f58165b5fa0 RCX: 00007f581638e929 [ 483.608712][T13621] RDX: 0000000000004080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 483.608723][T13621] RBP: 00007f581719c090 R08: 0000000000000000 R09: 0000000000000000 [ 483.608734][T13621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.608744][T13621] R13: 0000000000000000 R14: 00007f58165b5fa0 R15: 00007ffe098be798 [ 483.608773][T13621] [ 484.012114][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.021921][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.045216][T13512] bridge_slave_0: entered allmulticast mode [ 484.065455][T13512] bridge_slave_0: entered promiscuous mode [ 484.100746][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.124199][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.145334][T13512] bridge_slave_1: entered allmulticast mode [ 484.167020][T13512] bridge_slave_1: entered promiscuous mode [ 484.214348][T13635] x_tables: duplicate underflow at hook 3 [ 484.284964][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 484.334057][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.396905][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.468194][T13512] team0: Port device team_slave_0 added [ 484.484614][T13512] team0: Port device team_slave_1 added [ 484.612128][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.619414][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.640290][T13649] netlink: 'syz.5.1813': attribute type 1 has an invalid length. [ 484.646427][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.671548][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1813'. [ 484.682592][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.698642][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.728754][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.755603][T13478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.760740][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1813'. [ 484.821360][T13478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.870425][T13512] hsr_slave_0: entered promiscuous mode [ 484.877676][T13512] hsr_slave_1: entered promiscuous mode [ 484.884166][T13512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.898953][T13512] Cannot create hsr debugfs directory [ 484.924636][T13478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.964594][T13478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.990311][T13656] FAULT_INJECTION: forcing a failure. [ 484.990311][T13656] name failslab, interval 1, probability 0, space 0, times 0 [ 485.004061][T13656] CPU: 0 UID: 0 PID: 13656 Comm: syz.5.1815 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 485.004088][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.004100][T13656] Call Trace: [ 485.004108][T13656] [ 485.004116][T13656] dump_stack_lvl+0x189/0x250 [ 485.004144][T13656] ? __pfx____ratelimit+0x10/0x10 [ 485.004162][T13656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.004186][T13656] ? __pfx__printk+0x10/0x10 [ 485.004211][T13656] ? __pfx___might_resched+0x10/0x10 [ 485.004240][T13656] should_fail_ex+0x414/0x560 [ 485.004267][T13656] should_failslab+0xa8/0x100 [ 485.004288][T13656] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 485.004311][T13656] ? __alloc_skb+0x112/0x2d0 [ 485.004337][T13656] __alloc_skb+0x112/0x2d0 [ 485.004363][T13656] netlink_sendmsg+0x5c6/0xb30 [ 485.004394][T13656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.004418][T13656] ? aa_sock_msg_perm+0x94/0x160 [ 485.004442][T13656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.004462][T13656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.004483][T13656] __sock_sendmsg+0x219/0x270 [ 485.004513][T13656] ____sys_sendmsg+0x505/0x830 [ 485.004541][T13656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.004572][T13656] ? import_iovec+0x74/0xa0 [ 485.004593][T13656] ___sys_sendmsg+0x21f/0x2a0 [ 485.004617][T13656] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.004677][T13656] ? __fget_files+0x2a/0x420 [ 485.004693][T13656] ? __fget_files+0x3a0/0x420 [ 485.004721][T13656] __x64_sys_sendmsg+0x19b/0x260 [ 485.004745][T13656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.004777][T13656] ? __pfx_ksys_write+0x10/0x10 [ 485.004792][T13656] ? rcu_is_watching+0x15/0xb0 [ 485.004823][T13656] ? do_syscall_64+0xbe/0x3b0 [ 485.004843][T13656] do_syscall_64+0xfa/0x3b0 [ 485.004860][T13656] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.004877][T13656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.004894][T13656] ? clear_bhb_loop+0x60/0xb0 [ 485.004915][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.004932][T13656] RIP: 0033:0x7f581638e929 [ 485.004949][T13656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.004963][T13656] RSP: 002b:00007f581719c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.004983][T13656] RAX: ffffffffffffffda RBX: 00007f58165b5fa0 RCX: 00007f581638e929 [ 485.004997][T13656] RDX: 0000000000004080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 485.005008][T13656] RBP: 00007f581719c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.005019][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.005030][T13656] R13: 