last executing test programs: 3m7.813873621s ago: executing program 3 (id=1890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x2}, 0x18) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) close(r1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x40044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3m6.512362295s ago: executing program 3 (id=1901): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@getlink={0x38, 0x12, 0x221, 0x0, 0x0, {0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r4, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) bind$packet(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) close(r3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m6.203430737s ago: executing program 3 (id=1907): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='itimer_expire\x00', r2, 0x0, 0x81}, 0x18) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000740)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="7b57f6ae23f2be", 0x7}], 0x1}, 0x4008094) 3m5.23287051s ago: executing program 3 (id=1920): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000000c0), 0x4) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @broadcast, @void, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x3c, 0x3, 0x0, 0x0, "9428d5a66ed1b308fe0858b43239fac874db722ad585b8d30aa6b6cec8960b8ca819292930dbbf68d4d968176cbcf2989052cc796a475de3249e9b432b383946"}}}}, &(0x7f0000001180)={0x0, 0x2, [0xebb, 0x23, 0xb3a, 0x373]}) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x33, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) socket(0x15, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f00000005c0)={r6, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r7, 0x1}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@broadcast, @broadcast, 0x1, 0x2, [@loopback, @broadcast]}, 0x18) 3m5.171557525s ago: executing program 3 (id=1922): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040088be"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000cd0258"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c0001000000000000000900070000006b2558bf3a8abd58d682f68b3f28f7c030819fa7a82ef65cfeb851088e311ecd0d88de89fdb546ad0d60ac0e4ad8cf9f3357491cb7abf443af9c94755a917f199ccf3b725bbcc5fc2df7cff2a4c9f963ac4ee958bcbf7da1c3e874d81b8c4dce314a6afec56a718425c5dee89c95d67a700f00", @ANYRES32=r5, @ANYBLOB="8000a2000a000200aaaaaaaaaa1c0000"], 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x39}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000085000011ffa8e00df3ae40479b625792c484ead3be684e"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) 3m4.656399124s ago: executing program 3 (id=1926): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x2f) listen(r0, 0xaca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m49.550004846s ago: executing program 32 (id=1926): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x2f) listen(r0, 0xaca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m32.344949183s ago: executing program 5 (id=2072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0_to_hsr\x00', @broadcast}) syz_emit_ethernet(0x3a9, &(0x7f0000000080)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "12ca30", 0x36f, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[@dstopts={0x33, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x20, {0x3, 0x6, 0xf7, 0x0, [0x1, 0x1, 0x27]}}, @hao={0xc9, 0x10, @mcast2}, @pad1]}, @dstopts={0x8, 0x26, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x48, 0x1, [0xfffffffffffffff8, 0x7, 0x200]}}, @generic={0x1c, 0x19, "3546bdc9ec342cb705bfdd0ea1e5d7515c7d8f4e4cedb79944"}, @generic={0xe7, 0xf8, "77a3ba1c40b5ca338dbcd2141e294cc8b777cceb37d44b5e8a958152d093a64c47cd441bf25b4a6953126462937def98a72794ecdc7aa529baa5ec3fec23293591f0ae4748300f11d018b60ca310feec1be47905f7da4989b52733da69b82dbea9968a2dadf557c716ad79760bb98bc517d8975e0c4610dbb0db6579fd4434f4a4691fe2601a6786164bf494a0118fe83d25385bd227dfc4af3618f44a4445d594202cad7beef4f334d79f1918d2295c45ea8ed8858c22aad3ba48f6381c601b107cc07f928199327595e1cbefdebf66f8ec601327af91838f7961d00050dc9b7b02ea29caf606f87b19c3c4dc580ef945e7bc076282ec0d"}]}, @fragment={0x84, 0x0, 0x1, 0x1, 0x0, 0x6, 0x68}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2b, 0x6, 0x4, 0x3, 0x9, 0x8, 0x152, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, @fragment={0xa6, 0x0, 0x6, 0x1, 0x0, 0x1d, 0x66}, @routing={0xee, 0x4, 0x1, 0x2f, 0x0, [@remote, @private2]}, @hopopts={0x68, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}]}, @hopopts={0x6c, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0xb772, [0x6, 0x401, 0xff, 0x6cb94696, 0x8000000000000000, 0x4]}}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x8}, @ra, @generic={0xa, 0xc4, "872422bba083eecf24e41728c31e7c03b9357e9126a82d7f8da4c56931826bc3532fdb5618efc26d68ce3cadab8b0ab5b89b6a8925f0b75a88acd3151168026e4f89bd4ae5895aa1cefa343304aa12be4c3ee9b7358cbe2e3229a70a8c52072022319d295aa7109616ad2a8b4d8c9283f3060bcf7fe43906f14171c311e2407450e8317f05be6af0e15f45bf0ec93b9388e9135dadfb1c12b44b84a12d3d14e3b3ff81fc9f72e042aaf77e33c051069adcb5e86cbacbc99f18f769af3b0f4af252c35df9"}]}], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x0, 0x0, 0xb, 0x1, 0x2, 0x0, 0x0, 0x2, 0x5, 0x1, 0x1, 0x9, 0x400, 0x4, 0x4e22, 0x4e21}, 0x1, 0x4}, 0x1, 0x1}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000440)={0x0, 0x4, [0x2e3, 0x432, 0x761, 0x4a2]}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000580)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0xd, 0x6, {{0x17, 0x4, 0x0, 0x32, 0x5c, 0x66, 0x0, 0x7, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x18, 0x2, [{0x7, 0x12, "27ae3482d6c2d17e982bbd41ad4b74b2"}]}, @ssrr={0x89, 0x13, 0x43, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0xc5, 0x0, 0xd, [0xe0]}, @lsrr={0x83, 0x13, 0x2d, [@multicast2, @rand_addr=0x64010100, @multicast1, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000680)={'gretap0\x00', r3, 0x8, 0x10, 0x200, 0x101, {{0x20, 0x4, 0x1, 0xb, 0x80, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@cipso={0x86, 0x4a, 0x2, [{0x1, 0x9, "d2cf0dc35df19c"}, {0x2, 0x2}, {0x2, 0xc, "f95bc8a76d80b070bfc9"}, {0x0, 0x4, 'OX'}, {0x5, 0x6, "cbef3937"}, {0x5, 0x6, "33e76dc3"}, {0x7, 0x3, "cc"}, {0x1, 0xe, "e131f67e10796e193e68620c"}, {0x6, 0xc, "00ad9ae11860e6d92730"}]}, @timestamp={0x44, 0x20, 0xb, 0x0, 0x5, [0x2948, 0x6, 0x9439, 0x2, 0x1, 0xe, 0x100]}]}}}}}) accept$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r7, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x2c}}, 0x0) openat$cgroup_type(r1, &(0x7f0000000940), 0x2, 0x0) r8 = accept4(r2, &(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000a00)=0x80, 0x40800) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000a40)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x0, 0x0, 0x44, 0x0, "346474afb868f2b7c307259651f33949160465fa7f7605af9c21d624d2256271e755e66b106a14ca2e6ab3c1f66c8e8a7e0dfc4e6f016f6a1337323e88449a6e5f09e2e01d3ef99553a02b227fec3c35"}, 0xd8) connect$inet(r2, &(0x7f0000000b40)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000b80)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000bc0)=0x2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r6) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0xe, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x24044000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000d40)=0x1, 0x4) setsockopt$rose(r8, 0x104, 0x5, &(0x7f0000000d80)=0x6fd, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000e00)=0x2df9, 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x98, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff9}, @NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5f}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa2fb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff3}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2a}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfff}]}, 0x98}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000028c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002880)={&(0x7f0000001040)={0x183c, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x27, 0x4, "3b799b4a374ff58bed50babf64549d83358d8690fdd6c1363c965f32c94063018ddacb"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "041e7a8b6bb2c742387ae89acf0dde567568710fd4bddeb4ad960aac46212e68741ab949de8c19bcb7e8aaaed1a569788029f8ce4f7370ebdcab941786ea377d8f57f8fbf8287b8ef7554265988d5d23ca02b5ce2f9fe0b74f44cd2e55f54f502300f609f0c1293b6ca1355cc6c76c3e0263712cf7497d6199f8e24c0a768b7978e3632377cde3bef36fee9b0739ca8fb3645b5b355e604f8a65fb3f55031160877d6b178c2c8d866cddf4510c509677ebfec0c243b2f36a939ff443eb7378922e1fa3cc354de3fb7796e8553ebb13de5f0304f8e599741b269f7682ae4003"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xab, 0x5, "abfde37d67eca62b0f1e1c30d7e234a81d0819b96d85bb7b2772ac6ad94e1b37101a8014bfe0b89ab2a77b5a8128e0bdb43094a4735163d16e1b28d2acf47435d38c5184012cd77ed5c96633ef0db271bf20d0c6763e72d9535fc090e8c07388e46139bca0f887a7784d730d82f4778a74c6e97c9162962fde44cc6c05ff80c5b7b408b82e23ffa3a91e52adfa99d10e0fd2682339d0024f2cd44ad95160b005bb575f1b899d14"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x264, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x24, 0x5, "5bbe670f5281019d792cbb0df4de66137894dae7497dbbfb5f86e87ac8bdb0b9"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "c23e5c53beefe7dbed615e84f338eac944d844892fd970334568ab349a8476f292a8b8b1952a1e73d6c5e3709666141d3516d38c033a45eb83487a1a90d419ed67af9ab1a4248f23ed80cdd31ba6d549e74fa4149ce8f65d24ffd78c026a7b472f3dd6ac0a25444f117397fb59fe3e02afb5366a48b544b6f1cb955506bd148cd29ad2cb44e9f3dd46b572efd1"}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "c8f2dd43901ad5bef9e39d60e500f41942f0c9a284653866294b6373aad3e769dac01920f725df46b6308bf60c0d44a6f6b8e8656b4039d426cbab5a554f0140f11274bd5af208c781d753bdf6a29b6e2587f009d1db99c78ed2adc5527f3a78b5f368a93c7e1c4904a23070ce1b54306022f2de17e129061d5866f143f6e5772d560d1bbb25c6b3be34f9f341296062e29eaacaad94d5fc485bd4e728e68e91f9434c9a0c74e7d0140d3dea8a2fcade9ca79e65441f7329718d5dd31396c804f5f88bce050efae2d79e411e78408d8307ede7d8214d45bbfdfff1043d"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "795cf27ef02d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x338, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!,]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '})+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x449}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '}'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff0ac}]}]}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'cgroup.type\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '++\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "57db88c68b941cf7082a1e2ff97419dbef82562f0c1ecf210eea14e3352e4d99998755ac319c626802d255be046e7f7be79a7df3eeefbabd03ce5d3aeadf87efdf336d777c66997dad6a3ef46bdbbdcd0f1fb0b7100b56c152e74543e17bc91f72cf009b8d821a2bb3cf03cb34c3b267b45cab0baff38641d62a689dc925771860999f57ee37f2eafcc57fd97e6ff46fd46c4386b48534afa4f35edd4855d86ffecc62daa28d6377967949b5ef5f65d803859a402430792d6579e704caebf21d0be2bbfc65dc52c024fbac0696e2b78a8d5ed5e134e30ea476ac3e592ca148b8fb98f3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^&{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "235ddad76f01fedd24a6d9be950dad031142dc9b97eaa767412db823150665eb5d2140749a25d6587fb503a3def42f3b719a54de331d410f0b3a872085ac06747618b961a0b8ca1dabcfafda5c7eeae9083f22565c0b1e3bcbda55724a521c690f8669cff4e8ec72faa42f405ecb2da5a6894cd02d8651c874f329e1bc0cd689afcf3da37b30cb4a3c0b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x183c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8df09a841fab5074) 2m30.334448286s ago: executing program 5 (id=2075): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/76, 0x4c, 0x1, &(0x7f0000000100)=""/20, 0x14}, &(0x7f0000000300)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRESOCT=r0], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2m30.115240935s ago: executing program 5 (id=2077): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x7, 0x4}, @TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 2m29.843369963s ago: executing program 5 (id=2079): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x2000140d) write$cgroup_subtree(r1, 0x0, 0x9) 2m29.675405276s ago: executing program 5 (id=2081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x25dfdbff, 0x0, [@XFRMA_SPD_IPV4_HTHRESH]}, 0xfffffffffffffc53}}, 0x0) 2m29.475385387s ago: executing program 5 (id=2082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000002000170829bd7000ffdbdf250a00000d"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 2m13.319025595s ago: executing program 33 (id=2082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000002000170829bd7000ffdbdf250a00000d"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1m39.585212813s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a00000004000080040007"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x7, 0x7145, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffff7}, {@private=0xa010101, 0x400}, {@loopback, 0xa}, {@remote, 0x5}, {@broadcast, 0x7f}, {@empty, 0x6}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0xc9, 0x1, 0xf, [{@private=0xa010101}, {@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0xea}, {@rand_addr=0x64010100, 0x980}, {@broadcast, 0xffff}, {@broadcast, 0x4}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x61, 0x0, r2}}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth0_macvtap\x00'}, 0x8}) r3 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="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", 0xfa, 0x0, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x1, 0x7}, 0x14) 1m38.55249824s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m33.757845837s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}], 0x3, 0x0) 1m20.264715269s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m19.833195578s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a00000004000080040007"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x7, 0x7145, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffff7}, {@private=0xa010101, 0x400}, {@loopback, 0xa}, {@remote, 0x5}, {@broadcast, 0x7f}, {@empty, 0x6}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0xc9, 0x1, 0xf, [{@private=0xa010101}, {@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0xea}, {@rand_addr=0x64010100, 0x980}, {@broadcast, 0xffff}, {@broadcast, 0x4}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x61, 0x0, r2}}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth0_macvtap\x00'}, 0x8}) r3 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="10370e27dd50bf807e7df76469b22fcbb0d3a577c25fbaf094476572ad51ee74ba9900b68c5d24953bdd7ad01079b086c1266177a5a6d55924918a3052e80764cd54fc86047c9320a0cecd94800abefd4ee9ded47e2d5f531e010eb1b962bad14359df7cc7575d98c29ddbf0b9f92d824a3378142c9856703917598fdfa4a34b4df9940114ede18afb7d4e87ef9f29d43170efafbddefae0b0ecf6932b97df9d07438b723ecab262a5c9382e220961f42ae3594d18cd1a123ede5b9b4bdac2b5673b548857fde494f04a9d7d9bf7f288fa9547b067a0c5111d3dd8cfe32b79504179d8f4e403a8d725d6101f4f527a9643fd78d0ff0417854a95", 0xfa, 0x0, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x1, 0x7}, 0x14) 1m17.887126078s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}], 0x3, 0x0) 1m3.505197665s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 57.766656464s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}], 0x3, 0x0) 56.600633952s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a00000004000080040007"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x7, 0x7145, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffff7}, {@private=0xa010101, 0x400}, {@loopback, 0xa}, {@remote, 0x5}, {@broadcast, 0x7f}, {@empty, 0x6}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0xc9, 0x1, 0xf, [{@private=0xa010101}, {@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0xea}, {@rand_addr=0x64010100, 0x980}, {@broadcast, 0xffff}, {@broadcast, 0x4}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x61, 0x0, r2}}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth0_macvtap\x00'}, 0x8}) r3 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="10370e27dd50bf807e7df76469b22fcbb0d3a577c25fbaf094476572ad51ee74ba9900b68c5d24953bdd7ad01079b086c1266177a5a6d55924918a3052e80764cd54fc86047c9320a0cecd94800abefd4ee9ded47e2d5f531e010eb1b962bad14359df7cc7575d98c29ddbf0b9f92d824a3378142c9856703917598fdfa4a34b4df9940114ede18afb7d4e87ef9f29d43170efafbddefae0b0ecf6932b97df9d07438b723ecab262a5c9382e220961f42ae3594d18cd1a123ede5b9b4bdac2b5673b548857fde494f04a9d7d9bf7f288fa9547b067a0c5111d3dd8cfe32b79504179d8f4e403a8d725d6101f4f527a9643fd78d0ff0417854a95", 0xfa, 0x0, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x1, 0x7}, 0x14) 44.458455783s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 41.821778351s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}], 0x3, 0x0) 38.217704162s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a00000004000080040007"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x7, 0x7145, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffff7}, {@private=0xa010101, 0x400}, {@loopback, 0xa}, {@remote, 0x5}, {@broadcast, 0x7f}, {@empty, 0x6}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0xc9, 0x1, 0xf, [{@private=0xa010101}, {@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0xea}, {@rand_addr=0x64010100, 0x980}, {@broadcast, 0xffff}, {@broadcast, 0x4}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x61, 0x0, r2}}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth0_macvtap\x00'}, 0x8}) r3 