last executing test programs: 51.653422132s ago: executing program 0 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x77}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x9, 0x2, 0x9, 0x0, 0x2, 0x1, 0x2, 0x426c, 0xffff, 0x63, 0xc17a, 0x7, 0xfffe, 0x2, 0x4e3]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 51.307648123s ago: executing program 0 (id=679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendto$isdn(r2, &(0x7f0000000100)={0x5, 0x50ee}, 0x8, 0xc044, &(0x7f00000000c0)={0x22, 0x6, 0x7, 0x40, 0x6}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in={0x2, 0x4e24, @local}], 0x2c) 46.536506237s ago: executing program 0 (id=679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendto$isdn(r2, &(0x7f0000000100)={0x5, 0x50ee}, 0x8, 0xc044, &(0x7f00000000c0)={0x22, 0x6, 0x7, 0x40, 0x6}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in={0x2, 0x4e24, @local}], 0x2c) 33.208058506s ago: executing program 0 (id=679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendto$isdn(r2, &(0x7f0000000100)={0x5, 0x50ee}, 0x8, 0xc044, &(0x7f00000000c0)={0x22, 0x6, 0x7, 0x40, 0x6}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in={0x2, 0x4e24, @local}], 0x2c) 26.820950295s ago: executing program 4 (id=890): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfa, 0x18, 0xec, 0x2, 0x81, 0x81, 0x8, 0x5}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x62}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x3c}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4) (async) recvmsg(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, r3, 0x7ffa5000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) 26.696960917s ago: executing program 4 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4900}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vti={{0x8}, {0x44, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}, @IFLA_VTI_OKEY={0x8, 0x3, 0xf}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x93d}]]}}}]}, 0x70}, 0x1, 0x2000000000000000}, 0x0) 26.564136504s ago: executing program 4 (id=895): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000ffffffff00"/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000ffffffff00"/28], 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r0, &(0x7f0000000800)="468ea009", 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r0, &(0x7f0000000800)="468ea009", 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="5679775efa0a980a292a650a9433dda6100a0e927c131b52057ade6494212805304ec52f2607a492d7ff371df45c45f9cade75", @ANYRES64=0x0], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1d, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x400000c0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x400000c0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="190000000405040003ffffe1090000000000000011e3d316a42910b9cbd44b3731ba616a92d0d3e7b1e467a4be4fa8710c5208d71998f59a184063521a684b4540f16e8e43e5856c2ad124aaef4f03463a09d3e5f47fbc38995c0b46d4b544f5aed87cf9b65362f7bf9166b1c5564ccde044bdbf7fceffef16519dd16c325e92c2276baa3b85873ca1e8c5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="00000000fdffffff00"/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="190000000405040003ffffe1090000000000000011e3d316a42910b9cbd44b3731ba616a92d0d3e7b1e467a4be4fa8710c5208d71998f59a184063521a684b4540f16e8e43e5856c2ad124aaef4f03463a09d3e5f47fbc38995c0b46d4b544f5aed87cf9b65362f7bf9166b1c5564ccde044bdbf7fceffef16519dd16c325e92c2276baa3b85873ca1e8c5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="00000000fdffffff00"/28], 0x48) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r10, 0x89ec, &(0x7f0000000340)) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0x4}, 0x1c) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x8, &(0x7f0000000640)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 26.373150104s ago: executing program 4 (id=897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) writev(r0, &(0x7f00000001c0), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000340)=0x4081, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 26.072770201s ago: executing program 4 (id=900): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) close(r3) ppoll(&(0x7f00000003c0)=[{r2, 0x80}, {r3, 0x240}, {r0, 0xc50f44db087cc7a0}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x4]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r5, r6, 0x0, 0x2, &(0x7f00000005c0)='%\x00'}, 0x30) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x6, 0x7, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x68, 0x0, 0xd9, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0x11, "30fae20d8c9ea452a55b0ebc109f8f"}, {0x5, 0x4, 'N7'}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r7, 0x29, 0x40, 0x3, 0x80, 0x5c, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x727, 0x5bdc, 0xfffff800}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x600, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8003, 0x812}, [@IFLA_MASTER={0x0, 0xa, r8}]}, 0xfffffffffffffe61}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) 20.608109362s ago: executing program 0 (id=679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendto$isdn(r2, &(0x7f0000000100)={0x5, 0x50ee}, 0x8, 0xc044, &(0x7f00000000c0)={0x22, 0x6, 0x7, 0x40, 0x6}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in={0x2, 0x4e24, @local}], 0x2c) 12.099853353s ago: executing program 4 (id=900): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) close(r3) ppoll(&(0x7f00000003c0)=[{r2, 0x80}, {r3, 0x240}, {r0, 0xc50f44db087cc7a0}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x4]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r5, r6, 0x0, 0x2, &(0x7f00000005c0)='%\x00'}, 0x30) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x6, 0x7, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x68, 0x0, 0xd9, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0x11, "30fae20d8c9ea452a55b0ebc109f8f"}, {0x5, 0x4, 'N7'}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r7, 0x29, 0x40, 0x3, 0x80, 0x5c, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x727, 0x5bdc, 0xfffff800}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x600, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8003, 0x812}, [@IFLA_MASTER={0x0, 0xa, r8}]}, 0xfffffffffffffe61}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) 6.217229058s ago: executing program 0 (id=679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendto$isdn(r2, &(0x7f0000000100)={0x5, 0x50ee}, 0x8, 0xc044, &(0x7f00000000c0)={0x22, 0x6, 0x7, 0x40, 0x6}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in={0x2, 0x4e24, @local}], 0x2c) 1.625769143s ago: executing program 1 (id=1097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) 1.39579544s ago: executing program 1 (id=1101): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0x8}, 0x6, 0x7, 0xff, 0x8, 0x18, 'syz0\x00', "86bca39346212f86291651efda89f97eae0791a8937518b16a2af4d30592156d", "8a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e8", [{0x4, 0x8, {0xc14503c25b476f23, 0x3}}, {0x85, 0xd6, {0x1, 0x7}}, {0x3, 0x6, {0x3, 0x3}}, {0x40, 0x1, {0x2, 0x9}}, {0x1a9b, 0x4, {0x2, 0x4000000}}, {0xff, 0x6, {0x3, 0x6}}, {0xe7cd, 0x0, {0x2, 0x100}}, {0x2, 0x1, {0x3, 0x1000}}, {0x3, 0x3, {0x3, 0x401}}, {0xb5, 0x4, {0x0, 0x5}}, {0x8001, 0x80, {0x3, 0x3}}, {0x5, 0x0, {0x1}}, {0x0, 0x5, {0x1, 0x7f}}, {0x9, 0x7932, {0x1, 0x6}}, {0x1f8, 0x4, {0x1, 0x40}}, {0x7, 0x7, {0x1, 0x8001}}, {0x1, 0xead, {0x3, 0x7}}, {0x1, 0xfdf1, {0x2, 0x5}}, {0x9, 0x3, {0x1, 0x6}}, {0x1, 0xfff8, {0x1, 0xc68c}}, {0x4, 0x0, {0x3, 0xd9a}}, {0x7f, 0x6, {0x1, 0x9}}, {0x40, 0x3, {0x0, 0x8}}, {0x2, 0x4, {0x3, 0x3}}, {0xf3a2, 0x3f, {0x1, 0x7}}, {0x6, 0x7, {0x3, 0x4}}, {0x140, 0x45df, {0x0, 0x8}}, {0x5, 0xa, {0x0, 0x3}}, {0x40, 0x4, {0x2, 0x9}}, {0x0, 0xc5b, {0x1, 0x5}}, {0xd, 0x81d3, {0x2, 0xffffffc8}}, {0x7, 0xb0a, {0x1, 0x4}}, {0x0, 0x3, {0x0, 0x7}}, {0x1, 0x8, {0x2, 0x9}}, {0x0, 0x315, {0x3, 0x10}}, {0x8, 0x7, {0x2, 0x2}}, {0x7, 0x1, {0x3, 0x10000}}, {0xe4, 0x6, {0x1, 0x2}}, {0xffff, 0x7, {0xe8d95239bae06a34, 0x5}}, {0x6, 0x3, {0x1, 0x2821}}]}}}]}, 0x268}}, 0x840) 1.291361861s ago: executing program 1 (id=1103): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0xd) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x38, r6, 0x1, 0x20, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 1.083634584s ago: executing program 2 (id=1106): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x6}, {0x1, 0xe}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000206050000000000000000000000000011aa872a324b18050900020073797a320000000005000100070000000d000300686173683a6e6574000000000500050000000000"], 0x48}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={0x0, 0xfffffffe}, &(0x7f0000000380)=0x8) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r5, 0xcc, "baf91835e46e1b65d62cfffdcd65c6315218cb2a446ded3bb75519be8b4257cf4842e3a603781946e2d0d8fb94410720bb9ad0281e6b96b813821de9da12b24e6b1ad623f6ac3bb47e1ea911cecef9790b01a74f8ddfa05f7fbf00c5f0f0c300c6980e5871848786af659d76c33a22386ce834b9f92067c6481462eefa87efd5ccdea985aa7114066a12276cabc89a5e01643e8bee40b30ea5c6cf781f35a81ab3fd7420cee9ad0fcf50bb34aafb97368c1b1520ea24b0e631a53bd92a1131045b232d8f0444f5f6cb8ddb86"}, &(0x7f0000000100)=0xd4) 1.023963414s ago: executing program 3 (id=1107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$alg(r2, &(0x7f0000000dc0)=""/134, 0x86) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x3, 0x8, 0x7, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008a36629f85300ff7e00ffff850000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xa, 0x4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000200000018001700000000ff000000080000000affffffff6cb2ba5920000280060003400004000014000180080001007f00000108000200e000000108000340000014003800068034000380060001004e210000060001004e210000060002004e220004060002004e200000060001004e240000060001004e230000"], 0x8c}}, 0x2000c880) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000900)={r5, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x6, 0xe, 0xc, 0x8, 0x800, 0x0, 0x1, 'syz1\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 960.857223ms ago: executing program 1 (id=1108): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) close(r1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x11c, 0x2b, 0x1, 0x2, 0x25dfdbfc, "", [@nested={0x109, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x11c}], 0x1}, 0x0) 902.808746ms ago: executing program 1 (id=1109): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x0, 0x3e8, 0x3e8, 0x0, 0xf0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@broadcast, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [], [], 'veth1_macvtap\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r2, 0xfffffffffffffffe, 0x9, 0x4}) openat$cgroup_ro(r3, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) 865.994856ms ago: executing program 3 (id=1110): r0 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbf}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2005}, 0x40090) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000300)) (async) splice(r2, &(0x7f0000000340)=0xfffffffffffff82d, r2, &(0x7f0000000400)=0xc560, 0x7, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, 0x0, 0x8001) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, 0x0, 0x404c808) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x690273b569e1400b, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x40004) (async) sendto$packet(r5, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r11, &(0x7f00000002c0)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@icmpv6={0x7, 0x6, "991ba0", 0x8, 0x3a, 0x0, @private2, @local, {[], @ndisc_rs}}}}, 0x38) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 760.893019ms ago: executing program 2 (id=1111): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x4e000000, {{0x2, 0x4e21, @loopback}}}, 0x88) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000308000140000000000900010073797a30000000000900020073797a320000000070000000090a000000000000000000000100000008000a400000000018001280140001800c0001006e6f747261636b000400028030001180080001006475700024000280080002400000000a0800014000000000080002400000000f08000140000000160900010073797a310000000080000000080a010800000000000000000a000001520007405ed3b0d98ffb1db1520d424a83bb06f82cb69f155d4067a8d90f45315e3b894e664ef3b2994c546736f912ff91865be0a08005996aef2ba3e22ce1bd0d8905c0fd7d6758b5d7acf2db972614ef2600000c00064000000000000000010c0003400000000000000004d0000000180a010100000000000000000700000008000740000000040800074000000002940003806800038014000100626f6e64300000000000000000000000140001006261746164765f736c6176655f3100001400010076657468315f746f5f626f6e640000001400010076657468305f746f5f626f6e640000001400010076657468315f746f5f6261746164760008000140000000000800024000000002080002400000007f080001400000000008000240000000050c00054000000000000000050900010073797a3100000000d4000000020a01"], 0x9fa8}}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) 720.370841ms ago: executing program 3 (id=1112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 670.12875ms ago: executing program 2 (id=1113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 515.87378ms ago: executing program 3 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000180)=0x1000802, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 454.874242ms ago: executing program 2 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000060, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) 390.402391ms ago: executing program 2 (id=1116): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000940)=ANY=[@ANYBLOB="05696c746572000000000000000000000000000000000000fc5292d28ed27db202"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7fffffff, 0x0, @void, @value}, 0x28) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r4, 0x9fc}, &(0x7f0000000200)=0x8) 192.725371ms ago: executing program 3 (id=1117): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r5, 0x1, 0x38, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='bridge0\x00') connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendto$inet(r0, 0x0, 0x0, 0x24008814, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 113.194977ms ago: executing program 2 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r3) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xf}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x6, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 31.663452ms ago: executing program 3 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0xa773a000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="b20d514d71fd43bcbb5a5bd6499c527ed34d6b94fa14da00729e0cf52ec9d9459b5f46c484d4e1ecaa00ffc9ef0334d91d16e3bb94eafb042ab8fa7d183a44a0014f04df8c309e97a7bab82e2da38f7aafc14e9195f014f07b178662acf0a05172fbb38ed9acca0f7775994f7a69d28794b5c01175eeb65c29c8e6c644cb58cecbd409dbbf5f24d62ac4dfda4c3d6f888db9c72bd3c75098952596a2ad41b04401883aa0fc321bd46059a2b9d3af04bc1212692a81eb8ca01b945dd47cfe5c65e004", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x801) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000005340), r5) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005400)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x20, r14, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000090}, 0x11) syz_genetlink_get_family_id$nfc(&(0x7f0000005b40), r5) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r15, &(0x7f0000005cc0)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005c80)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25110000000c0006000300000000000000050012000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0307bcfd7dd7858097000300cc650aa29818524532681bdc1ed8", @ANYRES32=r11, @ANYBLOB="0c0006000100000001000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/29, 0x1d}], 0x1}, 0x100) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 0s ago: executing program 1 (id=1120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071108d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) (async) ioctl$EXT4_IOC_SETFSUUID(r1, 0x8004b708, 0x0) kernel console output (not intermixed with test programs): 73.934646][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.941620][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.952306][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.963468][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.972695][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.973209][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.987359][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.997377][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.006836][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.024386][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.032269][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.675491][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 74.718113][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.789554][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 74.814984][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 74.882187][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 