0000000000000000 R14: 00007f58165b5fa0 R15: 00007ffe098be798 [ 485.005059][T13656] [ 485.452368][T13464] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 485.465301][T13464] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 485.476345][T13464] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 485.492123][T13464] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 485.816927][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.918631][T13688] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.001076][T13478] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.027546][T13688] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.047792][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.054942][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.068689][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1824'. [ 486.072377][T13512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 486.086320][T13695] netlink: 'syz.7.1824': attribute type 2 has an invalid length. [ 486.094187][T13695] netlink: 'syz.7.1824': attribute type 1 has an invalid length. [ 486.111463][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1824'. [ 486.118834][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.127487][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.139225][T13512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.152883][T13688] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.183499][T13464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.191253][T13512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.207926][T13512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.233112][T13688] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.297794][T13464] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.339199][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.346507][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.380803][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.387972][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.413234][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.481202][ T2949] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.549645][ T2949] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.592399][ T59] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.747500][T13478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.794460][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.861698][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.923138][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.930339][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.984327][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.991513][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.008411][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1826'. [ 487.083670][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1827'. [ 487.134572][T13478] veth0_vlan: entered promiscuous mode [ 487.150272][T13464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.184101][T13478] veth1_vlan: entered promiscuous mode [ 487.288226][T13725] vxcan1 speed is unknown, defaulting to 1000 [ 487.331036][T13464] veth0_vlan: entered promiscuous mode [ 487.368184][T13478] veth0_macvtap: entered promiscuous mode [ 487.411511][T13478] veth1_macvtap: entered promiscuous mode [ 487.443948][T13464] veth1_vlan: entered promiscuous mode [ 487.532677][T13478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.601934][T13478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.672046][ T211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.706931][ T211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.725567][ T211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.750945][ T211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.782655][T13464] veth0_macvtap: entered promiscuous mode [ 487.799652][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.827151][T13464] veth1_macvtap: entered promiscuous mode [ 487.866822][T13725] lo speed is unknown, defaulting to 1000 [ 487.900429][T13737] pimreg3: entered allmulticast mode [ 487.928831][T13464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.966457][T13735] pimreg3: left allmulticast mode [ 488.011474][T13464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.061970][ T2949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.106385][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.152262][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.203906][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.222430][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.242669][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.384136][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.401785][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.527844][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.539611][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.673639][T13512] veth0_vlan: entered promiscuous mode [ 488.762295][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.772633][T13512] veth1_vlan: entered promiscuous mode [ 488.795430][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.822794][T13755] netlink: 'syz.5.1836': attribute type 1 has an invalid length. [ 489.042751][ T211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.266986][ T211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.298568][T13512] veth0_macvtap: entered promiscuous mode [ 489.309049][T13512] veth1_macvtap: entered promiscuous mode [ 489.334762][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.360709][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.400640][ T211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.441401][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.456650][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.483581][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.537087][ T211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.561094][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.697195][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.720340][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.811624][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.841116][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.853482][ T211] bridge_slave_1: left allmulticast mode [ 489.873716][ T211] bridge_slave_1: left promiscuous mode [ 489.881005][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.897340][ T211] bridge_slave_0: left allmulticast mode [ 489.903018][ T211] bridge_slave_0: left promiscuous mode [ 489.913862][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.995854][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.005268][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.021550][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.030109][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.037937][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.326087][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.336945][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.348210][ T211] bond0 (unregistering): Released all slaves [ 490.420437][T13758] vxcan1 speed is unknown, defaulting to 1000 [ 490.686453][T13758] lo speed is unknown, defaulting to 1000 [ 491.430912][ T211] hsr_slave_0: left promiscuous mode [ 491.456666][ T211] hsr_slave_1: left promiscuous mode [ 491.462896][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.477520][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.489082][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.504199][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.550257][ T211] veth1_macvtap: left promiscuous mode [ 491.560605][ T211] veth0_macvtap: left promiscuous mode [ 491.568048][ T211] veth1_vlan: left promiscuous mode [ 491.573397][ T211] veth0_vlan: left promiscuous mode [ 491.673349][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.685191][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 491.693305][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 491.703160][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 491.711398][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.106405][ T5156] Bluetooth: hci3: command tx timeout [ 492.117635][ T211] team0 (unregistering): Port device team_slave_1 removed [ 492.162161][ T211] team0 (unregistering): Port device team_slave_0 removed [ 492.683323][T13758] chnl_net:caif_netlink_parms(): no params data found [ 492.711627][T13768] vxcan1 speed is unknown, defaulting to 1000 [ 492.918215][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.936547][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.943829][T13758] bridge_slave_0: entered allmulticast mode [ 492.959585][T13758] bridge_slave_0: entered promiscuous mode [ 492.974310][T13768] lo speed is unknown, defaulting to 1000 [ 492.975330][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.988525][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.995902][T13758] bridge_slave_1: entered allmulticast mode [ 493.003699][T13758] bridge_slave_1: entered promiscuous mode [ 493.093313][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.116554][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.195323][ T211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.247974][T13758] team0: Port device team_slave_0 added [ 493.274552][T13758] team0: Port device team_slave_1 added [ 493.297476][T13777] FAULT_INJECTION: forcing a failure. [ 493.297476][T13777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.311286][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.7.1839 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 493.311313][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.311324][T13777] Call Trace: [ 493.311332][T13777] [ 493.311340][T13777] dump_stack_lvl+0x189/0x250 [ 493.311370][T13777] ? __pfx____ratelimit+0x10/0x10 [ 493.311389][T13777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.311413][T13777] ? __pfx__printk+0x10/0x10 [ 493.311432][T13777] ? __might_fault+0xb0/0x130 [ 493.311462][T13777] should_fail_ex+0x414/0x560 [ 493.311489][T13777] _copy_from_iter+0x1db/0x16f0 [ 493.311517][T13777] ? rcu_is_watching+0x15/0xb0 [ 493.311542][T13777] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 493.311562][T13777] ? __pfx__copy_from_iter+0x10/0x10 [ 493.311587][T13777] ? __build_skb_around+0x257/0x3e0 [ 493.311613][T13777] ? netlink_sendmsg+0x642/0xb30 [ 493.311632][T13777] ? skb_put+0x11b/0x210 [ 493.311657][T13777] netlink_sendmsg+0x6b2/0xb30 [ 493.311687][T13777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.311718][T13777] ? aa_sock_msg_perm+0x94/0x160 [ 493.311741][T13777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.311762][T13777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.311783][T13777] __sock_sendmsg+0x219/0x270 [ 493.311806][T13777] ____sys_sendmsg+0x505/0x830 [ 493.311835][T13777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.311868][T13777] ? import_iovec+0x74/0xa0 [ 493.311890][T13777] ___sys_sendmsg+0x21f/0x2a0 [ 493.311916][T13777] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.311978][T13777] ? __fget_files+0x2a/0x420 [ 493.311995][T13777] ? __fget_files+0x3a0/0x420 [ 493.312025][T13777] __x64_sys_sendmsg+0x19b/0x260 [ 493.312051][T13777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.312085][T13777] ? __pfx_ksys_write+0x10/0x10 [ 493.312099][T13777] ? rcu_is_watching+0x15/0xb0 [ 493.312127][T13777] ? do_syscall_64+0xbe/0x3b0 [ 493.312150][T13777] do_syscall_64+0xfa/0x3b0 [ 493.312166][T13777] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.312182][T13777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.312200][T13777] ? clear_bhb_loop+0x60/0xb0 [ 493.312220][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.312237][T13777] RIP: 0033:0x7f00bdb8e929 [ 493.312253][T13777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.312267][T13777] RSP: 002b:00007f00be990038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.312286][T13777] RAX: ffffffffffffffda RBX: 00007f00bddb5fa0 RCX: 00007f00bdb8e929 [ 493.312299][T13777] RDX: 0000000000004080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 493.312310][T13777] RBP: 00007f00be990090 R08: 0000000000000000 R09: 0000000000000000 [ 493.312321][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.312332][T13777] R13: 0000000000000000 R14: 00007f00bddb5fa0 R15: 00007ffc23cfcdc8 [ 493.312362][T13777] [ 493.622985][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1840'. [ 493.758791][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.782156][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 493.790324][ T51] Bluetooth: hci5: command tx timeout [ 493.801297][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 493.802721][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.837878][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 493.855628][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 493.873969][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 493.894446][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1842'. [ 493.895041][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.918335][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1842'. [ 493.935624][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1842'. [ 494.028527][ T211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.056001][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.070442][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.098290][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.195512][ T5156] Bluetooth: hci3: command tx timeout [ 494.249502][ T211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.336452][T13784] vxcan1 speed is unknown, defaulting to 1000 [ 494.342162][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1846'. [ 494.371102][T13758] hsr_slave_0: entered promiscuous mode [ 494.396083][T13758] hsr_slave_1: entered promiscuous mode [ 494.403048][T13758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.434918][T13758] Cannot create hsr debugfs directory [ 494.504615][ T211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.653194][T13812] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1850'. [ 494.668687][T13784] lo speed is unknown, defaulting to 1000 [ 494.823869][T13813] vxcan1 speed is unknown, defaulting to 1000 [ 495.095709][T13768] chnl_net:caif_netlink_parms(): no params data found [ 495.190221][ T211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.223922][T13813] lo speed is unknown, defaulting to 1000 [ 495.333615][ T211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.466247][T13823] FAULT_INJECTION: forcing a failure. [ 495.466247][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 495.495003][T13823] CPU: 1 UID: 0 PID: 13823 Comm: syz.5.1851 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 495.495031][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.495043][T13823] Call Trace: [ 495.495051][T13823] [ 495.495059][T13823] dump_stack_lvl+0x189/0x250 [ 495.495089][T13823] ? __pfx____ratelimit+0x10/0x10 [ 495.495108][T13823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.495132][T13823] ? __pfx__printk+0x10/0x10 [ 495.495155][T13823] ? __pfx___might_resched+0x10/0x10 [ 495.495178][T13823] ? fs_reclaim_acquire+0x7d/0x100 [ 495.495203][T13823] should_fail_ex+0x414/0x560 [ 495.495229][T13823] should_failslab+0xa8/0x100 [ 495.495248][T13823] __kmalloc_noprof+0xcb/0x4f0 [ 495.495264][T13823] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 495.495288][T13823] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 495.495315][T13823] genl_family_rcv_msg_doit+0xb8/0x300 [ 495.495340][T13823] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 495.495359][T13823] ? rcu_is_watching+0x15/0xb0 [ 495.495387][T13823] ? apparmor_capable+0x137/0x1b0 [ 495.495407][T13823] ? bpf_lsm_capable+0x9/0x20 [ 495.495423][T13823] ? security_capable+0x7e/0x2e0 [ 495.495451][T13823] genl_rcv_msg+0x60e/0x790 [ 495.495475][T13823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.495491][T13823] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 495.495513][T13823] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 495.495531][T13823] ? __pfx_nl802154_post_doit+0x10/0x10 [ 495.495571][T13823] netlink_rcv_skb+0x205/0x470 [ 495.495592][T13823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.495610][T13823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.495650][T13823] ? down_read+0x1ad/0x2e0 [ 495.495673][T13823] genl_rcv+0x28/0x40 [ 495.495694][T13823] netlink_unicast+0x758/0x8d0 [ 495.495738][T13823] netlink_sendmsg+0x805/0xb30 [ 495.495770][T13823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.495795][T13823] ? aa_sock_msg_perm+0x94/0x160 [ 495.495818][T13823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.495838][T13823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.495859][T13823] __sock_sendmsg+0x219/0x270 [ 495.495883][T13823] ____sys_sendmsg+0x505/0x830 [ 495.495913][T13823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.495946][T13823] ? import_iovec+0x74/0xa0 [ 495.495968][T13823] ___sys_sendmsg+0x21f/0x2a0 [ 495.495994][T13823] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.496060][T13823] ? __fget_files+0x2a/0x420 [ 495.496079][T13823] ? __fget_files+0x3a0/0x420 [ 495.496109][T13823] __x64_sys_sendmsg+0x19b/0x260 [ 495.496136][T13823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.496170][T13823] ? __pfx_ksys_write+0x10/0x10 [ 495.496193][T13823] ? do_syscall_64+0xbe/0x3b0 [ 495.496216][T13823] do_syscall_64+0xfa/0x3b0 [ 495.496231][T13823] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.496247][T13823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.496264][T13823] ? clear_bhb_loop+0x60/0xb0 [ 495.496285][T13823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.496300][T13823] RIP: 0033:0x7f581638e929 [ 495.496316][T13823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.496330][T13823] RSP: 002b:00007f581719c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.496349][T13823] RAX: ffffffffffffffda RBX: 00007f58165b5fa0 RCX: 00007f581638e929 [ 495.496361][T13823] RDX: 0000000000004080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 495.496373][T13823] RBP: 00007f581719c090 R08: 0000000000000000 R09: 0000000000000000 [ 495.496384][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.496395][T13823] R13: 0000000000000000 R14: 00007f58165b5fa0 R15: 00007ffe098be798 [ 495.496425][T13823] [ 495.569083][ T211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.871887][ T5156] Bluetooth: hci5: command tx timeout [ 495.945067][ T5156] Bluetooth: hci6: command tx timeout [ 496.019068][T13768] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.026531][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.033799][T13768] bridge_slave_0: entered allmulticast mode [ 496.041261][T13768] bridge_slave_0: entered promiscuous mode [ 496.080647][ T211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.096511][T13768] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.109749][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.118536][T13768] bridge_slave_1: entered allmulticast mode [ 496.127522][T13768] bridge_slave_1: entered promiscuous mode [ 496.177657][T13768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.210104][T13768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.265889][ T5156] Bluetooth: hci3: command tx timeout [ 496.371338][T13768] team0: Port device team_slave_0 added [ 496.590851][T13768] team0: Port device team_slave_1 added [ 496.594466][T13834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1854'. [ 496.792483][T13784] chnl_net:caif_netlink_parms(): no params data found [ 496.847811][T13768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.854778][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.881426][T13768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.936061][T13768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.943028][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.969174][T13768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.011375][T13758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.050667][T13758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.063539][ T211] bridge_slave_1: left allmulticast mode [ 497.070700][ T211] bridge_slave_1: left promiscuous mode [ 