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="10370e27dd50bf807e7df76469b22fcbb0d3a577c25fbaf094476572ad51ee74ba9900b68c5d24953bdd7ad01079b086c1266177a5a6d55924918a3052e80764cd54fc86047c9320a0cecd94800abefd4ee9ded47e2d5f531e010eb1b962bad14359df7cc7575d98c29ddbf0b9f92d824a3378142c9856703917598fdfa4a34b4df9940114ede18afb7d4e87ef9f29d43170efafbddefae0b0ecf6932b97df9d07438b723ecab262a5c9382e220961f42ae3594d18cd1a123ede5b9b4bdac2b5673b548857fde494f04a9d7d9bf7f288fa9547b067a0c5111d3dd8cfe32b79504179d8f4e403a8d725d6101f4f527a9643fd78d0ff0417854a95", 0xfa, 0x0, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x1, 0x7}, 0x14) 23.566965648s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 21.187671393s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}], 0x3, 0x0) 17.081089561s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a00000004000080040007"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x7, 0x7145, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffff7}, {@private=0xa010101, 0x400}, {@loopback, 0xa}, {@remote, 0x5}, {@broadcast, 0x7f}, {@empty, 0x6}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0xc9, 0x1, 0xf, [{@private=0xa010101}, {@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0xea}, {@rand_addr=0x64010100, 0x980}, {@broadcast, 0xffff}, {@broadcast, 0x4}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x61, 0x0, r2}}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth0_macvtap\x00'}, 0x8}) r3 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="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", 0xfa, 0x0, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x1, 0x7}, 0x14) 5.206795026s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.183791713s ago: executing program 4 (id=2619): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x10, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) setsockopt(r0, 0xd, 0x9, &(0x7f00000005c0)="b26eb3131c2be0cf97c6b51057af0a4b92fb619e019917c75edff7d7eca7964c968a4433e351ca42a8dc4c4aad3e73d5f922d577e16842efeec0674f2ee459e4848974de8409d439a86297ba37ebf02513dbbc9995a2d3850a406a3dc6ae045fc68fb060b039c420578ca84645c147de302da42b4a0b10b8fff7b90c2ded85129c545f615595bb73cac3af113b420d26cff9da374b6c5667f0661d5698e01d070e", 0xa1) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000880)=""/87, 0x57}, {0x0}], 0x3}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00280a000060001980140004006b2e4f2fdd8733dc1c1639228919eb5e2efc02007b5d2f215d290000140005004af57c15cd92d389e606fce6a0eebda514000400f4d8d35abbd4fab3a3614be8a496bd8f140005008ebcd2c7e1cf0421ab20db4c32c4330605001000040000001400030076657468315f6d616376746170"], 0xa8}}, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000040)=""/143, &(0x7f0000000140)=0x8f) 4.602249456s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}], 0x3, 0x0) 3.576974047s ago: executing program 4 (id=2620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r2}}]}, 0x28}}, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x63c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x2c00}, [@nested={0x626, 0xe0, 0x0, 0x1, [@generic="64ea6c305d4076a24bb6bb71a09049b28238c80d48abb2cae8638ef2558ea6820c7f16a0549335612565653075261dd1a08cc8ca261b6b2a5961ca3714d73f5362bcfd972f99aa83643b016972593785d204d889135cf0da32b46ca3bde2f7e2801d1587845f33032fb22887addc55d842a7968f3b4cd026ebdd12e6e2feff23f56697b93e04affabd9c542d3e6386018810de7b21be5a7a2b3b161bab60c9f34cdb7e5dce4db0e43d7f2be6c4ee42256856cb6cd10d8177a6cafe5b90a77453b8339bb99d9536c34efe7cbd753d50ded3f028cfbfc53b4bf693a80100ea3d818a9a4b14f114440c", @typed={0xa, 0xe0, 0x0, 0x0, @str='{},,#\x00'}, @typed={0x69, 0x92, 0x0, 0x0, @binary="4b5a07f367bf3714bb70966009210392e25c66a1237fb10d7f638f9cdc833a3fc5ee6e8389dae042826aa4df7a9aa3ccb45cac428f875b4028122dfd810187b99fa55ef71e0a113d0b226985019010de96205bce7fa2d4cbd7930117fc49b546aa4c007b33"}, @generic="80e64ee89f382d1b237ff2725815d2c23cc722990740018ab7330a17d55401cbbcca0c5656833eff0f43b8c770468071b9e71d5ce745841897b5c3384827d5b1c929b150c7170ad2f452794aad90ff7ee8455c710be29365c6e9f52d883592f5ef7c39492cc59e7cf94fa47fdf17b65f92bc788b7a045cbc98beae0c78e7556a9d93bd5e67bcad3ac34f4769117f51dbabe7457093befe257a86e6ec93f45365e557d7ebf263310aae1dd064aec4052021d9f4bd215b3d250f12d30e9da5", @nested={0x2a9, 0xde, 0x0, 0x1, [@generic="bf0c1420de23171a881fb8533c402b9b1484a296d5b49277eaeca40bd6bb3894ad5cf3c79409164b4293165e2da479326dbd2e668656a5a3ccc1c6c1ec550e69cb508e900434a7041f882c01f8413fea1dccb9df0ad7130775fbc43e98ba50dd8d7c10556b3e150191295a5cc8126c3493fa25b3232e9cde00dc045a0b9cf6e8c768fa4f5c5fa57e89936fae9a0e40229f368ba3e661e745", @typed={0x8, 0x13f, 0x0, 0x0, @uid=r2}, @generic="8ed57013a70c8c13eb010fefc17370fafcc742460b565587b958b0b3f3226ad52b52fd72b3e7061fb4d7ef69c8e7e2b3c52ab2533217cfad2aeea03e4e386ef90b2536a144ca35714739b9f8c6d8c6018c754cfea6d88ce16a7587ee66f17a53935271d28325ca38db9a650a8dd0e911e53b4e4f59637880b1eeeed2e2beb2c58be287c591d291ef7e57e5dbc5f1fa6c7a8b9d7d3cd9a26323b8910b9c5b6c5d11249a27a7b3b924ff1b1e8edbd364a1282253706262cdfdf1904ac9d631e1776557607dc3a320b2adec849436c73a4a605564af78078ee3fe39da6ea0d90c30e78604c6d45f105ae19c0f427a4d58", @generic="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", @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x71, 0x0, 0x0, @uid=0xee01}]}, @nested={0x157, 0x30, 0x0, 0x1, [@nested={0x4, 0x42}, @typed={0x8, 0xda, 0x0, 0x0, @fd=r3}, @generic, @generic="dad7375a66f6c63b3a8820beb471c147605888cac6852251460ae519d8287834b10a8e6bfabd787ae4ed04755e8346134271ffba831850ae4366c4e819c44ffdee3855c96781502720f89a409e6deab23d97a94bbe6df781f01744dfa4b7345ac4f20dc93ad8649a15af0ff81983b5c55e91c2dd898e2aec2ee3455abcc7ccabc688a3a8f69993fdc0622ce9eaf57c37916d065584e2783fb9c3958be35f1b78cbedcd01e2a721ac1470f7403287d2cea0788e0dfa3a8a1cf93c6b53262a386aa9498f74c49686c196eaf2bb0042616ec5", @generic="42028b1153309a9d0728e33e95c22736afa6d727cd108d2dc7424ba4f0efd859d31e68574a971b8b71938cce410e9bee7c4dba8a935aa1a13508b3a3e2a30d371ba28a87b9f5dcf68dad7ee840b5a9557dfd367e234dfa404fa81332034350810ad3eb71ec39d858c3f6edde974d", @typed={0x8, 0x105, 0x0, 0x0, @uid=r6}]}]}]}, 0x63c}, 0x1, 0x3000000, 0x0, 0x4040841}, 0x8080) 3.139318405s ago: executing program 4 (id=2622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r4, @ANYBLOB="000000000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) recvfrom$packet(r1, &(0x7f0000000000)=""/112, 0x70, 0x20, &(0x7f0000000080)={0x11, 0x10, r4, 0x1, 0x2, 0x6, @random="9ea18acd80c3"}, 0x14) 2.258611493s ago: executing program 4 (id=2624): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57f, 0x5, 0xc}) getsockopt$inet_buf(r3, 0x0, 0x9, &(0x7f0000000300)=""/64, &(0x7f0000000380)=0x40) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f0000000440)={@remote, @broadcast, 0x0}, &(0x7f00000004c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x1d0, r4, 0x3ad8dbddaa21939, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_SOPASS={0x23, 0x3, "ce96767137a728f3e98199f3674ef127e57cff4d69877defd510ce7378f873"}, @ETHTOOL_A_WOL_MODES={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7be4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "774dea3aad6c4dad69f3e2e99ee81137a3f6a7532efc390613fbacc7ce8b8ab3118e265d7bb4752fd906c19a301d21df6eaf92d0159995ea81902de13954b7a50c603d9e1463f5e1f17de62446d254c616d9ae93e68b2a6107ca7d7381d8e8e204"}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "13d72bcd8fbb2af68104500146a8c324d0a73075f88faf2cc5e4ec699c6ef4a347a530812039f51588b6ac20d5a59897ad0003443d267dce27210fcc8acf2d7d09d765d532d626c612f25f5c2b9d4d1498ed101fa5b5abdcfe5f26f4e2bde1bf082aef34ab14a5519b9f9610343934c45229c6f883cf1e59cdd5ddaab38deacd9b672395fc6e104ed7b2116a046f84ed04656cec2cdd5a195dedf7289e1dce8c262999cd76ae2129bd1a2e65f2e10ac3c40c510d"}, @ETHTOOL_A_BITSET_MASK={0x13, 0x5, "7d345cc1f93bd2f93b7ae9a188b6ab"}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "9d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "31e16165cedcae070000000000000055ea74e22c5f999b3555"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}]}, @ETHTOOL_A_WOL_SOPASS={0x18, 0x3, "f392d27f2e9b34e99cb0c00d6cecfbaf03b74e09"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c011}, 0x280c0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) pipe(&(0x7f00000003c0)) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@delchain={0x2c, 0x65, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10}, {0x4, 0xe}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x204000a) mkdirat$cgroup(r9, &(0x7f0000000240)='syz1\x00', 0x1ff) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r11, 0x135, 0x0, 0x4, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2e, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x4}], "5bc2e016b3e8f925"}}]}, 0x30}}, 0x0) 1.282188205s ago: executing program 6 (id=2625): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) syz_emit_ethernet(0x36, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.221438075s ago: executing program 4 (id=2626): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x7fff, 0x970, {{0x30, 0x4, 0x3, 0x16, 0xc0, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x13, 0x9d, [@dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0x44, 0xf3, 0x3, 0x2, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xb415}, {@local, 0x401}, {@multicast1, 0x1}, {@private=0xa010102, 0x4}, {@remote, 0xfffff36e}, {@loopback, 0x4}, {@multicast1, 0x1000}]}, @ssrr={0x89, 0x2b, 0x77, [@multicast2, @rand_addr=0x64010102, @multicast1, @private=0xa010102, @empty, @empty, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x9, [{@broadcast, 0x8001}, {@remote, 0x1}]}, @noop, @generic={0x88, 0x8, "c9464044a4b3"}, @generic={0x86, 0xa, "33174c43d93c300b"}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@deltclass={0x68, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x8}, {0xe, 0x10}, {0xd, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xb}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8e}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x4085) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0xfffe, 0x80}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00', 0x200}]}, &(0x7f0000000200)=0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.163745968s ago: executing program 6 (id=2627): unshare(0x8040480) (async) unshare(0x8040480) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x5760, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1f, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) 1.030822028s ago: executing program 4 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2c"], 0x20}}, 0x44850) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000013006bcc9e3be05c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0004007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) nanosleep(&(0x7f0000000100)={0x77359400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x40) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) setsockopt$inet6_mtu(r5, 0x29, 0x4e, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @val, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x40}}}, 0x3a) r6 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000500)) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000000fcff6706000010000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair(0xb, 0xe361bcd883a26e46, 0x2, 0x0) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 970.121349ms ago: executing program 6 (id=2629): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000017c0)=@req={0x28, &(0x7f0000001780)={'vlan1\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @my=0x0}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000017c0)=@req={0x28, &(0x7f0000001780)={'vlan1\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @my=0x0}}}) (async) 697.720299ms ago: executing program 6 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macvlan1\x00'}) r2 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@can_newroute={0x144, 0x18, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x5}, [@CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x2a, 0x2, 0x7, 0x1, 0x3, "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", 0x0, "d0439abf308171ecb3f238b7a78c1f5da761ef60"}}]}, 0x144}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000002239000000000000000000007301170000000000950000000000000056dcaade5791bf4515fdc411249cb887232e46478cbf570a2cc14234ed102651d1de174ae5aa0da2066e2aa8b43e39b7d5e705a9c2d192b1c8f1060a4453eb014c2c5d16d943018be3a99a88715f9c129bef8abc95dd"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 407.37581ms ago: executing program 6 (id=2631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}]}, 0x3c}}, 0x0) (async) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0xb, "52b73bac06e88453d8"}]}}}}}}}}, 0x0) 304.940935ms ago: executing program 6 (id=2632): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40841}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4090) socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r4, &(0x7f0000000380)={&(0x7f00000001c0)=@phonet={0x23, 0x1, 0x1, 0xb9}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="51a5f7c93e9d240ab4c7f2f098f63d6a3c692643269a7b6b4bdb7c307cf2772f0c57f700e9e56b6cfe269a24e170b30bb92c20f0b0c2", 0x36}, {&(0x7f00000002c0)="23ecd0fc3a1b924117afd9cf4c66819e3b14d0e909d38b5e12302c8593107070f27bcdccfb8dff7f906819e0727db0c11f9af5e19d8d7d84c60f3645f3bea433de3356b0aeeef9ae266c2985a7babaa0d681574b0c5c96954260373b", 0x5c}], 0x2}, 0x0) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r4, 0x1, 0x7, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000140)=r7) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r1) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 0s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a00000004000080040007"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x7, 0x7145, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffff7}, {@private=0xa010101, 0x400}, {@loopback, 0xa}, {@remote, 0x5}, {@broadcast, 0x7f}, {@empty, 0x6}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0xc9, 0x1, 0xf, [{@private=0xa010101}, {@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0xea}, {@rand_addr=0x64010100, 0x980}, {@broadcast, 0xffff}, {@broadcast, 0x4}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x61, 0x0, r2}}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth0_macvtap\x00'}, 0x8}) r3 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="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", 0xfa, 0x0, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x1, 0x7}, 0x14) kernel console output (not intermixed with test programs): th: 249 > 9 [ 373.492812][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.503927][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 373.519761][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.751238][T16238] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.766729][T16238] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.780103][T16238] bridge_slave_0: entered allmulticast mode [ 373.787510][T16238] bridge_slave_0: entered promiscuous mode [ 373.801590][T16259] pim6reg: entered allmulticast mode [ 373.807101][T16260] pim6reg: left allmulticast mode [ 373.847889][T10343] hsr_slave_0: left promiscuous mode [ 373.854629][T10343] hsr_slave_1: left promiscuous mode [ 373.862659][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.878497][T10343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.898330][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.906718][T10343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.937115][T10343] veth1_macvtap: left promiscuous mode [ 373.944161][T10343] veth0_macvtap: left promiscuous mode [ 373.950218][T10343] veth1_vlan: left promiscuous mode [ 373.955483][T10343] veth0_vlan: left promiscuous mode [ 373.989767][ T54] Bluetooth: hci0: command tx timeout [ 374.350390][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.618653][T10343] team0 (unregistering): Port device team_slave_1 removed [ 374.694684][T10343] team0 (unregistering): Port device team_slave_0 removed [ 374.724065][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.744798][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.754200][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.783543][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.793957][ T5869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 374.812876][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.312085][T16238] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.327534][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.335642][T16238] bridge_slave_1: entered allmulticast mode [ 375.344652][T16238] bridge_slave_1: entered promiscuous mode [ 375.394048][T16238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.438039][T16238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.526710][T16253] lo speed is unknown, defaulting to 1000 [ 375.540407][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 375.575075][T16238] team0: Port device team_slave_0 added [ 375.599784][T16272] lo speed is unknown, defaulting to 1000 [ 375.608240][T16238] team0: Port device team_slave_1 added [ 375.669296][ T54] Bluetooth: hci3: command tx timeout [ 375.801233][T16288] __nla_validate_parse: 30 callbacks suppressed [ 375.801254][T16288] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2339'. [ 375.804011][T16238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.831014][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.857703][T16238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.870994][T16238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.878016][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.937345][T16238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.051138][T16238] hsr_slave_0: entered promiscuous mode [ 376.069988][ T54] Bluetooth: hci0: command tx timeout [ 376.079904][T16238] hsr_slave_1: entered promiscuous mode [ 376.087795][T16238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.100547][T16238] Cannot create hsr