last executing test programs: 59.896113173s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00000000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 58.677298825s ago: executing program 2 (id=903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x7a13c1d09ce7de68, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x5, 0x401}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xaa, 0x8, 0x2, 0x65, @remote, @local, 0x10, 0x80, 0x80000001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004001}, 0x11) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001b40)=""/70, 0x46}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1}}, 0x2e) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="e54bea5e6143f5c1cd28c3466950f565b0dabd2ff1a2efdb2b75a9b5d9042c7b6c55af4b7186bee7501ef015ac6c11", 0x2f}, {&(0x7f00000000c0)="4776a9c6a372aa80687afd45c40751de82f449d9ad13b9a02720cf7191c211acf386a69f6cb144019e11df65cf359a950f23320a9fb296bb3700dba93a969280875b3a2a46cac2469771f7fc132cc8aa873ca87f9d36c6f40b49277c30940f67ed0f069947d1702c68dd8030b9364e7ef1b88f5e743521de557213f5353925abd668e2e971afa86dcbc0361f9b9d27aba9b06a3fa77490a2b0ea77b90de66abd75443fba2913b66e9091ed7321dd62f7676eef90885649b456e9936442ca1a0701b8efb1069e6290780230", 0xcb}], 0x2}}], 0x1, 0x0) sendto$l2tp6(r3, &(0x7f0000000040), 0x0, 0x14, &(0x7f0000000080)={0xa, 0x0, 0xf6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16f1, 0x2}, 0x20) 52.332624556s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00000000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 51.388537663s ago: executing program 2 (id=903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x7a13c1d09ce7de68, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x5, 0x401}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xaa, 0x8, 0x2, 0x65, @remote, @local, 0x10, 0x80, 0x80000001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004001}, 0x11) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001b40)=""/70, 0x46}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1}}, 0x2e) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="e54bea5e6143f5c1cd28c3466950f565b0dabd2ff1a2efdb2b75a9b5d9042c7b6c55af4b7186bee7501ef015ac6c11", 0x2f}, {&(0x7f00000000c0)="4776a9c6a372aa80687afd45c40751de82f449d9ad13b9a02720cf7191c211acf386a69f6cb144019e11df65cf359a950f23320a9fb296bb3700dba93a969280875b3a2a46cac2469771f7fc132cc8aa873ca87f9d36c6f40b49277c30940f67ed0f069947d1702c68dd8030b9364e7ef1b88f5e743521de557213f5353925abd668e2e971afa86dcbc0361f9b9d27aba9b06a3fa77490a2b0ea77b90de66abd75443fba2913b66e9091ed7321dd62f7676eef90885649b456e9936442ca1a0701b8efb1069e6290780230", 0xcb}], 0x2}}], 0x1, 0x0) sendto$l2tp6(r3, &(0x7f0000000040), 0x0, 0x14, &(0x7f0000000080)={0xa, 0x0, 0xf6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16f1, 0x2}, 0x20) 44.276262702s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00000000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 43.275474327s ago: executing program 2 (id=903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x7a13c1d09ce7de68, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x5, 0x401}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xaa, 0x8, 0x2, 0x65, @remote, @local, 0x10, 0x80, 0x80000001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004001}, 0x11) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001b40)=""/70, 0x46}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1}}, 0x2e) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="e54bea5e6143f5c1cd28c3466950f565b0dabd2ff1a2efdb2b75a9b5d9042c7b6c55af4b7186bee7501ef015ac6c11", 0x2f}, {&(0x7f00000000c0)="4776a9c6a372aa80687afd45c40751de82f449d9ad13b9a02720cf7191c211acf386a69f6cb144019e11df65cf359a950f23320a9fb296bb3700dba93a969280875b3a2a46cac2469771f7fc132cc8aa873ca87f9d36c6f40b49277c30940f67ed0f069947d1702c68dd8030b9364e7ef1b88f5e743521de557213f5353925abd668e2e971afa86dcbc0361f9b9d27aba9b06a3fa77490a2b0ea77b90de66abd75443fba2913b66e9091ed7321dd62f7676eef90885649b456e9936442ca1a0701b8efb1069e6290780230", 0xcb}], 0x2}}], 0x1, 0x0) sendto$l2tp6(r3, &(0x7f0000000040), 0x0, 0x14, &(0x7f0000000080)={0xa, 0x0, 0xf6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16f1, 0x2}, 0x20) 33.832922023s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00000000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 32.724817467s ago: executing program 2 (id=903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x7a13c1d09ce7de68, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x5, 0x401}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xaa, 0x8, 0x2, 0x65, @remote, @local, 0x10, 0x80, 0x80000001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004001}, 0x11) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001b40)=""/70, 0x46}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1}}, 0x2e) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="e54bea5e6143f5c1cd28c3466950f565b0dabd2ff1a2efdb2b75a9b5d9042c7b6c55af4b7186bee7501ef015ac6c11", 0x2f}, {&(0x7f00000000c0)="4776a9c6a372aa80687afd45c40751de82f449d9ad13b9a02720cf7191c211acf386a69f6cb144019e11df65cf359a950f23320a9fb296bb3700dba93a969280875b3a2a46cac2469771f7fc132cc8aa873ca87f9d36c6f40b49277c30940f67ed0f069947d1702c68dd8030b9364e7ef1b88f5e743521de557213f5353925abd668e2e971afa86dcbc0361f9b9d27aba9b06a3fa77490a2b0ea77b90de66abd75443fba2913b66e9091ed7321dd62f7676eef90885649b456e9936442ca1a0701b8efb1069e6290780230", 0xcb}], 0x2}}], 0x1, 0x0) sendto$l2tp6(r3, &(0x7f0000000040), 0x0, 0x14, &(0x7f0000000080)={0xa, 0x0, 0xf6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16f1, 0x2}, 0x20) 26.985865197s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00000000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 25.526891033s ago: executing program 2 (id=903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x7a13c1d09ce7de68, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x5, 0x401}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xaa, 0x8, 0x2, 0x65, @remote, @local, 0x10, 0x80, 0x80000001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004001}, 0x11) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001b40)=""/70, 0x46}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1}}, 0x2e) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="e54bea5e6143f5c1cd28c3466950f565b0dabd2ff1a2efdb2b75a9b5d9042c7b6c55af4b7186bee7501ef015ac6c11", 0x2f}, {&(0x7f00000000c0)="4776a9c6a372aa80687afd45c40751de82f449d9ad13b9a02720cf7191c211acf386a69f6cb144019e11df65cf359a950f23320a9fb296bb3700dba93a969280875b3a2a46cac2469771f7fc132cc8aa873ca87f9d36c6f40b49277c30940f67ed0f069947d1702c68dd8030b9364e7ef1b88f5e743521de557213f5353925abd668e2e971afa86dcbc0361f9b9d27aba9b06a3fa77490a2b0ea77b90de66abd75443fba2913b66e9091ed7321dd62f7676eef90885649b456e9936442ca1a0701b8efb1069e6290780230", 0xcb}], 0x2}}], 0x1, 0x0) sendto$l2tp6(r3, &(0x7f0000000040), 0x0, 0x14, &(0x7f0000000080)={0xa, 0x0, 0xf6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16f1, 0x2}, 0x20) 20.823763957s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00000000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 18.694711564s ago: executing program 2 (id=903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x7a13c1d09ce7de68, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x5, 0x401}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xaa, 0x8, 0x2, 0x65, @remote, @local, 0x10, 0x80, 0x80000001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004001}, 0x11) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001b40)=""/70, 0x46}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1}}, 0x2e) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="e54bea5e6143f5c1cd28c3466950f565b0dabd2ff1a2efdb2b75a9b5d9042c7b6c55af4b7186bee7501ef015ac6c11", 0x2f}, {&(0x7f00000000c0)="4776a9c6a372aa80687afd45c40751de82f449d9ad13b9a02720cf7191c211acf386a69f6cb144019e11df65cf359a950f23320a9fb296bb3700dba93a969280875b3a2a46cac2469771f7fc132cc8aa873ca87f9d36c6f40b49277c30940f67ed0f069947d1702c68dd8030b9364e7ef1b88f5e743521de557213f5353925abd668e2e971afa86dcbc0361f9b9d27aba9b06a3fa77490a2b0ea77b90de66abd75443fba2913b66e9091ed7321dd62f7676eef90885649b456e9936442ca1a0701b8efb1069e6290780230", 0xcb}], 0x2}}], 0x1, 0x0) sendto$l2tp6(r3, &(0x7f0000000040), 0x0, 0x14, &(0x7f0000000080)={0xa, 0x0, 0xf6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16f1, 0x2}, 0x20) 17.522850754s ago: executing program 1 (id=1682): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000500), 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) 17.360640181s ago: executing program 1 (id=1684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) accept(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) unshare(0x24020400) 16.79765598s ago: executing program 0 (id=1691): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) close(r7) (async, rerun: 32) r8 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {}, {0xffff, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x6, 0x8001, 0x80000001, 0x3}, {0x3, 0x2, 0x1, 0xd}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x94}}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, 0x0, 0x0) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="100025bd7000ffb0b8250100ddeff4c176b0efead25bb0bb4ccf2645"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) (async, rerun: 64) gettid() (rerun: 64) 16.794429569s ago: executing program 4 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x4, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="71578ef38f7a353566cf2d09c2ad41a6f3c99da03a386da5bb04c4c1d393b0883edf7c81e554df59eebd7f2758e3393456378d23fff3c801c8bbb07544c8ba88218b78c0ee072c", 0x47, 0x8000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, 0x401}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000000c0)="71578ef38f7a353566cf2d09c2ad41a6f3c99da03a386da5bb04c4c1d393b0883edf7c81e554df59eebd7f2758e3393456378d23fff3c801c8bbb07544c8ba88218b78c0ee072c", 0x47, 0x8000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, 0x401}, 0x1c) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="9782a2c89a258972efddf1042dd4d9b36aa2b4e6458dca5154a5c054c5de597db22c790c7103a2f71c791c7cfd6cace381814a22dd76f387f8127d2312cf9f", 0x3f}, {&(0x7f0000000200)="e9c6957631b25a3c1e99cf9c72e0decf7bb22a314d098c3fd4d6748c117cd86815fadc71f19bcf284343e3dfd7f21aa881f9bbaddffda19417ab525943943c243884ae551a2b0b18b8cd4156ffb6327aa651f7c07b37101ce624051c17f0349921def759813fc3fbb0b389d87ea5592c6fd92c8f3d1d129b0cbd8e0c77a0dcc9d142ee74fd532c7968af221c8bcdb06f5ca053e750b4b224ef61ad44ae5d38cbcd6b43695728311f467306f13036aa2078ca705eef551bfdc197c5ae85604241cf58e55470f0cd1f1ee047644c85200e7a28f088885f7902d30217ad568c5be976fb44be5e27c0", 0xe7}, {&(0x7f0000000300)="f1a7e268e70899ede41b5b4bf50d0238170bcecc716180ae447f4cc9f2c96ba1be97ce75e10e9b44ed792e8cb80f509a64d4bea05e3c929e1afefbcebf354849bd57ec96d33165ebd6d2e74a932a26179a560d700c202ff5d7b5653d556d525c8151ab724f4c556e266026f9", 0x6c}, {&(0x7f0000000380)="af4a0588c0f656703761c9bb46ac396248111125209aaa6ab97c2148e3c310072219f693f61a0bc343754c08e691b799b996c9266914233b28d1e104778861df38dc2bde380e5762263ef422892158e0f4256e17420dc00aace7c54eac088a0e04f22d49136fdf77b058945ee31e1cc67c483af34d1bca625ad0a542781c2383a421fe21b33b69a224871274020f2de949", 0x91}, {&(0x7f0000000440)="931055a215921c2a1aa97a4ffa84ff3914392aef38e9ce1c3fa1037f19e89a8a55cc396c650130c5aa58a101dcb334d666f783d6356977ec1d69aa137d6e3d8728421323d82be550507380890e2716d49ec34d3ed7ee79ca03c4afa6238447398ef156430c6bca3d5d4fd390642b21aae5593813ebe4581281369107614cbce5669071099a69afd34786810fd7d4238efe89afa4472a6ebc180b0653eb02f0e8ae9f9c047ff0544aaa7ba863eb12da5d628d4da8e97eeb0c0f8f412f218edce211b2b4a859e7ba2c32a5087c", 0xcc}, {&(0x7f0000000540)="5f4cdb2f9f0106690511a8b83d97dc71d2a23fdeb8a33f95b1707e2ad95489bfdbd017ec0c51cfcdf86ff185d2a6c0accbd2229809f60cd8c62626ff", 0x3c}, {&(0x7f0000000580)="b01b045fddc0e67fea455b3af0ed55ecb435e435b1f46096d923383c639b45c86efacc979b9252ba722192ca7681494000baf77571acc7bef2d665203dac2b2bc5c9e312b80f6796890c108ecfec7bb50a7fbca65c3a23f249c4c011c6e7bd2f5213abf07105878cb7942f27bb754ffbfa968bf3f57d006412e4cb90862b6b350b5d44a322102399657d927dce", 0x8d}, {&(0x7f0000000640)="c0ba6230ef9a7b1911b85043311dee410f61f4cecf92db345692a017cd04e53dbe4cadaee2bbce4aa4e57f7c21f179", 0x2f}, {&(0x7f0000000680)="d86722ec0a23a200d86c08508ef7365df9f646e81b234f4cc822afda568d7067edad03222ef0477c432817e3701daf28f0f35214de33d34581d0d1bdafd19fe5d92984bf48ea2f61e87f07f3b505a5f329c5698aa8accd964de548f4e08235c7a5c3ac614cf4f4bc425402dfe37fbcbc1596faf662f7fdea3eb54d1ba34862b3f560179633d932f4e5920986aee9f758da38b4cea184c0a4b68bdeca71", 0x9d}], 0x9, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x8000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xfc, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x486}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1b209710}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10008004}, 0x14) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd0, r7, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x50e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24a4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000040}, 0x48011) bind$xdp(r6, &(0x7f0000000c40)={0x2c, 0xc, 0x0, 0x38, r6}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c80)={r2, 0x4, 0x3, 0xfffffffffffffffe}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c80)={r2, 0x4, 0x3, 0xfffffffffffffffe}) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000cc0)={{0xa, 0x4e21, 0x8, @private1, 0xff}, {0xa, 0x4e20, 0x1000, @loopback, 0x7}, 0xffffffffffffffff, {[0x9, 0x1, 0x1, 0xe, 0x48, 0x4, 0x5, 0x3]}}, 0x5c) bind$unix(r8, &(0x7f0000000d40)=@abs={0x74e6397919a6f81b, 0x0, 0x4e23}, 0x6e) recvfrom(r0, &(0x7f0000000dc0)=""/234, 0xea, 0x1, &(0x7f0000000ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, 0x80) accept4$unix(r6, &(0x7f0000000f40), &(0x7f0000000fc0)=0x6e, 0x800) (async) accept4$unix(r6, &(0x7f0000000f40), &(0x7f0000000fc0)=0x6e, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x82080}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv6_deladdr={0x20, 0x15, 0x10, 0x70bd28, 0x25dfdbfe, {0xa, 0x1f, 0xb, 0xc8, r9}, [@IFA_FLAGS={0x8, 0x8, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x54) (async) sendmsg$nl_route(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x82080}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv6_deladdr={0x20, 0x15, 0x10, 0x70bd28, 0x25dfdbfe, {0xa, 0x1f, 0xb, 0xc8, r9}, [@IFA_FLAGS={0x8, 0x8, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x54) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt(r10, 0x2, 0x5, &(0x7f0000001140)=""/120, &(0x7f00000011c0)=0x78) (async) getsockopt(r10, 0x2, 0x5, &(0x7f0000001140)=""/120, &(0x7f00000011c0)=0x78) syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r6) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r6) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000001500)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001280)={0x204, r11, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x295}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xec5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86cd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x8800}, 0x20000001) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000001540)) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001580)={0x0, 0x400, 0x9, 0x2, 0xe, 0x2, 0x9, 0xb8, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x6, 0x2, 0xa, 0x80000001}}, &(0x7f0000001640)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001580)={0x0, 0x400, 0x9, 0x2, 0xe, 0x2, 0x9, 0xb8, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x6, 0x2, 0xa, 0x80000001}}, &(0x7f0000001640)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000001680)={r12, 0x2}, &(0x7f00000016c0)=0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r13, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810) 16.683637557s ago: executing program 4 (id=1693): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@multicast2}, {@in6=@local, 0x1, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) 16.622010973s ago: executing program 0 (id=1694): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008001f"], 0x28}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 16.545605s ago: executing program 4 (id=1695): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000240)=0xfffffffffffffff2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x4, 0x5, 0xff, 0x200, r0, 0x6, '\x00', r1, r2, 0x2, 0x3, 0x3, 0x5, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x2a, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.445129748s ago: executing program 1 (id=1696): r0 = socket$inet6(0xa, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="080026009015000008005700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x808) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x20, 0x70bd2b, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x2}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x376d3d485c6ac78e) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 16.402520026s ago: executing program 0 (id=1697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r3, 0x100, 0x0, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xe23, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}, @TCA_RATE={0x6, 0x2}]}, 0x48}}, 0x0) (async) ioctl$sock_netdev_private(r5, 0x89e1, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 16.193957191s ago: executing program 4 (id=1698): r0 = socket(0x22, 0x80002, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) unshare(0x24020400) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) unshare(0x20040600) (async) r2 = epoll_create1(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x3, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) r4 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff50) (async) ioctl$TUNSETOFFLOAD(r6, 0x4010744d, 0x20000000) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x80088a02, &(0x7f0000000000)) (async) getsockopt$nfc_llcp(r0, 0x6a, 0x0, 0x0, 0x20000071) 16.191758901s ago: executing program 1 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002680)="d7", 0xfffffff9}], 0x1, &(0x7f0000003280)=ANY=[], 0x550}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240028c1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x9}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x5, 0x7fff, 0x3, 0xc, 0x2, 0xfffffffc, 0x5}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000c80)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0xfffffffc}, 0x2, 0xf, 0x2, 0x7fff, 0x1b, 'syz1\x00', "e4f3596511ac85c7dcad3cc070d5344ba5e151e5a7f00cc68fd06d668a13b7fd", "e0fabe0f96706585d3ec8150213243f4834fa50a1da8e34a940c29d63cf98d2d", [{0x4, 0x400}, {0xfff7, 0x1, {0x2, 0xfffffffd}}, {0x9, 0x1, {0x3, 0x10}}, {0x7, 0x6e50}, {0xfff9, 0x200, {0x0, 0x1}}, {0x200, 0x1, {0x0, 0x3}}, {0x7, 0x1, {0x2, 0x7fff}}, {0x9, 0x6, {0x0, 0xa1e}}, {0x6, 0x7, {0x2, 0xd000}}, {0x8, 0x116c, {0x1, 0x3}}, {0x3, 0x6, {0x2, 0x9}}, {0xf, 0x1, {0x1, 0x2}}, {0xe, 0x6, {0x0, 0x6}}, {0xffff, 0xeb71, {0x0, 0x80000000}}, {0x80, 0xfffb, {0x3, 0x80000000}}, {0x70a, 0x8, {0x0, 0x3}}, {0x2, 0xfffb, {0x1, 0x1}}, {0x4, 0x1, {0x1, 0x7}}, {0x8, 0xe6, {0x3, 0x1}}, {0x0, 0xff29, {0x2, 0x7}}, {0xe310, 0x5, {0x2}}, {0xb, 0xa6af, {0x2, 0x51}}, {0x6, 0x4, {0x3, 0x8}}, {0x9, 0x300, {0x3, 0x1}}, {0x8, 0x4, {0x1, 0x5}}, {0x354e, 0xff, {0x1, 0x94}}, {0x6, 0x7, {0x2, 0x9}}, {0xe, 0x8, {0x0, 0x3c33449c}}, {0xd38, 0x3, {0x3, 0x5}}, {0xa, 0x5, {0x1, 0x101}}, {0x2, 0xab9, {0x1, 0x81}}, {0x2, 0x9, {0x2, 0x2}}, {0x5, 0x9, {0x0, 0x3}}, {0x1, 0x7, {0x0, 0x401}}, {0x2bda, 0x0, {0x1, 0x3df}}, {0xf801, 0x800, {0x1, 0x7}}, {0xffff, 0xb2f, {0x1, 0x7}}, {0x0, 0x6, {0x2, 0x6}}, {0x6, 0xe6, {0x3, 0xbcf}}, {0x5, 0xfff7, {0x3, 0xa87e}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x8, 0xa, 0x6, 0x401, 0x12, 'syz1\x00', "1a8106daa7714bd9ffe689b15c09f04ba315c7015968694132337ba38271627b", "38c1d847982a0d11ca83afbad7973ebd922318b653fd0f6cbc947eb2e73ef68b", [{0xc310, 0x2, {0x2, 0x9}}, {0x6, 0xe, {0x3, 0x3}}, {0x0, 0x3, {0x2, 0x800}}, {0x65, 0x40, {0x3, 0x10}}, {0x9e73, 0x8b8, {0x1, 0xfffffff8}}, {0x6, 0x6, {0x0, 0x9}}, {0x9, 0x800, {0x1, 0x8}}, {0x5, 0x8000, {0x3, 0x1cac}}, {0xda3, 0x578d, {0x1, 0x2}}, {0x7, 0x615e, {0x2, 0x2}}, {0x7b7f, 0x5, {0xf2f8eb0260d23f38, 0x1}}, {0x7, 0x0, {0x2, 0xffffcd7a}}, {0x5, 0x3, {0x3, 0x6}}, {0x4, 0x9, {0x1, 0x9}}, {0x83b5, 0x4, {0x0, 0x65}}, {0x6, 0x24, {0x1, 0x9}}, {0x80, 0x5, {0x2, 0xc0}}, {0x8, 0x1, {0x1, 0xfffffffb}}, {0x6, 0x7ff, {0x0, 0x3ff}}, {0x0, 0x0, {0x2, 0x101}}, {0xd, 0xd, {0x1, 0x1}}, {0x3ff, 0x9, {0x3, 0x7cdf}}, {0x54b2, 0x2c0, {0x3, 0xa000000}}, {0x0, 0xec4, {0x2}}, {0x100, 0x8, {0x0, 0x8}}, {0x9, 0x4, {0x3, 0x1}}, {0x0, 0x7ff, {0x2, 0x3}}, {0x9, 0x1, {0x2, 0x9d6}}, {0x4, 0x5, {0x3, 0x3910}}, {0xa42, 0x8000, {0x0, 0x30b}}, {0x6, 0x8, {0x2, 0x2}}, {0x5, 0x6, {0x3, 0x8}}, {0x8b, 0x6, {0x3, 0x10000}}, {0x9, 0x0, {0x0, 0x1ff}}, {0x4, 0x2, {0x3, 0xffffffff}}, {0x3ff, 0xf, {0x1, 0x1}}, {0x1, 0x40, {0x3, 0x8}}, {0x7034, 0x9, {0x3, 0x9}}, {0x800, 0x7, {0x1, 0x7}}, {0xfffd, 0xfff, {0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x44880}, 0xf18e4d8de1193efc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000000c00078008000640"], 