497.076762][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.085756][ T211] bridge_slave_0: left allmulticast mode [ 497.091399][ T211] bridge_slave_0: left promiscuous mode [ 497.098386][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.108617][ T211] bridge_slave_1: left allmulticast mode [ 497.114281][ T211] bridge_slave_1: left promiscuous mode [ 497.120400][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.132278][ T211] bridge_slave_0: left allmulticast mode [ 497.138765][ T211] bridge_slave_0: left promiscuous mode [ 497.144514][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.544767][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.558704][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.569339][ T211] bond0 (unregistering): Released all slaves [ 497.899587][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.910563][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.924214][ T211] bond0 (unregistering): Released all slaves [ 497.945724][ T5156] Bluetooth: hci5: command tx timeout [ 497.962877][T13758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.999568][T13768] hsr_slave_0: entered promiscuous mode [ 498.017614][T13768] hsr_slave_1: entered promiscuous mode [ 498.027935][T13768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.043245][ T5156] Bluetooth: hci6: command tx timeout [ 498.054223][T13768] Cannot create hsr debugfs directory [ 498.136084][T13758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.290095][T13857] netlink: 'syz.5.1859': attribute type 12 has an invalid length. [ 498.345812][ T5156] Bluetooth: hci3: command tx timeout [ 498.402476][T13784] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.410340][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.417792][T13784] bridge_slave_0: entered allmulticast mode [ 498.440390][T13784] bridge_slave_0: entered promiscuous mode [ 498.474612][T13784] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.484202][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.492495][T13784] bridge_slave_1: entered allmulticast mode [ 498.499928][T13784] bridge_slave_1: entered promiscuous mode [ 498.511179][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 498.597200][T13784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.654624][T13784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.810298][T13784] team0: Port device team_slave_0 added [ 498.857004][T13880] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1864'. [ 498.893565][T13784] team0: Port device team_slave_1 added [ 498.916048][ T31] INFO: task syz.2.1497:12027 blocked for more than 143 seconds. [ 498.923998][ T31] Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 [ 498.937372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.946402][ T31] task:syz.2.1497 state:D stack:25352 pid:12027 tgid:12026 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 498.958973][ T31] Call Trace: [ 498.962512][ T31] [ 498.965624][ T31] __schedule+0x16f5/0x4d00 [ 498.970375][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.975863][ T31] ? schedule+0x165/0x360 [ 498.980400][ T31] ? __pfx___schedule+0x10/0x10 [ 498.985784][ T31] ? schedule+0x91/0x360 [ 498.990180][ T31] schedule+0x165/0x360 [ 498.999439][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.000584][T13885] x_tables: duplicate entry at hook 3 [ 499.005197][ T31] __mutex_lock+0x724/0xe80 [ 499.015087][ T31] ? __mutex_lock+0x51b/0xe80 [ 499.020075][T13886] x_tables: duplicate entry at hook 3 [ 499.024998][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 499.034037][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.041525][ T31] ? __asan_memset+0x22/0x50 [ 499.051126][ T31] ? ____sys_sendmsg+0x505/0x830 [ 499.057807][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 499.062693][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 499.071071][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 499.077728][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 499.083494][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 499.089889][ T31] ? __nla_parse+0x40/0x60 [ 499.094335][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 499.100836][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 499.106465][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.112539][ T31] ? bpf_lsm_capable+0x9/0x20 [ 499.117314][ T31] ? security_capable+0x7e/0x2e0 [ 499.122312][ T31] genl_rcv_msg+0x60e/0x790 [ 499.126885][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.131922][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 499.139309][ T31] netlink_rcv_skb+0x205/0x470 [ 499.144113][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.149417][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.154747][ T31] ? down_read+0x1ad/0x2e0 [ 499.159382][ T31] genl_rcv+0x28/0x40 [ 499.163380][ T31] netlink_unicast+0x758/0x8d0 [ 499.168328][ T31] netlink_sendmsg+0x805/0xb30 [ 499.173102][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.179297][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 499.184261][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.189633][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.195023][ T31] __sock_sendmsg+0x219/0x270 [ 499.199744][ T31] ____sys_sendmsg+0x505/0x830 [ 499.204526][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.209848][ T31] ? import_iovec+0x74/0xa0 [ 499.214346][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 499.219184][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.224444][ T31] ? __fget_files+0x2a/0x420 [ 499.229152][ T31] ? __fget_files+0x3a0/0x420 [ 499.233844][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 499.238835][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.244308][ T31] ? rcu_is_watching+0x15/0xb0 [ 499.249148][ T31] ? do_syscall_64+0xbe/0x3b0 [ 499.253834][ T31] do_syscall_64+0xfa/0x3b0 [ 499.258415][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.263620][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.269767][ T31] ? clear_bhb_loop+0x60/0xb0 [ 499.274457][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.280931][ T31] RIP: 0033:0x7f207a58e929 [ 499.285760][ T31] RSP: 002b:00007f207b3eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.294170][ T31] RAX: ffffffffffffffda RBX: 00007f207a7b5fa0 RCX: 00007f207a58e929 [ 499.302266][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 499.310384][ T31] RBP: 00007f207a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 499.318489][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.326528][ T31] R13: 0000000000000000 R14: 00007f207a7b5fa0 R15: 00007ffe2b027218 [ 499.334505][ T31] [ 499.337619][ T31] [ 499.337619][ T31] Showing all locks held in the system: [ 499.367855][ T31] 1 lock held by khungtaskd/31: [ 499.372747][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 499.385590][ T31] 4 locks held by kworker/u8:2/36: [ 499.390725][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 499.402629][ T31] #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 499.413751][ T31] #2: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 499.422796][ T31] #3: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 499.433788][ T31] 4 locks held by kworker/u8:5/211: [ 499.440947][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 499.458666][ T31] #1: ffffc90002fe7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 499.474270][ T31] #2: ffffffff8f5061d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 499.486041][ T31] #3: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x244/0xae0 [ 499.495581][ T31] 2 locks held by getty/5596: [ 499.500266][ T31] #0: ffff8880355420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 499.510284][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 499.520537][ T31] 2 locks held by syz.3.1404/11476: [ 499.525768][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.533994][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 499.544196][ T31] 2 locks held by syz.2.1497/12027: [ 499.550035][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.558437][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 499.568713][ T31] 2 locks held by syz.6.1559/12427: [ 499.573907][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.582123][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 499.592704][ T31] 3 locks held by kworker/u8:12/12978: [ 499.598258][ T31] #0: ffff88814c479148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 499.609994][ T31] #1: ffffc90003c37bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 499.622897][ T31] #2: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 499.632635][ T31] 1 lock held by syz-executor/13758: [ 499.637955][ T31] #0: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 499.647410][ T31] 7 locks held by syz-executor/13768: [ 499.652787][ T31] #0: ffff8880356ce428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 499.661710][ T31] #1: ffff888024bbb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 499.671495][ T31] #2: ffff8880276df1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 499.681585][ T31] #3: ffffffff8edad908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 499.692299][ T31] #4: ffff888058d7f0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 499.702893][ T31] #5: ffff888038f38250 (&devlink->lock_key#55){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 499.713016][ T31] #6: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 499.722635][ T31] 2 locks held by syz-executor/13784: [ 499.728192][ T31] #0: ffffffff8eca72c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 499.737817][ T31] #1: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 499.746956][ T31] [ 499.749300][ T31] ============================================= [ 499.749300][ T31] [ 499.757800][ T31] NMI backtrace for cpu 0 [ 499.757818][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 499.757835][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.757843][ T31] Call Trace: [ 499.757850][ T31] [ 499.757857][ T31] dump_stack_lvl+0x189/0x250 [ 499.757880][ T31] ? __wake_up_klogd+0xd9/0x110 [ 499.757897][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.757916][ T31] ? __pfx__printk+0x10/0x10 [ 499.757939][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 