last executing test programs: 2.832920583s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) 2.640457985s ago: executing program 3 (id=13): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in6={0xa, 0x4e21, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={r2}, &(0x7f0000000340)=0x8) 2.498879745s ago: executing program 0 (id=14): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f000000000000"], 0x8) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.405794493s ago: executing program 4 (id=15): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r1, &(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r1, 0x2) shutdown(r3, 0x2) 2.314979109s ago: executing program 1 (id=16): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "000012341234567890123456"}}}}, 0x0) 2.311650598s ago: executing program 0 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1002}) socket$inet(0x2, 0x2, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000600002000100"], 0x12) 2.171602528s ago: executing program 1 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1388, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="45000028000100004084364dac140001ac14000213881388000000000000000006000004"], 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.170775471s ago: executing program 4 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) connect$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/8, 0x8}], 0x1, &(0x7f0000000500)=[@fadd={0x0, 0x114, 0x6, {{}, &(0x7f0000000700), 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1234}}]}, 0x0) close(r1) 2.079912523s ago: executing program 0 (id=20): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.990265319s ago: executing program 2 (id=21): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1.895868021s ago: executing program 2 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@null, 0x0, 'syzkaller0\x00'}) bind$x25(r2, &(0x7f0000000500), 0x12) connect$x25(r2, &(0x7f0000000600), 0x12) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 1.733293625s ago: executing program 1 (id=23): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @local, @void, {@generic={0x40, "020253"}}}, 0x0) 1.634582653s ago: executing program 2 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000004100070101000000000000000401000000000000200001000600060008000000100007000000000000000000000008000d0000001400020010000c000900090073797a3000000000"], 0x4c}}, 0x0) 1.581029488s ago: executing program 3 (id=25): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000100)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r4, &(0x7f0000000200)=@in={0x2, 0x1f90, @loopback}, 0x10) accept(r3, 0x0, 0x0) 1.447608884s ago: executing program 2 (id=26): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000060)={0x2, 0x4e21, @remote}, 0x10) shutdown(r0, 0x1) shutdown(r1, 0x1) 1.365379583s ago: executing program 3 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000080045000028123420014011000001010101020202020000000000000000"], 0x20) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000080045000028123520014011000001010102020202020000000000000000"], 0x20) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080045000028123620014011000001010103020202020000000000000000"], 0x20) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0000080045000028123720014011000001010104020202020000000000000000"], 0x20) 1.133880663s ago: executing program 0 (id=28): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge0\x00') ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000300)={'dummy0\x00', @ifru_hwaddr=@random="001122334455"}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x2}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x3}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x4}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x5}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x6}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x7}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x8}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'bridge0\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000280)={'dummy0\x00', @ifru_flags=0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000400)="0c01000013000101010000000000000007000000020000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400020000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) write(r1, &(0x7f0000000600)="0c01000013000101010000000000000007000000030000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400030000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) write(r1, &(0x7f0000000800)="0c01000013000101010000000000000007000000040000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400040000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) write(r1, &(0x7f0000000a00)="0c01000013000101010000000000000007000000050000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400050000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) write(r1, &(0x7f0000000c00)="0c01000013000101010000000000000007000000060000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400060000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) write(r1, &(0x7f0000000e00)="0c01000013000101010000000000000007000000070000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400070000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) write(r1, &(0x7f0000001000)="0c01000013000101010000000000000007000000080000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400080000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000000800050001000000050006000100000008000700010000000500080001000000", 0x10c) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.132697261s ago: executing program 2 (id=29): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101005, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101006, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101006, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101007, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101007, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101008, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101008, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 957.566421ms ago: executing program 3 (id=30): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0xfffffffffffffffc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0xfffffffffffffffc) 718.239529ms ago: executing program 3 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c) 709.295652ms ago: executing program 1 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0xa000002}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="4500003c00012000400100000a0000010a0000020800f7c50001000100"/58], 