last executing test programs: 2m21.183198906s ago: executing program 2 (id=712): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x4000}) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x0, '\x00', {0x0, 0x6, "9000", 0x0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "caa7c1b7f4c336af"}}}}}}}, 0x0) 2m21.044679947s ago: executing program 2 (id=715): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001580)=""/3, 0x3}], 0x1}, 0x10000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x114, 0x71, 0x0, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000080)=0x39) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000902010073797a0000000000580000000706010000000000000000e6000073797a30000000000900020073797a3000000000350003800800014000000000080002400000000018000380310001007e657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a22000084000900010073797a30b54914144083d0667e39d79dbceaf4b49c704fde6d0e18b6bb863d51551f08b1c5ac5d7575f3ec2f688ea5fe430c382047f85a26d1059262db89fd26ba"], 0xe8}}, 0x0) 2m21.003380591s ago: executing program 2 (id=718): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000300)=0xffffff6c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_TARGET_NETNSID={0x8}]}, 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x54, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x29}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000300010004000500eab556a705251e618294ff001000000e4509c5bbcd72c6c95300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008000) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r8, 0x0, 0x21, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) 2m20.911734088s ago: executing program 2 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000d41508a5e963f9dff3031e6e2001d078eaffd4a0f815a312b25d041c8608fe1f30d0980c94cb30ebd429919de905f0f94381711a7a9b32e3677d29c611ed361055e9fff64c000000e4cb0160dbc75f4d9faa8b4436cac82a604a89d51ea369a8110f2aef40c17ecdd2e45a0f070f2366453b3445909f1e3b151d0d25f9a17c9ea49cdec7da632bfdb8730cdbde78377b5163"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x9}, 0xc) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0c0000000100", 0x6) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x8, 0xfffffff9, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0x2, 0x1}}) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000980), 0xe) (async) listen(r10, 0x0) (async) accept4(r10, 0x0, 0x0, 0x800) (async) write(r10, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x8880) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r14, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) 2m20.726815133s ago: executing program 2 (id=723): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa25}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELCHAIN={0xfc, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x81, 0xc, "925a7d64943ca7d7eac57739469245c6a5510cefb5b0c9c6a3767b10850e3c774e0d5cef843785813ff370fcaa3ec86ff25f518d0b896149c2aece881ccd450bcc7f63e7b8f09053defc4624fa5191ebf9c955fbb75dbe57ed01d0872e073f7f94a36193dd4035deb9cc366e4925c91f8b2ea8ae2fee088104e3dee619"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cf13044}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57503c13}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d23ae44}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x387692dc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1a0}, 0x1, 0x0, 0x0, 0x42080}, 0x4040011) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0221207f7dbfaeeeade3e5d6e0097ab52500000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xf}, {0x0, 0xa}, {0x0, 0x5}}, [{0x8, 0xb, 0xb21}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0xd}]}, 0x3c}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004814) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) ioctl$SIOCGSTAMPNS(r10, 0x8907, 0x0) setsockopt(r10, 0x84, 0x7f, &(0x7f0000000000)="020980fbffb62433301a00603cb45497ccd9626d6f67c4318c7ed7c1000000", 0x1f) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x54, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x90}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x158, r12, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x49}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x100, 0xa9, @random="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"}]}, 0x158}, 0x1, 0x0, 0x0, 0x408c5}, 0x80) recvmsg(r10, &(0x7f0000000300)={0x0, 0xffffffffffffff44, 0x0}, 0x0) 2m19.827903244s ago: executing program 2 (id=740): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fbf8b83e42f0a119eaba06d349c4c712"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x1}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000500)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="531ddd23de312ade0b", 0x9}], 0x1}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x1) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x101, @mcast2, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fbf8b83e42f0a119eaba06d349c4c712"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x1}}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000500)=0x1, 0x4) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) (async) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="531ddd23de312ade0b", 0x9}], 0x1}, 0x0) (async) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) socket$inet6(0xa, 0x2, 0x1) (async) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x101, @mcast2, 0x2}, 0x1c) (async) 2m4.808566861s ago: executing program 32 (id=740): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fbf8b83e42f0a119eaba06d349c4c712"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x1}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000500)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="531ddd23de312ade0b", 