0x58}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000a40)="e85eb3ad7a85f8ffbfeca731d6c8b8efffe715ca63a772ab76e7cffafb9d389706d2e359133ee025548a9a6dacd710c38203386303f61999708e2e086f02a597d35cb89496800f640fdc0d640b093b6048a305e8b1fe97a29fd305a32a525559ddd5ee389d8bc85b5c014a923f2633e07c9b1306f90aca263b0cbb80cd28e0d43c5e853eafd3471233aa29ffcbf71f5d41e6ac5cd9dd73d7d5a33ff36301367732b1d6d5c7bd74aa59bcbbeace3a5d25c319b37e9b5a1a2f49f5332b818ac6d3c9458fdbe1ac55b4c0560f22e891801c3c7ea9af178d90346e6bf66b6826d57dc05dcf8972c73b85085ebabef39bd87aed18f4de2d0caba6eb22132ee4e6c99097f54ca9742a3ae9bb80ab191d594d82418fadfa0cb593c22a452949e76978b77f7cd812009d64eaeeeb27224b6df92fbfeae6c94fb1c633246609466ac4d8fb1d890081d260b4c7acaf1b8a6f938205c462f4562e73d73546a47e3384abbd05de604e7d50d8053fb15a4ad2cc2d5a96c62fe5f4398362e4b098b6fd3b7fb03144c7a258b344de3fdb78ecb4237e53ae95ca31598a8102bd5990575fa6aff26ad340d7bbf1644ba6f1168d1d9a50aee8a9494c733f2c55dda98db0f23eff7df41a3354c3310c421703c0dad93182e4d10cf579215232e07cca2fa220d4a0751d2ededfd4924845baa5539fd6e666f3df3426afed1cd1c7c12bcf39eed1b848beee", 0x201}], 0x1}}], 0x1, 0x0) 16.189731171s ago: executing program 0 (id=1700): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000006801088054000780080006006e000000080005000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500946fa5"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x5, 0x95, "8ac0fe9ed4d9d73fedf01cf94ed6aacd3f62a0a47b58d61e8077d6ff39e3eec05853cd5c281f152252342d625b826c399186f8de124ce255ae96f343e2abd4cbfe1c5b24cb80004913008ad88721dd098bd8c087af883b88c360d8f686628d5538110c9e452c87da0824f49a045ddba2d7b98397da6fae82442c9b0cd6ce7873de132499c15f3473757d668f34d8b090d39c2dd8ff"}}) 16.072596324s ago: executing program 4 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x12c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7685f290}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4239b176}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xc2, 0xc, "c5f4662d00ed3d35741878eec6c62778f019994f3dc2be51f12ac71bf7e2ab1921d22ad884d86b63a0d81de85b22f49441770d38b0f2d28ea6f5fdf234c4f469b224bbbe952047817ca46d9618e11793585ae006298d967b9b13be234724634adb50da9a17206b48682b023c104b0f05b873fdedd45e7af8ede3e910dede316bca2c99a50a375f0e8605034ffd3542ba2cc80cb14e591750f406043bad99e9095c219eaf68e75ec8ec90c72701a75a255a1fece6472a31f5a02c69b2dffa"}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x27, 0xc, "edd1cb35066ca13dba48e44b259597e5378c4e4bdb5fe017f90cff7bddd490d52ac6f2"}]}], {0x14}}, 0x274}}, 0xc011) socket$nl_generic(0x10, 0x3, 0x10) 15.99408698s ago: executing program 1 (id=1702): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20000080) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x81, 0xfa, 0x40, 0x7, 0x8, 0xda, 0xef, 0x7, 0x3, 0x2, 0x83, 0xb7, 0x9, 0x1}, 0xe) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x34}, 0x401}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x4000094, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15.987684229s ago: executing program 0 (id=1703): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0x11, 0x148, 0x128, 0x10, 0x260, 0x2a8, 0x2a8, 0x260, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x100, 0x128, 0x1c, {}, [@common=@unspec=@rateest={{0x68}, {'macsec0\x00', 'veth0_to_team\x00', 0x22, 0x3, 0x619, 0x10001, 0x4, 0x80, {0x7}, {0x100000}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0xf001}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'netpci0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x65}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {}, 'ip6tnl0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2400, 0xa, [0x6, 0x3f, 0x17, 0x3b, 0x1a, 0xd, 0x1a, 0x29, 0x20, 0x2f, 0x13, 0x19, 0x28, 0x12, 0x0, 0x1b], 0x2, 0x7fff, 0x3}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xfece) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff060000000000000014f086dd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.969410977s ago: executing program 4 (id=1704): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) syz_emit_ethernet(0xc1, &(0x7f0000006e80)={@empty, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@x25={0x805, {0x3, 0x0, 0x1b, "a00f08e4b606b9e027b6b9883c2cfd3acad44f9e3db09e7aa026906c66ad251e9f40ded3a7804efb76291c19f48475ce2301f2cb73fafc3ed82080f0074574b2b454367613751a32fb24c096da2c0be5ab3cf0263394ff2a6dcfd44ef710da95a4a37dbe446611a19ef5a3d472ea988df64d7d463a4d1f19d7c18a1298c943d5a60b5f522b0ce8924610dfbb7b2ecc5f1680c9aeaab948883b745f4f1cb9eafd88fbf812d0693d65d6b0d6e8"}}}}, &(0x7f0000005f40)={0x0, 0x1, [0x600, 0xb89, 0x83d, 0xa6d]}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) clock_gettime(0x0, &(0x7f0000006ac0)={0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000006f80)={0x1, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x108) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000001380)=""/12, 0xc}, {&(0x7f00000013c0)=""/185, 0xb9}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/151, 0x97}, {&(0x7f0000002540)=""/144, 0x90}], 0xa, &(0x7f00000026c0)=""/198, 0xc6}, 0x2}, {{&(0x7f00000027c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/120, 0x78}], 0x1, &(0x7f0000002900)=""/4096, 0x1000}, 0xac4}, {{&(0x7f0000003900)=@nfc, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003980)=""/106, 0x6a}], 0x1, &(0x7f0000003a40)=""/111, 0x6f}, 0x7}, {{&(0x7f0000003ac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)}, {&(0x7f0000004b80)=""/153, 0x99}], 0x3}, 0x1ff}, {{&(0x7f0000004c80)=@ax25={{0x3, @default}, [@default, @netrom, @remote, @netrom, @default, @null, @remote, @bcast]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000004d00)=""/208, 0xd0}, {&(0x7f0000004e00)=""/4096, 0x1000}], 0x2, &(0x7f0000005e40)=""/88, 0x58}, 0xfc000000}, {{&(0x7f0000005ec0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005f40), 0x0, &(0x7f0000005f80)=""/32, 0x20}, 0xaa3}, {{&(0x7f0000005fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000006040)=""/218, 0xda}, {&(0x7f0000004b40)=""/37, 0x25}, {&(0x7f0000006b40)=""/242, 0xf2}, {&(0x7f0000006c40)=""/117, 0x75}, {&(0x7f0000006cc0)=""/121, 0x79}, {&(0x7f0000006d40)=""/189, 0xbd}], 0x6, &(0x7f0000006180)=""/89, 0x59}, 0x7742}, {{&(0x7f0000006200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006500)=[{&(0x7f0000006280)=""/253, 0xfd}, {&(0x7f0000006380)=""/181, 0xb5}, {&(0x7f0000006440)=""/58, 0x3a}, {&(0x7f0000006480)=""/5, 0x5}, {&(0x7f00000064c0)}], 0x5, &(0x7f0000006580)=""/54, 0x36}, 0x7}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f00000065c0)=""/13, 0xd}, {&(0x7f0000006600)=""/90, 0x5a}, {&(0x7f0000006680)=""/59, 0x3b}, {&(0x7f00000066c0)=""/219, 0xdb}], 0x4, &(0x7f0000006800)=""/95, 0x5f}, 0x5}], 0x9, 0x3, &(0x7f0000006b00)={r2, r3+60000000}) 15.906760758s ago: executing program 0 (id=1705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) 15.102005099s ago: executing program 1 (id=1706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x200, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="310300e8ffffffffffff0700200008000300", @ANYRES32=r6], 0x1c}}, 0x0) 68.35366ms ago: executing program 32 (id=1705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) 37.911321ms ago: executing program 33 (id=1706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x200, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="310300e8ffffffffffff0700200008000300", @ANYRES32=r6], 0x1c}}, 0x0) 0s ago: executing program 34 (id=1704): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) syz_emit_ethernet(0xc1, &(0x7f0000006e80)={@empty, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@x25={0x805, {0x3, 0x0, 0x1b, "a00f08e4b606b9e027b6b9883c2cfd3acad44f9e3db09e7aa026906c66ad251e9f40ded3a7804efb76291c19f48475ce2301f2cb73fafc3ed82080f0074574b2b454367613751a32fb24c096da2c0be5ab3cf0263394ff2a6dcfd44ef710da95a4a37dbe446611a19ef5a3d472ea988df64d7d463a4d1f19d7c18a1298c943d5a60b5f522b0ce8924610dfbb7b2ecc5f1680c9aeaab948883b745f4f1cb9eafd88fbf812d0693d65d6b0d6e8"}}}}, &(0x7f0000005f40)={0x0, 0x1, [0x600, 0xb89, 0x83d, 0xa6d]}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) clock_gettime(0x0, &(0x7f0000006ac0)={0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000006f80)={0x1, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x108) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000001380)=""/12, 0xc}, {&(0x7f00000013c0)=""/185, 0xb9}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/151, 0x97}, {&(0x7f0000002540)=""/144, 0x90}], 0xa, &(0x7f00000026c0)=""/198, 0xc6}, 0x2}, {{&(0x7f00000027c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/120, 0x78}], 0x1, &(0x7f0000002900)=""/4096, 0x1000}, 0xac4}, {{&(0x7f0000003900)=@nfc, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003980)=""/106, 0x6a}], 0x1, &(0x7f0000003a40)=""/111, 0x6f}, 0x7}, {{&(0x7f0000003ac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)}, {&(0x7f0000004b80)=""/153, 0x99}], 0x3}, 0x1ff}, {{&(0x7f0000004c80)=@ax25={{0x3, @default}, [@default, @netrom, @remote, @netrom, @default, @null, @remote, @bcast]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000004d00)=""/208, 0xd0}, {&(0x7f0000004e00)=""/4096, 0x1000}], 0x2, &(0x7f0000005e40)=""/88, 0x58}, 0xfc000000}, {{&(0x7f0000005ec0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005f40), 0x0, &(0x7f0000005f80)=""/32, 0x20}, 0xaa3}, {{&(0x7f0000005fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000006040)=""/218, 0xda}, {&(0x7f0000004b40)=""/37, 0x25}, {&(0x7f0000006b40)=""/242, 0xf2}, {&(0x7f0000006c40)=""/117, 0x75}, {&(0x7f0000006cc0)=""/121, 0x79}, {&(0x7f0000006d40)=""/189, 0xbd}], 0x6, &(0x7f0000006180)=""/89, 0x59}, 0x7742}, {{&(0x7f0000006200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006500)=[{&(0x7f0000006280)=""/253, 0xfd}, {&(0x7f0000006380)=""/181, 0xb5}, {&(0x7f0000006440)=""/58, 0x3a}, {&(0x7f0000006480)=""/5, 0x5}, {&(0x7f00000064c0)}], 0x5, &(0x7f0000006580)=""/54, 0x36}, 0x7}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f00000065c0)=""/13, 0xd}, {&(0x7f0000006600)=""/90, 0x5a}, {&(0x7f0000006680)=""/59, 0x3b}, {&(0x7f00000066c0)=""/219, 0xdb}], 0x4, &(0x7f0000006800)=""/95, 0x5f}, 0x5}], 0x9, 0x3, &(0x7f0000006b00)={r2, r3+60000000}) kernel console output (not intermixed with test programs): ocess `syz.4.1277'. [ 190.413245][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.424735][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.432748][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.444353][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.452420][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.459963][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.495028][T10300] team0: Port device team_slave_0 added [ 190.541589][T10300] team0: Port device team_slave_1 added [ 190.571748][T10326] virt_wifi0 speed is unknown, defaulting to 1000 [ 190.621762][T10332] xt_hashlimit: size too large, truncated to 1048576 [ 190.662388][T10334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.673496][T10334] bond0: (slave bond3): Enslaving as an active interface with an up link [ 190.702423][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.728068][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.754266][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.768345][T10337] netlink: 'syz.0.1281': attribute type 21 has an invalid length. [ 190.784160][T10337] netlink: 'syz.0.1281': attribute type 6 has an invalid length. [ 190.805346][T10337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1281'. [ 190.822354][T10342] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 190.834242][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.841456][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.867625][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.974259][T10300] hsr_slave_0: entered promiscuous mode [ 190.992449][T10300] hsr_slave_1: entered promiscuous mode [ 191.009428][T10300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.017879][T10300] Cannot create hsr debugfs directory [ 191.076607][T10354] tipc: Enabled bearer , priority 0 [ 191.114533][T10362] syzkaller0: entered promiscuous mode [ 191.122099][T10362] syzkaller0: entered allmulticast mode [ 191.193968][ T4043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.219329][T10366] tipc: Resetting bearer [ 191.233969][T10366] tipc: Disabling bearer [ 191.258867][T10326] chnl_net:caif_netlink_parms(): no params data found [ 191.371067][ T4043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.467585][T10388] openvswitch: netlink: Multiple metadata blocks provided [ 191.501179][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.519802][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.533359][T10326] bridge_slave_0: entered allmulticast mode [ 191.540760][T10326] bridge_slave_0: entered promiscuous mode [ 191.549794][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.558747][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.566185][T10326] bridge_slave_1: entered allmulticast mode [ 191.573780][T10326] bridge_slave_1: entered promiscuous mode [ 191.613912][ T4043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.632655][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.655393][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.667303][ T5845] Bluetooth: hci0: command tx timeout [ 191.689763][T10326] team0: Port device team_slave_0 added [ 191.697436][T10326] team0: Port device team_slave_1 added [ 191.704390][ T4043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.734832][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.742614][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.769997][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.782160][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.789926][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.816388][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.881854][T10326] hsr_slave_0: entered promiscuous mode [ 191.888602][T10326] hsr_slave_1: entered promiscuous mode [ 191.894645][T10326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.902874][T10326] Cannot create hsr debugfs directory [ 191.917132][T10300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.930226][ T4043] bridge_slave_1: left allmulticast mode [ 191.936606][ T4043] bridge_slave_1: left promiscuous mode [ 191.944203][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.958573][ T4043] bridge_slave_0: left allmulticast mode [ 191.964261][ T4043] bridge_slave_0: left promiscuous mode [ 191.970209][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.002997][T10300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.074357][ T4043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.086053][ T4043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.101000][ T4043] bond0 (unregistering): Released all slaves [ 192.111399][T10300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.146631][T10300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.313200][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.341063][T10300] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.353718][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.361005][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.374583][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.381844][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.421268][ T4043] hsr_slave_0: left promiscuous mode [ 192.427874][ T4043] hsr_slave_1: left promiscuous mode [ 192.433744][ T4043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.442171][ T4043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.451822][ T4043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.460610][ T4043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.476157][ T4043] veth1_macvtap: left promiscuous mode [ 192.482735][ T4043] veth0_macvtap: left promiscuous mode [ 192.488533][ T4043] veth1_vlan: left promiscuous mode [ 192.493952][ T4043] veth0_vlan: left promiscuous mode [ 192.547536][ T5845] Bluetooth: hci1: command tx timeout [ 192.725441][ T4043] team0 (unregistering): Port device team_slave_1 removed [ 192.743275][ T4043] team0 (unregistering): Port device team_slave_0 removed [ 192.809900][T10433] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1313'. [ 192.965140][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1315'. [ 193.009879][T10326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.024683][T10448] x_tables: duplicate underflow at hook 2 [ 193.032875][T10448] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1317'. [ 193.044887][T10326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.107992][T10326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.139516][T10326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.151035][T10454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 193.180059][T10454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 193.212458][T10454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 193.232379][T10460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.263083][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.334081][T10300] veth0_vlan: entered promiscuous mode [ 193.372492][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.406954][T10300] veth1_vlan: entered promiscuous mode [ 193.429823][T10471] team0: entered promiscuous mode [ 193.435022][T10471] team_slave_0: entered promiscuous mode [ 193.442397][T10471] team_slave_1: entered promiscuous mode [ 193.449171][T10471] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 193.457953][T10471] batadv_slave_1: entered promiscuous mode [ 193.489301][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.524397][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.531689][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.572099][T10300] veth0_macvtap: entered promiscuous mode [ 193.585848][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.593065][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.604760][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1328'. [ 193.616074][T10300] veth1_macvtap: entered promiscuous mode [ 193.632506][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 193.659343][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.671810][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.683464][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.695707][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.706583][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.717605][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.729790][T10300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.740239][T10326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.752557][ T5845] Bluetooth: hci0: command tx timeout [ 193.770312][T10490] netlink: 'syz.0.1329': attribute type 5 has an invalid length. [ 193.778379][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.778407][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.778421][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.778436][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.779373][T10300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.845189][T10300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.859949][T10300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.871543][T10300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.882851][T10300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.919046][T10494] netlink: 'syz.4.1330': attribute type 27 has an invalid length. [ 194.024211][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.031791][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.080924][T10494] 0ªÃøÂFNð¡: left allmulticast mode [ 194.100076][T10494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.113951][T10494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.162810][T10494] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.174086][T10494] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.184275][T10494] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.193711][T10494] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.214266][T10494] bond1: left promiscuous mode [ 194.219376][T10494] ip6gre1: left promiscuous mode [ 194.240322][T10494] gretap1: left promiscuous mode [ 194.245355][T10494] gretap1: left allmulticast mode [ 194.252103][T10494] bond2: left promiscuous mode [ 194.257032][T10494] bond2: left allmulticast mode [ 194.305935][T10502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.315347][T10502] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.326049][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.345096][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.352258][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.362640][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.369784][T10502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.385390][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.394962][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.412478][T10502] veth0_macvtap: left promiscuous mode [ 194.420038][T10502] veth0_macvtap: entered promiscuous mode [ 194.427292][T10502] veth1_macvtap: entered promiscuous mode [ 194.434038][T10502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.443278][T10502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.452317][T10502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.461519][T10502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.494021][T10502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.505951][T10502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.520109][T10507] bond0: option updelay: invalid value (18446744073709551615) [ 194.529609][T10507] bond0: option updelay: allowed values 0 - 2147483647 [ 194.592908][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.627283][ T5845] Bluetooth: hci1: command tx timeout [ 194.652607][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.671880][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.705204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.714557][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.760361][T10326] veth0_vlan: entered promiscuous mode [ 194.770912][ T4043] ip6_tunnel:  xmit: Local address not yet configured! [ 194.795162][ T4043] ip6_tunnel:  xmit: Local address not yet configured! [ 194.804567][ T5891] ip6_tunnel:  xmit: Local address not yet configured! [ 194.824077][T10326] veth1_vlan: entered promiscuous mode [ 194.883386][T10326] veth0_macvtap: entered promiscuous mode [ 194.902581][T10326] veth1_macvtap: entered promiscuous mode [ 194.909538][T10512] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 194.972389][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.989643][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 194.997794][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.020305][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.064301][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.088539][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.099542][T10548] openvswitch: netlink: EtherType 50a is less than min 600 [ 195.116760][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.129555][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.141158][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.154231][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.200649][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.245927][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.258414][T10558] netlink: 'syz.1.1346': attribute type 2 has an invalid length. [ 195.260206][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.280605][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.291847][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.303084][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.315019][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.329510][T10326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.353984][T10326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.363103][T10326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.400270][T10326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.529139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.540699][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.587907][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 195.621114][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.664617][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.695869][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 195.716164][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.150685][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.381194][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.431290][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.556865][ T35] bridge_slave_1: left allmulticast mode [ 196.562584][ T35] bridge_slave_1: left promiscuous mode [ 196.570973][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.580608][ T35] bridge_slave_0: left allmulticast mode [ 196.590527][ T35] bridge_slave_0: left promiscuous mode [ 196.596345][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.798178][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.800832][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.814986][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.822727][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.822800][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.831259][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.851341][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.859179][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.860284][ T35] bond0 (unregistering): Released all slaves [ 196.893736][T10586] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.992555][T10586] chnl_net:caif_netlink_parms(): no params data found [ 197.050960][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.059164][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.066409][T10586] bridge_slave_0: entered allmulticast mode [ 197.073511][T10586] bridge_slave_0: entered promiscuous mode [ 197.084404][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.092053][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.099765][T10586] bridge_slave_1: entered allmulticast mode [ 197.106550][T10586] bridge_slave_1: entered promiscuous mode [ 197.130679][ T35] hsr_slave_0: left promiscuous mode [ 197.136527][ T35] hsr_slave_1: left promiscuous mode [ 197.144414][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.153495][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.161797][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.169911][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.180001][ T35] veth1_macvtap: left promiscuous mode [ 197.188809][ T35] veth0_macvtap: left promiscuous mode [ 197.194629][ T35] veth1_vlan: left promiscuous mode [ 197.219359][ T35] veth0_vlan: left promiscuous mode [ 197.363148][T10608] __nla_validate_parse: 1 callbacks suppressed [ 197.363182][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 197.411439][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.441950][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.554616][T10615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.614191][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.622878][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.632235][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.642800][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.657391][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.671175][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.745468][ T35] team0 (unregistering): Port device team_slave_1 removed [ 197.770525][ T35] team0 (unregistering): Port device team_slave_0 removed [ 197.811141][T10622] netlink: 'syz.1.1362': attribute type 10 has an invalid length. [ 197.882087][T10586] team0: Port device team_slave_0 added [ 197.891626][T10622] geneve0: entered promiscuous mode [ 197.911318][T10622] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 197.929314][T10586] team0: Port device team_slave_1 added [ 197.973088][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.996611][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.031446][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.058359][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.066182][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.108957][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.135478][T10616] virt_wifi0 speed is unknown, defaulting to 1000 [ 198.264260][T10586] hsr_slave_0: entered promiscuous mode [ 198.288613][T10586] hsr_slave_1: entered promiscuous mode [ 198.303435][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.314169][T10586] Cannot create hsr debugfs directory [ 198.466870][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 198.553905][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'. [ 198.629569][T10671] netlink: 'syz.0.1374': attribute type 32 has an invalid length. [ 198.822823][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.912418][T10616] chnl_net:caif_netlink_parms(): no params data found [ 198.947840][ T5853] Bluetooth: hci0: command tx timeout [ 198.973442][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.001624][T10686] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 199.010576][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.033002][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.045810][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.060316][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.095664][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.124623][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.134190][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.148530][T10708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1382'. [ 199.148878][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.172510][T10686] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 199.181053][T10694] netlink: 'syz.4.1380': attribute type 178 has an invalid length. [ 199.202985][T10708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1382'. [ 199.212753][T10708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1382'. [ 199.224287][T10708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1382'. [ 199.234385][T10708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1382'. [ 199.250189][T10708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1382'. [ 199.269868][T10616] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.289990][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.317113][T10616] bridge_slave_0: entered allmulticast mode [ 199.324549][T10616] bridge_slave_0: entered promiscuous mode [ 199.396037][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.416379][T10616] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.426311][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.435825][T10616] bridge_slave_1: entered allmulticast mode [ 199.444232][T10616] bridge_slave_1: entered promiscuous mode [ 199.468137][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 199.483025][T10724] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 199.504751][T10616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.543325][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.562247][T10586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.581781][T10586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.598488][T10616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.610065][T10586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.634806][T10586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.646330][T10616] team0: Port device team_slave_0 added [ 199.655616][T10616] team0: Port device team_slave_1 added [ 199.692258][T10616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.699999][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.726608][T10616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.739981][T10616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.747356][ T5853] Bluetooth: hci1: command tx timeout [ 199.755481][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.779915][ T5830] hid-generic 0005:0458:0009.0002: item fetching failed at offset 0/1 [ 199.782361][T10616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.806008][ T5830] hid-generic 0005:0458:0009.0002: probe with driver hid-generic failed with error -22 [ 199.872919][ T35] bridge_slave_1: left allmulticast mode [ 199.879059][ T35] bridge_slave_1: left promiscuous mode [ 199.885201][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.895438][ T35] bridge_slave_0: left allmulticast mode [ 199.904835][ T35] bridge_slave_0: left promiscuous mode [ 199.916603][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.982529][T10616] hsr_slave_0: entered promiscuous mode [ 199.990666][T10616] hsr_slave_1: entered promiscuous mode [ 200.004380][T10616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.019010][T10616] Cannot create hsr debugfs directory [ 200.139373][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.158880][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.173198][ T35] bond0 (unregistering): Released all slaves [ 200.185427][T10759] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.311386][T10764] openvswitch: netlink: IPv4 tun info is not correct [ 200.394274][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.481047][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.499283][T10771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.519078][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.526343][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.544668][T10771] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1397'. [ 200.555692][ T35] hsr_slave_0: left promiscuous mode [ 200.565869][ T35] hsr_slave_1: left promiscuous mode [ 200.574219][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.582531][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.595646][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.603846][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.620103][ T35] veth1_macvtap: left promiscuous mode [ 200.630860][ T35] veth0_macvtap: left promiscuous mode [ 200.636516][ T35] veth1_vlan: left promiscuous mode [ 200.641901][ T35] veth0_vlan: left promiscuous mode [ 200.762586][ T35] team0 (unregistering): Port device team_slave_1 removed [ 200.780923][ T35] team0 (unregistering): Port device team_slave_0 removed [ 200.881753][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.888959][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.962546][T10586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.973720][T10586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.026843][ T5853] Bluetooth: hci0: command tx timeout [ 201.054231][T10616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.080394][T10616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.096292][T10616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.115647][T10616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.261722][T10616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.272771][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.303341][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.326310][T10616] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.345749][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.353135][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.371649][T10805] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 201.391466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.398778][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.411194][T10586] veth0_vlan: entered promiscuous mode [ 201.422894][T10586] veth1_vlan: entered promiscuous mode [ 201.499237][T10586] veth0_macvtap: entered promiscuous mode [ 201.517025][T10586] veth1_macvtap: entered promiscuous mode [ 201.541032][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.561094][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.574595][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.590131][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.600857][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.612301][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.623622][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.649015][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.663235][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.680893][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.693089][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.708682][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.721656][T10586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.730967][T10586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.740902][T10586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.751538][T10586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.792607][T10616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.827210][ T5853] Bluetooth: hci1: command tx timeout [ 201.847265][T10820] xt_hashlimit: size too large, truncated to 1048576 [ 201.891066][T10820] syz.4.1410: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 201.915558][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.4.1410 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 201.915587][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.915600][T10820] Call Trace: [ 201.915608][T10820] [ 201.915616][T10820] dump_stack_lvl+0x241/0x360 [ 201.915666][T10820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.915696][T10820] ? __pfx__printk+0x10/0x10 [ 201.915727][T10820] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 201.915762][T10820] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 201.915799][T10820] warn_alloc+0x278/0x410 [ 201.915825][T10820] ? __pfx_warn_alloc+0x10/0x10 [ 201.915852][T10820] ? htable_create+0x102/0x880 [ 201.915876][T10820] ? __get_vm_area_node+0x1c8/0x2d0 [ 201.915897][T10820] ? __get_vm_area_node+0x25c/0x2d0 [ 201.915921][T10820] __vmalloc_node_range_noprof+0x62f/0x1380 [ 201.915960][T10820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.915985][T10820] ? hashlimit_mt_check_common+0x691/0xa40 [ 201.916010][T10820] ? _printk+0xd5/0x120 [ 201.916036][T10820] ? __pfx___mutex_lock+0x10/0x10 [ 201.916058][T10820] ? htable_create+0x102/0x880 [ 201.916082][T10820] vmalloc_noprof+0x79/0x90 [ 201.916104][T10820] ? htable_create+0x102/0x880 [ 201.916127][T10820] htable_create+0x102/0x880 [ 201.916155][T10820] hashlimit_mt_check_common+0x710/0xa40 [ 201.916185][T10820] hashlimit_mt_check_v1+0x2ea/0x540 [ 201.916211][T10820] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 201.916235][T10820] ? trace_contention_end+0x3c/0x120 [ 201.916270][T10820] ? cpus_read_unlock+0xa6/0x140 [ 201.916303][T10820] ? __mutex_unlock_slowpath+0x227/0x800 [ 201.916326][T10820] xt_check_match+0x368/0xa40 [ 201.916351][T10820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.916372][T10820] ? __pfx_xt_check_match+0x10/0x10 [ 201.916409][T10820] ? xt_find_match+0x1d3/0x210 [ 201.916436][T10820] translate_table+0x1671/0x2330 [ 201.916480][T10820] ? __pfx_translate_table+0x10/0x10 [ 201.916506][T10820] ? __pfx___might_resched+0x10/0x10 [ 201.916530][T10820] ? __pfx_lock_release+0x10/0x10 [ 201.916559][T10820] ? __virt_addr_valid+0x183/0x530 [ 201.916589][T10820] ? __might_fault+0xc6/0x120 [ 201.916614][T10820] ? copy_from_sockptr_offset+0x6b/0xb0 [ 201.916647][T10820] do_ip6t_set_ctl+0xe4c/0x1270 [ 201.916676][T10820] ? __pfx___mutex_trylock_common+0x10/0x10 [ 201.916705][T10820] ? aa_label_sk_perm+0x4f3/0x6c0 [ 201.916724][T10820] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 201.916751][T10820] ? rcu_is_watching+0x15/0xb0 [ 201.916781][T10820] ? trace_contention_end+0x3c/0x120 [ 201.916815][T10820] ? __mutex_unlock_slowpath+0x227/0x800 [ 201.916840][T10820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.916862][T10820] ? futex_wake+0x523/0x5c0 [ 201.916893][T10820] nf_setsockopt+0x295/0x2c0 [ 201.916939][T10820] rawv6_setsockopt+0x327/0x740 [ 201.916969][T10820] ? __pfx_aa_sk_perm+0x10/0x10 [ 201.916987][T10820] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 201.917017][T10820] ? __pfx_lock_acquire+0x10/0x10 [ 201.917040][T10820] ? aa_sock_opt_perm+0x79/0x120 [ 201.917062][T10820] ? sock_common_setsockopt+0x37/0xc0 [ 201.917094][T10820] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 201.917124][T10820] do_sock_setsockopt+0x3af/0x720 [ 201.917151][T10820] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 201.917176][T10820] ? __fget_files+0x395/0x410 [ 201.917205][T10820] ? __fget_files+0x2a/0x410 [ 201.917238][T10820] __x64_sys_setsockopt+0x1ee/0x280 [ 201.917265][T10820] do_syscall_64+0xf3/0x230 [ 201.917284][T10820] ? clear_bhb_loop+0x35/0x90 [ 201.917309][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.917330][T10820] RIP: 0033:0x7f3ac638cda9 [ 201.917356][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.917373][T10820] RSP: 002b:00007f3ac721d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.917394][T10820] RAX: ffffffffffffffda RBX: 00007f3ac65a5fa0 RCX: 00007f3ac638cda9 [ 201.917416][T10820] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 201.917428][T10820] RBP: 00007f3ac640e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 201.917441][T10820] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000000 [ 201.917453][T10820] R13: 0000000000000000 R14: 00007f3ac65a5fa0 R15: 00007ffd7f486e78 [ 201.917477][T10820] [ 202.041822][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.058533][T10820] Mem-Info: [ 202.068194][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.091730][T10820] active_anon:3902 inactive_anon:0 isolated_anon:0 [ 202.091730][T10820] active_file:1286 inactive_file:38372 isolated_file:0 [ 202.091730][T10820] unevictable:768 dirty:78 writeback:0 [ 202.091730][T10820] slab_reclaimable:11177 slab_unreclaimable:106084 [ 202.091730][T10820] mapped:28257 shmem:1407 pagetables:613 [ 202.091730][T10820] sec_pagetables:0 bounce:0 [ 202.091730][T10820] kernel_misc_reclaimable:0 [ 202.091730][T10820] free:1336390 free_pcp:538 free_cma:0 [ 202.091802][T10820] Node 0 active_anon:15608kB inactive_anon:0kB active_file:5144kB inactive_file:153416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113028kB dirty:312kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11168kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no [ 202.091854][T10820] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 202.091910][T10820] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.091969][T10820] lowmem_reserve[]: 0 2490 2491 0 0 [ 202.092012][T10820] Node 0 DMA32 free:1421424kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:15572kB inactive_anon:0kB active_file:5144kB inactive_file:152832kB unevictable:1536kB writepending:308kB present:3129332kB managed:2550704kB mlocked:0kB bounce:0kB free_pcp:2152kB local_pcp:884kB free_cma:0kB [ 202.209164][T10616] veth0_vlan: entered promiscuous mode [ 202.213729][T10616] veth1_vlan: entered promiscuous mode [ 202.296853][T10820] lowmem_reserve[]: 0 0 0 0 0 [ 202.558182][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.560691][T10820] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:584kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.603913][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.635004][T10820] lowmem_reserve[]: 0 0 0 0 0 [ 202.640061][T10820] Node 1 Normal free:3908776kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.665513][T10616] veth0_macvtap: entered promiscuous mode [ 202.680841][T10820] lowmem_reserve[]: 0 