74.899434][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.907621][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.914970][ T5835] bridge_slave_0: entered allmulticast mode [ 74.922016][ T5835] bridge_slave_0: entered promiscuous mode [ 74.965038][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.972130][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.980290][ T5835] bridge_slave_1: entered allmulticast mode [ 74.987372][ T5835] bridge_slave_1: entered promiscuous mode [ 75.087689][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.095124][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.102270][ T5837] bridge_slave_0: entered allmulticast mode [ 75.109517][ T5837] bridge_slave_0: entered promiscuous mode [ 75.123345][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.135441][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.153427][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.161154][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.169000][ T5837] bridge_slave_1: entered allmulticast mode [ 75.176034][ T5837] bridge_slave_1: entered promiscuous mode [ 75.226103][ T5835] team0: Port device team_slave_0 added [ 75.285087][ T5835] team0: Port device team_slave_1 added [ 75.308061][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.315339][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.322447][ T5842] bridge_slave_0: entered allmulticast mode [ 75.329574][ T5842] bridge_slave_0: entered promiscuous mode [ 75.336970][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.346292][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.353380][ T5834] bridge_slave_0: entered allmulticast mode [ 75.360888][ T5834] bridge_slave_0: entered promiscuous mode [ 75.415594][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.425174][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.432681][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.439928][ T5842] bridge_slave_1: entered allmulticast mode [ 75.447806][ T5842] bridge_slave_1: entered promiscuous mode [ 75.468269][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.475639][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.482739][ T5834] bridge_slave_1: entered allmulticast mode [ 75.490220][ T5834] bridge_slave_1: entered promiscuous mode [ 75.497833][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.505232][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.531306][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.543775][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.551243][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.558521][ T5849] bridge_slave_0: entered allmulticast mode [ 75.566300][ T5849] bridge_slave_0: entered promiscuous mode [ 75.574454][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.581590][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.588883][ T5849] bridge_slave_1: entered allmulticast mode [ 75.596518][ T5849] bridge_slave_1: entered promiscuous mode [ 75.606154][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.657196][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.664397][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.690377][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.725137][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.737893][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.782807][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.796414][ T5837] team0: Port device team_slave_0 added [ 75.827557][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.840453][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.851162][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.862580][ T5837] team0: Port device team_slave_1 added [ 75.870877][ T5842] team0: Port device team_slave_0 added [ 75.881092][ T5842] team0: Port device team_slave_1 added [ 75.964540][ T5840] Bluetooth: hci0: command tx timeout [ 76.005577][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.012541][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.038878][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.044397][ T5840] Bluetooth: hci1: command tx timeout [ 76.052380][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.058180][ T5853] Bluetooth: hci4: command tx timeout [ 76.062210][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.093484][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.105773][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.112720][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.138909][ T5840] Bluetooth: hci2: command tx timeout [ 76.141906][ T5853] Bluetooth: hci3: command tx timeout [ 76.145289][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.162580][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.169760][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.196016][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.209437][ T5834] team0: Port device team_slave_0 added [ 76.218667][ T5834] team0: Port device team_slave_1 added [ 76.229040][ T5835] hsr_slave_0: entered promiscuous mode [ 76.235726][ T5835] hsr_slave_1: entered promiscuous mode [ 76.245567][ T5849] team0: Port device team_slave_0 added [ 76.276584][ T5849] team0: Port device team_slave_1 added [ 76.348353][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.355468][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.381695][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.401024][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.408269][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.434758][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.498326][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.505736][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.531714][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.549056][ T5842] hsr_slave_0: entered promiscuous mode [ 76.555364][ T5842] hsr_slave_1: entered promiscuous mode [ 76.561361][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.569123][ T5842] Cannot create hsr debugfs directory [ 76.598006][ T5837] hsr_slave_0: entered promiscuous mode [ 76.604292][ T5837] hsr_slave_1: entered promiscuous mode [ 76.610293][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.618177][ T5837] Cannot create hsr debugfs directory [ 76.638970][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.646026][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.672210][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.759883][ T5834] hsr_slave_0: entered promiscuous mode [ 76.766973][ T5834] hsr_slave_1: entered promiscuous mode [ 76.772907][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.780642][ T5834] Cannot create hsr debugfs directory [ 76.963247][ T5849] hsr_slave_0: entered promiscuous mode [ 76.969651][ T5849] hsr_slave_1: entered promiscuous mode [ 76.976170][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.983752][ T5849] Cannot create hsr debugfs directory [ 77.222834][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.243751][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.278816][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.315531][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.416295][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.427518][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.440725][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.466206][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.531282][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.545621][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.566323][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.577298][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.685452][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.717393][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.728523][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.740619][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.834704][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.856241][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.867326][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.900484][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.928223][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.975809][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.012914][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.020140][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.041661][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.048373][ T5853] Bluetooth: hci0: command tx timeout [ 78.061394][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.068505][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.124865][ T5853] Bluetooth: hci1: command tx timeout [ 78.130311][ T5840] Bluetooth: hci4: command tx timeout [ 78.140629][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.173045][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.183636][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.202975][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.210037][ T5840] Bluetooth: hci3: command tx timeout [ 78.214127][ T5840] Bluetooth: hci2: command tx timeout [ 78.237416][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.244573][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.279289][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.286552][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.320660][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.331950][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.373473][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.380592][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.400147][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.407725][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.448839][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.470742][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.512234][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.519343][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.542328][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.568419][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.575589][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.601173][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.608359][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.631862][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.639060][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.663316][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.983939][ T5835] veth0_vlan: entered promiscuous mode [ 79.041337][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.109092][ T5835] veth1_vlan: entered promiscuous mode [ 79.185543][ T5842] veth0_vlan: entered promiscuous mode [ 79.222718][ T5842] veth1_vlan: entered promiscuous mode [ 79.232312][ T5835] veth0_macvtap: entered promiscuous mode [ 79.269166][ T5835] veth1_macvtap: entered promiscuous mode [ 79.343119][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.363110][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.407785][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418025][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.427146][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.439069][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.498322][ T5842] veth0_macvtap: entered promiscuous mode [ 79.508647][ T5842] veth1_macvtap: entered promiscuous mode [ 79.521496][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.570802][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.590671][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.638217][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.657174][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.670221][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.741800][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.753127][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.757620][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.799063][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.810088][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.819637][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.829632][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.883523][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.890020][ T5849] veth0_vlan: entered promiscuous mode [ 79.960096][ T5834] veth0_vlan: entered promiscuous mode [ 80.026683][ T5834] veth1_vlan: entered promiscuous mode [ 80.100654][ T5849] veth1_vlan: entered promiscuous mode [ 80.111669][ T5956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.116907][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.126180][ T5840] Bluetooth: hci0: command tx timeout [ 80.148707][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.178800][ T5834] veth0_macvtap: entered promiscuous mode [ 80.205376][ T5840] Bluetooth: hci4: command tx timeout [ 80.205556][ T5853] Bluetooth: hci1: command tx timeout [ 80.211216][ T5834] veth1_macvtap: entered promiscuous mode [ 80.285162][ T5853] Bluetooth: hci2: command tx timeout [ 80.285171][ T5840] Bluetooth: hci3: command tx timeout [ 80.292798][ T5837] veth0_vlan: entered promiscuous mode [ 80.302640][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.310804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.358770][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.370185][ T5837] veth1_vlan: entered promiscuous mode [ 80.387757][ T5849] veth0_macvtap: entered promiscuous mode [ 80.406522][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.491775][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.503158][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.512319][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.522286][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.565779][ T5849] veth1_macvtap: entered promiscuous mode [ 80.610634][ T5837] veth0_macvtap: entered promiscuous mode [ 80.679363][ T5967] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.705527][ T5837] veth1_macvtap: entered promiscuous mode [ 80.757013][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.805504][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 80.812340][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.839681][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.842875][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 80.861536][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.871056][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.879095][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.897550][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.907161][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.916118][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.926539][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.956002][ T5969] bridge0: entered promiscuous mode [ 80.962933][ T5969] bridge0: left promiscuous mode [ 80.998146][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.008014][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.017519][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.027265][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.040378][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.056647][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.329389][ T5971] trusted_key: syz.1.10 sent an empty control message without MSG_MORE. [ 81.333316][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.348583][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.525117][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.563093][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.582084][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 81.660481][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.689948][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.708918][ T5988] netlink: 165 bytes leftover after parsing attributes in process `syz.2.13'. [ 81.733553][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.766363][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.847283][ T5991] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.14'. [ 81.915225][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.994836][ T5992] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 82.143674][ T5999] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 82.155976][ T5876] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 82.205130][ T5853] Bluetooth: hci0: command tx timeout [ 82.285455][ T5853] Bluetooth: hci4: command tx timeout [ 82.287350][ T5840] Bluetooth: hci1: command tx timeout [ 82.366072][ T5840] Bluetooth: hci3: command tx timeout [ 82.366166][ T5853] Bluetooth: hci2: command tx timeout [ 82.591003][ T6017] Zero length message leads to an empty skb [ 82.628741][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 82.647939][ T6021] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.753758][ T6024] veth0: entered promiscuous mode [ 82.782900][ T6027] netlink: 284 bytes leftover after parsing attributes in process `syz.4.23'. [ 83.062154][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 83.240892][ T6023] veth0: left promiscuous mode [ 83.249442][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 83.327723][ T6042] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 83.369788][ T6042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.612825][ T6047] warning: `syz.4.