0x3c) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500003c00022000400100000a0000030a0000020800f7c50001000100"/58], 0x3c) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="4500003c00032000400100000a0000040a0000020800f7c50001000100"/58], 0x3c) 554.9153ms ago: executing program 2 (id=33): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x2}}, 0xf0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x3, 0x2}, 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x1}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 488.146143ms ago: executing program 1 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x1, 'syzkaller0\x00'}) bind$x25(r2, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) connect$x25(r2, &(0x7f0000000500)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100010f0f"], 0x5) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 354.417921ms ago: executing program 3 (id=35): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x48, r2, 0x1, 0x0, 0x0, {0x1}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000600)=@in={0x2, 0x2382, @empty}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000700)={0x2, 0x2382, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) close(r5) close(r4) close(r3) 266.145581ms ago: executing program 0 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@local, 0x1234, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'sha1\x00'}, 0xa0, 0x60, "0123456789012345678901234567890123456789"}}]}, 0x150}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x20, 0x33, 0x40, @local, @local, [], '\x00'/28}}}}}}}, 0x0) 31.335063ms ago: executing program 0 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 1 (id=38): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b701000000000000b702000000000000b70300000000000085000000330000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 77.257782][ T5604] cgroup: Unknown subsys name 'net' [ 77.355000][ T5604] cgroup: Unknown subsys name 'cpuset' [ 77.364255][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.084443][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.173875][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.182940][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.192400][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.194725][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.207182][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.215608][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.220891][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.233695][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.244514][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.251805][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.263160][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.270279][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.283407][ T4936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.293805][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.306856][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.330968][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.339709][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.347313][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.356265][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.364602][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.390306][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.404095][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.412952][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.421737][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.431407][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.270187][ T5621] Bluetooth: hci0: command tx timeout [ 84.277387][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.284957][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.292539][ T5616] bridge_slave_0: entered allmulticast mode [ 84.300248][ T5616] bridge_slave_0: entered promiscuous mode [ 84.349300][ T5621] Bluetooth: hci2: command tx timeout [ 84.358579][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.359585][ T5621] Bluetooth: hci1: command tx timeout [ 84.365893][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.366300][ T5616] bridge_slave_1: entered allmulticast mode [ 84.386289][ T5616] bridge_slave_1: entered promiscuous mode [ 84.404338][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.411619][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.418809][ T5629] bridge_slave_0: entered allmulticast mode [ 84.426635][ T5629] bridge_slave_0: entered promiscuous mode [ 84.439283][ T5621] Bluetooth: hci3: command tx timeout [ 84.491601][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.498898][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.506179][ T5629] bridge_slave_1: entered allmulticast mode [ 84.512267][ T5621] Bluetooth: hci4: command tx timeout [ 84.517765][ T5629] bridge_slave_1: entered promiscuous mode [ 84.593550][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.600856][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.608081][ T5631] bridge_slave_0: entered allmulticast mode [ 84.615806][ T5631] bridge_slave_0: entered promiscuous mode [ 84.626594][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.646555][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.668151][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.675470][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.683507][ T5631] bridge_slave_1: entered allmulticast mode [ 84.691006][ T5631] bridge_slave_1: entered promiscuous mode [ 84.700358][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.723881][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.733298][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.740627][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.748088][ T5617] bridge_slave_0: entered allmulticast mode [ 84.756293][ T5617] bridge_slave_0: entered promiscuous mode [ 84.810152][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.817343][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.824810][ T5617] bridge_slave_1: entered allmulticast mode [ 84.832346][ T5617] bridge_slave_1: entered promiscuous mode [ 84.860906][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.868158][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.875815][ T5624] bridge_slave_0: entered allmulticast mode [ 84.883399][ T5624] bridge_slave_0: entered promiscuous mode [ 84.915419][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.926661][ T5616] team0: Port device team_slave_0 