0x9}], 0x1}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x1) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x101, @mcast2, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fbf8b83e42f0a119eaba06d349c4c712"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x1}}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000500)=0x1, 0x4) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) (async) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="531ddd23de312ade0b", 0x9}], 0x1}, 0x0) (async) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) socket$inet6(0xa, 0x2, 0x1) (async) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x101, @mcast2, 0x2}, 0x1c) (async) 1m36.978524691s ago: executing program 3 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) 1m28.813102977s ago: executing program 3 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) 1m28.066956572s ago: executing program 5 (id=1505): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 1m21.197059235s ago: executing program 3 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) 1m15.230988324s ago: executing program 3 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) 48.867940099s ago: executing program 0 (id=2299): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f", @ANYRES32=r1], 0x3c}], 0x1, 0x0, 0x0, 0x48840}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e9f, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 43.781336925s ago: executing program 0 (id=2299): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f", @ANYRES32=r1], 0x3c}], 0x1, 0x0, 0x0, 0x48840}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e9f, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 41.731484329s ago: executing program 5 (id=1505): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 37.300084673s ago: executing program 0 (id=2299): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f", @ANYRES32=r1], 0x3c}], 0x1, 0x0, 0x0, 0x48840}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e9f, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 36.23017115s ago: executing program 5 (id=1505): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 32.046625283s ago: executing program 0 (id=2299): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f", @ANYRES32=r1], 0x3c}], 0x1, 0x0, 0x0, 0x48840}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e9f, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 30.296238467s ago: executing program 5 (id=1505): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 29.937756745s ago: executing program 3 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) 26.355761672s ago: executing program 0 (id=2299): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f", @ANYRES32=r1], 0x3c}], 0x1, 0x0, 0x0, 0x48840}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e9f, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 24.2318702s ago: executing program 5 (id=1505): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 21.620068785s ago: executing program 3 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) 19.639179398s ago: executing program 0 (id=2299): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f", @ANYRES32=r1], 0x3c}], 0x1, 0x0, 0x0, 0x48840}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e9f, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 18.357121911s ago: executing program 5 (id=1505): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) 16.857529221s ago: executing program 4 (id=2550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000fcdbdf252d00000008002f0000000000080002000089b6ecc1a486f8194cd804e20431716f889f4120220cc3dd2f5d40fa357c683a4f5d5f6bd56b671acda0a431061a00071df1ad2be0761106", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1453f46ba8afd9d75630e1acd1fcc0a6b7e75619a3dafff4959c1160e035fa49bf889a4d5638327c9b9bd660", 0x2c}], 0x1}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r11 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000002000000a000000000000000000000006001d000000000005001b0011"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x140f, 0x400, 0x70fd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x400048d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r12, 0x0, 0x4, 0x0, 0x0) sendto$inet(r12, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 16.636062937s ago: executing program 1 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x40000) 16.54173681s ago: executing program 4 (id=2553): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x1cc, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2a08}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x51}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x107f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r8, 0x2, 0x30}, &(0x7f0000000240)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="14000000690401000000000000000000040000802e1605c14c1cdd77b84b8cc8d07e91448c9158823d199e14c1a339308dd7f2d6"], 0x14}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 16.448441324s ago: executing program 1 (id=2554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6400f95023eed19400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c2994000000", 0x58}], 0x1) 16.388298148s ago: executing program 1 (id=2555): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000300009000000000000000000010000000c00054700000800020000000000"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, 0x453, 0x20, 0x70bd2a, 0x25dfdbff, "fa28a663f92158272eb867c4d6cdd0c1f9b02851b873af58a47cc75a2b6ca59dea40d4ab3c9a07736ed825bc9435a224e7a71b3019c95e3e", ["", "", "", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24044004) 