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.628441][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 85.027602][ T6087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.035426][ T6087] IPv6: NLM_F_CREATE should be set when creating new route [ 85.042663][ T6087] IPv6: NLM_F_CREATE should be set when creating new route [ 85.327035][ T6102] sctp: failed to load transform for md5: -4 [ 85.602392][ T6116] sch_tbf: burst 88 is lower than device team_slave_1 mtu (1514) ! [ 85.752453][ T6125] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 85.799546][ T6125] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 85.849487][ T6125] __nla_validate_parse: 7 callbacks suppressed [ 85.849563][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 85.917367][ T6131] netlink: 168 bytes leftover after parsing attributes in process `syz.4.52'. [ 86.301756][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.380212][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.410067][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.522737][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.539015][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.561246][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.593474][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.628504][ T6158] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 86.695101][ T24] cfg80211: failed to load regulatory.db [ 86.802002][ T6175] can: request_module (can-proto-0) failed. [ 87.013750][ T6199] netlink: 212332 bytes leftover after parsing attributes in process `syz.0.69'. [ 87.047448][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 87.097985][ T6203] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x3 [ 87.415309][ T6221] lo speed is unknown, defaulting to 1000 [ 87.449041][ T6221] lo speed is unknown, defaulting to 1000 [ 87.502305][ T6221] lo speed is unknown, defaulting to 1000 [ 87.805557][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 87.870219][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 87.907375][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.380457][ T6221] infiniband syz0: set active [ 88.392810][ T9] lo speed is unknown, defaulting to 1000 [ 88.427582][ T6221] infiniband syz0: added lo [ 88.452891][ T6221] syz0: rxe_create_cq: returned err = -12 [ 88.471504][ T6221] infiniband syz0: Couldn't create ib_mad CQ [ 88.514365][ T6221] infiniband syz0: Couldn't open port 1 [ 88.559897][ T6273] netlink: 176 bytes leftover after parsing attributes in process `syz.1.92'. [ 88.610948][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.92'. [ 88.612090][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 88.643771][ T6221] RDS/IB: syz0: added [ 88.652508][ T6221] smc: adding ib device syz0 with port count 1 [ 88.658933][ T6221] smc: ib device syz0 port 1 has pnetid [ 88.671982][ T48] lo speed is unknown, defaulting to 1000 [ 88.684431][ T6221] lo speed is unknown, defaulting to 1000 [ 89.398731][ T6221] lo speed is unknown, defaulting to 1000 [ 89.847373][ T6221] lo speed is unknown, defaulting to 1000 [ 90.121306][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.248123][ T6340] Can't find ip_set type hásh:ip,port,ip [ 90.429795][ T6221] lo speed is unknown, defaulting to 1000 [ 91.140827][ T6383] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 91.156095][ T6378] __nla_validate_parse: 8 callbacks suppressed [ 91.156112][ T6378] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.127'. [ 91.230853][ T6221] lo speed is unknown, defaulting to 1000 [ 91.969319][ T6420] xt_policy: neither incoming nor outgoing policy selected [ 92.003633][ T6424] sctp: [Deprecated]: syz.0.137 (pid 6424) Use of int in max_burst socket option. [ 92.003633][ T6424] Use struct sctp_assoc_value instead [ 92.070906][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.138'. [ 92.120169][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 92.587098][ T6445] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 92.645260][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 93.261478][ T6478] validate_nla: 28 callbacks suppressed [ 93.261496][ T6478] netlink: 'syz.2.152': attribute type 33 has an invalid length. [ 93.311396][ T6478] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 93.501129][ T6490] netlink: 'syz.2.155': attribute type 20 has an invalid length. [ 93.520859][ T6491] netlink: 'syz.2.155': attribute type 20 has an invalid length. [ 93.810542][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 94.022813][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'. [ 94.094615][ T6516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.381396][ T6528] tipc: Enabling of bearer rejected, failed to enable media [ 94.500210][ T6533] tipc: Enabling of bearer rejected, failed to enable media [ 94.564487][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 94.931308][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 94.979083][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 95.082988][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 95.288039][ T6574] xt_socket: unknown flags 0x3c [ 95.454419][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.186'. [ 95.722272][ T6602] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 95.738503][ T6600] openvswitch: netlink: IPv4 tun info is not correct [ 95.866430][ T6602] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 96.210414][ T6621] __nla_validate_parse: 1 callbacks suppressed [ 96.210433][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 96.458942][ T6638] Bluetooth: MGMT ver 1.23 [ 96.474628][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 96.509296][ T6638] IPVS: length: 151 != 24 [ 97.432228][ T6672] tipc: Started in network mode [ 97.463173][ T6672] tipc: Node identity ffffa848, cluster identity 4711 [ 97.494940][ T6672] tipc: Node number set to 4294944840 [ 97.921164][ T6694] lo speed is unknown, defaulting to 1000 [ 98.056369][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 98.701187][ T6724] syzkaller1: entered promiscuous mode [ 98.727353][ T6724] syzkaller1: entered allmulticast mode [ 99.172949][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.181690][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.777139][ T6765] netlink: 'syz.2.227': attribute type 11 has an invalid length. [ 100.379385][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 101.233175][ T6827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.245'. [ 101.247715][ T6827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.245'. [ 101.273223][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.244'. [ 101.313240][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.244'. [ 101.330694][ T6833] netlink: 5 bytes leftover after parsing attributes in process `syz.0.246'. [ 101.358297][ T6833] 0ªX¹¦D: renamed from gretap0 (while UP) [ 101.382887][ T6833] 0ªX¹¦D: entered allmulticast mode [ 101.429485][ T6833] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 101.557732][ T6844] openvswitch: netlink: Duplicate or invalid key (type 0). [ 101.582284][ T6844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.744776][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 101.782620][ T6855] netlink: 72 bytes leftover after parsing attributes in process `syz.2.254'. [ 101.842764][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 101.864091][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 101.909609][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 102.000898][ T6855] tipc: Started in network mode [ 102.001299][ T6869] netlink: 'syz.3.258': attribute type 21 has an invalid length. [ 102.029698][ T6855] tipc: Node identity ac14140f, cluster identity 4711 [ 102.041837][ T6855] tipc: New replicast peer: 255.255.255.255 [ 102.077511][ T6855] tipc: Enabled bearer , priority 10 [ 102.109713][ T6875] netlink: 'syz.0.260': attribute type 14 has an invalid length. [ 102.314715][ T6885] raw_sendmsg: syz.0.263 forgot to set AF_INET. Fix it! [ 102.485576][ T6895] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 102.493468][ T6895] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 102.542906][ T6895] netlink: 'syz.2.268': attribute type 2 has an invalid length. [ 103.093041][ T6918] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 103.196279][ T5962] tipc: Node number set to 2886997007 [ 103.434747][ T6939] netlink: 'syz.4.283': attribute type 2 has an invalid length. [ 103.770004][ T6949] xt_l2tp: wrong L2TP version: 0 [ 104.035636][ T6967] netlink: 'syz.3.292': attribute type 33 has an invalid length. [ 104.331142][ T6976] netlink: 'syz.0.294': attribute type 49 has an invalid length. [ 104.349331][ T6979] Bluetooth: MGMT ver 1.23 [ 104.360888][ T6985] netlink: 'syz.1.296': attribute type 11 has an invalid length. [ 104.501337][ T6985] netlink: 'syz.1.296': attribute type 33 has an invalid length. [ 104.981873][ T7003] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.585326][ T7035] gretap0: entered promiscuous mode [ 105.602690][ T7043] 0ªX¹¦D: renamed from gretap0 [ 105.648458][ T7043] 0ªX¹¦D: left promiscuous mode [ 105.663740][ T7043] 0ªX¹¦D: entered allmulticast mode [ 105.679864][ T7043] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 105.727942][ T7047] bridge0: port 3(vlan2) entered blocking state [ 105.734563][ T7047] bridge0: port 3(vlan2) entered disabled state [ 105.741149][ T7047] vlan2: entered allmulticast mode [ 105.746452][ T7047] bridge0: entered allmulticast mode [ 105.765730][ T7047] vlan2: left allmulticast mode [ 105.770635][ T7047] bridge0: left allmulticast mode [ 105.951199][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.005284][ T7070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.043266][ T7073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.422504][ T7090] __nla_validate_parse: 23 callbacks suppressed [ 106.422521][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 106.768157][ T7117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.332'. [ 107.145415][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.340'. [ 107.293567][ T7154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.341'. [ 107.478011][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 107.521151][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 107.753715][ T7184] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 108.169982][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 108.655345][ T7242] sctp: [Deprecated]: syz.2.370 (pid 7242) Use of int in max_burst socket option deprecated. [ 108.655345][ T7242] Use struct sctp_assoc_value instead [ 108.711949][ T1336] tipc: Subscription rejected, illegal request [ 108.712543][ T7242] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 108.756596][ T7242] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 108.816852][ T7246] netlink: 96 bytes leftover after parsing attributes in process `syz.1.369'. [ 108.845592][ T7246] netlink: 96 bytes leftover after parsing attributes in process `syz.1.369'. [ 108.916899][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 109.133220][ T7264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.284348][ T7275] sock: sock_set_timeout: `syz.3.376' (pid 7275) tries to set negative timeout [ 109.864151][ T7295] bond1: entered allmulticast mode [ 110.162372][ T7317] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.770133][ T7326] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 110.972807][ T7358] tls_set_device_offload: netdev not found [ 111.219258][ T7373] netlink: 'syz.2.396': attribute type 11 has an invalid length. [ 111.708292][ T7396] __nla_validate_parse: 4 callbacks suppressed [ 111.708310][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 111.729798][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 111.757126][ T7393] macvtap1: entered promiscuous mode [ 111.763419][ T7393] vlan0: entered promiscuous mode [ 111.775746][ T7393] macvtap1: entered allmulticast mode [ 111.800544][ T7393] vlan0: entered allmulticast mode [ 111.818737][ T7393] veth0_vlan: entered allmulticast mode [ 111.840407][ T7393] vlan0: left allmulticast mode [ 111.847022][ T7393] veth0_vlan: left allmulticast mode [ 111.852712][ T7393] vlan0: left promiscuous mode [ 111.885068][ T7398] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 111.900943][ T7402] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 111.940127][ T7398] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 112.239762][ T7422] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 112.278123][ T7422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.409'. [ 112.861209][ T7460] netlink: 'syz.1.414': attribute type 13 has an invalid length. [ 112.872164][ T7453] lo speed is unknown, defaulting to 1000 [ 112.964504][ T7460] lo: entered promiscuous mode [ 112.969334][ T7460] lo: entered allmulticast mode [ 113.065447][ T7460] tunl0: entered promiscuous mode [ 113.150132][ T7460] tunl0: entered allmulticast mode [ 113.260638][ T7460] gre0: entered promiscuous mode [ 113.323183][ T7460] gre0: entered allmulticast mode [ 113.418349][ T7460] 0ªX¹¦D: entered promiscuous mode [ 113.475042][ T7460] erspan0: entered promiscuous mode [ 113.499122][ T7460] erspan0: entered allmulticast mode [ 113.548628][ T7460] erspan0: refused to change device tx_queue_len [ 113.572073][ T7460] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 113.757791][ T7490] netlink: 'syz.3.422': attribute type 5 has an invalid length. [ 114.005471][ T7494] netlink: 212 bytes leftover after parsing attributes in process `syz.0.423'. [ 114.088088][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 115.659409][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.683696][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.739068][ T7499] lo speed is unknown, defaulting to 1000 [ 116.040256][ T7527] vlan2: entered allmulticast mode [ 116.045863][ T7527] team_slave_0: entered allmulticast mode [ 116.693048][ T7544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.438'. [ 116.994874][ T7562] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.004090][ T7562] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.012806][ T7562] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.022210][ T7562] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.307008][ T7572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.435187][ T7584] tipc: Started in network mode [ 117.458182][ T7584] tipc: Node identity 2621ae96655a, cluster identity 4711 [ 117.466843][ T7584] tipc: Enabled bearer , priority 0 [ 117.480945][ T7580] +: renamed from syzkaller0 [ 117.501832][ T7580] tipc: Disabling bearer [ 117.931235][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 118.244562][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 118.459038][ T7644] netlink: 'syz.1.466': attribute type 64 has an invalid length. [ 118.502586][ T7644] netlink: 5 bytes leftover after parsing attributes in process `syz.1.466'. [ 118.534110][ T7649] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 118.542095][ T7649] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 118.766076][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 119.107242][ T7679] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 119.116556][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 119.132697][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 119.220682][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 119.244746][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 119.248720][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 119.500577][ T7705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.485'. [ 119.545594][ T7705] netlink: 43 bytes leftover after parsing attributes in process `syz.1.485'. [ 119.569658][ T7705] netlink: 'syz.1.485': attribute type 5 has an invalid length. [ 119.624582][ T7711] syz_tun: entered allmulticast mode [ 119.693920][ T7705] netlink: 43 bytes leftover after parsing attributes in process `syz.1.485'. [ 119.720971][ T7709] syz_tun: left allmulticast mode [ 120.451727][ T7754] geneve2: entered promiscuous mode [ 121.384230][ T7800] erspan0: entered promiscuous mode [ 121.399645][ T7800] x_tables: duplicate entry at hook 1 [ 121.623113][ T7812] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 121.791698][ T7814] netlink: 'syz.1.522': attribute type 3 has an invalid length. [ 121.981638][ T7833] IPv6: sit1: Disabled Multicast RS [ 122.010981][ T7833] sit1: entered allmulticast mode [ 122.092097][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.125430][ T7841] IPv6: sit1: Disabled Multicast RS [ 122.137584][ T7849] tipc: Trying to set illegal importance in message [ 122.156093][ T7841] sit1: entered allmulticast mode [ 122.238655][ T7838] geneve0: entered allmulticast mode [ 122.362411][ T7856] netlink: zone id is out of range [ 122.382761][ T7860] netlink: 'syz.3.538': attribute type 32 has an invalid length. [ 122.384492][ T7856] netlink: zone id is out of range [ 122.398821][ T7856] netlink: zone id is out of range [ 122.405111][ T7856] netlink: zone id is out of range [ 122.410353][ T7856] netlink: zone id is out of range [ 122.417404][ T7856] netlink: zone id is out of range [ 122.424225][ T7856] netlink: zone id is out of range [ 122.429354][ T7856] netlink: zone id is out of range [ 122.435064][ T7856] netlink: zone id is out of range [ 122.441024][ T7856] netlink: zone id is out of range [ 122.805732][ T7885] netlink: 'syz.1.546': attribute type 11 has an invalid length. [ 122.882915][ T7885] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 122.938198][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.980085][ T7885] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 123.101537][ T7899] policy can only be matched on NF_INET_PRE_ROUTING [ 123.101559][ T7899] unable to load match [ 123.118783][ T7902] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 123.382891][ T7916] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 123.437988][ T7916] __nla_validate_parse: 18 callbacks suppressed [ 123.438005][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.555'. [ 123.579956][ T7916] Cannot find del_set index 4 as target [ 123.726575][ T7939] tipc: Enabled bearer , priority 0 [ 123.737199][ T7939] +: renamed from syzkaller0 [ 123.775791][ T7939] tipc: Disabling bearer [ 123.812122][ T7944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.565'. [ 123.972907][ T7951] netlink: 6 bytes leftover after parsing attributes in process `syz.3.567'. [ 124.070529][ T7951] bridge0: port 3(batadv1) entered blocking state [ 124.120059][ T7951] bridge0: port 3(batadv1) entered disabled state [ 124.159991][ T7951] batadv1: entered allmulticast mode [ 124.172602][ T7951] batadv1: entered promiscuous mode [ 124.575602][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 124.585140][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 124.794930][ T8002] veth5: entered promiscuous mode [ 124.801457][ T8002] veth5: entered allmulticast mode [ 124.819024][ T8010] pim6reg1: entered promiscuous mode [ 124.827448][ T8010] pim6reg1: entered allmulticast mode [ 124.861930][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 125.236567][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 125.289306][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 125.501731][ T8040] netlink: 56 bytes leftover after parsing attributes in process `syz.1.595'. [ 126.182578][ T8073] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 126.238341][ T8073] bridge_slave_1: left allmulticast mode [ 126.259632][ T8073] bridge_slave_1: left promiscuous mode [ 126.267326][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.356376][ T8073] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 126.489273][ T8083] netlink: 128 bytes leftover after parsing attributes in process `syz.1.603'. [ 126.609852][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.606'. [ 126.709822][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'. [ 127.146457][ T8121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.164913][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.513578][ T8138] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 127.536273][ T8138] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 127.574113][ T8138] tipc: Enabling of bearer rejected, already enabled [ 127.585309][ T8138] veth0: entered promiscuous mode [ 127.603599][ T8137] veth0: left promiscuous mode [ 127.690249][ T8107] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 127.947813][ T8159] macvlan2: entered promiscuous mode [ 127.963918][ T8159] macvlan2: entered allmulticast mode [ 127.993644][ T8168] netlink: 'syz.0.632': attribute type 12 has an invalid length. [ 128.236818][ T8180] netlink: 'syz.1.636': attribute type 21 has an invalid length. [ 128.814797][ T8203] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004 [ 128.924128][ T5853] Bluetooth: hci0: command 0x0c20 tx timeout [ 128.996040][ T8205] net_ratelimit: 397 callbacks suppressed [ 128.996058][ T8205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.151194][ T8211] netlink: 'syz.3.647': attribute type 39 has an invalid length. [ 129.275707][ T8217] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 130.091186][ T8262] __nla_validate_parse: 6 callbacks suppressed [ 130.091206][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 130.161577][ T8274] openvswitch: netlink: IP tunnel dst address not specified [ 130.654095][ T8294] bridge0: port 2(veth0_to_bridge) entered blocking state [ 130.675489][ T8294] bridge0: port 2(veth0_to_bridge) entered disabled state [ 130.704325][ T8294] veth0_to_bridge: entered allmulticast mode [ 130.722041][ T8294] veth0_to_bridge: entered promiscuous mode [ 130.854598][ T8302] netlink: 'syz.2.678': attribute type 12 has an invalid length. [ 131.107402][ T8317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.681'. [ 131.514650][ T8334] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 131.551292][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 131.571898][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 131.867774][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 131.923240][ T8352] xfrm1: entered promiscuous mode [ 131.924559][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 131.974603][ T8352] xfrm1: entered allmulticast mode [ 131.980131][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.990031][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.998199][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.001050][ T8356] netlink: 'syz.4.693': attribute type 33 has an invalid length. [ 132.017387][ T8356] netlink: 152 bytes leftover after parsing attributes in process `syz.4.693'. [ 132.027001][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.034908][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.036371][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 132.106461][ T8354] lo speed is unknown, defaulting to 1000 [ 132.378529][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 132.448764][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.455943][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.463053][ T8354] bridge_slave_0: entered allmulticast mode [ 132.470290][ T8354] bridge_slave_0: entered promiscuous mode [ 132.479324][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.486564][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.493685][ T8354] bridge_slave_1: entered allmulticast mode [ 132.500833][ T8354] bridge_slave_1: entered promiscuous mode [ 132.531071][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.542512][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.578225][ T8354] team0: Port device team_slave_0 added [ 132.586904][ T8354] team0: Port device team_slave_1 added [ 132.618353][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.625634][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.651791][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.663581][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.670948][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.697279][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.739024][ T8354] hsr_slave_0: entered promiscuous mode [ 132.745317][ T8354] hsr_slave_1: entered promiscuous mode [ 132.751315][ T8354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.759035][ T8354] Cannot create hsr debugfs directory [ 132.779431][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879554][ T8354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.957972][ T8354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.996655][ T8354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.069197][ T8354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.177950][ T8354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.187256][ T8354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.197757][ T8354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.208955][ T8354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.279827][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.300291][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.311695][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.318795][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.337249][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.344410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.382608][ T8354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.393556][ T8354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.536171][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.581486][ T8354] veth0_vlan: entered promiscuous mode [ 133.593194][ T8354] veth1_vlan: entered promiscuous mode [ 133.621664][ T8354] veth0_macvtap: entered promiscuous mode [ 133.630704][ T8354] veth1_macvtap: entered promiscuous mode [ 133.648078][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.661507][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.678490][ T8354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.687602][ T8354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.696887][ T8354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.706456][ T8354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.773014][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.787414][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.813361][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.821539][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.582569][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.638634][ T8376] lo: entered promiscuous mode [ 135.650558][ T8376] lo: entered allmulticast mode [ 135.694204][ T8376] tunl0: entered promiscuous mode [ 135.699288][ T8376] tunl0: entered allmulticast mode [ 135.722986][ T8376] gre0: entered promiscuous mode [ 135.733888][ T8376] gre0: entered allmulticast mode [ 135.762668][ T8376] gretap0: entered promiscuous mode [ 135.773896][ T8376] gretap0: entered allmulticast mode [ 135.822085][ T8376] erspan0: entered allmulticast mode [ 135.830563][ T8376] ip_vti0: entered promiscuous mode [ 135.836248][ T8376] ip_vti0: entered allmulticast mode [ 135.861067][ T8376] ip6_vti0: entered promiscuous mode [ 135.868814][ T8376] ip6_vti0: entered allmulticast mode [ 135.902307][ T8376] sit0: entered promiscuous mode [ 135.913963][ T8376] sit0: entered allmulticast mode [ 135.933912][ T8376] ip6tnl0: entered promiscuous mode [ 135.953884][ T8376] ip6tnl0: entered allmulticast mode [ 135.963092][ T8376] ip6gre0: entered promiscuous mode [ 135.971282][ T8376] ip6gre0: entered allmulticast mode [ 135.990603][ T8376] syz_tun: entered promiscuous mode [ 136.004060][ T8376] syz_tun: entered allmulticast mode [ 136.024460][ T8376] ip6gretap0: entered promiscuous mode [ 136.030019][ T8376] ip6gretap0: entered allmulticast mode [ 136.067550][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.075576][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.109909][ T8376] bridge0: entered promiscuous mode [ 136.116576][ T8376] bridge0: entered allmulticast mode [ 136.133354][ T8376] vcan0: entered promiscuous mode [ 136.139239][ T8376] vcan0: entered allmulticast mode [ 136.180491][ T8376] bond0: entered promiscuous mode [ 136.196854][ T8376] bond_slave_0: entered promiscuous mode [ 136.212683][ T8376] bond_slave_1: entered promiscuous mode [ 136.219087][ T8376] bond0: entered allmulticast mode [ 136.224623][ T8376] bond_slave_0: entered allmulticast mode [ 136.230489][ T8376] bond_slave_1: entered allmulticast mode [ 136.249803][ T8376] team0: entered promiscuous mode [ 136.256308][ T8376] team_slave_0: entered promiscuous mode [ 136.281200][ T8376] team_slave_1: entered promiscuous mode [ 136.290523][ T8376] team0: entered allmulticast mode [ 136.297719][ T8376] team_slave_1: entered allmulticast mode [ 136.330777][ T8376] dummy0: entered promiscuous mode [ 136.339089][ T8376] dummy0: entered allmulticast mode [ 136.348743][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.357380][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.365458][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.372885][ T8376] nlmon0: entered promiscuous mode [ 136.374555][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.386184][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.392326][ T8376] nlmon0: entered allmulticast mode [ 136.412112][ T8376] caif0: entered promiscuous mode [ 136.418943][ T8376] caif0: entered allmulticast mode [ 136.425126][ T8376] batadv0: entered promiscuous mode [ 136.430422][ T8376] batadv0: entered allmulticast mode [ 136.454760][ T8376] veth0: entered promiscuous mode [ 136.459815][ T8376] veth0: entered allmulticast mode [ 136.481024][ T8376] veth1: entered promiscuous mode [ 136.491017][ T8376] veth1: entered allmulticast mode [ 136.513187][ T8376] wg0: entered promiscuous mode [ 136.518292][ T8376] wg0: entered allmulticast mode [ 136.533239][ T8376] wg1: entered promiscuous mode [ 136.538585][ T8376] wg1: entered allmulticast mode [ 136.549930][ T8376] wg2: entered promiscuous mode [ 136.558705][ T8376] wg2: entered allmulticast mode [ 136.569829][ T8376] veth0_to_bridge: entered promiscuous mode [ 136.579961][ T8376] veth0_to_bridge: entered allmulticast mode [ 136.609005][ T8376] veth1_to_bridge: entered promiscuous mode [ 136.621369][ T8376] veth1_to_bridge: entered allmulticast mode [ 136.647337][ T8376] veth0_to_bond: entered promiscuous mode [ 136.653073][ T8376] veth0_to_bond: entered allmulticast mode [ 136.672764][ T8376] veth1_to_bond: entered promiscuous mode [ 136.692525][ T8376] veth1_to_bond: entered allmulticast mode [ 136.708482][ T8376] veth0_to_team: entered promiscuous mode [ 136.723992][ T8376] veth0_to_team: entered allmulticast mode [ 136.746568][ T8376] veth1_to_team: entered promiscuous mode [ 136.754094][ T8376] veth1_to_team: entered allmulticast mode [ 136.789284][ T8376] veth0_to_batadv: entered promiscuous mode [ 136.814965][ T8376] veth0_to_batadv: entered allmulticast mode [ 136.823190][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 136.833042][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.842555][ T8376] batadv_slave_0: entered promiscuous mode [ 136.849030][ T8376] batadv_slave_0: entered allmulticast mode [ 136.858923][ T8376] veth1_to_batadv: entered promiscuous mode [ 136.870492][ T8376] veth1_to_batadv: entered allmulticast mode [ 136.885537][ T8398] netlink: 'syz.4.699': attribute type 10 has an invalid length. [ 136.886043][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.906773][ T8376] batadv_slave_1: entered promiscuous mode [ 136.912603][ T8376] batadv_slave_1: entered allmulticast mode [ 136.925439][ T8376] xfrm0: entered promiscuous mode [ 136.932931][ T8376] xfrm0: entered allmulticast mode [ 136.947093][ T8376] veth0_to_hsr: entered promiscuous mode [ 136.952786][ T8376] veth0_to_hsr: entered allmulticast mode [ 136.963341][ T8376] hsr_slave_0: entered allmulticast mode [ 136.980173][ T8376] veth1_to_hsr: entered promiscuous mode [ 136.986332][ T8376] veth1_to_hsr: entered allmulticast mode [ 136.997851][ T8376] hsr_slave_1: entered allmulticast mode [ 137.008437][ T8376] hsr0: entered promiscuous mode [ 137.013558][ T8376] hsr0: entered allmulticast mode [ 137.025966][ T8376] veth1_virt_wifi: entered promiscuous mode [ 137.031909][ T8376] veth1_virt_wifi: entered allmulticast mode [ 137.064445][ T8376] veth0_virt_wifi: entered promiscuous mode [ 137.070420][ T8376] veth0_virt_wifi: entered allmulticast mode [ 137.085268][ T8376] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 137.092589][ T8376] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 137.102449][ T8376] veth1_vlan: entered allmulticast mode [ 137.121141][ T8376] veth0_vlan: entered allmulticast mode [ 137.138997][ T8376] vlan0: entered promiscuous mode [ 137.154239][ T8376] vlan0: entered allmulticast mode [ 137.159496][ T8376] vlan1: entered promiscuous mode [ 137.182846][ T8376] vlan1: entered allmulticast mode [ 137.191181][ T8376] macvlan0: entered promiscuous mode [ 137.196813][ T8376] macvlan0: entered allmulticast mode [ 137.212904][ T8376] macvlan1: entered promiscuous mode [ 137.220590][ T8376] macvlan1: entered allmulticast mode [ 137.233021][ T8376] ipvlan0: entered promiscuous mode [ 137.248490][ T8376] ipvlan0: entered allmulticast mode [ 137.254134][ T8376] ipvlan1: entered promiscuous mode [ 137.259334][ T8376] ipvlan1: entered allmulticast mode [ 137.265486][ T8376] veth1_macvtap: entered allmulticast mode [ 137.276987][ T8376] veth0_macvtap: entered allmulticast mode [ 137.296619][ T8376] macvtap0: entered promiscuous mode [ 137.302044][ T8376] macvtap0: entered allmulticast mode [ 137.318382][ T8376] macsec0: entered promiscuous mode [ 137.323607][ T8376] macsec0: entered allmulticast mode [ 137.354335][ T8376] geneve0: entered promiscuous mode [ 137.359548][ T8376] geneve0: entered allmulticast mode [ 137.378883][ T8376] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.392129][ T8376] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.401094][ T8376] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.410766][ T8376] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.420201][ T8376] geneve1: entered promiscuous mode [ 137.425682][ T8376] geneve1: entered allmulticast mode [ 137.441988][ T8376] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 137.453424][ T8376] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 137.471123][ T8376] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 137.478812][ T8376] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 137.491670][ T8376] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 137.503128][ T8376] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 137.519440][ T8376] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 137.532939][ T8376] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 137.554929][ T8376] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 137.561871][ T8376] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 137.583409][ T8376] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 137.591370][ T8376] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 137.610070][ T8376] mac80211_hwsim hwsim6 veth1_to_bod: entered promiscuous mode [ 137.617808][ T8376] mac80211_hwsim hwsim6 veth1_to_bod: entered allmulticast mode [ 137.625945][ T8376] syztnl2: entered promiscuous mode [ 137.631157][ T8376] syztnl2: entered allmulticast mode [ 137.636732][ T8376] erspan1: entered promiscuous mode [ 137.641949][ T8376] erspan1: entered allmulticast mode [ 137.653432][ T48] lo speed is unknown, defaulting to 1000 [ 137.700307][ T48] syz0: Port: 1 Link DOWN [ 137.703738][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.756938][ T8398] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 137.795648][ T48] lo speed is unknown, defaulting to 1000 [ 137.822070][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 137.985268][ T8394] lo speed is unknown, defaulting to 1000 [ 138.148341][ T8420] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 138.183458][ T8414] netlink: 'syz.4.703': attribute type 5 has an invalid length. [ 138.215433][ T8422] ip6gre1: entered allmulticast mode [ 138.369216][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.453901][ T5840] Bluetooth: hci3: command tx timeout [ 138.559166][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 138.577756][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.592815][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 138.604568][ T8439] netlink: 'syz.4.711': attribute type 5 has an invalid length. [ 138.767922][ T8453] x_tables: unsorted entry at hook 1 [ 138.854311][ T8448] Bluetooth: MGMT ver 1.23 [ 138.860057][ T8448] netlink: 163944 bytes leftover after parsing attributes in process `syz.3.712'. [ 138.869274][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.010505][ T8446] lo speed is unknown, defaulting to 1000 [ 139.139077][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 139.419435][ T5894] IPVS: starting estimator thread 0... [ 139.519581][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 139.545097][ T8483] IPVS: using max 30 ests per chain, 72000 per kthread [ 139.672639][ T8491] team0: Device vti0 is of different type [ 139.783527][ T12] bridge_slave_1: left allmulticast mode [ 139.797105][ T12] bridge_slave_1: left promiscuous mode [ 139.801237][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 139.803931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.857022][ T12] bridge_slave_0: left allmulticast mode [ 139.862704][ T12] bridge_slave_0: left promiscuous mode [ 139.869103][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.175972][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.187008][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.197643][ T12] bond0 (unregistering): Released all slaves [ 140.224399][ T8498] tipc: Enabled bearer , priority 10 [ 140.241718][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 140.525868][ T5840] Bluetooth: hci3: command tx timeout [ 141.348313][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.359556][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.384472][ T8394] bridge_slave_0: entered allmulticast mode [ 141.436081][ T8394] bridge_slave_0: entered promiscuous mode [ 141.554179][ T8552] netlink: 44 bytes leftover after parsing attributes in process `syz.4.736'. [ 141.693378][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.712041][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.758305][ T8394] bridge_slave_1: entered allmulticast mode [ 141.816205][ T8394] bridge_slave_1: entered promiscuous mode [ 142.182924][ T12] hsr_slave_0: left promiscuous mode [ 142.214100][ T12] hsr_slave_1: left promiscuous mode [ 142.220410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.244026][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.256143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.263564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.320894][ T12] veth1_macvtap: left promiscuous mode [ 142.335694][ T12] veth0_macvtap: left promiscuous mode [ 142.341398][ T12] veth1_vlan: left promiscuous mode [ 142.352003][ T12] veth0_vlan: left promiscuous mode [ 142.614082][ T5840] Bluetooth: hci3: command tx timeout [ 142.846905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 142.880541][ T12] team0 (unregistering): Port device team_slave_0 removed [ 143.304352][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.376448][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.582394][ T8394] team0: Port device team_slave_0 added [ 143.606223][ T8394] team0: Port device team_slave_1 added [ 143.771241][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.806885][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.835657][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.902452][ T8597] veth3: entered promiscuous mode [ 143.917007][ T8597] bond0: (slave veth3): Enslaving as an active interface with an up link [ 143.929959][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.938125][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.965855][ T8601] netlink: 'syz.2.748': attribute type 4 has an invalid length. [ 143.976389][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.014434][ T8600] netlink: 'syz.2.748': attribute type 4 has an invalid length. [ 144.046728][ T48] lo speed is unknown, defaulting to 1000 [ 144.073856][ T48] syz0: Port: 1 Link ACTIVE [ 144.162289][ T48] lo speed is unknown, defaulting to 1000 [ 144.219489][ T8394] hsr_slave_0: entered promiscuous mode [ 144.258830][ T8394] hsr_slave_1: entered promiscuous mode [ 144.289983][ T8394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.300740][ T8394] Cannot create hsr debugfs directory [ 144.415452][ T8616] ip6gre2: entered allmulticast mode [ 144.619834][ T8633] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 144.653255][ T8631] netlink: 'syz.4.756': attribute type 5 has an invalid length. [ 144.679468][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.693933][ T5840] Bluetooth: hci3: command tx timeout [ 144.707600][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.726609][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.757'. [ 144.750107][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.759637][ T8644] netlink: 'syz.3.759': attribute type 10 has an invalid length. [ 144.769439][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.781443][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.793207][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.796298][ T8639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.803527][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.812352][ T8639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.825821][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.830495][ T8639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.844144][ T8638] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.758'. [ 144.848893][ T8639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.871727][ T8639] bond1: (slave geneve2): making interface the new active one [ 144.882237][ T8639] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 144.901681][ T8641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.912169][ T8639] syz.2.757 (8639) used greatest stack depth: 19160 bytes left [ 144.920054][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.932901][ T8644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 145.032020][ T8646] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 145.643345][ T8671] tipc: Started in network mode [ 145.658398][ T8671] tipc: Node identity bacf64389f0d, cluster identity 4711 [ 145.667516][ T8671] tipc: Enabled bearer , priority 0 [ 145.717114][ T8671] +: renamed from syzkaller0 [ 145.728603][ T8671] tipc: Disabling bearer [ 145.772612][ T8394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.792921][ T8679] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 145.814977][ T8394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.895751][ T8679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.913414][ T8394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.958978][ T8394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.179789][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.256381][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.300086][ T8699] openvswitch: netlink: Key type 30 is not supported [ 146.308762][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.315927][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.352932][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.360251][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.508997][ T8394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.729608][ T8711] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 146.738861][ T8711] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 146.749614][ T8720] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 146.775003][ T8720] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 146.871703][ T8726] syzkaller1: entered promiscuous mode [ 146.882589][ T8726] syzkaller1: entered allmulticast mode [ 147.024020][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.146255][ T8394] veth0_vlan: entered promiscuous mode [ 147.182219][ T8737] syzkaller1: entered promiscuous mode [ 147.188419][ T8737] syzkaller1: entered allmulticast mode [ 147.264348][ T8394] veth1_vlan: entered promiscuous mode [ 147.318266][ T8394] veth0_macvtap: entered promiscuous mode [ 147.341488][ T8394] veth1_macvtap: entered promiscuous mode [ 147.370476][ T8749] syz.2.791 (8749) used greatest stack depth: 18552 bytes left [ 147.385136][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.425940][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.445896][ T8394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.456814][ T8394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.467823][ T8394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.477013][ T8394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.571136][ T8753] can: request_module (can-proto-4) failed. [ 147.666015][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.686826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.785685][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.793548][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.098566][ T8786] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 148.779137][ T8836] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 148.917091][ T2968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.304406][ T8856] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 149.409677][ T2968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.465165][ T8862] netlink: 'syz.4.828': attribute type 2 has an invalid length. [ 149.468553][ T8861] netlink: 'syz.3.829': attribute type 4 has an invalid length. [ 149.487496][ T8867] netlink: 'syz.3.829': attribute type 4 has an invalid length. [ 149.503672][ T8865] netlink: 'syz.2.830': attribute type 1 has an invalid length. [ 149.666419][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.688586][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.697942][ T8877] __nla_validate_parse: 39 callbacks suppressed [ 149.697954][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 149.716962][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.764873][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.782954][ T8872] can: request_module (can-proto-4) failed. [ 149.783882][ T2968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.823954][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.989927][ T8899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.838'. [ 150.028516][ T8871] lo speed is unknown, defaulting to 1000 [ 150.252573][ T2968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.354410][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 150.631480][ T2968] bridge_slave_1: left allmulticast mode [ 150.648247][ T2968] bridge_slave_1: left promiscuous mode [ 150.654588][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.665632][ T2968] bridge_slave_0: left allmulticast mode [ 150.671292][ T2968] bridge_slave_0: left promiscuous mode [ 150.677150][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.043488][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.056276][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.071632][ T2968] bond0 (unregistering): Released all slaves [ 151.180636][ T8929] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 151.283212][ T8933] netlink: 'syz.2.846': attribute type 13 has an invalid length. [ 151.311406][ T8935] netlink: 'syz.3.847': attribute type 3 has an invalid length. [ 151.323613][ T8933] netlink: 'syz.2.846': attribute type 58 has an invalid length. [ 151.333551][ T8933] netlink: 152 bytes leftover after parsing attributes in process `syz.2.846'. [ 151.348423][ T8935] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.847'. [ 151.432617][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 151.643639][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.854'. [ 151.880720][ T8966] vlan3: entered promiscuous mode [ 151.886922][ T8966] bond0: entered promiscuous mode [ 151.894125][ T8966] bond_slave_0: entered promiscuous mode [ 151.912200][ T8966] bond_slave_1: entered promiscuous mode [ 151.921558][ T8966] bridge_slave_1: entered promiscuous mode [ 151.928265][ T8966] batadv0: entered promiscuous mode [ 151.965473][ T5853] Bluetooth: hci3: command tx timeout [ 152.043293][ T2968] hsr_slave_0: left promiscuous mode [ 152.073009][ T2968] hsr_slave_1: left promiscuous mode [ 152.094704][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.102138][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.112492][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.128220][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.139456][ T8978] netlink: 256 bytes leftover after parsing attributes in process `syz.4.860'. [ 152.171154][ T2968] veth1_macvtap: left promiscuous mode [ 152.180131][ T2968] veth0_macvtap: left promiscuous mode [ 152.187266][ T2968] veth1_vlan: left promiscuous mode [ 152.192628][ T2968] veth0_vlan: left promiscuous mode [ 152.507003][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 152.519904][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 152.531553][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 152.677836][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 152.728751][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 153.199657][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.207448][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.215138][ T8871] bridge_slave_0: entered allmulticast mode [ 153.223008][ T8871] bridge_slave_0: entered promiscuous mode [ 153.232118][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.239569][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.254428][ T8871] bridge_slave_1: entered allmulticast mode [ 153.269469][ T8871] bridge_slave_1: entered promiscuous mode [ 153.281028][ T8984] netlink: 'syz.4.861': attribute type 3 has an invalid length. [ 153.402868][ T9008] xt_connbytes: Forcing CT accounting to be enabled [ 153.405667][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.409783][ T9008] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.425564][ T9007] gtp0: entered promiscuous mode [ 153.453908][ T9007] gtp0: entered allmulticast mode [ 153.473179][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.648597][ T8871] team0: Port device team_slave_0 added [ 153.697928][ T8871] team0: Port device team_slave_1 added [ 153.855765][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.868247][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.904189][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.915052][ T9038] openvswitch: netlink: Missing key (keys=40, expected=80) [ 153.923441][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.930891][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.980831][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.049151][ T5853] Bluetooth: hci3: command tx timeout [ 154.274198][ T8871] hsr_slave_0: entered promiscuous mode [ 154.287017][ T8871] hsr_slave_1: entered promiscuous