debugfs directory [ 376.383572][T16303] vcan0: Master is either lo or non-ether device [ 376.438119][T10343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.534643][T10343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.658480][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 376.671449][T10343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.860524][T10343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.879653][ T54] Bluetooth: hci5: command tx timeout [ 376.908809][T16253] chnl_net:caif_netlink_parms(): no params data found [ 377.051627][T16322] netlink: zone id is out of range [ 377.056817][T16322] netlink: zone id is out of range [ 377.082601][T16324] netlink: zone id is out of range [ 377.087821][T16324] netlink: zone id is out of range [ 377.089643][T16322] netlink: zone id is out of range [ 377.098624][T16322] netlink: zone id is out of range [ 377.104316][T16322] netlink: zone id is out of range [ 377.110609][T16322] netlink: zone id is out of range [ 377.116023][T16322] netlink: zone id is out of range [ 377.121901][T16322] netlink: zone id is out of range [ 377.208038][T16333] sctp: [Deprecated]: syz.4.2352 (pid 16333) Use of int in max_burst socket option deprecated. [ 377.208038][T16333] Use struct sctp_assoc_value instead [ 377.412165][T16253] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.450817][T16253] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.458267][T16253] bridge_slave_0: entered allmulticast mode [ 377.510552][T16253] bridge_slave_0: entered promiscuous mode [ 377.525464][T16353] delete_channel: no stack [ 377.545351][T16272] chnl_net:caif_netlink_parms(): no params data found [ 377.665576][T10343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.687860][T16253] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.695713][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.704114][T16253] bridge_slave_1: entered allmulticast mode [ 377.712777][T16253] bridge_slave_1: entered promiscuous mode [ 377.757711][T10343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.768167][ T54] Bluetooth: hci3: command tx timeout [ 377.788194][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 377.847980][T16359] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 378.003930][T10343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.071810][T10343] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.098153][T16253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.126901][T16253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.150091][ T54] Bluetooth: hci0: command tx timeout [ 378.181735][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'. [ 378.274036][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.281599][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.293469][T16272] bridge_slave_0: entered allmulticast mode [ 378.311331][T16272] bridge_slave_0: entered promiscuous mode [ 378.355825][T16253] team0: Port device team_slave_0 added [ 378.385745][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.408342][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.429785][T16272] bridge_slave_1: entered allmulticast mode [ 378.436954][T16272] bridge_slave_1: entered promiscuous mode [ 378.518939][T16253] team0: Port device team_slave_1 added [ 378.680343][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.700015][T16238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.721991][T16238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 378.787386][T16253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.807248][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.819979][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2366'. [ 378.835397][T16253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.890700][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.972668][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.973786][ T54] Bluetooth: hci5: command tx timeout [ 379.082822][T16238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.102933][T16238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.138324][T16253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.156991][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.205818][T16253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.236620][T10343] bridge_slave_1: left allmulticast mode [ 379.248569][T10343] bridge_slave_1: left promiscuous mode [ 379.271475][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.281330][T10343] bridge_slave_0: left allmulticast mode [ 379.287032][T10343] bridge_slave_0: left promiscuous mode [ 379.293397][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.308307][T10343] bridge_slave_1: left allmulticast mode [ 379.314446][T10343] bridge_slave_1: left promiscuous mode [ 379.320878][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.333121][T10343] bridge_slave_0: left allmulticast mode [ 379.349813][T10343] bridge_slave_0: left promiscuous mode [ 379.363460][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.831976][ T54] Bluetooth: hci3: command tx timeout [ 380.041116][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 380.118523][T10343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.138779][T10343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.150511][T10343] bond0 (unregistering): Released all slaves [ 380.239540][ T5869] Bluetooth: hci0: command tx timeout [ 380.312697][T10343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.324231][T10343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.335149][T10343] bond0 (unregistering): Released all slaves [ 380.442708][T16272] team0: Port device team_slave_0 added [ 380.501789][T16272] team0: Port device team_slave_1 added [ 380.533881][T16253] hsr_slave_0: entered promiscuous mode [ 380.550562][T16253] hsr_slave_1: entered promiscuous mode [ 380.575247][T16253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.583358][T16253] Cannot create hsr debugfs directory [ 380.766835][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2373'. [ 380.922781][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.930099][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.972330][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.987077][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.994303][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.022014][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.039399][ T54] Bluetooth: hci5: command tx timeout [ 381.170376][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 381.240868][T16272] hsr_slave_0: entered promiscuous mode [ 381.260278][T16272] hsr_slave_1: entered promiscuous mode [ 381.275550][T16272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.297109][T16272] Cannot create hsr debugfs directory [ 381.417367][T16465] dvmrp0: entered allmulticast mode [ 381.919461][ T54] Bluetooth: hci3: command tx timeout [ 382.022223][T16238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.059781][T10343] hsr_slave_0: left promiscuous mode [ 382.066350][T10343] hsr_slave_1: left promiscuous mode [ 382.080976][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.088433][T10343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.106957][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.114755][T10343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.131820][T10343] hsr_slave_0: left promiscuous mode [ 382.137784][T10343] hsr_slave_1: left promiscuous mode [ 382.159556][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.167072][T10343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.178348][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.186577][T10343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.243435][T10343] veth1_macvtap: left promiscuous mode [ 382.249395][T10343] veth0_macvtap: left promiscuous mode [ 382.255042][T10343] veth1_vlan: left promiscuous mode [ 382.260618][T10343] veth0_vlan: left promiscuous mode [ 382.266546][T10343] veth1_macvtap: left promiscuous mode [ 382.272218][T10343] veth0_macvtap: left promiscuous mode [ 382.277830][T10343] veth1_vlan: left promiscuous mode [ 382.283606][T10343] veth0_vlan: left promiscuous mode [ 382.309583][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 382.933008][T10343] team0 (unregistering): Port device team_slave_1 removed [ 382.987728][T10343] team0 (unregistering): Port device team_slave_0 removed [ 383.115554][ T54] Bluetooth: hci5: command tx timeout [ 383.423605][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 383.896926][T10343] team0 (unregistering): Port device team_slave_1 removed [ 383.948940][T10343] team0 (unregistering): Port device team_slave_0 removed [ 384.536937][T16238] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.549716][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.567059][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.574324][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.617007][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.624225][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.360460][T16238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.522668][T16525] net_ratelimit: 8 callbacks suppressed [ 385.522682][T16525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.577815][T16272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.630934][T16238] veth0_vlan: entered promiscuous mode [ 385.653976][T16272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.661286][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.727502][T16238] veth1_vlan: entered promiscuous mode [ 385.740377][T16272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.765723][T16272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.897756][T16253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.936811][T16253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.996246][T16253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.036240][T16253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.061414][T16238] veth0_macvtap: entered promiscuous mode [ 386.106857][T16238] veth1_macvtap: entered promiscuous mode [ 386.163442][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.180144][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.180147][T16548] sock: sock_set_timeout: `syz.4.2392' (pid 16548) tries to set negative timeout [ 386.211343][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.230247][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.250523][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.271425][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.300540][T16238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.313741][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.340484][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.353253][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.376173][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.397484][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.419234][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.444388][T16238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.466680][T16238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.491622][T16238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.536389][T16548] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2392'. [ 386.567591][T16238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.589308][T16238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.598071][T16238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.629979][T16238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.770889][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.809343][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.981500][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.988511][T16578] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2396'. [ 387.000610][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.007751][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.053572][T16580] netlink: 'syz.6.2397': attribute type 1 has an invalid length. [ 387.067832][T10357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.087432][T10357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.118760][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.125959][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.158720][T16582] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 387.231877][T10343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.270996][T10343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.353400][T16253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.434763][T16253] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.445839][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.453018][T10343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.543692][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.550879][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.812332][T16598] bond0: option updelay: invalid value (18446744073709551615) [ 387.822927][T16598] bond0: option updelay: allowed values 0 - 2147483647 [ 387.836597][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.920818][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.147693][T10357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.275383][T16272] veth0_vlan: entered promiscuous mode [ 388.351402][T10357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.384671][T16272] veth1_vlan: entered promiscuous mode [ 388.402033][T16253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.436354][T10357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.507922][T10357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.527047][T16272] veth0_macvtap: entered promiscuous mode [ 388.552079][T16272] veth1_macvtap: entered promiscuous mode [ 388.593909][T16253] veth0_vlan: entered promiscuous mode [ 388.605880][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.617154][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.628431][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.646025][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.656246][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.667530][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.678172][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.690281][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.701745][T16272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.729334][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.741402][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.751762][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.762799][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.772757][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.783834][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.796681][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.807304][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.817608][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.828372][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.844009][T16272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.854242][T16253] veth1_vlan: entered promiscuous mode [ 388.872066][T16272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.881245][T16272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.892283][T16272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.903653][T16272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.012956][T10357] bridge_slave_1: left allmulticast mode [ 389.018651][T10357] bridge_slave_1: left promiscuous mode [ 389.025959][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.047567][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.068159][T10357] bridge_slave_0: left allmulticast mode [ 389.076665][T10357] bridge_slave_0: left promiscuous mode [ 389.094619][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.400435][T16630] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2404'. [ 389.462163][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2404'. [ 389.742297][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2405'. [ 389.977013][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.988197][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.997035][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.015896][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.023995][ T5869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 390.039304][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.259281][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 390.348570][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.368153][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.378710][T10357] bond0 (unregistering): Released all slaves [ 390.408132][T16633] netlink: 'syz.6.2405': attribute type 4 has an invalid length. [ 390.416761][T16633] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2405'. [ 390.688102][T16648] lo speed is unknown, defaulting to 1000 [ 390.761773][T16253] veth0_macvtap: entered promiscuous mode [ 390.781892][T10343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.803663][T16253] veth1_macvtap: entered promiscuous mode [ 390.839363][T10343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.036395][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.075295][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.088812][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.113777][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.124733][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.152001][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.174830][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.203190][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.229273][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.254746][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.273503][T16253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.362570][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 