0 0 0 0 [ 202.692683][T10616] veth1_macvtap: entered promiscuous mode [ 202.714116][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.745440][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.746520][T10820] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 202.766739][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.769867][T10820] Node 0 DMA32: 42*4kB (UM) 113*8kB (UME) 136*16kB (UME) 232*32kB (UME) 89*64kB (UME) 52*128kB (UME) 34*256kB (UME) 19*512kB (UME) 12*1024kB (UM) 6*2048kB (UME) 331*4096kB (M) = 1421808kB [ 202.797808][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.797828][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.797845][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.797878][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.797892][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.798996][T10616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.818828][T10820] Node 0 [ 202.873017][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.907047][T10820] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 202.920232][T10820] Node 1 Normal: 222*4kB (UE) 52*8kB (UME) 45*16kB (UME) 218*32kB (UME) 106*64kB (UME) 30*128kB (UME) 16*256kB (UM) 8*512kB (UM) 6*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3908776kB [ 202.934820][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.944992][T10820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.963282][T10820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.966116][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.983484][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.993619][T10820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.995503][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.006248][T10820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.016701][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.029413][T10820] 41094 total pagecache pages [ 203.035381][T10616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.041049][T10820] 0 pages in swap cache [ 203.057872][T10820] Free swap = 124996kB [ 203.062089][T10820] Total swap = 124996kB [ 203.066360][T10820] 2097051 pages RAM [ 203.070943][T10820] 0 pages HighMem/MovableOnly [ 203.076160][T10820] 427589 pages reserved [ 203.089236][T10820] 0 pages cma reserved [ 203.119940][T10616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.131822][T10616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.141642][T10616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.150440][T10616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.259071][T10877] __nla_validate_parse: 2 callbacks suppressed [ 203.259095][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 203.275868][T10880] dummy0: entered allmulticast mode [ 203.283103][T10880] batman_adv: batadv0: Adding interface: dummy0 [ 203.289864][T10880] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.315534][T10880] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 203.362454][ T4039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.373206][ T4039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.404813][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.414458][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.628516][T10907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 203.674713][T10913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1438'. [ 203.686326][T10913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1438'. [ 203.701954][T10915] openvswitch: netlink: Message has 2 unknown bytes. [ 203.709398][T10915] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.741997][ T4039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.251480][ T4039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.515038][ T4039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.553697][ T4039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.643435][ T4039] bridge_slave_1: left allmulticast mode [ 204.651733][ T4039] bridge_slave_1: left promiscuous mode [ 204.659569][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.670356][ T4039] bridge_slave_0: left allmulticast mode [ 204.676081][ T4039] bridge_slave_0: left promiscuous mode [ 204.682133][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.724079][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1440'. [ 204.862574][ T4039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.888605][ T4039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.909059][ T4039] bond0 (unregistering): Released all slaves [ 204.938933][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.946303][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.958129][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.966460][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.974379][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.981964][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.019042][T10926] virt_wifi0 speed is unknown, defaulting to 1000 [ 205.115771][ T4039] hsr_slave_0: left promiscuous mode [ 205.121808][ T4039] hsr_slave_1: left promiscuous mode [ 205.128161][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.135625][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.144057][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.151762][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.162674][ T4039] veth1_macvtap: left promiscuous mode [ 205.168895][ T4039] veth0_macvtap: left promiscuous mode [ 205.174495][ T4039] veth1_vlan: left promiscuous mode [ 205.180243][ T4039] veth0_vlan: left promiscuous mode [ 205.295437][ T4039] team0 (unregistering): Port device team_slave_1 removed [ 205.313878][ T4039] team0 (unregistering): Port device team_slave_0 removed [ 205.374825][T10926] chnl_net:caif_netlink_parms(): no params data found [ 205.566622][T10943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.589692][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 205.599088][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 205.646000][T10943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.649030][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.664067][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.672637][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.680717][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.688812][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.696276][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.703683][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.713473][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.724484][T10926] bridge_slave_0: entered allmulticast mode [ 205.731443][T10926] bridge_slave_0: entered promiscuous mode [ 205.748045][T10943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.767989][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.775161][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.783120][T10926] bridge_slave_1: entered allmulticast mode [ 205.790590][T10926] bridge_slave_1: entered promiscuous mode [ 205.810006][T10943] team0: Port device netdevsim0 removed [ 205.820584][T10951] validate_nla: 24 callbacks suppressed [ 205.820602][T10951] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 205.820708][T10950] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 205.826181][T10951] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1445'. [ 205.858287][T10950] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1445'. [ 205.875236][T10945] virt_wifi0 speed is unknown, defaulting to 1000 [ 205.892898][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.907897][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.982458][T10926] team0: Port device team_slave_0 added [ 206.003733][T10943] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.034404][T10926] team0: Port device team_slave_1 added [ 206.045839][T10943] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.062577][T10943] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.117775][T10943] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.143691][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.153575][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.207157][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.239737][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.249963][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.276435][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.296824][T10970] xt_NFQUEUE: number of total queues is 0 [ 206.307875][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 206.374329][T10973] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1452'. [ 206.386792][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 206.508166][ T4039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.555634][T10926] hsr_slave_0: entered promiscuous mode [ 206.562116][T10926] hsr_slave_1: entered promiscuous mode [ 206.571156][T10926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.579239][T10926] Cannot create hsr debugfs directory [ 206.594268][T10945] chnl_net:caif_netlink_parms(): no params data found [ 206.629433][ T4039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.726533][ T4039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.741306][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.756893][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.771995][T10945] bridge_slave_0: entered allmulticast mode [ 206.786552][T10945] bridge_slave_0: entered promiscuous mode [ 206.798736][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.806209][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.814928][T10945] bridge_slave_1: entered allmulticast mode [ 206.827517][T10945] bridge_slave_1: entered promiscuous mode [ 206.831479][T11002] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.901125][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.929356][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.952217][ T4039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.012166][T10945] team0: Port device team_slave_0 added [ 207.028591][T10945] team0: Port device team_slave_1 added [ 207.075047][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.086291][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.135745][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.156266][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.163966][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.190420][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.266314][T10945] hsr_slave_0: entered promiscuous mode [ 207.277628][T10945] hsr_slave_1: entered promiscuous mode [ 207.286522][T10945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.294362][T10945] Cannot create hsr debugfs directory [ 207.301567][ T4039] bridge_slave_1: left allmulticast mode [ 207.311842][ T4039] bridge_slave_1: left promiscuous mode [ 207.319501][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.340030][ T4039] bridge_slave_0: left allmulticast mode [ 207.346179][ T4039] bridge_slave_0: left promiscuous mode [ 207.362331][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.535545][ T4039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.548809][ T4039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.568278][ T4039] bond0 (unregistering): Released all slaves [ 207.747100][ T5853] Bluetooth: hci1: command tx timeout [ 209.826893][ T5853] Bluetooth: hci1: command tx timeout [ 210.643355][T11034] netlink: 'syz.0.1468': attribute type 12 has an invalid length. [ 210.652638][T11034] __nla_validate_parse: 2 callbacks suppressed [ 210.652657][T11034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1468'. [ 210.731602][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 210.740841][T11056] netlink: 'syz.0.1476': attribute type 3 has an invalid length. [ 210.798859][T10926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.853190][T10926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.871946][T10926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.916485][T10926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.998576][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 211.029829][T11071] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1481'. [ 211.126928][ T4039] hsr_slave_0: left promiscuous mode [ 211.155936][ T4039] hsr_slave_1: left promiscuous mode [ 211.167772][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.175788][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.200510][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.216449][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.229191][ T4039] veth1_macvtap: left promiscuous mode [ 211.234828][ T4039] veth0_macvtap: left promiscuous mode [ 211.246791][ T4039] veth1_vlan: left promiscuous mode [ 211.252164][ T4039] veth0_vlan: left promiscuous mode [ 211.260084][T11093] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1486'. [ 211.277934][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 211.290971][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 211.490782][ T4039] team0 (unregistering): Port device team_slave_1 removed [ 211.512659][ T4039] team0 (unregistering): Port device team_slave_0 removed [ 211.662117][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.749731][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.763244][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.770415][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.801686][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.808925][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.832480][T10945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.851164][T11110] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1491'. [ 211.869902][T10945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.890112][T10945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.917329][ T5853] Bluetooth: hci1: command tx timeout [ 211.920619][T10926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.937677][T10926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.965856][T10945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.100358][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.162037][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.199268][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.206458][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.244453][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.251670][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.347632][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 212.379928][T11138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1499'. [ 212.409983][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.438129][T11141] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 212.510999][T10926] veth0_vlan: entered promiscuous mode [ 212.523745][T10926] veth1_vlan: entered promiscuous mode [ 212.536033][ T5853] Bluetooth: hci4: link tx timeout [ 212.542827][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.606159][T10926] veth0_macvtap: entered promiscuous mode [ 212.635643][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.647016][T11155] netlink: 'syz.0.1503': attribute type 10 has an invalid length. [ 212.666342][T10926] veth1_macvtap: entered promiscuous mode [ 212.712893][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.723685][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.734646][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.745915][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.760058][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.772991][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.802443][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.831532][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.847460][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.860845][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.873529][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.885526][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.909475][T10945] veth0_vlan: entered promiscuous mode [ 212.918561][T10926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.928928][T10926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.938412][T10926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.948718][T10926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.964420][T10945] veth1_vlan: entered promiscuous mode [ 213.034833][T10945] veth0_macvtap: entered promiscuous mode [ 213.044534][T11170] netdevsim netdevsim1: Direct firmware load for . [ 213.044534][T11170] failed with error -2 [ 213.066932][T11170] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 213.066932][T11170] [ 213.068178][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.089241][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.097653][T10945] veth1_macvtap: entered promiscuous mode [ 213.108902][ T4039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.121677][ T4039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.130168][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.142296][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.154812][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.195794][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.209249][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.221826][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.232043][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.242837][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.253451][ T29] audit: type=1107 audit(1738248368.829:2): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÄÖAÓö,åDCfx1yŠ¬=;„Ž1ß³D`×›Š–¨mü§`ò­t·›Q}Ï÷ã1ÖJCϦðIè“P­Ï?ºÒµËmpËÍùà.0qÀg;"föóbÓ§Øwøؾ‚àHi¢¾ç:G›û·À‘ û¦¿ [ 213.253451][ T29] [»Ûov¼1{Ì*ö0÷ rejected, already enabled [ 213.932411][T11210] IPVS: stopping backup sync thread 11211 ... [ 214.115732][T11232] netlink: 'syz.0.1530': attribute type 10 has an invalid length. [ 214.137658][ T4039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.622941][ T4039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.633597][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 215.188931][ T4039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.269762][ T4039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.291862][T11236] xt_policy: output policy not valid in PREROUTING and INPUT [ 215.375340][ T4039] bridge_slave_1: left allmulticast mode [ 215.383597][ T4039] bridge_slave_1: left promiscuous mode [ 215.389851][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.400741][ T4039] bridge_slave_0: left allmulticast mode [ 215.407485][ T4039] bridge_slave_0: left promiscuous mode [ 215.413266][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.458866][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.466304][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.474935][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.483468][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.491121][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.499445][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.544063][ T4039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.556398][ T4039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.566449][ T4039] bond0 (unregistering): Released all slaves [ 215.585476][T11239] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.677758][T11239] chnl_net:caif_netlink_parms(): no params data found [ 215.731556][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.739493][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.747022][T11239] bridge_slave_0: entered allmulticast mode [ 215.753770][T11239] bridge_slave_0: entered promiscuous mode [ 215.762723][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.769975][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.777498][T11239] bridge_slave_1: entered allmulticast mode [ 215.784152][T11239] bridge_slave_1: entered promiscuous mode [ 215.799350][ T4039] hsr_slave_0: left promiscuous mode [ 215.805351][ T4039] hsr_slave_1: left promiscuous mode [ 215.811622][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.820008][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.827913][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.835381][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.845482][ T4039] veth1_macvtap: left promiscuous mode [ 215.851416][ T4039] veth0_macvtap: left promiscuous mode [ 215.857230][ T4039] veth1_vlan: left promiscuous mode [ 215.862589][ T4039] veth0_vlan: left promiscuous mode [ 215.979829][ T4039] team0 (unregistering): Port device team_slave_1 removed [ 215.996915][ T4039] team0 (unregistering): Port device team_slave_0 removed [ 216.118418][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.145498][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.167914][T11257] netlink: 'syz.0.1534': attribute type 10 has an invalid length. [ 216.254123][T11239] team0: Port device team_slave_0 added [ 216.279609][T11239] team0: Port device team_slave_1 added [ 216.327250][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.334712][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.342211][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.350076][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.357653][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.365051][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.395558][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.403989][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.431992][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.448221][T11261] virt_wifi0 speed is unknown, defaulting to 1000 [ 