added [ 84.932873][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.940215][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.947362][ T5624] bridge_slave_1: entered allmulticast mode [ 84.954923][ T5624] bridge_slave_1: entered promiscuous mode [ 84.964651][ T5629] team0: Port device team_slave_0 added [ 84.983965][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.996232][ T5616] team0: Port device team_slave_1 added [ 85.015264][ T5629] team0: Port device team_slave_1 added [ 85.023437][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.078753][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.113296][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.146552][ T5631] team0: Port device team_slave_0 added [ 85.154517][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.163277][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.189825][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.203918][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.213876][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.221052][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.247040][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.272414][ T5631] team0: Port device team_slave_1 added [ 85.278650][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.285912][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.312267][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.334682][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.341877][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.367862][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.381197][ T5617] team0: Port device team_slave_0 added [ 85.426222][ T5617] team0: Port device team_slave_1 added [ 85.444940][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.452077][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.478143][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.491754][ T5624] team0: Port device team_slave_0 added [ 85.500758][ T5624] team0: Port device team_slave_1 added [ 85.529115][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.536666][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.562651][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.604191][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.611565][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.637582][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.679875][ T5629] hsr_slave_0: entered promiscuous mode [ 85.686617][ T5629] hsr_slave_1: entered promiscuous mode [ 85.718704][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.725771][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.752188][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.775991][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.783217][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.809214][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.826536][ T5616] hsr_slave_0: entered promiscuous mode [ 85.832952][ T5616] hsr_slave_1: entered promiscuous mode [ 85.839072][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.844967][ T5616] Cannot create hsr debugfs directory [ 85.871381][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.878402][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.904691][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.941326][ T5631] hsr_slave_0: entered promiscuous mode [ 85.948034][ T5631] hsr_slave_1: entered promiscuous mode [ 85.954500][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 85.960286][ T5631] Cannot create hsr debugfs directory [ 86.081494][ T5617] hsr_slave_0: entered promiscuous mode [ 86.088035][ T5617] hsr_slave_1: entered promiscuous mode [ 86.094637][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.100627][ T5617] Cannot create hsr debugfs directory [ 86.120071][ T5624] hsr_slave_0: entered promiscuous mode [ 86.126682][ T5624] hsr_slave_1: entered promiscuous mode [ 86.132999][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 86.138742][ T5624] Cannot create hsr debugfs directory [ 86.350629][ T5621] Bluetooth: hci0: command tx timeout [ 86.430179][ T5621] Bluetooth: hci1: command tx timeout [ 86.448326][ T5621] Bluetooth: hci2: command tx timeout [ 86.509797][ T5621] Bluetooth: hci3: command tx timeout [ 86.590465][ T5621] Bluetooth: hci4: command tx timeout [ 86.727574][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.752097][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.770400][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.784442][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.799832][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.811466][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.833425][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.848239][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.933093][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.945063][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.955850][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.966459][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.980736][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.993266][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.013387][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.026929][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.176314][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.192135][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.222683][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.234674][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.243559][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.253733][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.261920][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.273452][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.352390][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.393138][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.404265][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.412549][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.424022][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.432726][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.443580][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.460505][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.471910][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.520372][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.568757][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.576296][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.606187][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.