391.440268][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.485057][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.508454][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.529052][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.549628][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.570079][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.591401][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.597734][T16704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.645030][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.665298][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.685145][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.695843][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.712944][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.725994][T16253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.737911][T10337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.755718][T10337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.795383][T10357] hsr_slave_0: left promiscuous mode [ 391.806971][T10357] hsr_slave_1: left promiscuous mode [ 391.821463][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.839443][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.857476][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.857636][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2417'. [ 391.873754][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.900187][T10357] veth1_macvtap: left promiscuous mode [ 391.905734][T10357] veth0_macvtap: left promiscuous mode [ 391.912519][T10357] veth1_vlan: left promiscuous mode [ 391.917904][T10357] veth0_vlan: left promiscuous mode [ 392.156039][ T54] Bluetooth: hci0: command tx timeout [ 392.446707][T10357] team0 (unregistering): Port device team_slave_1 removed [ 392.494628][T10357] team0 (unregistering): Port device team_slave_0 removed [ 392.503127][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.053280][T16711] bond0: option resend_igmp: invalid value (7540) [ 393.083650][T16711] bond0: option resend_igmp: allowed values 0 - 255 [ 393.161538][T16253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.191639][T16253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.216044][T16253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.227533][T16253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.278409][T16715] x_tables: unsorted entry at hook 2 [ 393.278418][T16716] x_tables: unsorted entry at hook 2 [ 393.593461][T16735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2423'. [ 393.636060][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.670535][T10334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 393.971483][T16648] chnl_net:caif_netlink_parms(): no params data found [ 394.013887][T10337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.026381][T10337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.126090][T10357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.162245][T10337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.176268][T10337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.208581][T16648] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.231806][ T54] Bluetooth: hci0: command tx timeout [ 394.237652][T16648] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.255456][T16648] bridge_slave_0: entered allmulticast mode [ 394.284182][T16648] bridge_slave_0: entered promiscuous mode [ 394.314574][T10357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.347377][T16648] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.355607][T16648] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.367046][T16648] bridge_slave_1: entered allmulticast mode [ 394.374549][T16648] bridge_slave_1: entered promiscuous mode [ 394.422745][T10357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.462957][T16648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.480008][T16648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.596832][T10357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.631662][T16648] team0: Port device team_slave_0 added [ 394.651120][T16648] team0: Port device team_slave_1 added [ 394.739610][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.759102][T16648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.766158][T16648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.835611][T16648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.859855][T16648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.866855][T16648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.927014][T16648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.077269][T16648] hsr_slave_0: entered promiscuous mode [ 395.093308][T16648] hsr_slave_1: entered promiscuous mode [ 395.164173][T10357] bridge_slave_1: left allmulticast mode [ 395.176678][T10357] bridge_slave_1: left promiscuous mode [ 395.186909][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.207723][T10357] bridge_slave_0: left allmulticast mode [ 395.215794][T10357] bridge_slave_0: left promiscuous mode [ 395.229884][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.262313][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.277994][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.289370][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.304483][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.312757][ T5869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 395.321981][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.684463][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.696185][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.707494][T10357] bond0 (unregistering): Released all slaves [ 395.862200][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.871823][T16765] lo speed is unknown, defaulting to 1000 [ 396.310003][ T54] Bluetooth: hci0: command tx timeout [ 396.522422][T16789] Bluetooth: MGMT ver 1.23 [ 396.554541][T10357] hsr_slave_0: left promiscuous mode [ 396.574048][T10357] hsr_slave_1: left promiscuous mode [ 396.591533][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.610479][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.627762][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.647574][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.714141][T10357] veth1_macvtap: left promiscuous mode [ 396.727823][T10357] veth0_macvtap: left promiscuous mode [ 396.740796][T10357] veth1_vlan: left promiscuous mode [ 396.752954][T10357] veth0_vlan: left promiscuous mode [ 396.940657][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.951437][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.961944][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.971298][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.982456][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.990669][ T5869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 396.998264][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.350578][ T54] Bluetooth: hci3: command tx timeout [ 397.605377][T10357] team0 (unregistering): Port device team_slave_1 removed [ 397.655632][T10357] team0 (unregistering): Port device team_slave_0 removed [ 398.115885][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.164004][T16790] syz_tun: entered promiscuous mode [ 398.190005][T16790] batadv_slave_0: entered promiscuous mode [ 398.198860][T16790] batadv_slave_0: left promiscuous mode [ 398.214513][T16790] syz_tun: left promiscuous mode [ 398.346502][T16801] lo speed is unknown, defaulting to 1000 [ 398.394154][T16765] chnl_net:caif_netlink_parms(): no params data found [ 398.402271][ T54] Bluetooth: hci0: command tx timeout [ 398.661743][T16648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.674167][T16648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.734014][T16841] veth0_vlan: entered allmulticast mode [ 398.905471][T16648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.967513][T16648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.998065][T16765] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.036723][T16765] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.069565][T16765] bridge_slave_0: entered allmulticast mode [ 399.092697][T16765] bridge_slave_0: entered promiscuous mode [ 399.110809][ T54] Bluetooth: hci5: command tx timeout [ 399.120067][T16765] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.138382][T16765] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.168340][T16765] bridge_slave_1: entered allmulticast mode [ 399.180430][T16765] bridge_slave_1: entered promiscuous mode [ 399.239199][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 399.395499][T16765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.435989][ T54] Bluetooth: hci3: command tx timeout [ 399.453644][T16765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.569913][T16765] team0: Port device team_slave_0 added [ 399.603586][T16765] team0: Port device team_slave_1 added [ 399.669918][T16890] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 399.798652][T10357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.928266][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 400.017035][T10357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.083862][T16765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.103558][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.184158][T16765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.213232][T16765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.221854][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.256638][T16765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.317831][T10357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.370699][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 400.454327][T10357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.495779][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2441'. [ 400.541038][T16928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2441'. [ 400.574007][T16765] hsr_slave_0: entered promiscuous mode [ 400.586108][T16930] netlink: 'syz.4.2442': attribute type 4 has an invalid length. [ 400.594606][T16765] hsr_slave_1: entered promiscuous mode [ 400.608640][T16765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.633565][T16765] Cannot create hsr debugfs directory [ 400.673520][T16801] chnl_net:caif_netlink_parms(): no params data found [ 400.950805][T16648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.974493][T16937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2444'. [ 400.989464][T16937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2444'. [ 401.075561][T16648] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.192981][ T54] Bluetooth: hci5: command tx timeout [ 401.212176][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.219393][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.307647][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.331330][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.338650][T16801] bridge_slave_0: entered allmulticast mode [ 401.364926][T16801] bridge_slave_0: entered promiscuous mode [ 401.441260][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.448452][T10336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.477124][T10357] bridge_slave_1: left allmulticast mode [ 401.486756][T10357] bridge_slave_1: left promiscuous mode [ 401.499914][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.510500][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.511203][ T54] Bluetooth: hci3: command tx timeout [ 401.528395][T10357] bridge_slave_0: left allmulticast mode [ 401.534380][T10357] bridge_slave_0: left promiscuous mode [ 401.540844][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.267140][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.278196][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.291013][T10357] bond0 (unregistering): Released all slaves [ 402.310127][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.317279][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.332031][T16801] bridge_slave_1: entered allmulticast mode [ 402.356417][T16801] bridge_slave_1: entered promiscuous mode [ 402.595219][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.634654][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.675895][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.782394][T16801] team0: Port device team_slave_0 added [ 402.867789][T16801] team0: Port device team_slave_1 added [ 402.878730][T17003] netlink: 'syz.6.2453': attribute type 21 has an invalid length. [ 402.897124][T17003] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2453'. [ 402.916865][T17003] netlink: 'syz.6.2453': attribute type 4 has an invalid length. [ 402.940022][T17003] netlink: 'syz.6.2453': attribute type 5 has an invalid length. [ 402.960259][T17003] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2453'. [ 403.079287][T10357] hsr_slave_0: left promiscuous mode [ 403.097116][T17011] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2456'. [ 403.107128][T10357] hsr_slave_1: left promiscuous mode [ 403.115480][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.139218][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.148706][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.169284][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.211659][T10357] veth1_macvtap: left promiscuous mode [ 403.217194][T10357] veth0_macvtap: left promiscuous mode [ 403.229743][T10357] veth1_vlan: left promiscuous mode [ 403.235091][T10357] veth0_vlan: left promiscuous mode [ 403.244435][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2458'. [ 403.269561][ T54] Bluetooth: hci5: command tx timeout [ 403.594749][ T54] Bluetooth: hci3: command tx timeout [ 403.736948][T10357] team0 (unregistering): Port device team_slave_1 removed [ 403.764263][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.800194][T10357] team0 (unregistering): Port device team_slave_0 removed [ 404.281847][T16648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.385990][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.408236][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.458654][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.476253][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.483947][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.527588][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.714378][T16765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.767257][T16801] hsr_slave_0: entered promiscuous mode [ 404.791183][T16801] hsr_slave_1: entered promiscuous mode [ 404.810674][T16801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.828778][T16801] Cannot create hsr debugfs directory [ 404.844344][T16765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.890577][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.942534][T16765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.984431][T16765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.076774][T16648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.293191][T16648] veth0_vlan: entered promiscuous mode [ 405.316768][T16648] veth1_vlan: entered promiscuous mode [ 405.349307][ T5869] Bluetooth: hci5: command tx timeout [ 405.434385][T16765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.475177][T16648] veth0_macvtap: entered promiscuous mode [ 405.505937][T16765] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.540237][T16648] veth1_macvtap: entered promiscuous mode [ 405.574093][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.581330][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.618676][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.631571][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.644219][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.655339][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.665612][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.677035][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.696194][T16648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.719660][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.726819][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.752223][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.773583][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.791047][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.801969][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.812441][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.824140][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.835193][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.845971][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.859915][T16648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.869306][T16801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.904607][T16801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.920272][T16801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.955511][T16648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.965317][T16648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.978017][T16648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.995123][T16648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.004132][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 406.020397][T16801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.261419][T10357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.269600][T10357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.411999][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.416169][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.466769][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.474413][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.610919][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.618112][T10357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.621885][T17094] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2473'. [ 