16.240335655s ago: executing program 1 (id=2556): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 16.008513022s ago: executing program 1 (id=2557): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) 15.612417466s ago: executing program 4 (id=2558): r0 = socket(0x18, 0x3, 0x9b9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x1, 0x2, 0x1e, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x18, 0x3, 0x9b9) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r1, &(0x7f0000000600)={@val={0x1c, 0x800}, @val={0x2, 0x1, 0x2, 0x1e, 0x101, 0x4}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x78, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e1e, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "8a837bc47fadad9aed75a262e1cd647efc966da2cec89c81cdaa90a9d0734ac1", "357a76e58c4f9429a44e37a124be4c51", {"53df1dea3ac5d5f789ea22d94807b37b", "3d9fae8e5b4af648e67d4b251ce01dc8"}}}}}}, 0x86) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) 15.303128619s ago: executing program 4 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0000000001010400000000000000000200000024000180140001800800deb3e57a14b87bea0200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100000200e000000208000740000000000800034000000000"], 0x6c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x40000000) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffffffffffff8, 0x12) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x90, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xdc}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private=0xa010101}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x36}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x90}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r4, @ANYBLOB="000000000015f0ffff990000b4877d1400"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f00000001c0), &(0x7f0000000600)=@udp6}, 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)=""/121, 0x79}, {&(0x7f0000000880)=""/159, 0xfffffe31}], 0x2}, 0x40000020) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20005020}, 0x4000810) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc5}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00565022382bac4c182b0000010000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000070f3b2724ebd25833c207802dfe63f3afc852bd7f6506f3551d66892a40fe57c8c05ad393e0ea4ca14668f490f562db931fdef818c9c3c0b0a35b774f4b9a37270706a30a89e2b677bfd5712a55f5e131d9690833001cc1e2fbbcafa0d53cd00f28450b4", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.124197499s ago: executing program 1 (id=2560): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000c2f28db0b84e7dece9348df63b5560c3ae38e00cd61a15076a2e92f121fbeb83ad57707fcf53499e25355d3101093be2d593508d327abc09434ae9c0d90671470bea25adf9e5dc1b3f5a0fd547f68f79210f0cda5d859e61e75d0a567e034fe6f78d9b53c49be82f9779fb237c7b6b0be492eeb0d60a77d6d83c64593b27c5dc6bb66c65e8920db27306c0b4eeced7d0084fddfbcc62fd7579ce6764902f7a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}}, 0x40854) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@mcast1, @remote, @mcast1, 0x181464bf, 0x238, 0x4, 0x0, 0x3d, 0x80000008, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.111152434s ago: executing program 4 (id=2561): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0xd0, 0x328, 0xffffffff, 0x328, 0x0, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x3b, 0x5, 0x4, 0x20}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, '-N'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x2, 0x81, 0x0, 0x0, "cd0d0e00e3caacb23568bd284809476cc2698bb541d02b60a19cfdd35f0b1368fe717fe5dde8860e7bb37024f9a9fb2b5fb96b397a7959d4c531a7529f25954e"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x4}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x28, @ipv4=@empty, @ipv4=@multicast2, @gre_key=0xde5, @port=0x4e24}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x40, 0x3, 0x80, 0xfc00, 0x0, 0x9, 0x40, 0x1000, 0x4, 0x4, 0x3, 0x1, 0x9, 0xc, 0x1000, 0xa], 0xc}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x68, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 15.081642679s ago: executing program 4 (id=2562): syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@remote, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fc7008000000000052295cc1d2a83ba0"], 0x1c}}, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fc7008000000000052295cc1d2a83ba0"], 0x1c}}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x2, 0x0, 0x20000000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffe, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6000000}}}}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffe, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6000000}}}}]}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 44.619552ms ago: executing program 33 (id=2560): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000c2f28db0b84e7dece9348df63b5560c3ae38e00cd61a15076a2e92f121fbeb83ad57707fcf53499e25355d3101093be2d593508d327abc09434ae9c0d90671470bea25adf9e5dc1b3f5a0fd547f68f79210f0cda5d859e61e75d0a567e034fe6f78d9b53c49be82f9779fb237c7b6b0be492eeb0d60a77d6d83c64593b27c5dc6bb66c65e8920db27306c0b4eeced7d0084fddfbcc62fd7579ce6764902f7a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}}, 0x40854) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@mcast1, @remote, @mcast1, 0x181464bf, 0x238, 0x4, 0x0, 0x3d, 0x80000008, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 34 (id=2562): syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@remote, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fc7008000000000052295cc1d2a83ba0"], 