613514][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.652602][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.663420][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.671652][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.682640][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.691470][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.701836][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.711137][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.721394][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.767164][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.854932][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.896221][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.903774][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.954821][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.964401][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.971698][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.087941][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.129755][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.138200][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.145396][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.180070][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.187292][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.243777][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.255571][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.338079][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.345314][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.383196][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.390502][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.419853][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.440160][ T5621] Bluetooth: hci0: command tx timeout [ 88.454704][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.461920][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.511638][ T5621] Bluetooth: hci2: command tx timeout [ 88.517211][ T5622] Bluetooth: hci1: command tx timeout [ 88.535533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.542847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.593661][ T5622] Bluetooth: hci3: command tx timeout [ 88.679951][ T5622] Bluetooth: hci4: command tx timeout [ 89.075746][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.291556][ T5629] veth0_vlan: entered promiscuous mode [ 89.366814][ T5629] veth1_vlan: entered promiscuous mode [ 89.503457][ T5629] veth0_macvtap: entered promiscuous mode [ 89.540617][ T5629] veth1_macvtap: entered promiscuous mode [ 89.596934][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.640770][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.656943][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.707610][ T1117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.733862][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.768212][ T1117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.792937][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.879582][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.925061][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.065462][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.093554][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.152278][ T5616] veth0_vlan: entered promiscuous mode [ 90.222924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.238375][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.245713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.268303][ T5616] veth1_vlan: entered promiscuous mode [ 90.314074][ T5631] veth0_vlan: entered promiscuous mode [ 90.375080][ T5631] veth1_vlan: entered promiscuous mode [ 90.402220][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.509318][ T5622] Bluetooth: hci0: command tx timeout [ 90.535289][ T5815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.546318][ T5616] veth0_macvtap: entered promiscuous mode [ 90.582599][ T5631] veth0_macvtap: entered promiscuous mode [ 90.589963][ T5622] Bluetooth: hci1: command tx timeout [ 90.595856][ T5621] Bluetooth: hci2: command tx timeout [ 90.615250][ T5617] veth0_vlan: entered promiscuous mode [ 90.629857][ T5624] veth0_vlan: entered promiscuous mode [ 90.647559][ T5631] veth1_macvtap: entered promiscuous mode [ 90.660814][ T5616] veth1_macvtap: entered promiscuous mode [ 90.669701][ T5622] Bluetooth: hci3: command tx timeout [ 90.679725][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.702431][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.712748][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.718377][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.731307][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.733479][ T5617] veth1_vlan: entered promiscuous mode [ 90.745093][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.756862][ T5622] Bluetooth: hci4: command tx timeout [ 90.764179][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.774405][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.780196][ T5624] veth1_vlan: entered promiscuous mode [ 90.788699][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.798546][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.812402][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.815904][ T5817] ip_tables: iptables: counters copy to user failed while replacing table [ 90.838310][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.879363][ T1117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.891701][ T1117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.921075][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.953088][ T1117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.986109][ T1117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.998200][ T1117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.011364][ T1117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036153][ T1117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045546][ T1117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.065475][ T5617] veth0_macvtap: entered promiscuous mode [ 91.139543][ T5617] veth1_macvtap: entered promiscuous mode [ 91.152366][ T5624] veth0_macvtap: entered promiscuous mode [ 91.172132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.181076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.195400][ T5624] veth1_macvtap: entered promiscuous mode [ 