406.638833][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 406.675927][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.683173][T10357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.786201][T16765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.916103][T17104] veth0: entered promiscuous mode [ 406.986238][T17102] veth0: left promiscuous mode [ 407.127909][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.150242][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 407.174930][T16801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.221512][T16765] veth0_vlan: entered promiscuous mode [ 407.262885][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.306429][T16765] veth1_vlan: entered promiscuous mode [ 407.380248][T16765] veth0_macvtap: entered promiscuous mode [ 407.397582][T16765] veth1_macvtap: entered promiscuous mode [ 407.425222][T16801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.443331][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.460647][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.470996][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.483394][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.493791][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.504683][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.517625][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.529574][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.540794][T16765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.568923][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.580677][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.591680][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.602738][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.612723][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.628448][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.639286][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.650715][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.661900][T16765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.673079][T16765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.686317][T16765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.714764][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.741301][T16765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.755818][T16765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.765635][T16765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.777336][T16765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.816770][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.906167][T16801] veth0_vlan: entered promiscuous mode [ 407.936497][T16801] veth1_vlan: entered promiscuous mode [ 407.945601][T10334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.967232][T10334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.031276][T10334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.053554][T10334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.076638][T16801] veth0_macvtap: entered promiscuous mode [ 408.110133][ T35] bridge_slave_1: left allmulticast mode [ 408.116172][ T35] bridge_slave_1: left promiscuous mode [ 408.150778][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.274098][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.293805][T17119] netlink: 'syz.6.2476': attribute type 17 has an invalid length. [ 408.305510][ T35] bridge_slave_0: left allmulticast mode [ 408.316176][ T35] bridge_slave_0: left promiscuous mode [ 408.352641][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2476'. [ 408.369546][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.409731][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2476'. [ 408.423531][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.434756][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.447816][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.457758][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.471812][ T5869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.479641][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.643848][T17130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2476'. [ 409.192885][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.215697][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.231380][ T35] bond0 (unregistering): Released all slaves [ 409.380313][T16801] veth1_macvtap: entered promiscuous mode [ 409.420495][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 409.795917][T17121] lo speed is unknown, defaulting to 1000 [ 409.924824][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.938576][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.949728][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.961612][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.985560][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.006336][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.016568][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.027365][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.037563][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.048383][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.060125][T16801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.112479][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.142565][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.169142][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.189196][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.209421][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.225650][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.236620][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.247464][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.267665][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.286664][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.307274][T16801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.318937][T16801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.330628][T16801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.437215][T16801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.447905][T16801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.456985][T16801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.465888][T16801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.485233][ T35] hsr_slave_0: left promiscuous mode [ 410.496239][ T35] hsr_slave_1: left promiscuous mode [ 410.505782][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.513659][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.525909][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.534108][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.549817][ T5869] Bluetooth: hci0: command tx timeout [ 410.558740][ T35] veth1_macvtap: left promiscuous mode [ 410.567004][ T35] veth0_macvtap: left promiscuous mode [ 410.589206][ T35] veth1_vlan: left promiscuous mode [ 410.614856][ T35] veth0_vlan: left promiscuous mode [ 410.621836][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 410.934935][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.960860][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.975303][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.993489][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.007259][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.023284][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.383671][ T35] team0 (unregistering): Port device team_slave_1 removed [ 411.438388][ T35] team0 (unregistering): Port device team_slave_0 removed [ 411.761216][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 411.936380][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2480'. [ 411.953353][T17170] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 412.026260][T17171] lo speed is unknown, defaulting to 1000 [ 412.304448][T10357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.342373][T10357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.568377][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.576421][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.599171][T17121] chnl_net:caif_netlink_parms(): no params data found [ 412.629586][ T54] Bluetooth: hci0: command tx timeout [ 412.725514][T17198] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 412.754120][T17198] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 412.949982][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 413.044632][T17171] chnl_net:caif_netlink_parms(): no params data found [ 413.109310][ T54] Bluetooth: hci3: command tx timeout [ 413.122627][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.156526][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.167545][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.177601][T17121] bridge_slave_0: entered allmulticast mode [ 413.220597][T17121] bridge_slave_0: entered promiscuous mode [ 413.250204][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.269934][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.277255][T17121] bridge_slave_1: entered allmulticast mode [ 413.300619][T17121] bridge_slave_1: entered promiscuous mode [ 413.454824][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.492547][T17121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.513517][T17121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.571561][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.590562][T17121] team0: Port device team_slave_0 added [ 413.611415][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.618612][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.626454][T17171] bridge_slave_0: entered allmulticast mode [ 413.633806][T17171] bridge_slave_0: entered promiscuous mode [ 413.645306][T17121] team0: Port device team_slave_1 added [ 413.672539][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.687668][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.698741][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.729745][T17171] bridge_slave_1: entered allmulticast mode [ 413.736486][T17171] bridge_slave_1: entered promiscuous mode [ 413.766487][T17121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.774500][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.801186][T17121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.836311][T17121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.843611][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.871360][T17121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.907663][T17171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.941622][T17171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.064902][T17121] hsr_slave_0: entered promiscuous mode [ 414.090704][T17121] hsr_slave_1: entered promiscuous mode [ 414.099684][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 414.127054][T17171] team0: Port device team_slave_0 added [ 414.208168][T17171] team0: Port device team_slave_1 added [ 414.230913][ T35] bridge_slave_1: left allmulticast mode [ 414.237091][ T35] bridge_slave_1: left promiscuous mode [ 414.244348][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.253816][ T35] bridge_slave_0: left allmulticast mode [ 414.260448][ T35] bridge_slave_0: left promiscuous mode [ 414.266218][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.655339][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.667817][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.679609][ T35] bond0 (unregistering): Released all slaves [ 414.709316][ T54] Bluetooth: hci0: command tx timeout [ 414.782954][T17171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.797273][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.824751][T17171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.851506][T17171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.858507][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.886324][T17171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.027569][T17171] hsr_slave_0: entered promiscuous mode [ 415.039676][T17171] hsr_slave_1: entered promiscuous mode [ 415.045898][T17171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.053671][T17171] Cannot create hsr debugfs directory [ 415.189193][ T54] Bluetooth: hci3: command tx timeout [ 415.219542][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 415.450422][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2490'. [ 415.600326][ T35] hsr_slave_0: left promiscuous mode [ 415.615605][ T35] hsr_slave_1: left promiscuous mode [ 415.635547][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.649199][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.675120][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.684698][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.769343][ T35] veth1_macvtap: left promiscuous mode [ 415.775898][ T35] veth0_macvtap: left promiscuous mode [ 415.796011][ T35] veth1_vlan: left promiscuous mode [ 415.808501][ T35] veth0_vlan: left promiscuous mode [ 415.863209][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.874849][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.883978][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.893452][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.901854][ T5869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 415.911648][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.365157][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 416.497415][ T35] team0 (unregistering): Port device team_slave_1 removed [ 416.548312][ T35] team0 (unregistering): Port device team_slave_0 removed [ 416.791801][ T54] Bluetooth: hci0: command tx timeout [ 417.176799][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2494'. [ 417.269331][ T54] Bluetooth: hci3: command tx timeout [ 417.289271][T17266] lo speed is unknown, defaulting to 1000 [ 417.469539][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 417.623277][T17121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.681382][T17121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.681399][T17285] netlink: 'syz.6.2499': attribute type 21 has an invalid length. [ 417.725213][T17285] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 417.741122][T17121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.809133][T17121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.990616][ T54] Bluetooth: hci5: command tx timeout [ 418.077978][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.274867][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.338843][T17266] chnl_net:caif_netlink_parms(): no params data found [ 418.434877][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.546976][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.570243][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 418.699066][T17171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.769052][T17171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 418.817911][T17266] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.837578][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.857260][T17266] bridge_slave_0: entered allmulticast mode [ 418.861559][T17325] xt_hashlimit: overflow, rate too high: 0 [ 418.869927][T17266] bridge_slave_0: entered promiscuous mode [ 418.915142][T17121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.924437][T17171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.943017][T17171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.954101][T17266] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.973110][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.995490][T17266] bridge_slave_1: entered allmulticast mode [ 419.003797][T17266] bridge_slave_1: entered promiscuous mode [ 419.098937][T17266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.150118][T17266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.251472][T17121] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.279895][ T35] bridge_slave_1: left allmulticast mode [ 419.285587][ T35] bridge_slave_1: left promiscuous mode [ 419.293805][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.337816][ T35] bridge_slave_0: left allmulticast mode [ 419.344449][ T35] bridge_slave_0: left promiscuous mode [ 419.350754][ T54] Bluetooth: hci3: command tx timeout [ 419.356295][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.387885][T17337] sctp: [Deprecated]: syz.6.2511 (pid 17337) Use of int in max_burst socket option. [ 419.387885][T17337] Use struct sctp_assoc_value instead [ 419.729648][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.755247][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.772552][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.784400][ T35] bond0 (unregistering): Released all slaves [ 419.811762][T17266] team0: Port device team_slave_0 added [ 419.825370][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.832536][T10357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.891724][T17266] team0: Port device team_slave_1 added [ 419.971733][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.978883][T10357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.079287][ T54] Bluetooth: hci5: command tx timeout [ 420.207371][T17266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.234656][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.320051][T17266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.411689][T17266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.423856][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.499160][T17266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.718929][T17266] hsr_slave_0: entered promiscuous mode [ 420.740244][T17266] hsr_slave_1: entered promiscuous mode [ 420.799268][T17266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.828256][T17266] Cannot create hsr debugfs directory [ 420.833927][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 420.947044][ T35] hsr_slave_0: left promiscuous mode [ 421.025221][ T35] hsr_slave_1: left promiscuous mode [ 421.039169][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.046691][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.066621][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.080674][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.145034][T17390] netlink: 'syz.4.2517': attribute type 15 has an invalid length. [ 421.156796][ T35] veth1_macvtap: left promiscuous mode [ 421.179380][ T35] veth0_macvtap: left promiscuous mode [ 421.196923][ T35] veth1_vlan: left promiscuous mode [ 421.209394][ T35] veth0_vlan: left promiscuous mode [ 421.923700][T17416] netlink: 'syz.6.2519': attribute type 1 has an invalid length. [ 421.937580][T17416] netlink: 209800 bytes leftover after parsing attributes in process `syz.6.2519'. [ 421.963602][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 422.159583][ T54] Bluetooth: hci5: command tx timeout [ 422.565409][ T35] team0 (unregistering): Port device team_slave_1 removed [ 422.663065][ T35] team0 (unregistering): Port device team_slave_0 removed [ 423.079309][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 423.500392][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.643776][T17171] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.665674][T17121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.728218][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 423.760147][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.767422][T10357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.784842][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.792056][T10357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.841301][T17121] veth0_vlan: entered promiscuous mode [ 423.914503][T17121] veth1_vlan: entered promiscuous mode [ 424.042663][T17487] xt_HMARK: proto mask must be zero with L3 mode [ 424.121789][T17121] veth0_macvtap: entered promiscuous mode [ 424.145136][T17121] veth1_macvtap: entered promiscuous mode [ 424.189142][T10357] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 424.239593][ T54] Bluetooth: hci5: command tx timeout [ 424.252565][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.275522][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.288265][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.299412][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.318145][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.329442][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.341350][T17121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.387240][T17487] syzkaller0: entered promiscuous mode [ 424.394293][T17487] syzkaller0: entered allmulticast mode [ 424.650334][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 425.299640][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.672777][ T4536] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 426.402518][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 426.657999][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.669347][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.680118][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.691106][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.701247][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.711938][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.722068][T17121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.733461][T17121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.745078][T17121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.756310][T17121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.773485][T17121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.787633][T17121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.796520][T17121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.831023][T17512] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.838673][T17512] bond0: (slave bond6): Enslaving as an active interface with an up link [ 426.851045][T17514] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 427.028567][T17171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.116279][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.139559][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.251957][T17266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.298277][T17266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.335431][T17266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.367997][T17171] veth0_vlan: entered promiscuous mode [ 427.387685][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.405685][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.414911][T17266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.470026][T17171] veth1_vlan: entered promiscuous mode [ 427.545713][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 427.572888][T17543] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2539'. [ 427.590699][T17171] veth0_macvtap: entered promiscuous mode [ 427.775509][T17551] xfrm1: entered allmulticast mode [ 427.800641][T17171] veth1_macvtap: entered promiscuous mode [ 428.024494][T10357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.141008][T10357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.181227][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.192681][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.203450][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.220610][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.232841][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.248729][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.259348][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.270447][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.282044][T17171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.302367][T17266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.360614][T10357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.386952][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.398681][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.413466][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.426268][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.448774][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.460729][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.470627][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.481330][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.491896][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.502591][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.514376][T17171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.531962][T17171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.541887][T17171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.551724][T17171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.560933][T17171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.586228][T17266] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.645869][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.653081][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.662946][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.670100][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.700360][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 428.702298][T10357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.759902][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.767786][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.815245][T17266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.826915][T17266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.862941][T10334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.890688][T10334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.013504][T10357] bridge_slave_1: left allmulticast mode [ 429.026404][T10357] bridge_slave_1: left promiscuous mode [ 429.033513][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.105521][T10357] bridge_slave_0: left allmulticast mode [ 429.114569][T10357] bridge_slave_0: left promiscuous mode [ 429.122756][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.517940][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 429.776086][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.786858][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.808133][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.841642][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.850368][ T5869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 429.859228][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.868383][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 429.967878][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.979515][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.991851][T10357] bond0 (unregistering): Released all slaves [ 430.285403][T17266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.396714][T17604] lo speed is unknown, defaulting to 1000 [ 430.671757][T17266] veth0_vlan: entered promiscuous mode [ 430.697190][T17266] veth1_vlan: entered promiscuous mode [ 430.753562][T17266] veth0_macvtap: entered promiscuous mode [ 430.767028][T17266] veth1_macvtap: entered promiscuous mode [ 430.792986][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.819502][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.841325][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.874016][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.887069][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.898162][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.908512][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.929587][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.949805][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.963203][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.980440][T17266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.029510][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 431.046669][T10357] hsr_slave_0: left promiscuous mode [ 431.060787][T10357] hsr_slave_1: left promiscuous mode [ 431.066918][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.076095][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.085138][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.093034][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.124386][T10357] veth1_macvtap: left promiscuous mode [ 431.130833][T10357] veth0_macvtap: left promiscuous mode [ 431.136455][T10357] veth1_vlan: left promiscuous mode [ 431.142598][T10357] veth0_vlan: left promiscuous mode [ 431.537524][T17637] dccp_v4_rcv: dropped packet with invalid checksum [ 431.611292][T17639] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2551'. [ 431.726262][T17642] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 431.837686][T10357] team0 (unregistering): Port device team_slave_1 removed [ 431.891023][T10357] team0 (unregistering): Port device team_slave_0 removed [ 431.920034][ T5869] Bluetooth: hci0: command tx timeout [ 431.965446][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.977484][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.995489][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.016846][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.036303][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 432.045245][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.141743][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 432.514881][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.536772][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.558037][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.577201][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.587367][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.598136][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.608289][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.619950][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.631351][T17266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.642695][T17266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.653861][T17266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.822646][T17266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.846882][T17266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.883867][T17266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.893121][T17266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.933742][T17646] lo speed is unknown, defaulting to 1000 [ 433.054687][T17604] chnl_net:caif_netlink_parms(): no params data found [ 433.266708][T17604] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.289257][T17604] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.296600][T17604] bridge_slave_0: entered allmulticast mode [ 433.303458][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.318537][T17604] bridge_slave_0: entered promiscuous mode [ 433.332181][T17670] netlink: 576 bytes leftover after parsing attributes in process `syz.6.2557'. [ 433.396302][T17604] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.412727][T17604] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.422634][T17604] bridge_slave_1: entered allmulticast mode [ 433.431316][T17604] bridge_slave_1: entered promiscuous mode [ 433.492277][T10334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.501758][T10334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.572305][T17604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.646725][T10357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.681795][T17604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.734394][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.740958][T17604] team0: Port device team_slave_0 added [ 433.751377][T17604] team0: Port device team_slave_1 added [ 433.765868][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.838864][T10357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.983708][T10357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.994835][ T5869] Bluetooth: hci0: command tx timeout [ 434.004366][T17604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.011844][T17604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.038134][T17604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.140519][T10357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.154221][ T5869] Bluetooth: hci3: command tx timeout [ 434.186111][T17604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.190258][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2564'. [ 434.202422][T17699] netlink: 'syz.6.2564': attribute type 3 has an invalid length. [ 434.211408][T17604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.239661][T17604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.420759][T10336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 434.524737][T17604] hsr_slave_0: entered promiscuous mode [ 434.543468][T17604] hsr_slave_1: entered promiscuous mode [ 434.607783][T17646] chnl_net:caif_netlink_parms(): no params data found [ 434.618562][T10357] bridge_slave_1: left allmulticast mode [ 434.624480][T10357] bridge_slave_1: left promiscuous mode [ 434.631479][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.643937][T10357] bridge_slave_0: left allmulticast mode [ 434.650188][T10357] bridge_slave_0: left promiscuous mode [ 434.655897][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.016835][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.027639][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.038022][T10357] bond0 (unregistering): Released all slaves [ 435.283686][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.291806][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.299142][T17646] bridge_slave_0: entered allmulticast mode [ 435.306258][T17646] bridge_slave_0: entered promiscuous mode [ 435.317961][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.329165][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.336565][T17646] bridge_slave_1: entered allmulticast mode [ 435.343856][T17646] bridge_slave_1: entered promiscuous mode [ 435.420714][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.448166][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.559272][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.618879][T10357] hsr_slave_0: left promiscuous mode [ 435.633861][T10357] hsr_slave_1: left promiscuous mode [ 435.647760][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.656216][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.675129][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.683760][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.716001][T10357] veth1_macvtap: left promiscuous mode [ 435.722265][T10357] veth0_macvtap: left promiscuous mode [ 435.727937][T10357] veth1_vlan: left promiscuous mode [ 435.735471][T10357] veth0_vlan: left promiscuous mode [ 436.079303][ T5869] Bluetooth: hci0: command tx timeout [ 436.240231][ T5869] Bluetooth: hci3: command tx timeout [ 436.307373][T10357] team0 (unregistering): Port device team_slave_1 removed [ 436.507864][T10357] team0 (unregistering): Port device team_slave_0 removed [ 436.669470][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.728881][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.740649][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.753283][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.783493][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.803628][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 436.826791][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.243948][T17646] team0: Port device team_slave_0 added [ 437.347619][T17646] team0: Port device team_slave_1 added [ 