216.455292][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.462774][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.488979][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.556267][T11239] hsr_slave_0: entered promiscuous mode [ 216.562986][T11239] hsr_slave_1: entered promiscuous mode [ 216.572866][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.592948][T11239] Cannot create hsr debugfs directory [ 216.824616][T11284] __nla_validate_parse: 12 callbacks suppressed [ 216.824637][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 216.845757][T11284] macsec0: entered promiscuous mode [ 216.870388][ T4039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.897543][T11284] veth5: entered allmulticast mode [ 216.917848][T11261] chnl_net:caif_netlink_parms(): no params data found [ 217.031041][T11296] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 217.093522][ T4039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.401296][T11261] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.415099][T11261] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.439450][T11261] bridge_slave_0: entered allmulticast mode [ 217.448410][T11261] bridge_slave_0: entered promiscuous mode [ 217.464693][T11261] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.472393][T11261] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.483355][T11261] bridge_slave_1: entered allmulticast mode [ 217.491319][T11261] bridge_slave_1: entered promiscuous mode [ 217.586749][ T5853] Bluetooth: hci0: command tx timeout [ 217.616418][ T4039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.720103][T11261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.742524][T11261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.793388][T11261] team0: Port device team_slave_0 added [ 217.819435][T11239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.835749][ T4039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.859366][T11261] team0: Port device team_slave_1 added [ 217.875299][T11239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.890341][T11339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.929216][T11239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.941442][T11261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.957737][T11261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.984562][T11261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.997593][T11239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.013005][T11261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.023668][T11261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.050627][T11261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.078582][T11350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1564'. [ 218.108310][T11350] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 218.116377][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 218.148202][T11261] hsr_slave_0: entered promiscuous mode [ 218.154499][T11261] hsr_slave_1: entered promiscuous mode [ 218.161078][T11261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.169116][T11261] Cannot create hsr debugfs directory [ 218.176344][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 218.182605][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 218.197507][ T4039] bridge_slave_1: left allmulticast mode [ 218.203213][ T4039] bridge_slave_1: left promiscuous mode [ 218.209498][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.218501][ T4039] bridge_slave_0: left allmulticast mode [ 218.224195][ T4039] bridge_slave_0: left promiscuous mode [ 218.230637][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.370072][ T4039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.382657][ T4039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.391811][ T5853] Bluetooth: hci1: command tx timeout [ 218.393117][ T4039] bond0 (unregistering): Released all slaves [ 218.600912][T11380] sctp: [Deprecated]: syz.1.1571 (pid 11380) Use of int in max_burst socket option. [ 218.600912][T11380] Use struct sctp_assoc_value instead [ 218.618892][T11373] sctp: [Deprecated]: syz.1.1571 (pid 11373) Use of int in max_burst socket option. [ 218.618892][T11373] Use struct sctp_assoc_value instead [ 218.695499][T11377] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1572'. [ 218.707979][T11377] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1572'. [ 218.826523][ T4039] hsr_slave_0: left promiscuous mode [ 218.834971][ T4039] hsr_slave_1: left promiscuous mode [ 218.849780][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.858376][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.871375][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.879689][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.892646][ T4039] veth1_macvtap: left promiscuous mode [ 218.899283][ T4039] veth0_macvtap: left promiscuous mode [ 218.904970][ T4039] veth1_vlan: left promiscuous mode [ 218.911339][ T4039] veth0_vlan: left promiscuous mode [ 219.038796][ T4039] team0 (unregistering): Port device team_slave_1 removed [ 219.069538][ T4039] team0 (unregistering): Port device team_slave_0 removed [ 219.150107][T11239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.163557][T11406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.205899][T11239] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.230882][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.238095][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.283658][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.290938][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.312413][T11416] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 219.335871][T11261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.361488][T11261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.387709][T11261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.409023][T11261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.547448][T11261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.564246][T11431] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1589'. [ 219.571698][T11261] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.585539][T11434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1590'. [ 219.607072][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.614225][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.623833][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.631002][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.669041][ T5853] Bluetooth: hci0: command tx timeout [ 219.705149][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.720422][T11437] netlink: 1152 bytes leftover after parsing attributes in process `syz.0.1591'. [ 219.734626][T11261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.737034][T11437] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 219.754702][T11261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.776024][T11437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.817307][T11437] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 219.879694][T11239] veth0_vlan: entered promiscuous mode [ 219.904328][T11239] veth1_vlan: entered promiscuous mode [ 219.947998][T11239] veth0_macvtap: entered promiscuous mode [ 219.990844][T11261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.003644][T11239] veth1_macvtap: entered promiscuous mode [ 220.046398][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.066957][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.085123][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.107302][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.124621][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.142279][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.154858][T11239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.170901][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.181792][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.192820][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.203686][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.215243][T11239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.237852][T11239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.248075][T11239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.257431][T11239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.266324][T11239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.332675][T11261] veth0_vlan: entered promiscuous mode [ 220.388858][T11261] veth1_vlan: entered promiscuous mode [ 220.395159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.415741][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.451825][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.467641][ T5853] Bluetooth: hci1: command tx timeout [ 220.474308][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.509210][T11261] veth0_macvtap: entered promiscuous mode [ 220.528308][T11261] veth1_macvtap: entered promiscuous mode [ 220.555461][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.586911][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.598345][T11480] netlink: 'syz.0.1601': attribute type 39 has an invalid length. [ 220.610030][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.621406][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.632809][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.643662][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.653839][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.664989][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.676370][T11261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.688233][T11480] veth0_macvtap: left promiscuous mode [ 220.742153][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.753231][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.765736][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.777131][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.790816][T11261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.804124][T11261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.815377][T11261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.833859][T11261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.843009][T11261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.853092][T11261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.862074][T11261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.943130][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.952299][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.023874][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.037375][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.077376][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.470895][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.821206][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.040033][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.304179][ T69] bridge_slave_1: left allmulticast mode [ 222.310955][ T69] bridge_slave_1: left promiscuous mode [ 222.317098][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.328156][ T69] bridge_slave_0: left allmulticast mode [ 222.333843][ T69] bridge_slave_0: left promiscuous mode [ 222.340417][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.386849][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 222.471949][T11507] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.489544][T11507] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 222.504056][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.523678][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.539472][ T69] bond0 (unregistering): Released all slaves [ 222.572805][T11508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.657922][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.665326][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.672860][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.682156][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.690120][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.697516][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.723625][T11510] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.783156][ T69] hsr_slave_0: left promiscuous mode [ 222.789651][ T69] hsr_slave_1: left promiscuous mode [ 222.795343][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.803177][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.811981][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.819719][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.829629][ T69] veth1_macvtap: left promiscuous mode [ 222.835147][ T69] veth0_macvtap: left promiscuous mode [ 222.840913][ T69] veth1_vlan: left promiscuous mode [ 222.846208][ T69] veth0_vlan: left promiscuous mode [ 222.968978][ T69] team0 (unregistering): Port device team_slave_1 removed [ 222.982165][ T69] team0 (unregistering): Port device team_slave_0 removed [ 223.045255][T11510] chnl_net:caif_netlink_parms(): no params data found [ 223.094200][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.101434][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.109142][T11510] bridge_slave_0: entered allmulticast mode [ 223.115731][T11510] bridge_slave_0: entered promiscuous mode [ 223.123875][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.131712][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.139903][T11510] bridge_slave_1: entered allmulticast mode [ 223.146534][T11510] bridge_slave_1: entered promiscuous mode [ 223.168540][T11510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.179563][T11510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.203264][T11510] team0: Port device team_slave_0 added [ 223.210952][T11510] team0: Port device team_slave_1 added [ 223.230324][T11510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.237429][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.263969][T11510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.278972][T11510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.285953][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.312712][T11510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.348412][T11510] hsr_slave_0: entered promiscuous mode [ 223.354755][T11510] hsr_slave_1: entered promiscuous mode [ 223.383090][T11510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.395229][T11510] Cannot create hsr debugfs directory [ 223.530820][T11529] tipc: Enabled bearer , priority 11 [ 223.579994][T11531] __nla_validate_parse: 4 callbacks suppressed [ 223.580016][T11531] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1613'. [ 223.735670][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.790520][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.805454][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.817713][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.825418][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.832509][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 223.832561][ T5145] Bluetooth: hci3: command 0x0406 tx timeout [ 223.851285][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.858662][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.914906][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.981581][T11557] virt_wifi0 speed is unknown, defaulting to 1000 [ 224.019449][T11553] virt_wifi0 speed is unknown, defaulting to 1000 [ 224.030315][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 224.037833][T11510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.066356][T11510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.134621][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.148540][T11510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.190891][T11510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.241231][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 224.285337][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.304778][T11572] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 224.314773][T11571] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 224.337333][T11571] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1622'. [ 224.349315][T11572] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1622'. [ 224.393913][T11553] chnl_net:caif_netlink_parms(): no params data found [ 224.530423][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.540210][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 224.545461][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.559033][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1626'. [ 224.559718][T11553] bridge_slave_0: entered allmulticast mode [ 224.573848][T11590] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 224.575650][T11553] bridge_slave_0: entered promiscuous mode [ 224.591041][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.598315][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.605667][T11553] bridge_slave_1: entered allmulticast mode [ 224.613099][T11553] bridge_slave_1: entered promiscuous mode [ 224.643059][T11595] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1628'. [ 224.679143][T11597] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 224.692348][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.707040][ T5852] Bluetooth: hci0: command tx timeout [ 224.714769][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.724021][ T69] bridge_slave_1: left allmulticast mode [ 224.730388][ T69] bridge_slave_1: left promiscuous mode [ 224.737074][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.746155][ T69] bridge_slave_0: left allmulticast mode [ 224.752388][ T69] bridge_slave_0: left promiscuous mode [ 224.758686][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.773580][T11603] x_tables: duplicate underflow at hook 2 [ 224.801170][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.902040][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.913729][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.924215][ T69] bond0 (unregistering): Released all slaves [ 224.948719][T11553] team0: Port device team_slave_0 added [ 224.963890][T11553] team0: Port device team_slave_1 added [ 224.985639][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.029757][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.039509][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.065953][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.101255][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.108475][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.122411][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.129632][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.141627][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.149694][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.153496][T11618] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.177731][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.262322][T11553] hsr_slave_0: entered promiscuous mode [ 225.270701][T11553] hsr_slave_1: entered promiscuous mode [ 225.280074][T11553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.287957][T11553] Cannot create hsr debugfs directory [ 225.392162][ T69] hsr_slave_0: left promiscuous mode [ 225.398651][ T69] hsr_slave_1: left promiscuous mode [ 225.404545][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.412798][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.421042][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.431100][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.444569][ T69] veth1_macvtap: left promiscuous mode [ 225.450484][ T69] veth0_macvtap: left promiscuous mode [ 225.456084][ T69] veth1_vlan: left promiscuous mode [ 225.461902][ T69] veth0_vlan: left promiscuous mode [ 225.633323][ T69] team0 (unregistering): Port device team_slave_1 removed [ 225.653011][ T69] team0 (unregistering): Port device team_slave_0 removed [ 225.720363][T11641] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 225.729843][T11641] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 225.907265][ T5852] Bluetooth: hci1: command tx timeout [ 225.915999][T11658] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1648'. [ 225.920249][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.981161][T11510] veth0_vlan: entered promiscuous mode [ 226.003141][T11510] veth1_vlan: entered promiscuous mode [ 226.060861][T11510] veth0_macvtap: entered promiscuous mode [ 226.069861][T11510] veth1_macvtap: entered promiscuous mode [ 226.084200][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.100454][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.110726][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.121821][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.132001][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.142827][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.154116][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.178517][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.190401][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.203649][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.214804][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.228014][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.246534][T11510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.263913][T11510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.278840][T11510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.287972][T11510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.361498][T11553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.395479][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.396717][T11553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.416491][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.472041][T11553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.492981][T11553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.513421][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.544330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.753422][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.785852][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.812504][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.819686][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.840938][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.848141][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.862372][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 