91.251922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.262449][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.273246][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.284446][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.334612][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.342765][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.352869][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.376940][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.386466][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.403469][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.418299][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.419677][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.443664][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.455147][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.481003][ T1117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.506077][ T1117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536354][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.545879][ T1117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.678992][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.694549][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.775905][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.806216][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.895139][ T1964] cfg80211: failed to load regulatory.db [ 91.910420][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.930922][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.027288][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.041111][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.522722][ T5846] bridge0: port 3(syz_tun) entered blocking state [ 92.549427][ T5846] bridge0: port 3(syz_tun) entered disabled state [ 92.567245][ T5846] syz_tun: entered allmulticast mode [ 92.582241][ T5846] syz_tun: entered promiscuous mode [ 92.603124][ T5846] bridge0: port 3(syz_tun) entered blocking state [ 92.610700][ T5846] bridge0: port 3(syz_tun) entered listening state [ 92.741334][ T5860] Zero length message leads to an empty skb [ 93.033207][ T5871] rdma_rxe: rxe_newlink: failed to add lo [ 93.093015][ T5873] rdma_rxe: rxe_newlink: failed to add lo [ 93.543420][ T5886] smc: net device lo applied user defined pnetid SYZ0 [ 93.651778][ T5866] infiniband syz0: set active [ 93.657090][ T5866] infiniband syz0: added veth0 [ 93.692576][ T5866] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 93.708394][ T5866] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 93.727587][ T5866] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 93.816896][ T5866] RDS/IB: syz0: added [ 93.822140][ T5866] smc: adding ib device syz0 with port count 1 [ 93.829043][ T5866] smc: ib device syz0 port 1 has no pnetid [ 94.005433][ T5896] syz_tun: entered allmulticast mode [ 94.020352][ T5895] bridge0: port 3(gretap0) entered blocking state [ 94.029055][ T5895] bridge0: port 3(gretap0) entered disabled state [ 94.038147][ T5895] gretap0: entered allmulticast mode [ 94.049716][ T5895] gretap0: entered promiscuous mode [ 94.055834][ T5895] bridge0: port 3(gretap0) entered blocking state [ 94.063095][ T5895] bridge0: port 3(gretap0) entered forwarding state [ 94.098297][ T5897] bridge0: port 4(erspan0) entered blocking state [ 94.117981][ T5897] bridge0: port 4(erspan0) entered disabled state [ 94.199746][ T5897] erspan0: entered allmulticast mode [ 94.232035][ T5897] erspan0: entered promiscuous mode [ 94.259687][ T5897] bridge0: port 4(erspan0) entered blocking state [ 94.266338][ T5897] bridge0: port 4(erspan0) entered forwarding state [ 94.367186][ T5894] syz_tun: left allmulticast mode [ 94.457791][ T5895] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 94.486503][ T5895] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 182.959572][ C0] bridge0: port 3(syz_tun) entered learning state [ 200.129109][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 200.136183][ C1] rcu: (detected by 1, t=10502 jiffies, g=15845, q=4206 ncpus=2) [ 200.144009][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 1722 (4294957130-4294955408), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 200.157325][ C1] rcu: rcu_preempt kthread starved for 1722 jiffies! g15845 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 200.168538][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 200.178527][ C1] rcu: RCU grace-period kthread stack dump: [ 200.184439][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 200.197984][ C1] Call Trace: [ 200.201289][ C1] [ 200.204253][ C1] __schedule+0x17d9/0x56c0 [ 200.208817][ C1] ? __lock_acquire+0x683/0x2cf0 [ 200.213820][ C1] ? __pfx___schedule+0x10/0x10 [ 200.218709][ C1] ? schedule+0x90/0x2b0 [ 200.222991][ C1] schedule+0x164/0x2b0 [ 200.227181][ C1] schedule_timeout+0x152/0x2c0 [ 200.232075][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 200.237495][ C1] ? __pfx_process_timeout+0x10/0x10 [ 200.242816][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 200.248650][ C1] ? prepare_to_swait_event+0x322/0x350 [ 200.254239][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 200.259149][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 200.265344][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 200.270664][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 200.275894][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 200.281735][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 200.286364][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 200.291597][ C1] ? __kthread_parkme+0x71/0x1f0 [ 200.296569][ C1] ? __kthread_parkme+0x196/0x1f0 [ 200.301640][ C1] kthread+0x388/0x470 [ 200.305777][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 200.311010][ C1] ? __pfx_kthread+0x10/0x10 [ 200.315642][ C1] ret_from_fork+0x514/0xb70 [ 200.320276][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 200.325425][ C1] ? __switch_to+0xc89/0x1420 [ 200.330140][ C1] ? __pfx_kthread+0x10/0x10 [ 200.334773][ C1] ret_from_fork_asm+0x1a/0x30 [ 200.339579][ C1] [ 200.342630][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 200.348982][ C1] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 200.358459][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 200.368534][ C1] RIP: 0010:unwind_next_frame+0xb64/0x2550 [ 200.374466][ C1] Code: 00 74 09 e8 4e 07 bd 00 4c 8b 04 24 4d 8b 7e 08 49 8d 7e 10 49 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 04 00 <74> 09 e8 25 07 bd 00 4c 8b 04 24 49 8d 50 f8 4d 8b 6e 10 48 b8 00 [ 200.394108][ C1] RSP: 0018:ffffc90000a08840 EFLAGS: 00000246 [ 200.400206][ C1] RAX: dffffc0000000000 RBX: 1ffff9200014111e RCX: ffffffff90709c60 [ 200.408207][ C1] RDX: ffffffff90ee8abc RSI: 0000000000000002 RDI: ffffc90000a088f8 [ 200.416210][ C1] RBP: 1ffffffff21dd157 R08: ffffc900037c7660 R09: 0000000000000000 [ 200.424210][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 1ffff9200014111f [ 200.432207][ C1] R13: ffffffff90ee8ab8 R14: ffffc90000a088e8 R15: ffffc900037c0000 [ 200.440207][ C1] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 200.449162][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.455767][ C1] CR2: 00007fbb593ed2f8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 200.463770][ C1] Call Trace: [ 200.467077][ C1] [ 200.469955][ C1] ? flush_tlb_mm_range+0x5c4/0x1090 [ 200.475311][ C1] ? unwind_next_frame+0x8f/0x2550 [ 200.480458][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.486667][ C1] arch_stack_walk+0x11b/0x150 [ 200.491470][ C1] ? flush_tlb_mm_range+0x5c4/0x1090 [ 200.496801][ C1] stack_trace_save+0xa9/0x100 [ 200.501615][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 200.507038][ C1] ? __kfree_skb+0x5d/0x210 [ 200.511587][ C1] ? __lock_acquire+0x683/0x2cf0 [ 200.516568][ C1] kasan_save_track+0x3e/0x80 [ 200.521294][ C1] ? kasan_save_track+0x3e/0x80 [ 200.526176][ C1] ? kasan_save_free_info+0x40/0x50 [ 200.531424][ C1] ? __kasan_slab_free+0x5c/0x80 [ 200.536403][ C1] ? kmem_cache_free+0x182/0x650 [ 200.541381][ C1] ? mac80211_hwsim_beacon_tx+0x396/0x820 [ 200.547135][ C1] ? __iterate_interfaces+0x2af/0x5a0 [ 200.552534][ C1] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 200.559756][ C1] ? mac80211_hwsim_beacon+0xaf/0x240 [ 200.565152][ C1] ? __hrtimer_run_queues+0x3bc/0xa10 [ 200.570553][ C1] ? hrtimer_run_softirq+0x17a/0x240 [ 200.575865][ C1] ? handle_softirqs+0x225/0x840 [ 200.580837][ C1] ? __irq_exit_rcu+0xca/0x220 [ 200.585653][ C1] ? irq_exit_rcu+0x9/0x30 [ 200.590111][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 200.595951][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.602221][ C1] ? smp_call_function_many_cond+0x10b0/0x14b0 [ 200.608432][ C1] ? on_each_cpu_cond_mask+0x3f/0x80 [ 200.613841][ C1] ? flush_tlb_mm_range+0x5c4/0x1090 [ 200.619199][ C1] ? mac80211_hwsim_beacon_tx+0x396/0x820 [ 200.624951][ C1] kasan_save_free_info+0x40/0x50 [ 200.630011][ C1] __kasan_slab_free+0x5c/0x80 [ 200.634813][ C1] kmem_cache_free+0x182/0x650 [ 200.639627][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 200.645207][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 200.652437][ C1] __iterate_interfaces+0x2af/0x5a0 [ 200.657666][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 200.663765][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 200.670992][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 200.677099][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 200.684157][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 200.690013][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 200.695238][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 200.701071][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 200.706325][ C1] hrtimer_run_softirq+0x17a/0x240 [ 200.711470][ C1] handle_softirqs+0x225/0x840 [ 200.716270][ C1] ? __irq_exit_rcu+0xca/0x220 [ 200.721072][ C1] __irq_exit_rcu+0xca/0x220 [ 200.725701][ C1] irq_exit_rcu+0x9/0x30 [ 200.729975][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 200.735647][ C1] [ 200.738613][ C1] [ 200.741565][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.747571][ C1] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 200.754372][ C1] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1e 0c [ 200.774006][ C1] RSP: 0018:ffffc900037c7460 EFLAGS: 00000293 [ 200.780108][ C1] RAX: ffffffff81bae317 RBX: dffffc0000000000 RCX: ffff888032585d00 [ 200.788105][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 200.796103][ C1] RBP: ffffc900037c7588 R08: ffffffff90578f37 R09: 1ffffffff20af1e6 [ 200.804102][ C1] R10: dffffc0000000000 R11: fffffbfff20af1e7 R12: 1ffff110170c85fd [ 200.812101][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 200.820107][ C1] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 200.826305][ C1] ? smp_call_function_many_cond+0x8b1/0x14b0 [ 200.832413][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 200.837656][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 200.844027][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 200.849262][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 200.854415][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 200.859576][ C1] ? __lock_acquire+0x683/0x2cf0 [ 200.864555][ C1] tlb_flush_mmu+0x1af/0xa30 [ 200.869195][ C1] tlb_finish_mmu+0xf4/0x220 [ 200.873822][ C1] free_ldt_pgtables+0x192/0x360 [ 200.878799][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 200.884302][ C1] ? down_read+0x2be/0x330 [ 200.888759][ C1] exit_mmap+0x1bf/0x9f0 [ 200.893040][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 200.897868][ C1] ? __pfx_exit_aio+0x10/0x10 [ 200.902592][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 200.908263][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 200.913558][ C1] __mmput+0x118/0x420 [ 200.917690][ C1] exit_mm+0x221/0x2d0 [ 200.921824][ C1] do_exit+0x6cd/0x2360 [ 200.926025][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 200.931258][ C1] ? __pfx_do_exit+0x10/0x10 [ 200.935900][ C1] do_group_exit+0x22d/0x2f0 [ 200.940519][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 200.945753][ C1] get_signal+0x121b/0x12c0 [ 200.950331][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 200.955919][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 200.961229][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.966456][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 200.972665][ C1] exit_to_user_mode_loop+0x104/0x730 [ 200.978075][ C1] ? rcu_is_watching+0x15/0xb0 [ 200.982892][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.988994][ C1] do_syscall_64+0x353/0x580 [ 200.993634][ C1] ? trace_irq_disable+0x3b/0x140 [ 200.998698][ C1] ? clear_bhb_loop+0x40/0x90 [ 201.003411][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.009330][ C1] RIP: 0033:0x7fb02ef59017 [ 201.013781][ C1] Code: Unable to access opcode bytes at 0x7fb02ef58fed. [ 201.020817][ C1] RSP: 002b:00007ffc792285c0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 201.029259][ C1] RAX: fffffffffffffe00 RBX: 000055555fa8e500 RCX: 00007fb02ef59017 [ 201.037260][ C1] RDX: 0000000040000000 RSI: 00007ffc7922861c RDI: ffffffffffffffff [ 201.045254][ C1] RBP: 00007ffc7922861c R08: 0000000000000000 R09: 0000000000000000 [ 201.053252][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 201.061252][ C1] R13: 0000000000000003 R14: 00007ffc79228878 R15: 0000000000000000 [ 201.069265][ C1]