437.376110][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 437.445615][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.453022][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.479373][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.492763][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.499800][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.526335][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.698568][T17646] hsr_slave_0: entered promiscuous mode [ 437.714837][T17646] hsr_slave_1: entered promiscuous mode [ 437.731781][T17646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.739578][T17646] Cannot create hsr debugfs directory [ 437.775361][T17730] lo speed is unknown, defaulting to 1000 [ 437.911381][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 438.160281][ T5869] Bluetooth: hci0: command tx timeout [ 438.183848][T17756] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 438.209434][T17756] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 438.309819][ T5869] Bluetooth: hci3: command tx timeout [ 438.353885][T10357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.556811][T10357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.591511][T17604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.800229][T10357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.913154][T10357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.940222][T17604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.949453][ T5869] Bluetooth: hci5: command tx timeout [ 438.993764][T17801] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 439.008055][T17604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 439.051275][T17604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 439.074034][T17730] chnl_net:caif_netlink_parms(): no params data found [ 439.080084][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 439.325130][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.346750][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.354453][T17730] bridge_slave_0: entered allmulticast mode [ 439.362522][T17730] bridge_slave_0: entered promiscuous mode [ 439.372775][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.380874][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.388544][T17730] bridge_slave_1: entered allmulticast mode [ 439.396145][T17730] bridge_slave_1: entered promiscuous mode [ 439.489714][T17730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.518118][T10357] bridge_slave_1: left allmulticast mode [ 439.523997][T10357] bridge_slave_1: left promiscuous mode [ 439.531031][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.541129][T10357] bridge_slave_0: left allmulticast mode [ 439.546819][T10357] bridge_slave_0: left promiscuous mode [ 439.553375][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.937795][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.956120][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.967272][T10357] bond0 (unregistering): Released all slaves [ 439.985925][T17730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.100587][T17730] team0: Port device team_slave_0 added [ 440.125654][T17730] team0: Port device team_slave_1 added [ 440.180073][T10343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 440.206219][T17820] xt_l2tp: unknown flags: 18 [ 440.267413][T17646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.306148][T17646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.324708][T17730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.339166][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.379213][T17730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.400878][ T54] Bluetooth: hci3: command tx timeout [ 440.411067][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.418058][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.444521][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.479053][T17646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.559405][T17646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.815835][T17604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.891626][T17730] hsr_slave_0: entered promiscuous mode [ 440.910346][T17730] hsr_slave_1: entered promiscuous mode [ 440.922462][T17730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.941113][T17730] Cannot create hsr debugfs directory [ 440.943419][T17847] netlink: 'syz.6.2592': attribute type 11 has an invalid length. [ 440.996544][T10357] hsr_slave_0: left promiscuous mode [ 441.002733][T10357] hsr_slave_1: left promiscuous mode [ 441.020436][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.027903][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.035266][ T54] Bluetooth: hci5: command tx timeout [ 441.054127][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.062197][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.096796][T10357] veth1_macvtap: left promiscuous mode [ 441.110555][T10357] veth0_macvtap: left promiscuous mode [ 441.116620][T10357] veth1_vlan: left promiscuous mode [ 441.127301][T10357] veth0_vlan: left promiscuous mode [ 441.290674][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 441.687933][T10357] team0 (unregistering): Port device team_slave_1 removed [ 441.763181][T10357] team0 (unregistering): Port device team_slave_0 removed [ 441.785438][T17854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.323661][T17858] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 442.347913][T17858] netlink: 'syz.6.2595': attribute type 4 has an invalid length. [ 442.375779][T17604] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.389572][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.407162][T17861] Bluetooth: MGMT ver 1.23 [ 442.419598][T17858] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 442.419620][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 442.427330][T17858] netlink: 'syz.6.2595': attribute type 4 has an invalid length. [ 442.427345][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.427558][T17858] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 442.468895][T17858] netlink: 'syz.6.2595': attribute type 4 has an invalid length. [ 442.477606][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.488646][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 442.508395][T17858] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 442.521413][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.528589][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.548153][T17858] netlink: 'syz.6.2595': attribute type 4 has an invalid length. [ 442.561812][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.582249][T17858] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 442.628737][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.635945][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.654345][T17858] netlink: 'syz.6.2595': attribute type 4 has an invalid length. [ 442.662535][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.688758][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.709908][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.733527][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.761113][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 442.855524][T17858] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2595'. [ 443.109468][ T5869] Bluetooth: hci5: command tx timeout [ 443.115524][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.238605][T17604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.284952][T17888] macvlan2: entered promiscuous mode [ 443.296492][T17888] macvlan2: entered allmulticast mode [ 443.358139][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.446603][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.453844][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.478286][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.485439][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.573472][T10337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 443.653719][T17604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.731134][T17900] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 443.752494][T17900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.827652][T17604] veth0_vlan: entered promiscuous mode [ 443.902845][T17604] veth1_vlan: entered promiscuous mode [ 443.974809][T17730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.017430][T17730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.076266][T17730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.102386][T17730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.117677][T17604] veth0_macvtap: entered promiscuous mode [ 444.230043][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.261411][T17604] veth1_macvtap: entered promiscuous mode [ 444.324889][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.335700][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.345843][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.356488][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.366437][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.376985][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.388322][T17604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.400031][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.410556][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.420526][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.431109][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.441329][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.452017][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.462105][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.473026][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.484950][T17604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.553412][T17604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.562317][T17604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.592309][T17604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.618211][T17604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.696333][T17646] veth0_vlan: entered promiscuous mode [ 444.730541][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 444.827479][T17646] veth1_vlan: entered promiscuous mode [ 445.051582][T17646] veth0_macvtap: entered promiscuous mode [ 445.062294][T17646] veth1_macvtap: entered promiscuous mode [ 445.091843][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.138827][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.175941][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.191227][ T5869] Bluetooth: hci5: command tx timeout [ 445.203764][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.243102][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.266583][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.277879][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.291029][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.301186][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.312925][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.325397][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.356822][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.369985][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.380248][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.391112][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.401676][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.413567][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.423968][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.434826][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.445132][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.456008][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.467365][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.502400][T17646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.529582][T17646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.538382][T17646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.563150][T17646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.595379][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.603932][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.638027][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.805190][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.865383][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.872581][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.899777][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 445.931984][T10336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.955321][T10336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.981493][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.988638][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.092604][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.120783][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.334068][T10357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.393703][T17983] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 446.451920][T17983] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 446.547626][T10357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.677045][T10357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.734834][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.793025][T10357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.902210][T17730] veth0_vlan: entered promiscuous mode [ 446.925921][T17730] veth1_vlan: entered promiscuous mode [ 447.018411][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 447.055520][T10357] bridge_slave_1: left allmulticast mode [ 447.062316][T10357] bridge_slave_1: left promiscuous mode [ 447.068118][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.081074][T10357] bridge_slave_0: left allmulticast mode [ 447.086770][T10357] bridge_slave_0: left promiscuous mode [ 447.093798][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.238733][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.257847][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.276716][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.313186][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.322319][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 447.330327][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.588169][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.601809][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.613223][T10357] bond0 (unregistering): Released all slaves [ 447.639983][T17730] veth0_macvtap: entered promiscuous mode [ 447.657187][T17730] veth1_macvtap: entered promiscuous mode [ 447.697442][T17990] lo speed is unknown, defaulting to 1000 [ 447.786761][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.809344][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.829929][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.863486][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.884631][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.898225][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.908195][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.918907][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.928849][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.939458][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.951357][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.963080][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.974168][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.984315][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.994903][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.004835][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.015359][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.025287][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.035787][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.045683][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.056249][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.066209][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.077478][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.089891][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.100029][T17730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.108769][T17730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.117951][T17730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.126986][T17730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.171296][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 448.639414][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.652978][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.669585][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.680424][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.689620][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 448.697165][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.716434][T10357] hsr_slave_0: left promiscuous mode [ 448.733527][T10357] hsr_slave_1: left promiscuous mode [ 448.757717][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.771148][T10357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.791045][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.798557][T10357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.865314][T10357] veth1_macvtap: left promiscuous mode [ 448.876097][T10357] veth0_macvtap: left promiscuous mode [ 448.884444][T10357] veth1_vlan: left promiscuous mode [ 448.890825][T10357] veth0_vlan: left promiscuous mode [ 449.299310][ T4536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 449.430243][ T5869] Bluetooth: hci0: command tx timeout [ 449.486346][T10357] team0 (unregistering): Port device team_slave_1 removed [ 449.553719][T10357] team0 (unregistering): Port device team_slave_0 removed [ 450.340937][T10334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.346162][T18014] lo