mode [ 154.293444][ T8871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.302446][ T8871] Cannot create hsr debugfs directory [ 154.364353][ T9064] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 154.411943][ T9064] bridge0: left promiscuous mode [ 154.418367][ T9064] bridge0: left allmulticast mode [ 154.434157][ T9066] netlink: ct family unspecified [ 154.439159][ T9066] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.495004][ T9064] bridge0: entered promiscuous mode [ 154.500455][ T9064] bridge0: entered allmulticast mode [ 154.512890][ T9064] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.679473][ T9069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.115506][ T9073] __nla_validate_parse: 9 callbacks suppressed [ 155.115523][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 155.268560][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 155.306689][ T8871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.327210][ T8871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.361241][ T8871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.386328][ T8871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.391989][ T48] IPVS: starting estimator thread 0... [ 155.393392][ T9092] netlink: 52 bytes leftover after parsing attributes in process `syz.3.891'. [ 155.403213][ T9097] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.503944][ T9099] IPVS: using max 30 ests per chain, 72000 per kthread [ 155.581216][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.617589][ T8871] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.651467][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.658723][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.701690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.708894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.070821][ T1336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.081844][ T1336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.124138][ T5853] Bluetooth: hci3: command tx timeout [ 156.309572][ T1336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.361049][ T1336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.468761][ T1336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.496058][ T1336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.552827][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 156.598510][ T1336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.630213][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 156.630910][ T1336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.649823][ T9141] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 156.649867][ T9141] nbd: error processing sock list [ 156.817874][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.837912][ T9153] netlink: 256 bytes leftover after parsing attributes in process `syz.2.905'. [ 156.853546][ T9158] Bluetooth: MGMT ver 1.23 [ 156.891968][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 156.962778][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 157.113731][ T9155] veth5: entered allmulticast mode [ 157.137362][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.153751][ T1336] veth0_to_bridge: left allmulticast mode [ 157.160047][ T1336] veth0_to_bridge: left promiscuous mode [ 157.172419][ T1336] bridge0: port 2(veth0_to_bridge) entered disabled state [ 157.180492][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.190923][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.198934][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.207804][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.215758][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.222083][ T30] audit: type=1800 audit(1750126885.324:2): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.911" name="memory.events" dev="tmpfs" ino=987 res=0 errno=0 [ 157.699153][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.708458][ T1336] bond_slave_0: left promiscuous mode [ 157.722824][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.746206][ T1336] bond_slave_1: left promiscuous mode [ 157.753295][ T1336] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 157.762922][ T1336] bridge_slave_1: left promiscuous mode [ 157.770425][ T1336] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 157.781501][ T1336] batadv0: left promiscuous mode [ 157.787733][ T1336] bond0 (unregistering): Released all slaves [ 157.802915][ T1336] bond1 (unregistering): Released all slaves [ 157.824068][ T9168] mac80211_hwsim hwsim7 û: renamed from wlan1 [ 157.897136][ T1336] tipc: Left network mode [ 158.000071][ T9166] lo speed is unknown, defaulting to 1000 [ 158.097955][ T8871] veth0_vlan: entered promiscuous mode [ 158.120485][ T8871] veth1_vlan: entered promiscuous mode [ 158.204817][ T5853] Bluetooth: hci3: command tx timeout [ 158.466489][ T8871] veth0_macvtap: entered promiscuous mode [ 158.546798][ T8871] veth1_macvtap: entered promiscuous mode [ 158.589098][ T9212] tipc: Started in network mode [ 158.600850][ T9212] tipc: Node identity 4, cluster identity 4711 [ 158.607794][ T9212] tipc: Node number set to 4 [ 158.718002][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.843046][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.877872][ T9224] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 158.900921][ T9224] netlink: 244 bytes leftover after parsing attributes in process `syz.1.925'. [ 158.967397][ T8871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.996933][ T8871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.026826][ T30] audit: type=1800 audit(1750126887.134:3): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.926" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1014 res=0 errno=0 [ 159.031003][ T8871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.071047][ T8871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.194108][ T1336] hsr_slave_0: left promiscuous mode [ 159.214981][ T1336] hsr_slave_1: left promiscuous mode [ 159.224698][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.232147][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.267030][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.274780][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.309172][ T1336] veth1_macvtap: left promiscuous mode [ 159.324030][ T5853] Bluetooth: hci2: command tx timeout [ 159.330841][ T1336] veth0_macvtap: left promiscuous mode [ 159.337921][ T1336] veth1_vlan: left promiscuous mode [ 159.343282][ T1336] veth0_vlan: left promiscuous mode [ 159.756587][ T9253] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 159.850030][ T1336] team0 (unregistering): Port device team_slave_1 removed [ 159.889179][ T1336] team0 (unregistering): Port device team_slave_0 removed [ 160.295006][ T9253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.357229][ T9254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.372901][ T9254] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 160.385415][ T9254] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 160.409764][ T9256] gretap1: entered promiscuous mode [ 160.465312][ T9265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.674592][ T9265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.795568][ T9279] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 160.834002][ T9279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.856270][ T9279] ip6erspan0: entered promiscuous mode [ 160.867085][ T9279] bond3: (slave ip6erspan0): making interface the new active one [ 160.876854][ T9279] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 160.901044][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.944000][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.998087][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.007774][ T9166] chnl_net:caif_netlink_parms(): no params data found [ 161.020120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.321780][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.337149][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.347458][ T9166] bridge_slave_0: entered allmulticast mode [ 161.358742][ T9166] bridge_slave_0: entered promiscuous mode [ 161.376853][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.389157][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.399199][ T9166] bridge_slave_1: entered allmulticast mode [ 161.405210][ T5853] Bluetooth: hci2: command tx timeout [ 161.412047][ T9166] bridge_slave_1: entered promiscuous mode [ 161.423295][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 161.596467][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.609230][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.702637][ T9166] team0: Port device team_slave_0 added [ 161.726960][ T9166] team0: Port device team_slave_1 added [ 161.759187][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.767903][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.794266][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.807893][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.815191][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.841350][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.883673][ T9166] hsr_slave_0: entered promiscuous mode [ 161.890836][ T9166] hsr_slave_1: entered promiscuous mode [ 161.897212][ T9166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.904826][ T9166] Cannot create hsr debugfs directory [ 162.258497][ T9313] netlink: 'syz.1.946': attribute type 29 has an invalid length. [ 162.267249][ T9313] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 162.397017][ T9323] netlink: 64 bytes leftover after parsing attributes in process `syz.3.949'. [ 162.511091][ T9321] veth0_to_bond: left promiscuous mode [ 162.520494][ T9321] veth0_to_bond: left allmulticast mode [ 162.562506][ T9166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.576141][ T1336] IPVS: stop unused estimator thread 0... [ 162.608889][ T9166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.638093][ T9166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.675774][ T9166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.760784][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.776580][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.786818][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.795133][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.802809][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.831373][ T9348] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 162.846942][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 162.861782][ T1336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.887107][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 162.899177][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 162.941163][ T9350] netlink: 'syz.1.956': attribute type 15 has an invalid length. [ 162.951727][ T1336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.970722][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 162.983674][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 162.998862][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 163.008042][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 163.044660][ T9348] netlink: zone id is out of range [ 163.050316][ T9348] netlink: zone id is out of range [ 163.055792][ T1336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.094337][ T9348] netlink: zone id is out of range [ 163.114306][ T9348] netlink: zone id is out of range [ 163.120232][ T9348] netlink: zone id is out of range [ 163.133232][ T9361] netlink: 9 bytes leftover after parsing attributes in process `syz.1.960'. [ 163.152569][ T1336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.174938][ T9348] netlink: zone id is out of range [ 163.188246][ T9348] netlink: zone id is out of range [ 163.196983][ T9339] lo speed is unknown, defaulting to 1000 [ 163.199130][ T9361] 0ªX¹¦D: left allmulticast mode [ 163.210201][ T9348] netlink: zone id is out of range [ 163.255605][ T9348] netlink: zone id is out of range [ 163.485749][ T5853] Bluetooth: hci2: command tx timeout [ 163.549230][ T9375] x_tables: duplicate underflow at hook 1 [ 163.618915][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.650817][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.739612][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.739853][ T9380] xt_hashlimit: size too large, truncated to 1048576 [ 163.746806][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.886655][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.893872][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.954146][ T1336] bridge_slave_1: left allmulticast mode [ 163.959839][ T1336] bridge_slave_1: left promiscuous mode [ 163.975291][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.050427][ T1336] bridge_slave_0: left allmulticast mode [ 164.058538][ T1336] bridge_slave_0: left promiscuous mode [ 164.066039][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.078609][ T9395] xt_policy: too many policy elements [ 164.419160][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.430772][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.440702][ T1336] bond0 (unregistering): Released all slaves [ 164.610592][ T9166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.622541][ T9166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.673735][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.685198][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.844390][ T5853] Bluetooth: hci3: command tx timeout [ 164.986306][ T9424] lo: left promiscuous mode [ 164.990869][ T9424] lo: left allmulticast mode [ 165.073323][ T9042] lo speed is unknown, defaulting to 1000 [ 165.093864][ T9042] syz0: Port: 1 Link DOWN [ 165.098345][ T9042] lo speed is unknown, defaulting to 1000 [ 165.424051][ T1336] hsr_slave_0: left promiscuous mode [ 165.451157][ T1336] hsr_slave_1: left promiscuous mode [ 165.457302][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.480555][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.502567][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.510816][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.530807][ T1336] veth1_macvtap: left promiscuous mode [ 165.536502][ T1336] veth0_macvtap: left promiscuous mode [ 165.542057][ T1336] veth1_vlan: left promiscuous mode [ 165.549109][ T1336] veth0_vlan: left promiscuous mode [ 165.564622][ T5853] Bluetooth: hci2: command tx timeout [ 165.911574][ T1336] team0 (unregistering): Port device team_slave_1 removed [ 165.946693][ T1336] team0 (unregistering): Port device team_slave_0 removed [ 166.307698][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 166.480002][ T9454] __nla_validate_parse: 5 callbacks suppressed [ 166.480018][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 166.480125][ T9456] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 166.490232][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 166.528861][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 166.548925][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 166.600593][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.990'. [ 166.617517][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.640571][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.648438][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.655795][ T9339] bridge_slave_0: entered allmulticast mode [ 166.663632][ T9339] bridge_slave_0: entered promiscuous mode [ 166.782072][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.792285][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.804639][ T9339] bridge_slave_1: entered allmulticast mode [ 166.812540][ T9339] bridge_slave_1: entered promiscuous mode [ 166.925575][ T5853] Bluetooth: hci3: command tx timeout [ 168.088369][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.120446][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.282514][ T9339] team0: Port device team_slave_0 added [ 168.319204][ T9339] team0: Port device team_slave_1 added [ 168.391697][ T9495] netlink: 204 bytes leftover after parsing attributes in process `syz.1.996'. [ 168.407350][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.415943][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.448866][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.478818][ T9166] veth0_vlan: entered promiscuous mode [ 168.496633][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.503599][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.561406][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.591764][ T9166] veth1_vlan: entered promiscuous mode [ 168.728996][ T9339] hsr_slave_0: entered promiscuous mode [ 168.746252][ T9339] hsr_slave_1: entered promiscuous mode [ 168.752637][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.760816][ T9339] Cannot create hsr debugfs directory [ 168.925213][ T9517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1004'. [ 168.932574][ T9166] veth0_macvtap: entered promiscuous mode [ 168.992113][ T9520] pim6reg1: entered promiscuous mode [ 168.997991][ T9520] pim6reg1: entered allmulticast mode [ 169.003980][ T5853] Bluetooth: hci3: command tx timeout [ 169.012169][ T9166] veth1_macvtap: entered promiscuous mode [ 169.139285][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.169521][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.230140][ T9166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.263863][ T9166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.272588][ T9166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.299785][ T9166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.479469][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.513011][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.550034][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.561244][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.609758][ T9545] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1013'. [ 169.709310][ T9553] ip6t_srh: unknown srh match flags 4001 [ 169.719457][ T9339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.815188][ T9339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.826492][ T9339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.840025][ T9339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.979064][ T9569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1017'. [ 169.996311][ T9569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1017'. [ 170.049741][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.146044][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.176881][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.224171][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.278551][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.295470][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.302707][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.382232][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.407794][ T9576] net_ratelimit: 213 callbacks suppressed [ 170.407818][ T9576] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 170.428512][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.435674][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.819074][ T9590] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 170.846055][ T49] bridge_slave_1: left allmulticast mode [ 170.852267][ T49] bridge_slave_1: left promiscuous mode [ 170.864057][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.915365][ T49] bridge_slave_0: left allmulticast mode [ 170.921086][ T49] bridge_slave_0: left promiscuous mode [ 170.934618][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.012017][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.032037][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.041889][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.050853][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.062188][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.084327][ T5840] Bluetooth: hci3: command tx timeout [ 171.319914][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.331231][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.342454][ T49] bond0 (unregistering): Released all slaves [ 171.521014][ T9599] lo speed is unknown, defaulting to 1000 [ 171.567286][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.860825][ T9339] veth0_vlan: entered promiscuous mode [ 171.920355][ T9628] __nla_validate_parse: 5 callbacks suppressed [ 171.920372][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 171.925428][ T9339] veth1_vlan: entered promiscuous mode [ 172.029777][ T9339] veth0_macvtap: entered promiscuous mode [ 172.064224][ T9339] veth1_macvtap: entered promiscuous mode [ 172.136257][ T9635] syz.3.1038 uses old SIOCAX25GETINFO [ 172.207757][ T9633] tipc: Enabled bearer , priority 0 [ 172.336473][ T49] hsr_slave_0: left promiscuous mode [ 172.343245][ T49] hsr_slave_1: left promiscuous mode [ 172.361582][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.373495][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.384914][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.392317][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.441340][ T49] veth1_macvtap: left promiscuous mode [ 172.451471][ T49] veth0_macvtap: left promiscuous mode [ 172.462200][ T49] veth1_vlan: left promiscuous mode [ 172.467816][ T49] veth0_vlan: left promiscuous mode [ 172.513916][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1041'. [ 172.841200][ T9662] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1042'. [ 172.972514][ T49] team0 (unregistering): Port device team_slave_1 removed [ 173.008592][ T49] team0 (unregistering): Port device team_slave_0 removed [ 173.163906][ T5838] Bluetooth: hci2: command tx timeout [ 173.346019][ T9633] syzkaller0: entered promiscuous mode [ 173.351584][ T9633] syzkaller0: entered allmulticast mode [ 173.358272][ T9633] tipc: Resetting bearer [ 173.422688][ T59] tipc: Resetting bearer [ 173.439236][ T9632] tipc: Resetting bearer [ 173.653746][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 173.662839][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 174.600109][ T9632] tipc: Disabling bearer [ 174.662297][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.687533][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.710544][ T9339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.720778][ T9339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.731842][ T9339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.741054][ T9339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.130052][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.147642][ T9599] chnl_net:caif_netlink_parms(): no params data found [ 175.169846][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.244419][ T5838] Bluetooth: hci2: command tx timeout [ 175.283347][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.285932][ T9699] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1053'. [ 175.305876][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.384050][ T9702] veth0_to_team: left promiscuous mode [ 175.389582][ T9702] veth0_to_team: left allmulticast mode [ 175.401695][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 175.411009][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.419386][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.426766][ T9599] bridge_slave_0: entered allmulticast mode [ 175.434577][ T9599] bridge_slave_0: entered promiscuous mode [ 175.469537][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.484304][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.491493][ T9599] bridge_slave_1: entered allmulticast mode [ 175.513221][ T9599] bridge_slave_1: entered promiscuous mode [ 175.524472][ T9709] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 175.548668][ T9709] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 175.600836][ T9707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.712124][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1059'. [ 175.752557][ T9720] netlink: 'syz.2.1060': attribute type 3 has an invalid length. [ 175.758866][ T9717] pim6reg: entered allmulticast mode [ 175.771156][ T9599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.821043][ T9599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.950746][ T3553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.977507][ T9599] team0: Port device team_slave_0 added [ 175.988245][ T9599] team0: Port device team_slave_1 added [ 176.122395][ T3553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.148638][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.156039][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.182368][ T9599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.199563][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.207214][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.233577][ T9599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.266327][ T3553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.309212][ T9599] hsr_slave_0: entered promiscuous mode [ 176.320148][ T9599] hsr_slave_1: entered promiscuous mode [ 176.326412][ T9599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.334224][ T9599] Cannot create hsr debugfs directory [ 176.352135][ T3553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.514474][ T3553] bridge_slave_1: left allmulticast mode [ 176.520127][ T3553] bridge_slave_1: left promiscuous mode [ 176.527648][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.539511][ T3553] bridge_slave_0: left allmulticast mode [ 176.545501][ T3553] bridge_slave_0: left promiscuous mode [ 176.551164][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.795160][ T9742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1064'. [ 176.841133][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'. [ 176.967968][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.982361][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.002400][ T9750] __nla_validate_parse: 1 callbacks suppressed [ 177.002415][ T9750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 177.027473][ T3553] bond0 (unregistering): Released all slaves [ 177.089863][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.099385][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.115075][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.126778][ T9744] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 177.146772][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.184965][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.278524][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 177.325501][ T5840] Bluetooth: hci2: command tx timeout [ 177.431064][ T9763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.434805][ T9751] lo speed is unknown, defaulting to 1000 [ 177.620357][ T9599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.662258][ T9599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.689107][ T9599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.717599][ T9599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.143634][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1077'. [ 178.143721][ T9599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.179259][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 178.188808][ T9791] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 178.215687][ T9791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.268326][ T3553] hsr_slave_0: left promiscuous mode [ 178.311477][ T3553] hsr_slave_1: left promiscuous mode [ 178.318767][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.326606][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.332093][ T9798] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1079'. [ 178.345253][ T9797] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 178.355296][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.362839][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.370650][ T9798] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1079'. [ 178.380882][ T9798] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1079'. [ 178.405877][ T3553] veth1_macvtap: left promiscuous mode [ 178.411793][ T3553] veth0_macvtap: left promiscuous mode [ 178.417682][ T3553] veth1_vlan: left promiscuous mode [ 178.423015][ T3553] veth0_vlan: left promiscuous mode [ 178.465174][ T9805] netlink: 'syz.3.1082': attribute type 2 has an invalid length. [ 178.810916][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 178.846061][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 179.173132][ T9599] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.212678][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.219865][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.253508][ T5840] Bluetooth: hci3: command tx timeout [ 179.283461][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.290691][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.317447][ T9813] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1084'. [ 179.405310][ T5840] Bluetooth: hci2: command tx timeout [ 179.425950][ T9813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1084'. [ 179.483607][ T9599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.497974][ T9599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.584738][ T9751] chnl_net:caif_netlink_parms(): no params data found [ 179.931172][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.942558][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.957342][ T9751] bridge_slave_0: entered allmulticast mode [ 179.968497][ T9751] bridge_slave_0: entered promiscuous mode [ 179.994340][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.009612][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.019873][ T9751] bridge_slave_1: entered allmulticast mode [ 180.028398][ T9751] bridge_slave_1: entered promiscuous mode [ 180.087801][ T9599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.189729][ T9751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.231418][ T9751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.248236][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1094'. [ 180.311566][ T9854] veth3: entered allmulticast mode [ 180.378179][ T9751] team0: Port device team_slave_0 added [ 180.394822][ T9751] team0: Port device team_slave_1 added [ 180.514187][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.528108][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.541175][ T9864] xt_policy: output policy not valid in PREROUTING and INPUT [ 180.562394][ T9751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.637023][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.660308][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.723876][ T9751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.816620][ T9874] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 180.937528][ T9751] hsr_slave_0: entered promiscuous mode [ 180.942230][ T9877] openvswitch: netlink: IP tunnel TTL not specified. [ 180.965109][ T9751] hsr_slave_1: entered promiscuous mode [ 180.971538][ T9751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.984244][ T9751] Cannot create hsr debugfs directory [ 181.095399][ T9885] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.098111][ T9599] veth0_vlan: entered promiscuous mode [ 181.124237][ T9888] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 181.139078][ T9885] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 181.175860][ T9885] ipvlan1: left promiscuous mode [ 181.180851][ T9885] ipvlan1: left allmulticast mode [ 181.210706][ T9885] team0: Device ipvlan1 failed to register rx_handler [ 181.297003][ T9599] veth1_vlan: entered promiscuous mode [ 181.324077][ T5840] Bluetooth: hci3: command tx timeout [ 181.429713][ T9906] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.439171][ T9906] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.449172][ T9906] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.458307][ T9906] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.470250][ T9906] vxlan1: entered promiscuous mode [ 181.475468][ T9906] vxlan1: entered allmulticast mode [ 181.511632][ T9908] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 181.521493][ T9908] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 181.536280][ T9908] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 181.548512][ T9908] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 181.646223][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.725229][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.752153][ T9599] veth0_macvtap: entered promiscuous mode [ 181.772560][ T9599] veth1_macvtap: entered promiscuous mode [ 181.843339][ T9599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.898014][ T9599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.931660][ T9599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.964600][ T9599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.990288][ T9599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.012475][ T9599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.100222][ T9924] __nla_validate_parse: 6 callbacks suppressed [ 182.100243][ T9924] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1118'. [ 182.181973][ T9924] tipc: Resetting bearer [ 182.214602][ T9924] gretap0: left allmulticast mode [ 182.245564][ T9924] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1118'. [ 182.261552][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1119'. [ 182.277591][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.314354][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.413000][ T9924] 0ªX¹¦D: renamed from gretap0 [ 182.462605][ T9924] tipc: Disabling bearer [ 182.533593][ T9924] 0ªX¹¦D: left promiscuous mode [ 182.611219][ T9924] 0ªX¹¦D: entered allmulticast mode [ 182.681382][ T9924] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 183.404052][ T5840] Bluetooth: hci3: command tx timeout [ 185.484496][ T5840] Bluetooth: hci3: command tx timeout [ 194.219785][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.287316][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 232.124236][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 255.648154][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.564003][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 