226.924913][T11553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.941871][T11553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.138677][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.175839][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.224851][T11726] netlink: 'syz.1.1669': attribute type 4 has an invalid length. [ 227.234829][T11553] veth0_vlan: entered promiscuous mode [ 227.251419][T11553] veth1_vlan: entered promiscuous mode [ 227.291882][T11553] veth0_macvtap: entered promiscuous mode [ 227.304543][T11553] veth1_macvtap: entered promiscuous mode [ 227.322991][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.334633][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.345021][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.356072][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.366191][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.377151][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.387810][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.398569][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.410028][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.422281][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.435031][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.445264][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.456880][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.467422][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.478034][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.489545][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.500749][T11553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.510548][T11553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.519399][T11553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.537959][T11553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.584587][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.595345][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.617306][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.625188][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.700796][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.120066][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.611693][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.684070][ T69] bridge_slave_1: left allmulticast mode [ 228.690222][ T69] bridge_slave_1: left promiscuous mode [ 228.695947][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.705001][ T69] bridge_slave_0: left allmulticast mode [ 228.711196][ T69] bridge_slave_0: left promiscuous mode [ 228.717748][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.814901][T11736] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1672'. [ 228.837603][T11733] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 228.940605][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.957335][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.969762][ T69] bond0 (unregistering): Released all slaves [ 228.989602][T11733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.005005][T11732] batadv_slave_1: entered allmulticast mode [ 229.012550][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.021447][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.021680][T11736] batadv_slave_1: left allmulticast mode [ 229.035556][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.043707][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.051750][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.059406][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.091442][T11749] virt_wifi0 speed is unknown, defaulting to 1000 [ 229.172532][T11758] SET target dimension over the limit! [ 229.180969][T11758] tipc: Enabling of bearer rejected, failed to enable media [ 229.192419][T11755] can: request_module (can-proto-0) failed. [ 229.314561][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 229.341058][ T69] hsr_slave_0: left promiscuous mode [ 229.351921][ T69] hsr_slave_1: left promiscuous mode [ 229.359369][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.372065][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.381186][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.391566][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.404298][ T69] veth1_macvtap: left promiscuous mode [ 229.418372][ T69] veth0_macvtap: left promiscuous mode [ 229.424164][ T69] veth1_vlan: left promiscuous mode [ 229.429789][ T69] veth0_vlan: left promiscuous mode [ 229.565925][ T69] team0 (unregistering): Port device team_slave_1 removed [ 229.589251][ T69] team0 (unregistering): Port device team_slave_0 removed [ 229.648878][T11749] chnl_net:caif_netlink_parms(): no params data found [ 229.721523][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.728886][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.736097][T11749] bridge_slave_0: entered allmulticast mode [ 229.743152][T11749] bridge_slave_0: entered promiscuous mode [ 229.751379][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.758565][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.765767][T11749] bridge_slave_1: entered allmulticast mode [ 229.772537][T11749] bridge_slave_1: entered promiscuous mode [ 229.793015][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.804089][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.826206][T11749] team0: Port device team_slave_0 added [ 229.834518][T11749] team0: Port device team_slave_1 added [ 229.855222][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.862380][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.889087][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.900876][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.908434][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.934457][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.972122][T11749] hsr_slave_0: entered promiscuous mode [ 229.978936][T11749] hsr_slave_1: entered promiscuous mode [ 229.984966][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.992706][T11749] Cannot create hsr debugfs directory [ 230.071021][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.238218][T11749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.247329][T11749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.258168][T11749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.267112][T11749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.283688][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.290816][T11749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.298273][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.305367][T11749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.344228][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.358845][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.366501][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.381432][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.393441][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.400585][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.412113][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.419238][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.493742][T11782] bond5: entered promiscuous mode [ 230.504099][T11782] bond5: entered allmulticast mode [ 230.513664][T11782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.689570][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.698017][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.707186][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.714939][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.722982][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.730402][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.771556][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1686'. [ 230.783457][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.793654][T11795] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.843682][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.928712][T11813] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1686'. [ 230.942056][T11749] veth0_vlan: entered promiscuous mode [ 230.954040][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.984985][T11749] veth1_vlan: entered promiscuous mode [ 231.040336][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.104388][T11749] veth0_macvtap: entered promiscuous mode [ 231.106903][ T5852] Bluetooth: hci0: command tx timeout [ 231.126606][T11749] veth1_macvtap: entered promiscuous mode [ 231.167371][T11795] chnl_net:caif_netlink_parms(): no params data found [ 231.231457][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.244687][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.255962][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.268262][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.289132][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.299840][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.312809][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.325292][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.337246][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.353535][ T69] bridge_slave_1: left allmulticast mode [ 231.360620][ T69] bridge_slave_1: left promiscuous mode [ 231.366415][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.384327][ T69] bridge_slave_0: left allmulticast mode [ 231.390122][ T69] bridge_slave_0: left promiscuous mode [ 231.395842][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.436037][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.450857][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.461495][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.472485][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.482831][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.493400][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.504274][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.643660][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.654684][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.664604][ T69] bond0 (unregistering): Released all slaves [ 231.677446][T11749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.686213][T11749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.696499][T11749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.705708][T11749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.740915][T11795] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.748807][T11795] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.756073][T11795] bridge_slave_0: entered allmulticast mode [ 231.771128][T11795] bridge_slave_0: entered promiscuous mode [ 231.791391][T11795] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.811489][T11795] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.820447][T11795] bridge_slave_1: entered allmulticast mode [ 231.828528][T11795] bridge_slave_1: entered promiscuous mode [ 231.850994][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1700'. [ 231.870138][T11865] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1700'. [ 231.901415][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 231.926438][T11795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.963848][T11795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.023781][T11795] team0: Port device team_slave_0 added [ 232.051028][T11795] team0: Port device team_slave_1 added [ 232.787186][ T5852] Bluetooth: hci1: command tx timeout [ 233.187166][ T5852] Bluetooth: hci0: command tx timeout [ 234.866881][ T5852] Bluetooth: hci1: command tx timeout [ 235.266888][ T5852] Bluetooth: hci0: command tx timeout [ 236.947139][ T5852] Bluetooth: hci1: command tx timeout [ 237.346903][ T5852] Bluetooth: hci0: command tx timeout [ 239.027594][ T5841] Bluetooth: hci1: command tx timeout [ 248.138020][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.146965][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.155937][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.163733][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.171735][ T5852] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.179275][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.233467][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.240857][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.248472][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.256353][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.264254][ T5852] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 248.271831][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.288318][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.295657][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.303124][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.311109][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.319032][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 248.326305][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.227094][ T5841] Bluetooth: hci5: command tx timeout [ 250.306951][ T5841] Bluetooth: hci6: command tx timeout [ 250.387327][ T5841] Bluetooth: hci7: command tx timeout [ 252.306887][ T5841] Bluetooth: hci5: command tx timeout [ 252.386904][ T5841] Bluetooth: hci6: command tx timeout [ 252.466879][ T5841] Bluetooth: hci7: command tx timeout [ 252.467872][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 254.388200][ T5841] Bluetooth: hci5: command tx timeout [ 254.466816][ T5841] Bluetooth: hci6: command tx timeout [ 254.546864][ T5841] Bluetooth: hci7: command tx timeout [ 256.466935][ T5841] Bluetooth: hci5: command tx timeout [ 256.546862][ T5841] Bluetooth: hci6: command tx timeout [ 256.627200][ T5841] Bluetooth: hci7: command tx timeout [ 262.709534][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.722018][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 290.729545][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 290.737172][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 290.744948][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 290.752587][ T5852] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 290.759855][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 292.787017][ T5841] Bluetooth: hci8: command tx timeout [ 292.832090][ T5852] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 292.839485][ T5852] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 292.847091][ T5852] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 292.854861][ T5852] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 292.862696][ T5852] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 292.870094][ T5852] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 294.866860][ T5852] Bluetooth: hci8: command tx timeout [ 294.946757][ T5852] Bluetooth: hci9: command tx timeout [ 296.946925][ T5852] Bluetooth: hci8: command tx timeout [ 297.027075][ T5852] Bluetooth: hci9: command tx timeout [ 299.026824][ T5852] Bluetooth: hci8: command tx timeout [ 299.106798][ T5852] Bluetooth: hci9: command tx timeout [ 301.186894][ T5852] Bluetooth: hci9: command tx timeout [ 308.977404][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 308.984776][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 308.992180][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 309.000140][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 309.009967][ T5841] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 309.017394][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 309.043455][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 309.051052][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 309.062435][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 309.070338][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 309.080867][ T5841] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 309.084206][ T5853] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 309.088200][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 309.095716][ T5853] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 309.110828][ T5853] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 309.118850][ T5853] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 309.126430][ T5853] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 309.133820][ T5853] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 311.026833][ T5845] Bluetooth: hci10: command tx timeout [ 311.106783][ T5845] Bluetooth: hci11: command tx timeout [ 311.186762][ T5845] Bluetooth: hci12: command tx timeout [ 313.106848][ T5845] Bluetooth: hci10: command tx timeout [ 313.186976][ T5845] Bluetooth: hci11: command tx timeout [ 313.267175][ T5845] Bluetooth: hci12: command tx timeout [ 313.906847][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 315.187180][ T5845] Bluetooth: hci10: command tx timeout [ 315.266965][ T5845] Bluetooth: hci11: command tx timeout [ 315.346913][ T5845] Bluetooth: hci12: command tx timeout [ 317.266926][ T5845] Bluetooth: hci10: command tx timeout [ 317.346815][ T5845] Bluetooth: hci11: command tx timeout [ 317.426770][ T5845] Bluetooth: hci12: command tx timeout [ 324.150779][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 351.826932][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 353.153686][ T5853] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 353.161297][ T5853] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 353.169181][ T5853] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 353.177375][ T5853] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 353.185151][ T5853] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 353.192672][ T5853] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 355.266687][ T5853] Bluetooth: hci13: command tx timeout [ 355.373055][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 355.380614][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 355.388577][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 355.396424][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 355.404189][ T5841] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 355.411769][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 356.946731][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 357.346798][ T5845] Bluetooth: hci13: command tx timeout [ 357.426864][ T5845] Bluetooth: hci14: command tx timeout [ 359.426692][ T5845] Bluetooth: hci13: command tx timeout [ 359.506765][ T5845] Bluetooth: hci14: command tx timeout [ 361.506712][ T5845] Bluetooth: hci13: command tx timeout [ 361.586783][ T5845] Bluetooth: hci14: command tx timeout [ 363.666758][ T5845] Bluetooth: hci14: command tx timeout [ 369.706805][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 369.714033][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 369.724384][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 369.724531][ T5852] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 369.739465][ T5852] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 369.747823][ T5852] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 369.755105][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 369.755402][ T5852] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 369.770363][ T5841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 369.770391][ T5852] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 369.787118][ T5841] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 369.794458][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 369.818737][ T5841] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 369.826320][ T5841] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 369.833880][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 369.841960][ T5841] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 369.850109][ T5841] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 369.857772][ T5841] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 371.827157][ T54] Bluetooth: hci15: command tx timeout [ 371.828536][ T5845] Bluetooth: hci16: command tx timeout [ 371.906783][ T5845] Bluetooth: hci17: command tx timeout [ 372.306994][ T5845] Bluetooth: hci7: command 0x0406 tx timeout [ 372.307638][ T5145] Bluetooth: hci6: command 0x0406 tx timeout [ 372.314710][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 373.906896][ T5852] Bluetooth: hci16: command tx timeout [ 373.908491][ T5841] Bluetooth: hci15: command tx timeout [ 373.986918][ T5841] Bluetooth: hci17: command tx timeout [ 375.986982][ T5841] Bluetooth: hci15: command tx timeout [ 375.989807][ T5852] Bluetooth: hci16: command tx timeout [ 376.066771][ T5852] Bluetooth: hci17: command tx timeout [ 378.066883][ T5852] Bluetooth: hci15: command tx timeout [ 378.071401][ T5841] Bluetooth: hci16: command tx timeout [ 378.146765][ T5841] Bluetooth: hci17: command tx timeout [ 381.107145][ T30] INFO: task kworker/u8:4:69 blocked for more than 143 seconds. [ 381.114913][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 381.122436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.131183][ T30] task:kworker/u8:4 state:D stack:21560 pid:69 tgid:69 ppid:2 flags:0x00004000 [ 381.141739][ T30] Workqueue: netns cleanup_net [ 381.146731][ T30] Call Trace: [ 381.150030][ T30] [ 381.152959][ T30] __schedule+0x186c/0x4be0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.157527][ T30] ? schedule+0x90/0x320 [ 381.161921][ T30] ? schedule+0x90/0x320 [ 381.166203][ T30] ? __pfx___schedule+0x10/0x10 [ 381.171488][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.196917][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.201766][ T30] ? kthread_data+0x52/0xd0 [ 381.206298][ T30] ? schedule+0x90/0x320 [ 381.218023][ T30] ? wq_worker_sleeping+0x66/0x240 [ 381.223302][ T30] ? schedule+0x90/0x320 [ 381.229073][ T30] schedule+0x14b/0x320 [ 381.233303][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.238893][ T30] __mutex_lock+0x817/0x1010 [ 381.243505][ T30] ? __mutex_lock+0x602/0x1010 [ 381.248374][ T30] ? unregister_netdevice_many_notify+0x1c2c/0x2030 [ 381.254989][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.260382][ T30] ? __pfx___might_resched+0x10/0x10 [ 381.265672][ T30] ? __pfx_device_del+0x10/0x10 [ 381.270664][ T30] unregister_netdevice_many_notify+0x1c2c/0x2030 [ 381.277148][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 381.283935][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.289041][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.294250][ T30] unregister_netdevice_queue+0x303/0x370 [ 381.300057][ T30] ? __pfx_up_write+0x10/0x10 [ 381.304773][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 381.311122][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 381.317225][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 381.322914][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 381.328838][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 381.335201][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.340269][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 381.345660][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 381.351575][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 381.357715][ T30] hwsim_exit_net+0x5c1/0x670 [ 381.362410][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 381.367766][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 381.373629][ T30] cleanup_net+0x812/0xd60 [ 381.378367][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 381.383307][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.388145][ T30] ? process_scheduled_works+0x976/0x1840 [ 381.393884][ T30] process_scheduled_works+0xa66/0x1840 [ 381.399664][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.405672][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 381.411565][ T30] ? assign_work+0x364/0x3d0 [ 381.416210][ T30] worker_thread+0x870/0xd30 [ 381.420910][ T30] ? __kthread_parkme+0x169/0x1d0 [ 381.425955][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.431194][ T30] kthread+0x7a9/0x920 [ 381.435334][ T30] ? __pfx_kthread+0x10/0x10 [ 381.440281][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.445429][ T30] ? __pfx_kthread+0x10/0x10 [ 381.450156][ T30] ? __pfx_kthread+0x10/0x10 [ 381.454772][ T30] ? __pfx_kthread+0x10/0x10 [ 381.459432][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.464667][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 381.470257][ T30] ? __pfx_kthread+0x10/0x10 [ 381.474902][ T30] ret_from_fork+0x4b/0x80 [ 381.479410][ T30] ? __pfx_kthread+0x10/0x10 [ 381.484023][ T30] ret_from_fork_asm+0x1a/0x30 [ 381.488857][ T30] [ 381.491986][ T30] INFO: task kworker/u8:6:3899 blocked for more than 143 seconds. [ 381.500277][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 381.507657][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.516345][ T30] task:kworker/u8:6 state:D stack:20720 pid:3899 tgid:3899 ppid:2 flags:0x00004000 [ 381.526894][ T30] Workqueue: events_unbound linkwatch_event [ 381.532821][ T30] Call Trace: [ 381.536092][ T30] [ 381.539079][ T30] __schedule+0x186c/0x4be0 [ 381.543620][ T30] ? schedule+0x90/0x320 [ 381.547923][ T30] ? schedule+0x90/0x320 [ 381.552203][ T30] ? __pfx___schedule+0x10/0x10 [ 381.557498][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.562546][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.567408][ T30] ? kthread_data+0x52/0xd0 [ 381.571929][ T30] ? schedule+0x90/0x320 [ 381.576170][ T30] ? wq_worker_sleeping+0x66/0x240 [ 381.581362][ T30] ? schedule+0x90/0x320 [ 381.585629][ T30] schedule+0x14b/0x320 [ 381.590285][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.595791][ T30] __mutex_lock+0x817/0x1010 [ 381.600592][ T30] ? __mutex_lock+0x602/0x1010 [ 381.605427][ T30] ? linkwatch_event+0xe/0x60 [ 381.610282][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.615323][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 381.621640][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 381.627080][ T30] ? process_scheduled_works+0x976/0x1840 [ 381.632819][ T30] linkwatch_event+0xe/0x60 [ 381.637386][ T30] process_scheduled_works+0xa66/0x1840 [ 381.642963][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.649322][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 381.654880][ T30] ? assign_work+0x364/0x3d0 [ 381.659533][ T30] worker_thread+0x870/0xd30 [ 381.664147][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.670533][ T30] ? __kthread_parkme+0x169/0x1d0 [ 381.675584][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.681117][ T30] kthread+0x7a9/0x920 [ 381.685219][ T30] ? __pfx_kthread+0x10/0x10 [ 381.689903][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.695030][ T30] ? __pfx_kthread+0x10/0x10 [ 381.699719][ T30] ? __pfx_kthread+0x10/0x10 [ 381.704470][ T30] ? __pfx_kthread+0x10/0x10 [ 381.709402][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.714611][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 381.719866][ T30] ? __pfx_kthread+0x10/0x10 [ 381.724493][ T30] ret_from_fork+0x4b/0x80 [ 381.728994][ T30] ? __pfx_kthread+0x10/0x10 [ 381.733617][ T30] ret_from_fork_asm+0x1a/0x30 [ 381.738697][ T30] [ 381.741729][ T30] INFO: task kworker/u8:7:4039 blocked for more than 143 seconds. [ 381.749815][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 381.757157][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.765847][ T30] task:kworker/u8:7 state:D stack:24016 pid:4039 tgid:4039 ppid:2 flags:0x00004000 [ 381.776367][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 381.782478][ T30] Call Trace: [ 381.785755][ T30] [ 381.788746][ T30] __schedule+0x186c/0x4be0 [ 381.793280][ T30] ? schedule+0x90/0x320 [ 381.797892][ T30] ? schedule+0x90/0x320 [ 381.802145][ T30] ? __pfx___schedule+0x10/0x10 [ 381.807315][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.812401][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.817242][ T30] ? kthread_data+0x52/0xd0 [ 381.821763][ T30] ? schedule+0x90/0x320 [ 381.826006][ T30] ? wq_worker_sleeping+0x66/0x240 [ 381.831507][ T30] ? schedule+0x90/0x320 [ 381.835779][ T30] schedule+0x14b/0x320 [ 381.839984][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.845468][ T30] __mutex_lock+0x817/0x1010 [ 381.850137][ T30] ? __mutex_lock+0x602/0x1010 [ 381.854927][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 381.860527][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.865577][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 381.870870][ T30] addrconf_dad_work+0x10e/0x16a0 [ 381.875899][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.881106][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 381.887047][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.893410][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.898260][ T30] ? process_scheduled_works+0x976/0x1840 [ 381.904000][ T30] process_scheduled_works+0xa66/0x1840 [ 381.909912][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.915931][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 381.921844][ T30] ? assign_work+0x364/0x3d0 [ 381.926461][ T30] worker_thread+0x870/0xd30 [ 381.931164][ T30] ? __kthread_parkme+0x169/0x1d0 [ 381.936224][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.941406][ T30] kthread+0x7a9/0x920 [ 381.945503][ T30] ? __pfx_kthread+0x10/0x10 [ 381.950432][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.955566][ T30] ? __pfx_kthread+0x10/0x10 [ 381.960225][ T30] ? __pfx_kthread+0x10/0x10 [ 381.964849][ T30] ? __pfx_kthread+0x10/0x10 [ 381.969522][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.974797][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 381.980401][ T30] ? __pfx_kthread+0x10/0x10 [ 381.985050][ T30] ret_from_fork+0x4b/0x80 [ 381.989718][ T30] ? __pfx_kthread+0x10/0x10 [ 381.994341][ T30] ret_from_fork_asm+0x1a/0x30 [ 381.999284][ T30] [ 382.002373][ T30] INFO: task syz-executor:11749 blocked for more than 144 seconds. [ 382.011212][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 382.018560][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.027334][ T30] task:syz-executor state:D stack:21392 pid:11749 tgid:11749 ppid:1 flags:0x00004006 [ 382.037883][ T30] Call Trace: [ 382.041168][ T30] [ 382.044104][ T30] __schedule+0x186c/0x4be0 [ 382.048669][ T30] ? schedule+0x90/0x320 [ 382.052935][ T30] ? schedule+0x90/0x320 [ 382.057267][ T30] ? __pfx___schedule+0x10/0x10 [ 382.062213][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.067604][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.072395][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.078349][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.084746][ T30] ? schedule+0x90/0x320 [ 382.089070][ T30] schedule+0x14b/0x320 [ 382.093254][ T30] schedule_preempt_disabled+0x13/0x30 [ 382.099080][ T30] __mutex_lock+0x817/0x1010 [ 382.103710][ T30] ? __mutex_lock+0x602/0x1010 [ 382.108639][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 382.114983][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 382.120110][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 382.126135][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 382.132455][ T30] wiphy_register+0x1be5/0x27b0 [ 382.137447][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 382.142669][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 382.147859][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 382.153973][ T30] ieee80211_register_hw+0x354e/0x4240 [ 382.159763][ T30] ? ieee80211_register_hw+0x15b1/0x4240 [ 382.165416][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 382.171298][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 382.177203][ T30] ? __asan_memset+0x23/0x50 [ 382.181833][ T30] ? __hrtimer_init+0x170/0x250 [ 382.187008][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 382.192769][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 382.198941][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 382.204077][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 382.209860][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 382.215583][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 382.222405][ T30] genl_rcv_msg+0xb14/0xec0 [ 382.227021][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.232077][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 382.237365][ T30] ? kasan_save_track+0x51/0x80 [ 382.242249][ T30] ? __sys_sendto+0x363/0x4c0 [ 382.247282][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 382.252317][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 382.257935][ T30] ? __pfx___might_resched+0x10/0x10 [ 382.263254][ T30] netlink_rcv_skb+0x1e3/0x430 [ 382.268108][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.273213][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.278850][ T30] ? lock_release+0xbf/0xa30 [ 382.283463][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 382.288988][ T30] genl_rcv+0x28/0x40 [ 382.292997][ T30] netlink_unicast+0x7f6/0x990 [ 382.297847][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 382.303206][ T30] ? __virt_addr_valid+0x45f/0x530 [ 382.308671][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 382.313706][ T30] ? __check_object_size+0x47a/0x730 [ 382.319228][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 382.324028][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.329524][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 382.334492][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.340110][ T30] __sock_sendmsg+0x221/0x270 [ 382.344813][ T30] __sys_sendto+0x363/0x4c0 [ 382.349396][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 382.354459][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.360919][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.367595][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.372442][ T30] __x64_sys_sendto+0xde/0x100 [ 382.377288][ T30] do_syscall_64+0xf3/0x230 [ 382.381806][ T30] ? clear_bhb_loop+0x35/0x90 [ 382.386485][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.392772][ T30] RIP: 0033:0x7f856678ec3c [ 382.397554][ T30] RSP: 002b:00007fffcab2f940 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 382.406018][ T30] RAX: ffffffffffffffda RBX: 00007f85674d4620 RCX: 00007f856678ec3c [ 382.414061][ T30] RDX: 0000000000000024 RSI: 00007f85674d4670 RDI: 0000000000000003 [ 382.422228][ T30] RBP: 0000000000000000 R08: 00007fffcab2f994 R09: 000000000000000c [ 382.430569][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 382.438660][ T30] R13: 0000000000000000 R14: 00007f85674d4670 R15: 0000000000000000 [ 382.446715][ T30] [ 382.449771][ T30] INFO: task syz-executor:11795 blocked for more than 144 seconds. [ 382.457950][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 382.465315][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.474156][ T30] task:syz-executor state:D stack:22096 pid:11795 tgid:11795 ppid:1 flags:0x00000004 [ 382.484447][ T30] Call Trace: [ 382.488021][ T30] [ 382.490957][ T30] __schedule+0x186c/0x4be0 [ 382.495481][ T30] ? schedule+0x90/0x320 [ 382.499799][ T30] ? schedule+0x90/0x320 [ 382.504078][ T30] ? __pfx___schedule+0x10/0x10 [ 382.509026][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.514086][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.519353][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.525427][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.531861][ T30] ? schedule+0x90/0x320 [ 382.536135][ T30] schedule+0x14b/0x320 [ 382.540384][ T30] schedule_preempt_disabled+0x13/0x30 [ 382.545897][ T30] __mutex_lock+0x817/0x1010 [ 382.550899][ T30] ? __mutex_lock+0x602/0x1010 [ 382.555766][ T30] ? rtnl_newlink+0xce2/0x2210 [ 382.560619][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 382.565666][ T30] ? ns_capable+0x8a/0xf0 [ 382.570047][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 382.575905][ T30] rtnl_newlink+0xce2/0x2210 [ 382.580861][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 382.585921][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.590750][ T30] ? lock_release+0xbf/0xa30 [ 382.595390][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.600229][ T30] ? lock_release+0xbf/0xa30 [ 382.604843][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.610203][ T30] ? bpf_lsm_capable+0x9/0x10 [ 382.614890][ T30] ? security_capable+0x7e/0x2d0 [ 382.619882][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 382.625061][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 382.630199][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 382.635347][ T30] ? lock_release+0xbf/0xa30 [ 382.640335][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.645832][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 382.650929][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.655723][ T30] ? lock_acquire+0xe3/0x550 [ 382.660479][ T30] netlink_rcv_skb+0x1e3/0x430 [ 382.665270][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.671064][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.676370][ T30] ? net_generic+0x1f/0x240 [ 382.680935][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.686155][ T30] netlink_unicast+0x7f6/0x990 [ 382.691052][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 382.696365][ T30] ? __virt_addr_valid+0x45f/0x530 [ 382.701825][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 382.707256][ T30] ? __check_object_size+0x47a/0x730 [ 382.712615][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 382.717468][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.722799][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 382.728271][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.733592][ T30] __sock_sendmsg+0x221/0x270 [ 382.738339][ T30] __sys_sendto+0x363/0x4c0 [ 382.742874][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 382.747970][ T30] ? xfd_validate_state+0x6e/0x150 [ 382.753104][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.759792][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.764598][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.771132][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.775930][ T30] __x64_sys_sendto+0xde/0x100 [ 382.780746][ T30] do_syscall_64+0xf3/0x230 [ 382.785272][ T30] ? clear_bhb_loop+0x35/0x90 [ 382.790416][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.796324][ T30] RIP: 0033:0x7fdf05f8ec3c [ 382.800875][ T30] RSP: 002b:00007ffeab1d0030 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 382.809428][ T30] RAX: ffffffffffffffda RBX: 00007fdf06cd4620 RCX: 00007fdf05f8ec3c [ 382.817733][ T30] RDX: 000000000000006c RSI: 00007fdf06cd4670 RDI: 0000000000000003 [ 382.825725][ T30] RBP: 0000000000000000 R08: 00007ffeab1d0084 R09: 000000000000000c [ 382.833947][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 382.841999][ T30] R13: 0000000000000000 R14: 00007fdf06cd4670 R15: 0000000000000000 [ 382.850332][ T30] [ 382.853372][ T30] INFO: task syz.4.1704:11879 blocked for more than 145 seconds. [ 382.861220][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 382.868585][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.877719][ T30] task:syz.4.1704 state:D stack:28176 pid:11879 tgid:11878 ppid:5846 flags:0x00000004 [ 382.888186][ T30] Call Trace: [ 382.891480][ T30] [ 382.894416][ T30] __schedule+0x186c/0x4be0 [ 382.898996][ T30] ? schedule+0x90/0x320 [ 382.903293][ T30] ? schedule+0x90/0x320 [ 382.907916][ T30] ? __pfx___schedule+0x10/0x10 [ 382.912829][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.917931][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.922726][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.928695][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.935238][ T30] ? schedule+0x90/0x320 [ 382.939823][ T30] schedule+0x14b/0x320 [ 382.943993][ T30] schedule_preempt_disabled+0x13/0x30 [ 382.949531][ T30] __mutex_lock+0x817/0x1010 [ 382.954138][ T30] ? __mutex_lock+0x602/0x1010 [ 382.958956][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 382.964443][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 382.969797][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.974836][ T30] ? futex_wait_queue+0x27/0x1d0 [ 382.979822][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 382.985144][ T30] ? futex_wait_queue+0x14e/0x1d0 [ 382.990337][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 382.996099][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 383.001708][ T30] do_ip_setsockopt+0x129f/0x3cd0 [ 383.006805][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 383.012201][ T30] ? aa_sk_perm+0x96d/0xab0 [ 383.016821][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.021613][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.026459][ T30] ? lock_release+0xbf/0xa30 [ 383.031544][ T30] ip_setsockopt+0x63/0x100 [ 383.036276][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 383.042262][ T30] do_sock_setsockopt+0x3af/0x720 [ 383.047365][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 383.052929][ T30] ? __fget_files+0x395/0x410 [ 383.057959][ T30] ? __fget_files+0x2a/0x410 [ 383.062604][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 383.067883][ T30] do_syscall_64+0xf3/0x230 [ 383.072412][ T30] ? clear_bhb_loop+0x35/0x90 [ 383.077162][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.083080][ T30] RIP: 0033:0x7f3ac638cda9 [ 383.087865][ T30] RSP: 002b:00007f3ac721d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.096301][ T30] RAX: ffffffffffffffda RBX: 00007f3ac65a5fa0 RCX: 00007f3ac638cda9 [ 383.104450][ T30] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 383.112571][ T30] RBP: 00007f3ac640e2a0 R08: 0000000000000010 R09: 0000000000000000 [ 383.120876][ T30] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 383.128958][ T30] R13: 0000000000000000 R14: 00007f3ac65a5fa0 R15: 00007ffd7f486e78 [ 383.137197][ T30] [ 383.140245][ T30] INFO: task syz.4.1704:11882 blocked for more than 145 seconds. [ 383.148341][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 383.155638][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.164393][ T30] task:syz.4.1704 state:D stack:26896 pid:11882 tgid:11878 ppid:5846 flags:0x00000004 [ 383.174692][ T30] Call Trace: [ 383.178322][ T30] [ 383.181280][ T30] __schedule+0x186c/0x4be0 [ 383.185813][ T30] ? schedule+0x90/0x320 [ 383.190154][ T30] ? schedule+0x90/0x320 [ 383.194442][ T30] ? __pfx___schedule+0x10/0x10 [ 383.199362][ T30] ? __pfx_lock_release+0x10/0x10 [ 383.204409][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.209622][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 383.215544][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 383.221940][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.226779][ T30] ? schedule+0x90/0x320 [ 383.231049][ T30] schedule+0x14b/0x320 [ 383.235209][ T30] schedule_preempt_disabled+0x13/0x30 [ 383.241171][ T30] __mutex_lock+0x817/0x1010 [ 383.245810][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 383.251574][ T30] ? __mutex_lock+0x602/0x1010 [ 383.256375][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 383.261705][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 383.267022][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 383.272254][ T30] ? plist_del+0x3f1/0x410 [ 383.276768][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 383.281828][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 383.287440][ T30] ? aa_sk_perm+0x96d/0xab0 [ 383.291987][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.296918][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.301802][ T30] ? lock_release+0xbf/0xa30 [ 383.306423][ T30] ip_setsockopt+0x63/0x100 [ 383.311167][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 383.317148][ T30] do_sock_setsockopt+0x3af/0x720 [ 383.322221][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 383.327913][ T30] ? __fget_files+0x395/0x410 [ 383.332639][ T30] ? __fget_files+0x2a/0x410 [ 383.337329][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 383.342711][ T30] do_syscall_64+0xf3/0x230 [ 383.347458][ T30] ? clear_bhb_loop+0x35/0x90 [ 383.352167][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.358128][ T30] RIP: 0033:0x7f3ac638cda9 [ 383.362555][ T30] RSP: 002b:00007f3ac71fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.371115][ T30] RAX: ffffffffffffffda RBX: 00007f3ac65a6080 RCX: 00007f3ac638cda9 [ 383.379225][ T30] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000003 [ 383.387338][ T30] RBP: 00007f3ac640e2a0 R08: 0000000000000108 R09: 0000000000000000 [ 383.395328][ T30] R10: 0000000020006f80 R11: 0000000000000246 R12: 0000000000000000 [ 383.403350][ T30] R13: 0000000000000000 R14: 00007f3ac65a6080 R15: 00007ffd7f486e78 [ 383.411497][ T30] [ 383.414579][ T30] INFO: task syz.0.1705:11881 blocked for more than 145 seconds. [ 383.422403][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 383.429837][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.438571][ T30] task:syz.0.1705 state:D stack:24400 pid:11881 tgid:11880 ppid:5848 flags:0x00004004 [ 383.449070][ T30] Call Trace: [ 383.452377][ T30] [ 383.455306][ T30] __schedule+0x186c/0x4be0 [ 383.459919][ T30] ? schedule+0x90/0x320 [ 383.464281][ T30] ? schedule+0x90/0x320 [ 383.468632][ T30] ? __pfx___schedule+0x10/0x10 [ 383.473517][ T30] ? __pfx_lock_release+0x10/0x10 [ 383.478596][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.483436][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 383.489471][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 383.495831][ T30] ? schedule+0x90/0x320 [ 383.500171][ T30] schedule+0x14b/0x320 [ 383.504383][ T30] schedule_preempt_disabled+0x13/0x30 [ 383.510057][ T30] __mutex_lock+0x817/0x1010 [ 383.514671][ T30] ? __mutex_lock+0x602/0x1010 [ 383.519504][ T30] ? genl_rcv_msg+0x121/0xec0 [ 383.524229][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 383.529374][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.534179][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.540593][ T30] ? lock_release+0xbf/0xa30 [ 383.545209][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.550220][ T30] ? radix_tree_lookup+0x238/0x290 [ 383.555370][ T30] genl_rcv_msg+0x121/0xec0 [ 383.560031][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 383.565200][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.570772][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 383.575998][ T30] ? kasan_save_track+0x51/0x80 [ 383.580957][ T30] ? __sys_sendto+0x363/0x4c0 [ 383.585654][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.590570][ T30] ? lock_acquire+0xe3/0x550 [ 383.595189][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 383.600938][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 383.606014][ T30] ? __pfx___might_resched+0x10/0x10 [ 383.611463][ T30] netlink_rcv_skb+0x1e3/0x430 [ 383.616265][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.621395][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.627136][ T30] ? lock_release+0xbf/0xa30 [ 383.631771][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 383.637373][ T30] genl_rcv+0x28/0x40 [ 383.641391][ T30] netlink_unicast+0x7f6/0x990 [ 383.646202][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 383.651831][ T30] ? __virt_addr_valid+0x45f/0x530 [ 383.657281][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 383.662331][ T30] ? __check_object_size+0x47a/0x730 [ 383.667827][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 383.672632][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.678041][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 383.683017][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.688359][ T30] __sock_sendmsg+0x221/0x270 [ 383.693070][ T30] __sys_sendto+0x363/0x4c0 [ 383.697716][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 383.702785][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 383.707857][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.714220][ T30] ? __pfx___up_read+0x10/0x10 [ 383.719508][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.725876][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.730710][ T30] __x64_sys_sendto+0xde/0x100 [ 383.735507][ T30] do_syscall_64+0xf3/0x230 [ 383.740195][ T30] ? clear_bhb_loop+0x35/0x90 [ 383.744919][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.751406][ T30] RIP: 0033:0x7f5ff9b8ec3c [ 383.755869][ T30] RSP: 002b:00007f5ffaa0eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 383.764387][ T30] RAX: ffffffffffffffda RBX: 00007f5ffaa0efc0 RCX: 00007f5ff9b8ec3c [ 383.772475][ T30] RDX: 0000000000000020 RSI: 00007f5ffaa0f010 RDI: 0000000000000005 [ 383.780591][ T30] RBP: 0000000000000000 R08: 00007f5ffaa0ef14 R09: 000000000000000c [ 383.788619][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 383.796715][ T30] R13: 00007f5ffaa0ef68 R14: 00007f5ffaa0f010 R15: 0000000000000000 [ 383.804719][ T30] [ 383.807793][ T30] INFO: task syz.1.1706:11886 blocked for more than 146 seconds. [ 383.815527][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 383.822914][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.831967][ T30] task:syz.1.1706 state:D stack:27088 pid:11886 tgid:11885 ppid:5843 flags:0x00000004 [ 383.842331][ T30] Call Trace: [ 383.845631][ T30] [ 383.848623][ T30] __schedule+0x186c/0x4be0 [ 383.853373][ T30] ? schedule+0x90/0x320 [ 383.857740][ T30] ? schedule+0x90/0x320 [ 383.862034][ T30] ? __pfx___schedule+0x10/0x10 [ 383.866960][ T30] ? __pfx_lock_release+0x10/0x10 [ 383.872025][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.876933][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 383.882866][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 383.889252][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.894044][ T30] ? schedule+0x90/0x320 [ 383.898385][ T30] schedule+0x14b/0x320 [ 383.902594][ T30] schedule_preempt_disabled+0x13/0x30 [ 383.908150][ T30] __mutex_lock+0x817/0x1010 [ 383.912760][ T30] ? __mutex_lock+0x602/0x1010 [ 383.917608][ T30] ? genl_rcv_msg+0x121/0xec0 [ 383.922311][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 383.927390][ T30] ? 0xffffffffa000064c [ 383.931562][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.937803][ T30] ? kernel_text_address+0xa7/0xe0 [ 383.942948][ T30] ? __kernel_text_address+0xd/0x40 [ 383.948198][ T30] ? radix_tree_lookup+0x238/0x290 [ 383.953365][ T30] genl_rcv_msg+0x121/0xec0 [ 383.958171][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.963237][ T30] ? stack_trace_save+0x118/0x1d0 [ 383.968613][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 383.974018][ T30] ? stack_depot_save_flags+0x37/0x940 [ 383.979823][ T30] ? rcu_is_watching+0x15/0xb0 [ 383.984643][ T30] ? lock_acquire+0xe3/0x550 [ 383.989647][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 383.994706][ T30] ? __pfx___might_resched+0x10/0x10 [ 384.000066][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.004866][ T30] ? lock_acquire+0xe3/0x550 [ 384.009604][ T30] netlink_rcv_skb+0x1e3/0x430 [ 384.014390][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.019779][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.025080][ T30] ? lock_release+0xbf/0xa30 [ 384.029742][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 384.035131][ T30] ? net_generic+0x1f/0x240 [ 384.039692][ T30] genl_rcv+0x28/0x40 [ 384.043692][ T30] netlink_unicast+0x7f6/0x990 [ 384.048863][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 384.054169][ T30] ? __virt_addr_valid+0x45f/0x530 [ 384.059536][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 384.064617][ T30] ? __check_object_size+0x47a/0x730 [ 384.073367][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 384.078296][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.083612][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 384.088702][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.094022][ T30] __sock_sendmsg+0x221/0x270 [ 384.098759][ T30] __sys_sendto+0x363/0x4c0 [ 384.103276][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 384.108447][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 384.113497][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.119900][ T30] ? __pfx___up_read+0x10/0x10 [ 384.124684][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.131132][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.135934][ T30] __x64_sys_sendto+0xde/0x100 [ 384.140803][ T30] do_syscall_64+0xf3/0x230 [ 384.145325][ T30] ? clear_bhb_loop+0x35/0x90 [ 384.150146][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.156111][ T30] RIP: 0033:0x7f4d97d8ec3c [ 384.161021][ T30] RSP: 002b:00007f4d98c7cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 384.169588][ T30] RAX: ffffffffffffffda RBX: 00007f4d98c7cfc0 RCX: 00007f4d97d8ec3c [ 384.177666][ T30] RDX: 0000000000000028 RSI: 00007f4d98c7d010 RDI: 0000000000000004 [ 384.185652][ T30] RBP: 0000000000000000 R08: 00007f4d98c7cf14 R09: 000000000000000c [ 384.193772][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 384.201783][ T30] R13: 00007f4d98c7cf68 R14: 00007f4d98c7d010 R15: 0000000000000000 [ 384.209871][ T30] [ 384.212915][ T30] INFO: task syz.1.1706:11887 blocked for more than 146 seconds. [ 384.220717][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 384.228188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.236917][ T30] task:syz.1.1706 state:D stack:26352 pid:11887 tgid:11885 ppid:5843 flags:0x00000004 [ 384.247219][ T30] Call Trace: [ 384.250528][ T30] [ 384.253499][ T30] __schedule+0x186c/0x4be0 [ 384.258115][ T30] ? schedule+0x90/0x320 [ 384.262658][ T30] ? schedule+0x90/0x320 [ 384.267045][ T30] ? __pfx___schedule+0x10/0x10 [ 384.271935][ T30] ? __pfx_lock_release+0x10/0x10 [ 384.277068][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.281861][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 384.287909][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.294297][ T30] ? schedule+0x90/0x320 [ 384.298614][ T30] schedule+0x14b/0x320 [ 384.302792][ T30] schedule_preempt_disabled+0x13/0x30 [ 384.308487][ T30] __mutex_lock+0x817/0x1010 [ 384.313100][ T30] ? __mutex_lock+0x602/0x1010 [ 384.317906][ T30] ? genl_rcv_msg+0x121/0xec0 [ 384.322607][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 384.327718][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.332532][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.339063][ T30] ? lock_release+0xbf/0xa30 [ 384.343796][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.348800][ T30] ? radix_tree_lookup+0x238/0x290 [ 384.354018][ T30] genl_rcv_msg+0x121/0xec0 [ 384.358581][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 384.363710][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.369073][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 384.374300][ T30] ? kasan_save_track+0x51/0x80 [ 384.379271][ T30] ? __sys_sendto+0x363/0x4c0 [ 384.383985][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.388883][ T30] ? lock_acquire+0xe3/0x550 [ 384.393495][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 384.398923][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 384.403980][ T30] ? __pfx___might_resched+0x10/0x10 [ 384.409385][ T30] netlink_rcv_skb+0x1e3/0x430 [ 384.414170][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.419266][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.424587][ T30] ? lock_release+0xbf/0xa30 [ 384.429304][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 384.434796][ T30] genl_rcv+0x28/0x40 [ 384.438809][ T30] netlink_unicast+0x7f6/0x990 [ 384.443598][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 384.448997][ T30] ? __virt_addr_valid+0x45f/0x530 [ 384.454136][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 384.459245][ T30] ? __check_object_size+0x47a/0x730 [ 384.464585][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 384.469734][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.475062][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 384.480125][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.485449][ T30] __sock_sendmsg+0x221/0x270 [ 384.490231][ T30] __sys_sendto+0x363/0x4c0 [ 384.494760][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 384.499905][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.506270][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.512731][ T30] ? rcu_is_watching+0x15/0xb0 [ 384.517596][ T30] __x64_sys_sendto+0xde/0x100 [ 384.522426][ T30] do_syscall_64+0xf3/0x230 [ 384.527053][ T30] ? clear_bhb_loop+0x35/0x90 [ 384.531793][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.537779][ T30] RIP: 0033:0x7f4d97d8ec3c [ 384.542209][ T30] RSP: 002b:00007f4d98c5bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 384.550741][ T30] RAX: ffffffffffffffda RBX: 00007f4d98c5bfc0 RCX: 00007f4d97d8ec3c [ 384.558758][ T30] RDX: 0000000000000020 RSI: 00007f4d98c5c010 RDI: 0000000000000006 [ 384.566813][ T30] RBP: 0000000000000000 R08: 00007f4d98c5bf14 R09: 000000000000000c [ 384.574984][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 384.583053][ T30] R13: 00007f4d98c5bf68 R14: 00007f4d98c5c010 R15: 0000000000000000 [ 384.591134][ T30] [ 384.594160][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 384.603228][ T30] INFO: lockdep is turned off. [ 384.608110][ T30] NMI backtrace for cpu 1 [ 384.608123][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 384.608163][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 384.608175][ T30] Call Trace: [ 384.608183][ T30] [ 384.608190][ T30] dump_stack_lvl+0x241/0x360 [ 384.608226][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.608256][ T30] ? __pfx__printk+0x10/0x10 [ 384.608284][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 384.608316][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 384.608348][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.608372][ T30] ? _printk+0xd5/0x120 [ 384.608397][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 384.608425][ T30] ? __pfx__printk+0x10/0x10 [ 384.608465][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.608486][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 384.608514][ T30] watchdog+0xff6/0x1040 [ 384.608537][ T30] ? watchdog+0x1ea/0x1040 [ 384.608563][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.608585][ T30] kthread+0x7a9/0x920 [ 384.608609][ T30] ? __pfx_kthread+0x10/0x10 [ 384.608634][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.608657][ T30] ? __pfx_kthread+0x10/0x10 [ 384.608680][ T30] ? __pfx_kthread+0x10/0x10 [ 384.608706][ T30] ? __pfx_kthread+0x10/0x10 [ 384.608729][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.608755][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 384.608782][ T30] ? __pfx_kthread+0x10/0x10 [ 384.608807][ T30] ret_from_fork+0x4b/0x80 [ 384.608827][ T30] ? __pfx_kthread+0x10/0x10 [ 384.608850][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.608876][ T30] [ 384.608883][ T30] Sending NMI from CPU 1 to CPUs 0: [ 384.776175][ C0] NMI backtrace for cpu 0 [ 384.776190][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 384.776209][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 384.776239][ C0] RIP: 0010:dequeue_entity+0xa97/0x1890 [ 384.776263][ C0] Code: 3c 08 00 74 08 48 89 df e8 b6 1f 95 00 48 89 2b 49 8d 7e 10 48 89 f9 48 c1 e9 03 48 b8 00 00 00 00 00 fc ff df 48 89 4c 24 28 <0f> b6 04 01 84 c0 48 89 f9 48 89 3c 24 0f 85 41 04 00 00 ff 0f 0f [ 384.776278][ C0] RSP: 0018:ffffc90000157998 EFLAGS: 00000802 [ 384.776295][ C0] RAX: dffffc0000000000 RBX: ffff88801befdac8 RCX: 1ffff110170c7d32 [ 384.776307][ C0] RDX: ffff88801befdac0 RSI: 0000000000000000 RDI: ffff8880b863e990 [ 384.776320][ C0] RBP: ffff88801befdac0 R08: ffffffff814edad3 R09: 1ffffffff20374ce [ 384.776332][ C0] R10: dffffc0000000000 R11: fffffbfff20374cf R12: ffff88801befdaf8 [ 384.776345][ C0] R13: ffff88801befda80 R14: ffff8880b863e980 R15: ffff8880b863f4a0 [ 384.776358][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 384.776372][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.776384][ C0] CR2: 00007f77cc21c2cb CR3: 000000000e738000 CR4: 00000000003526f0 [ 384.776399][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.776409][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 384.776419][ C0] Call Trace: [ 384.776425][ C0] [ 384.776432][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 384.776468][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 384.776490][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.776520][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 384.776537][ C0] ? nmi_handle+0x14f/0x5a0 [ 384.776558][ C0] ? nmi_handle+0x2a/0x5a0 [ 384.776585][ C0] ? dequeue_entity+0xa97/0x1890 [ 384.776602][ C0] ? default_do_nmi+0x63/0x160 [ 384.776620][ C0] ? exc_nmi+0x123/0x1f0 [ 384.776637][ C0] ? end_repeat_nmi+0xf/0x53 [ 384.776656][ C0] ? __cpu_to_node+0x33/0xe0 [ 384.776677][ C0] ? dequeue_entity+0xa97/0x1890 [ 384.776693][ C0] ? dequeue_entity+0xa97/0x1890 [ 384.776708][ C0] ? dequeue_entity+0xa97/0x1890 [ 384.776723][ C0] [ 384.776728][ C0] [ 384.776740][ C0] dequeue_entities+0x25a/0xdd0 [ 384.776763][ C0] dequeue_task_fair+0x2b0/0x540 [ 384.776784][ C0] __schedule+0x5fc/0x4be0 [ 384.776804][ C0] ? irqtime_account_irq+0x68/0x1d0 [ 384.776827][ C0] ? schedule+0x90/0x320 [ 384.776846][ C0] ? schedule+0x90/0x320 [ 384.776867][ C0] ? __pfx___schedule+0x10/0x10 [ 384.776887][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.776907][ C0] ? __pfx_lock_release+0x10/0x10 [ 384.776926][ C0] ? rcu_is_watching+0x15/0xb0 [ 384.776949][ C0] ? run_ksoftirqd+0xe3/0x130 [ 384.776966][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 384.776982][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 384.777000][ C0] ? schedule+0x90/0x320 [ 384.777018][ C0] schedule+0x14b/0x320 [ 384.777038][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 384.777054][ C0] smpboot_thread_fn+0x61e/0xa30 [ 384.777070][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 384.777088][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 384.777105][ C0] kthread+0x7a9/0x920 [ 384.777124][ C0] ? __pfx_kthread+0x10/0x10 [ 384.777142][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 384.777159][ C0] ? __pfx_kthread+0x10/0x10 [ 384.777195][ C0] ? __pfx_kthread+0x10/0x10 [ 384.777222][ C0] ? __pfx_kthread+0x10/0x10 [ 384.777240][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.777262][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 384.777284][ C0] ? __pfx_kthread+0x10/0x10 [ 384.777304][ C0] ret_from_fork+0x4b/0x80 [ 384.777319][ C0] ? __pfx_kthread+0x10/0x10 [ 384.777351][ C0] ret_from_fork_asm+0x1a/0x30 [ 384.777371][ C0] [ 384.777661][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 384.777678][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 384.777702][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 384.777715][ T30] Call Trace: [ 384.777723][ T30] [ 384.777732][ T30] dump_stack_lvl+0x241/0x360 [ 384.777767][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.777798][ T30] ? __pfx__printk+0x10/0x10 [ 384.777830][ T30] ? vscnprintf+0x5d/0x90 [ 384.777858][ T30] panic+0x349/0x880 [ 384.777887][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 384.777916][ T30] ? __pfx_panic+0x10/0x10 [ 384.777941][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 384.778045][ T30] ? __irq_work_queue_local+0x137/0x410 [ 384.778072][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 384.778098][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 384.778125][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 384.778156][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 384.778186][ T30] watchdog+0x1035/0x1040 [ 384.778214][ T30] ? watchdog+0x1ea/0x1040 [ 384.778299][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.778329][ T30] kthread+0x7a9/0x920 [ 384.778358][ T30] ? __pfx_kthread+0x10/0x10 [ 384.778387][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.778412][ T30] ? __pfx_kthread+0x10/0x10 [ 384.778439][ T30] ? __pfx_kthread+0x10/0x10 [ 384.778468][ T30] ? __pfx_kthread+0x10/0x10 [ 384.778494][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.778523][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 384.778554][ T30] ? __pfx_kthread+0x10/0x10 [ 384.778582][ T30] ret_from_fork+0x4b/0x80 [ 384.778606][ T30] ? __pfx_kthread+0x10/0x10 [ 384.778634][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.778663][ T30] [ 385.317679][ T30] Kernel Offset: disabled [ 385.322024][ T30] Rebooting in 86400 seconds..