499.757960][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 499.757976][ T31] ? _printk+0xcf/0x120 [ 499.757993][ T31] ? __pfx__printk+0x10/0x10 [ 499.758009][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 499.758028][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 499.758049][ T31] watchdog+0xfee/0x1030 [ 499.758069][ T31] ? watchdog+0x1de/0x1030 [ 499.758092][ T31] kthread+0x70e/0x8a0 [ 499.758112][ T31] ? __pfx_watchdog+0x10/0x10 [ 499.758129][ T31] ? __pfx_kthread+0x10/0x10 [ 499.758159][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.758179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.758191][ T31] ? __pfx_kthread+0x10/0x10 [ 499.758205][ T31] ret_from_fork+0x3f9/0x770 [ 499.758224][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 499.758244][ T31] ? __switch_to_asm+0x39/0x70 [ 499.758259][ T31] ? __switch_to_asm+0x33/0x70 [ 499.758271][ T31] ? __pfx_kthread+0x10/0x10 [ 499.758286][ T31] ret_from_fork_asm+0x1a/0x30 [ 499.758311][ T31] [ 499.758317][ T31] Sending NMI from CPU 0 to CPUs 1: [ 499.916339][ C1] NMI backtrace for cpu 1 [ 499.916356][ C1] CPU: 1 UID: 0 PID: 8459 Comm: kworker/u8:10 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 499.916376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.916387][ C1] Workqueue: bat_events batadv_nc_worker [ 499.916412][ C1] RIP: 0010:kasan_check_range+0x1d4/0x2c0 [ 499.916432][ C1] Code: 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 75 63 41 f7 [ 499.916445][ C1] RSP: 0018:ffffc9001bf3f908 EFLAGS: 00000256 [ 499.916459][ C1] RAX: 0000000000000001 RBX: ffff88803d7e9f80 RCX: ffffffff819eda4d [ 499.916470][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88803d7e9f80 [ 499.916481][ C1] RBP: 0000000000000000 R08: ffff88803d7e9f83 R09: 1ffff11007afd3f0 [ 499.916492][ C1] R10: dffffc0000000000 R11: ffffed1007afd3f1 R12: 0000000000000001 [ 499.916503][ C1] R13: dffffc0000000000 R14: ffffed1007afd3f1 R15: 1ffff11007afd3f0 [ 499.916514][ C1] FS: 0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 499.916527][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.916538][ C1] CR2: 00007f00bdd81178 CR3: 0000000079ecc000 CR4: 00000000003526f0 [ 499.916553][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.916562][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.916572][ C1] Call Trace: [ 499.916579][ C1] [ 499.916589][ C1] do_raw_spin_unlock+0x4d/0x240 [ 499.916608][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 499.916627][ C1] _raw_spin_unlock_bh+0x23/0x40 [ 499.916648][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 499.916669][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 499.916696][ C1] batadv_nc_worker+0x369/0x610 [ 499.916716][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 499.916737][ C1] process_scheduled_works+0xae1/0x17b0 [ 499.916770][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.916798][ C1] worker_thread+0x8a0/0xda0 [ 499.916825][ C1] kthread+0x70e/0x8a0 [ 499.916843][ C1] ? __pfx_worker_thread+0x10/0x10 [ 499.916862][ C1] ? __pfx_kthread+0x10/0x10 [ 499.916879][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.916898][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.916912][ C1] ? __pfx_kthread+0x10/0x10 [ 499.916928][ C1] ret_from_fork+0x3f9/0x770 [ 499.916948][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 499.916969][ C1] ? __switch_to_asm+0x39/0x70 [ 499.916984][ C1] ? __switch_to_asm+0x33/0x70 [ 499.916998][ C1] ? __pfx_kthread+0x10/0x10 [ 499.917014][ C1] ret_from_fork_asm+0x1a/0x30 [ 499.917038][ C1] [ 499.917456][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 500.186860][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 500.198649][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.208694][ T31] Call Trace: [ 500.211965][ T31] [ 500.214883][ T31] dump_stack_lvl+0x99/0x250 [ 500.219468][ T31] ? __asan_memcpy+0x40/0x70 [ 500.224051][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.229243][ T31] ? __pfx__printk+0x10/0x10 [ 500.233840][ T31] panic+0x2db/0x790 [ 500.237730][ T31] ? __pfx_panic+0x10/0x10 [ 500.242137][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 500.247933][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 500.253295][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 500.259440][ T31] watchdog+0x102d/0x1030 [ 500.263757][ T31] ? watchdog+0x1de/0x1030 [ 500.268166][ T31] kthread+0x70e/0x8a0 [ 500.272250][ T31] ? __pfx_watchdog+0x10/0x10 [ 500.276913][ T31] ? __pfx_kthread+0x10/0x10 [ 500.281497][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.286685][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.291866][ T31] ? __pfx_kthread+0x10/0x10 [ 500.296442][ T31] ret_from_fork+0x3f9/0x770 [ 500.301025][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 500.306129][ T31] ? __switch_to_asm+0x39/0x70 [ 500.310883][ T31] ? __switch_to_asm+0x33/0x70 [ 500.315633][ T31] ? __pfx_kthread+0x10/0x10 [ 500.320211][ T31] ret_from_fork_asm+0x1a/0x30 [ 500.324979][ T31] [ 500.328280][ T31] Kernel Offset: disabled [ 500.332680][ T31] Rebooting in 86400 seconds..