speed is unknown, defaulting to 1000 [ 450.348805][T10334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.420651][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 450.451966][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.470890][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.532534][T18045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.546399][T17990] chnl_net:caif_netlink_parms(): no params data found [ 450.576414][T18045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.592386][T18045] __nla_validate_parse: 31 callbacks suppressed [ 450.592405][T18045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2628'. [ 450.789904][ T5869] Bluetooth: hci3: command tx timeout [ 451.022900][T18065] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 451.125413][T10357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.260247][T17990] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.267552][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.299695][T17990] bridge_slave_0: entered allmulticast mode [ 451.306809][T17990] bridge_slave_0: entered promiscuous mode [ 451.350838][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.357984][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.376010][T17990] bridge_slave_1: entered allmulticast mode [ 451.392781][T17990] bridge_slave_1: entered promiscuous mode [ 451.502028][T10357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.512610][ T5869] Bluetooth: hci0: command tx timeout [ 451.529393][T10334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 451.788300][T10357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.822160][T17990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.866363][T10357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.883065][T17990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.933768][T17990] team0: Port device team_slave_0 added [ 451.952653][T17990] team0: Port device team_slave_1 added [ 452.039231][T17990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.046232][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.086218][T17990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.154071][T17990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.161579][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.190014][T17990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.298160][T18014] chnl_net:caif_netlink_parms(): no params data found [ 452.352012][T17990] hsr_slave_0: entered promiscuous mode [ 452.358256][T17990] hsr_slave_1: entered promiscuous mode [ 452.370932][T10357] bridge_slave_1: left allmulticast mode [ 452.377569][T10357] bridge_slave_1: left promiscuous mode [ 452.387578][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.396441][T10357] bridge_slave_0: left allmulticast mode [ 452.402867][T10357] bridge_slave_0: left promiscuous mode [ 452.409315][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.661037][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 452.776038][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.793562][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.805367][T10357] bond0 (unregistering): Released all slaves [ 452.869216][ T5869] Bluetooth: hci3: command tx timeout [ 453.018821][T18014] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.029407][T18014] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.036713][T18014] bridge_slave_0: entered allmulticast mode [ 453.045115][T18014] bridge_slave_0: entered promiscuous mode [ 453.083025][T18014] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.095818][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.103471][T18014] bridge_slave_1: entered allmulticast mode [ 453.112706][T18014] bridge_slave_1: entered promiscuous mode [ 453.181782][T18014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.199827][ T30] INFO: task syz.5.2082:14684 blocked for more than 143 seconds. [ 453.203984][T18014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.207620][ T30] Not tainted 6.12.0-syzkaller-10684-gf1cd565ce577 #0 [ 453.225410][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.234574][ T30] task:syz.5.2082 state:D stack:24720 pid:14684 tgid:14683 ppid:14257 flags:0x00000004 [ 453.246265][ T30] Call Trace: [ 453.249918][ T30] [ 453.252907][ T30] __schedule+0x1850/0x4c30 [ 453.257475][ T30] ? __pfx___schedule+0x10/0x10 [ 453.263117][ T30] ? __pfx_lock_release+0x10/0x10 [ 453.268191][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 453.276780][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 453.285613][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.310073][ T30] ? schedule+0x90/0x320 [ 453.314390][ T30] schedule+0x14b/0x320 [ 453.335997][ T30] schedule_preempt_disabled+0x13/0x30 [ 453.342091][ T30] __mutex_lock+0x7e7/0xee0 [ 453.346643][ T30] ? __mutex_lock+0x5ef/0xee0 [ 453.352126][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 453.358082][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 453.363390][ T30] ? __asan_memset+0x23/0x50 [ 453.368008][ T30] ? netlink_unicast+0x7f6/0x990 [ 453.373115][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 453.378088][ T30] ? __sock_sendmsg+0x221/0x270 [ 453.389047][ T30] ? __sys_sendmsg+0x269/0x350 [ 453.393888][ T30] nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 453.400949][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 453.406840][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 453.413401][ T30] ? __nla_parse+0x40/0x60 [ 453.417867][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 453.424486][ T30] genl_rcv_msg+0xb14/0xec0 [ 453.429159][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.434436][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 453.446371][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 453.459272][ T30] ? __pfx___might_resched+0x10/0x10 [ 453.464641][ T30] netlink_rcv_skb+0x1e3/0x430 [ 453.482510][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.487619][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.500040][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 453.505585][ T30] genl_rcv+0x28/0x40 [ 453.524206][ T30] netlink_unicast+0x7f6/0x990 [ 453.536130][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 453.547369][ T30] ? __virt_addr_valid+0x183/0x530 [ 453.559528][ T30] ? __check_object_size+0x48e/0x900 [ 453.564897][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 453.579567][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.584930][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 453.599200][ T5869] Bluetooth: hci0: command tx timeout [ 453.605825][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.619445][ T30] __sock_sendmsg+0x221/0x270 [ 453.624189][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 453.639553][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.644906][ T30] ? __fget_files+0x2a/0x410 [ 453.659525][ T30] ? __fget_files+0x2a/0x410 [ 453.664201][ T30] __sys_sendmsg+0x269/0x350 [ 453.668828][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.677037][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.683804][ T30] ? do_syscall_64+0x100/0x230 [ 453.688619][ T30] ? do_syscall_64+0xb6/0x230 [ 453.696539][ T30] do_syscall_64+0xf3/0x230 [ 453.708320][ T30] ? clear_bhb_loop+0x35/0x90 [ 453.713148][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.719202][ T30] RIP: 0033:0x7face7980849 [ 453.723658][ T30] RSP: 002b:00007face8745058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.732260][ T30] RAX: ffffffffffffffda RBX: 00007face7b45fa0 RCX: 00007face7980849 [ 453.740450][ T30] RDX: 0000000024000100 RSI: 0000000020001740 RDI: 0000000000000006 [ 453.750871][ T30] RBP: 00007face79f3986 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 453.758910][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.804321][ T3468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 453.813335][ T30] R13: 0000000000000000 R14: 00007face7b45fa0 R15: 00007ffebcac5c78 [ 453.864340][ T30] [ 453.867531][ T30] [ 453.867531][ T30] Showing all locks held in the system: [ 453.918288][ T30] 1 lock held by khungtaskd/30: [ 453.927019][ T30] #0: ffffffff8e93c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 453.977356][ T30] 3 locks held by kworker/0:2/976: [ 453.987278][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 454.018422][ T30] #1: ffffc90003b9fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 454.039267][ T30] #2: ffffffff8e941af8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 454.059065][ T30] 3 locks held by kworker/u8:8/3468: [ 454.064402][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 454.079390][ T30] #1: ffffc9000ca47d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 454.090888][ T30] #2: ffffffff8fce8188 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 454.100368][ T30] 1 lock held by dhcpcd/5521: [ 454.105060][ T30] #0: ffffffff8fce8188 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x31a/0x1ac0 [ 454.115349][ T30] 2 locks held by getty/5609: [ 454.122786][ T30] #0: ffff88814d6dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 454.133144][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 454.143483][ T30] 5 locks held by kworker/u8:33/10357: [ 454.156480][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 454.167761][ T30] #1: ffffc9000494fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 454.178472][ T30] #2: ffffffff8fcdb650 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0 [ 454.188068][ T30] #3: ffffffff8fce8188 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe9/0xaa0 [ 454.198759][ T30] #4: ffffffff8e941af8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 454.210029][ T30] 2 locks held by syz.3.1926/13656: [ 454.215772][ T30] #0: ffffffff8fd4ed10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.224381][ T30] #1: ffffffff8ec13208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 454.235285][ T30] 2 locks held by syz.5.2082/14684: [ 454.240794][ T30] #0: ffffffff8fd4ed10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.249316][ T30] #1: ffffffff8ec13208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 454.260028][ T30] 3 locks held by syz-executor/14975: [ 454.265959][ T30] #0: ffff888027090d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 454.276033][ T30] #1: ffff888027090078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 454.285820][ T30] #2: ffffffff8fe562e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 454.296300][ T30] [ 454.298672][ T30] ============================================= [ 454.298672][ T30] [ 454.309750][ T30] NMI backtrace for cpu 1 [ 454.314136][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10684-gf1cd565ce577 #0 [ 454.324305][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 454.334361][ T30] Call Trace: [ 454.337643][ T30] [ 454.340571][ T30] dump_stack_lvl+0x241/0x360 [ 454.345260][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.350452][ T30] ? __pfx__printk+0x10/0x10 [ 454.355064][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 454.360028][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 454.365501][ T30] ? _printk+0xd5/0x120 [ 454.369675][ T30] ? __pfx__printk+0x10/0x10 [ 454.374273][ T30] ? __wake_up_klogd+0xcc/0x110 [ 454.379129][ T30] ? __pfx__printk+0x10/0x10 [ 454.384152][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 454.389173][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 454.395152][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 454.401164][ T30] watchdog+0xffb/0x1040 [ 454.405436][ T30] ? watchdog+0x1ea/0x1040 [ 454.409868][ T30] ? __pfx_watchdog+0x10/0x10 [ 454.414548][ T30] kthread+0x2f0/0x390 [ 454.418614][ T30] ? __pfx_watchdog+0x10/0x10 [ 454.423296][ T30] ? __pfx_kthread+0x10/0x10 [ 454.427892][ T30] ret_from_fork+0x4b/0x80 [ 454.432309][ T30] ? __pfx_kthread+0x10/0x10 [ 454.436899][ T30] ret_from_fork_asm+0x1a/0x30 [ 454.441678][ T30] [ 454.446190][ T30] Sending NMI from CPU 1 to CPUs 0: [ 454.451793][ C0] NMI backtrace for cpu 0 [ 454.451809][ C0] CPU: 0 UID: 0 PID: 18014 Comm: syz-executor Not tainted 6.12.0-syzkaller-10684-gf1cd565ce577 #0 [ 454.451829][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 454.451839][ C0] RIP: 0010:free_unref_page+0xdbf/0x1140 [ 454.451868][ C0] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 09 48 8b 3c 24 e8 72 2f 0f 00 48 b8 23 e1 0c 00 00 0e 00 00 48 8b 0c 24 48 23 01 <48> 09 c5 48 09 dd 0f 85 8a 02 00 00 83 7c 24 14 00 4c 8b 34 24 49 [ 454.451882][ C0] RSP: 0018:ffffc900044ff868 EFLAGS: 00000246 [ 454.451898][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffea00013e2b40 [ 454.451909][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea00013e2b74 [ 454.451920][ C0] RBP: 0000000000000000 R08: ffffea00013e2b77 R09: 1ffffd400027c56e [ 454.451931][ C0] R10: dffffc0000000000 R11: fffff9400027c56f R12: ffffea00013e2b48 [ 454.451943][ C0] R13: ffffea00013e2b58 R14: 0000000000000000 R15: dffffc0000000000 [ 454.451955][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 454.451968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.451995][ C0] CR2: 00005651888e8250 CR3: 000000002fe72000 CR4: 00000000003526f0 [ 454.452017][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.452026][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.452037][ C0] Call Trace: [ 454.452043][ C0] [ 454.452051][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 454.452071][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 454.452090][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 454.452108][ C0] ? nmi_handle+0x2a/0x5a0 [ 454.452134][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 454.452156][ C0] ? nmi_handle+0x14f/0x5a0 [ 454.452174][ C0] ? nmi_handle+0x2a/0x5a0 [ 454.452192][ C0] ? free_unref_page+0xdbf/0x1140 [ 454.452215][ C0] ? default_do_nmi+0x63/0x160 [ 454.452235][ C0] ? exc_nmi+0x123/0x1f0 [ 454.452253][ C0] ? end_repeat_nmi+0xf/0x53 [ 454.452278][ C0] ? free_unref_page+0xdbf/0x1140 [ 454.452301][ C0] ? free_unref_page+0xdbf/0x1140 [ 454.452325][ C0] ? free_unref_page+0xdbf/0x1140 [ 454.452349][ C0] [ 454.452355][ C0] [ 454.452366][ C0] vfree+0x186/0x2e0 [ 454.452390][ C0] kcov_close+0x28/0x50 [ 454.452405][ C0] ? __pfx_kcov_close+0x10/0x10 [ 454.452421][ C0] __fput+0x23c/0xa50 [ 454.452441][ C0] task_work_run+0x24f/0x310 [ 454.452464][ C0] ? __pfx_task_work_run+0x10/0x10 [ 454.452482][ C0] ? do_exit+0xa2a/0x28e0 [ 454.452500][ C0] ? do_exit+0xa2a/0x28e0 [ 454.452518][ C0] do_exit+0xa2f/0x28e0 [ 454.452538][ C0] ? __pfx_do_exit+0x10/0x10 [ 454.452555][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 454.452579][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 454.452598][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.452614][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 454.452640][ C0] do_group_exit+0x207/0x2c0 [ 454.452656][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.452679][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 454.452703][ C0] get_signal+0x16b2/0x1750 [ 454.452729][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 454.452747][ C0] ? __pfx_get_signal+0x10/0x10 [ 454.452772][ C0] arch_do_signal_or_restart+0x96/0x860 [ 454.452796][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 454.452818][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 454.452841][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 454.452866][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 454.452890][ C0] do_syscall_64+0x100/0x230 [ 454.452905][ C0] ? clear_bhb_loop+0x35/0x90 [ 454.452925][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.452943][ C0] RIP: 0033:0x7f2e05b826dc [ 454.452956][ C0] Code: Unable to access opcode bytes at 0x7f2e05b826b2. [ 454.452964][ C0] RSP: 002b:00007ffd7e3c8980 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 454.452986][ C0] RAX: 0000000000000068 RBX: 00007f2e06874620 RCX: 00007f2e05b826dc [ 454.452997][ C0] RDX: 0000000000000068 RSI: 00007f2e06874670 RDI: 0000000000000003 [ 454.453008][ C0] RBP: 0000000000000000 R08: 00007ffd7e3c89d4 R09: 000000000000000c [ 454.453019][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 454.453029][ C0] R13: 0000000000000000 R14: 00007f2e06874670 R15: 0000000000000000 [ 454.453047][ C0] [ 454.947300][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 454.954209][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10684-gf1cd565ce577 #0 [ 454.964386][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 454.974467][ T30] Call Trace: [ 454.977757][ T30] [ 454.980704][ T30] dump_stack_lvl+0x241/0x360 [ 454.985407][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.990623][ T30] ? __pfx__printk+0x10/0x10 [ 454.995239][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 455.001250][ T30] ? vscnprintf+0x5d/0x90 [ 455.005597][ T30] panic+0x349/0x880 [ 455.009519][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 455.015714][ T30] ? __pfx_panic+0x10/0x10 [ 455.020156][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 455.025553][ T30] ? __irq_work_queue_local+0x137/0x410 [ 455.031121][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 455.036525][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 455.042704][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 455.048883][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 455.055060][ T30] watchdog+0x103a/0x1040 [ 455.059411][ T30] ? watchdog+0x1ea/0x1040 [ 455.063856][ T30] ? __pfx_watchdog+0x10/0x10 [ 455.068549][ T30] kthread+0x2f0/0x390 [ 455.072649][ T30] ? __pfx_watchdog+0x10/0x10 [ 455.077356][ T30] ? __pfx_kthread+0x10/0x10 [ 455.081969][ T30] ret_from_fork+0x4b/0x80 [ 455.086398][ T30] ? __pfx_kthread+0x10/0x10 [ 455.091003][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.095801][ T30] [ 455.099110][ T30] Kernel Offset: disabled [ 455.103431][ T30] Rebooting in 86400 seconds..