303.804387][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 317.102156][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.004607][ T31] INFO: task syz.2.1118:9924 blocked for more than 143 seconds. [ 335.012294][ T31] Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 [ 335.069109][ T31] Blocked by coredump. [ 335.103940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.112645][ T31] task:syz.2.1118 state:D stack:20584 pid:9924 tgid:9923 ppid:5834 task_flags:0x40054c flags:0x00004004 [ 335.223897][ T31] Call Trace: [ 335.227218][ T31] [ 335.230367][ T31] __schedule+0x16f5/0x4d00 [ 335.263794][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.268705][ T31] ? schedule+0x165/0x360 [ 335.273061][ T31] ? __pfx___schedule+0x10/0x10 [ 335.324023][ T31] ? schedule+0x91/0x360 [ 335.328342][ T31] schedule+0x165/0x360 [ 335.332757][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.383752][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 335.389529][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 335.433842][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 335.440064][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.483818][ T31] ? exit_mmap+0x28e/0xb50 [ 335.488300][ T31] down_write+0x1ab/0x1f0 [ 335.492640][ T31] ? __pfx_down_write+0x10/0x10 [ 335.533820][ T31] exit_mmap+0x28e/0xb50 [ 335.538313][ T31] ? uprobe_clear_state+0x20f/0x290 [ 335.543533][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 335.603785][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 335.609489][ T31] ? __pfx_exit_aio+0x10/0x10 [ 335.649120][ T31] ? uprobe_clear_state+0x274/0x290 [ 335.683276][ T31] __mmput+0x118/0x420 [ 335.703752][ T31] exit_mm+0x1da/0x2c0 [ 335.707868][ T31] ? __pfx_exit_mm+0x10/0x10 [ 335.712473][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.763802][ T31] do_exit+0x640/0x22e0 [ 335.768018][ T31] ? do_raw_spin_lock+0x121/0x290 [ 335.773149][ T31] ? __pfx_do_exit+0x10/0x10 [ 335.819905][ T31] ? do_raw_spin_lock+0x121/0x290 [ 335.849168][ T31] do_group_exit+0x21c/0x2d0 [ 335.873795][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.879044][ T31] get_signal+0x1286/0x1340 [ 335.883587][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 335.933790][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.940032][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 335.983744][ T31] exit_to_user_mode_loop+0x75/0x110 [ 335.989086][ T31] do_syscall_64+0x2bd/0x3b0 [ 335.993691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.039922][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.083755][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.088487][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.123809][ T31] RIP: 0033:0x7f47fddb7060 [ 336.128272][ T31] RSP: 002b:00007f47fec62a78 EFLAGS: 00000246 [ 336.163791][ T31] RAX: 0000000000000000 RBX: 00007f47fdfb5fa0 RCX: 00007f47fdd8e929 [ 336.171805][ T31] RDX: 00007f47fec62a80 RSI: 00007f47fec62bb0 RDI: 0000000000000021 [ 336.223825][ T31] RBP: 00007f47fde10b39 R08: 0000000000000000 R09: 0000000000000000 [ 336.231841][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.293769][ T31] R13: 0000000000000000 R14: 00007f47fdfb5fa0 R15: 00007ffee51773e8 [ 336.301810][ T31] [ 336.343793][ T31] INFO: task syz.3.1119:9926 blocked for more than 144 seconds. [ 336.351458][ T31] Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 [ 336.403777][ T31] Blocked by coredump. [ 336.408405][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.463758][ T31] task:syz.3.1119 state:D stack:25352 pid:9926 tgid:9925 ppid:5849 task_flags:0x40054c flags:0x00004004 [ 336.503835][ T31] Call Trace: [ 336.507164][ T31] [ 336.510150][ T31] __schedule+0x16f5/0x4d00 [ 336.573816][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.578726][ T31] ? schedule+0x165/0x360 [ 336.583077][ T31] ? __pfx___schedule+0x10/0x10 [ 336.633834][ T31] ? schedule+0x91/0x360 [ 336.638143][ T31] schedule+0x165/0x360 [ 336.642327][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.693799][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 336.699573][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 336.733816][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 336.740024][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.783780][ T31] ? exit_mmap+0x28e/0xb50 [ 336.788259][ T31] down_write+0x1ab/0x1f0 [ 336.792602][ T31] ? __pfx_down_write+0x10/0x10 [ 336.849490][ T31] exit_mmap+0x28e/0xb50 [ 336.853877][ T31] ? uprobe_clear_state+0x20f/0x290 [ 336.859110][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 336.903771][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 336.909475][ T31] ? __pfx_exit_aio+0x10/0x10 [ 336.943836][ T31] ? uprobe_clear_state+0x274/0x290 [ 336.949089][ T31] __mmput+0x118/0x420 [ 336.953177][ T31] exit_mm+0x1da/0x2c0 [ 337.003926][ T31] ? __pfx_exit_mm+0x10/0x10 [ 337.008579][ T31] ? rcu_is_watching+0x15/0xb0 [ 337.013361][ T31] do_exit+0x640/0x22e0 [ 337.054000][ T31] ? do_raw_spin_lock+0x121/0x290 [ 337.059079][ T31] ? __pfx_do_exit+0x10/0x10 [ 337.093807][ T31] do_group_exit+0x21c/0x2d0 [ 337.098449][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.103667][ T31] get_signal+0x1286/0x1340 [ 337.159664][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 337.174067][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 337.180288][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 337.223996][ T31] exit_to_user_mode_loop+0x75/0x110 [ 337.229334][ T31] do_syscall_64+0x2bd/0x3b0 [ 337.259271][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.273966][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.280178][ T31] ? clear_bhb_loop+0x60/0xb0 [ 337.319775][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.353844][ T31] RIP: 0033:0x7fed6718e929 [ 337.358298][ T31] RSP: 002b:00007fed67fee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 337.393828][ T31] RAX: fffffffffffffe00 RBX: 00007fed673b5fa8 RCX: 00007fed6718e929 [ 337.401837][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed673b5fa8 [ 337.453793][ T31] RBP: 00007fed673b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 337.461808][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fed673b5fac [ 337.523756][ T31] R13: 0000000000000000 R14: 00007fff8beeec60 R15: 00007fff8beeed48 [ 337.531792][ T31] [ 337.565421][ T31] INFO: task syz.1.1120:9930 blocked for more than 145 seconds. [ 337.573093][ T31] Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 [ 337.623770][ T31] Blocked by coredump. [ 337.628396][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.683752][ T31] task:syz.1.1120 state:D stack:27016 pid:9930 tgid:9928 ppid:5835 task_flags:0x40054c flags:0x00004004 [ 337.743760][ T31] Call Trace: [ 337.747134][ T31] [ 337.750083][ T31] __schedule+0x16f5/0x4d00 [ 337.773820][ T31] ? __lock_acquire+0xab9/0xd20 [ 337.778715][ T31] ? schedule+0x165/0x360 [ 337.783062][ T31] ? __pfx___schedule+0x10/0x10 [ 337.833871][ T31] ? schedule+0x91/0x360 [ 337.838176][ T31] schedule+0x165/0x360 [ 337.842352][ T31] schedule_preempt_disabled+0x13/0x30 [ 337.903755][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 337.909527][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 337.943804][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 337.950000][ T31] ? __lock_acquire+0xab9/0xd20 [ 337.993849][ T31] ? exit_mmap+0x28e/0xb50 [ 337.998334][ T31] down_write+0x1ab/0x1f0 [ 338.002676][ T31] ? __pfx_down_write+0x10/0x10 [ 338.053836][ T31] exit_mmap+0x28e/0xb50 [ 338.058125][ T31] ? uprobe_clear_state+0x20f/0x290 [ 338.063346][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 338.113817][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 338.119516][ T31] ? __pfx_exit_aio+0x10/0x10 [ 338.153892][ T31] ? uprobe_clear_state+0x274/0x290 [ 338.159145][ T31] __mmput+0x118/0x420 [ 338.163238][ T31] exit_mm+0x1da/0x2c0 [ 338.203947][ T31] ? __pfx_exit_mm+0x10/0x10 [ 338.208594][ T31] ? rcu_is_watching+0x15/0xb0 [ 338.213383][ T31] do_exit+0x640/0x22e0 [ 338.253956][ T31] ? do_raw_spin_lock+0x121/0x290 [ 338.259030][ T31] ? __pfx_do_exit+0x10/0x10 [ 338.263663][ T31] do_group_exit+0x21c/0x2d0 [ 338.302771][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.314025][ T31] get_signal+0x1286/0x1340 [ 338.318592][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 338.343781][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.349989][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 338.413803][ T31] irqentry_exit_to_user_mode+0x81/0x120 [ 338.419500][ T31] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.463738][ T31] RIP: 0033:0x7fd066b858e7 [ 338.468197][ T31] RSP: 002b:00007fd067a91a48 EFLAGS: 00000206 [ 338.503744][ T31] RAX: 0000000000000312 RBX: 00007fd067a91bb0 RCX: 00007fd066b858e7 [ 338.512004][ T31] RDX: 00007fd067a91a80 RSI: 00007fd067a91bb0 RDI: 0000000000000021 [ 338.563777][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.571795][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 338.633805][ T31] R13: 0000000000000000 R14: 00007fd066db5fa0 R15: 00007fff2247da38 [ 338.641852][ T31] [ 338.673907][ T31] [ 338.673907][ T31] Showing all locks held in the system: [ 338.681653][ T31] 1 lock held by khungtaskd/31: [ 338.733752][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 338.743683][ T31] 2 locks held by getty/5600: [ 338.778456][ T31] #0: ffff8880350aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 338.835828][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 338.873775][ T31] 1 lock held by syz-executor/5824: [ 338.879020][ T31] #0: ffff888032164d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 338.943879][ T31] 1 lock held by syz-executor/5835: [ 338.949112][ T31] #0: ffff8880304c62a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 339.013753][ T31] 1 lock held by syz.2.1118/9924: [ 339.019022][ T31] #0: ffff88807e8fb7a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 339.079000][ T31] 1 lock held by syz.3.1119/9926: [ 339.093906][ T31] #0: ffff88807e8f9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 339.103016][ T31] 1 lock held by syz.1.1120/9930: [ 339.173930][ T31] #0: ffff88807e8fed60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 339.183053][ T31] [ 339.203743][ T31] ============================================= [ 339.203743][ T31] [ 339.212200][ T31] NMI backtrace for cpu 1 [ 339.212221][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 339.212242][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.212253][ T31] Call Trace: [ 339.212260][ T31] [ 339.212268][ T31] dump_stack_lvl+0x189/0x250 [ 339.212296][ T31] ? __wake_up_klogd+0xd9/0x110 [ 339.212318][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.212343][ T31] ? __pfx__printk+0x10/0x10 [ 339.212374][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 339.212399][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 339.212418][ T31] ? _printk+0xcf/0x120 [ 339.212441][ T31] ? __pfx__printk+0x10/0x10 [ 339.212462][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 339.212486][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 339.212511][ T31] watchdog+0xfee/0x1030 [ 339.212536][ T31] ? watchdog+0x1de/0x1030 [ 339.212566][ T31] kthread+0x70e/0x8a0 [ 339.212589][ T31] ? __pfx_watchdog+0x10/0x10 [ 339.212609][ T31] ? __pfx_kthread+0x10/0x10 [ 339.212630][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.212653][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.212675][ T31] ? __pfx_kthread+0x10/0x10 [ 339.212701][ T31] ret_from_fork+0x3fc/0x770 [ 339.212728][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.212756][ T31] ? __switch_to_asm+0x39/0x70 [ 339.212773][ T31] ? __switch_to_asm+0x33/0x70 [ 339.212789][ T31] ? __pfx_kthread+0x10/0x10 [ 339.212809][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.212842][ T31] [ 339.212849][ T31] Sending NMI from CPU 1 to CPUs 0: [ 339.370690][ C0] NMI backtrace for cpu 0 [ 339.370705][ C0] CPU: 0 UID: 0 PID: 9599 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 339.370724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.370733][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 339.370764][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 dc af 7c 00 48 c7 c3 58 0f 9e 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 89 b9 f5 10 74 11 83 e0 04 c1 e8 02 5b [ 339.370777][ C0] RSP: 0018:ffffc900050ff638 EFLAGS: 00000806 [ 339.370791][ C0] RAX: 0000000000000000 RBX: ffff8880b8632f58 RCX: 293f9b1551504900 [ 339.370802][ C0] RDX: 0000000000000000 RSI: ffffffff8be282e0 RDI: ffffffff8be282a0 [ 339.370813][ C0] RBP: ffffffff81729de5 R08: 0000000000000000 R09: 0000000000000000 [ 339.370823][ C0] R10: ffffc900050ff818 R11: ffffffff81acf990 R12: 0000000000000002 [ 339.370834][ C0] R13: ffffffff8e13eda0 R14: ffffffff8dba6c60 R15: dffffc0000000000 [ 339.370845][ C0] FS: 00005555849d3500(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 339.370859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.370869][ C0] CR2: 0000200000000000 CR3: 00000000293fc000 CR4: 00000000003526f0 [ 339.370883][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.370892][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.370901][ C0] Call Trace: [ 339.370913][ C0] [ 339.370920][ C0] lock_acquire+0x5f/0x360 [ 339.370944][ C0] ? unwind_next_frame+0xa5/0x2390 [ 339.370965][ C0] ? __kasan_slab_free+0x62/0x70 [ 339.370979][ C0] ? unwind_next_frame+0xa5/0x2390 [ 339.370999][ C0] unwind_next_frame+0xc2/0x2390 [ 339.371018][ C0] ? unwind_next_frame+0xa5/0x2390 [ 339.371041][ C0] ? unwind_next_frame+0xa5/0x2390 [ 339.371061][ C0] ? kasan_save_free_info+0x46/0x50 [ 339.371081][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 339.371098][ C0] arch_stack_walk+0x11c/0x150 [ 339.371115][ C0] ? __kasan_slab_free+0x62/0x70 [ 339.371131][ C0] stack_trace_save+0x9c/0xe0 [ 339.371146][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 339.371162][ C0] ? __bpf_get_stack+0x9df/0xa60 [ 339.371185][ C0] ? __lock_acquire+0xab9/0xd20 [ 339.371204][ C0] kasan_save_track+0x3e/0x80 [ 339.371223][ C0] ? kasan_save_track+0x3e/0x80 [ 339.371241][ C0] ? kasan_save_free_info+0x46/0x50 [ 339.371257][ C0] ? __kasan_slab_free+0x62/0x70 [ 339.371296][ C0] ? __dequeue_signal+0x487/0x5b0 [ 339.371312][ C0] kasan_save_free_info+0x46/0x50 [ 339.371329][ C0] __kasan_slab_free+0x62/0x70 [ 339.371342][ C0] kmem_cache_free+0x18f/0x400 [ 339.371360][ C0] __dequeue_signal+0x487/0x5b0 [ 339.371379][ C0] dequeue_signal+0x140/0x370 [ 339.371400][ C0] get_signal+0x55f/0x1340 [ 339.371429][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 339.371452][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 339.371477][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 339.371499][ C0] exit_to_user_mode_loop+0x75/0x110 [ 339.371518][ C0] do_syscall_64+0x2bd/0x3b0 [ 339.371533][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.371548][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.371563][ C0] ? clear_bhb_loop+0x60/0xb0 [ 339.371580][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.371594][ C0] RIP: 0033:0x7fe55db907bc [ 339.371608][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 339.371621][ C0] RSP: 002b:00007fffa0763720 EFLAGS: 00000293 [ 339.371632][ C0] RAX: 0000000000000024 RBX: 00007fe55e8e4620 RCX: 00007fe55db907bc [ 339.371643][ C0] RDX: 0000000000000024 RSI: 00007fe55e8e4670 RDI: 0000000000000003 [ 339.371653][ C0] RBP: 0000000000000000 R08: 00007fffa0763774 R09: 000000000000000c [ 339.371662][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 339.371671][ C0] R13: 0000000000000000 R14: 00007fe55e8e4670 R15: 0000000000000000 [ 339.371689][ C0] [ 340.203762][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 340.210652][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 340.222460][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.232522][ T31] Call Trace: [ 340.235804][ T31] [ 340.238743][ T31] dump_stack_lvl+0x99/0x250 [ 340.243349][ T31] ? __asan_memcpy+0x40/0x70 [ 340.247960][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.253186][ T31] ? __pfx__printk+0x10/0x10 [ 340.257803][ T31] panic+0x2db/0x790 [ 340.261727][ T31] ? __pfx_panic+0x10/0x10 [ 340.266159][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 340.271986][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 340.277374][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 340.283552][ T31] watchdog+0x102d/0x1030 [ 340.287901][ T31] ? watchdog+0x1de/0x1030 [ 340.292339][ T31] kthread+0x70e/0x8a0 [ 340.296421][ T31] ? __pfx_watchdog+0x10/0x10 [ 340.301111][ T31] ? __pfx_kthread+0x10/0x10 [ 340.305710][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.310932][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.316149][ T31] ? __pfx_kthread+0x10/0x10 [ 340.320755][ T31] ret_from_fork+0x3fc/0x770 [ 340.325363][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.330493][ T31] ? __switch_to_asm+0x39/0x70 [ 340.335265][ T31] ? __switch_to_asm+0x33/0x70 [ 340.340038][ T31] ? __pfx_kthread+0x10/0x10 [ 340.344638][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.349427][ T31] [ 340.352700][ T31] Kernel Offset: disabled [ 340.357016][ T31] Rebooting in 86400 seconds..