0x1c}}, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fc7008000000000052295cc1d2a83ba0"], 0x1c}}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x2, 0x0, 0x20000000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffe, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6000000}}}}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffe, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6000000}}}}]}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): cess `syz.4.1995'. [ 187.123137][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 187.133120][T12883] bridge_slave_1: left allmulticast mode [ 187.138968][T12883] bridge_slave_1: left promiscuous mode [ 187.145000][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.157578][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.183700][T12874] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1998'. [ 187.287064][T12894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2003'. [ 187.476082][T12906] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 187.492443][T12906] pim6reg1: entered promiscuous mode [ 187.497888][T12906] pim6reg1: entered allmulticast mode [ 187.987039][T12925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2012'. [ 188.003011][T12925] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 188.068639][T12931] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2014'. [ 188.161243][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 188.385937][T12948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2021'. [ 188.395878][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2021'. [ 188.669422][T12978] sch_fq: defrate 0 ignored. [ 188.829034][T12994] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 189.003746][ T8389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.015176][ T8389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.313534][T13044] openvswitch: netlink: Multiple metadata blocks provided [ 189.515322][T13062] xt_ipvs: protocol family 7 not supported [ 189.798012][T13080] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 189.805622][T13080] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 189.885266][T13085] netlink: 'syz.1.2064': attribute type 4 has an invalid length. [ 189.944493][T13090] netlink: 'syz.1.2065': attribute type 10 has an invalid length. [ 189.968887][T13090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.979728][T13090] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.053222][T13094] openvswitch: netlink: Flow key attr not present in new flow. [ 190.456600][T13128] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 108 [ 190.646789][T13143] bridge2: entered promiscuous mode [ 190.655768][T13143] bridge2: entered allmulticast mode [ 190.664079][T13143] team0: Port device bridge2 added [ 190.703860][T13149] xt_l2tp: unknown flags: 18 [ 191.589198][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 191.589442][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 191.623819][T13230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.669927][T13234] sctp: [Deprecated]: syz.0.2110 (pid 13234) Use of int in max_burst socket option deprecated. [ 191.669927][T13234] Use struct sctp_assoc_value instead [ 191.868058][T13259] __nla_validate_parse: 20 callbacks suppressed [ 191.868083][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 191.898523][T13263] tipc: Enabling of bearer rejected, failed to enable media [ 191.919498][T13259] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 191.941867][T13259] 8021q: adding VLAN 0 to HW filter on device bond9 [ 192.052498][T13272] Unsupported ieee802154 address type: 0 [ 192.061269][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'. [ 192.079088][T13281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2123'. [ 192.172391][T13291] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 192.180648][T13291] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2129'. [ 192.249641][T13296] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 192.257638][T13296] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2130'. [ 192.344300][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 192.387405][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 192.400901][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 192.507307][T13312] netlink: 'syz.1.2137': attribute type 8 has an invalid length. [ 192.515215][T13312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2137'. [ 192.526930][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.139778][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2143'. [ 193.210181][T13336] veth0: entered promiscuous mode [ 193.237953][T13336] pim6reg1: entered promiscuous mode [ 193.245862][T13336] pim6reg1: entered allmulticast mode [ 193.262146][T13334] veth0: left promiscuous mode [ 193.267357][T13339] ipt_REJECT: ECHOREPLY no longer supported. [ 193.383973][T13350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.447384][T13352] xfrm0 speed is unknown, defaulting to 1000 [ 193.456021][T13352] lo speed is unknown, defaulting to 1000 [ 193.631862][T13365] tls_set_device_offload_rx: netdev not found [ 193.698975][T13378] Bluetooth: MGMT ver 1.23 [ 194.369915][T13408] tipc: Enabling of bearer rejected, failed to enable media [ 194.657993][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.103270][T13439] netlink: 'syz.1.2185': attribute type 2 has an invalid length. [ 195.243840][T13444] netlink: 'syz.0.2187': attribute type 7 has an invalid length. [ 195.268317][T13444] netlink: 'syz.0.2187': attribute type 8 has an invalid length. [ 195.411291][T13461] openvswitch: netlink: Key type 31 is not supported [ 195.419547][T13457] can: request_module (can-proto-0) failed. [ 195.544051][T13475] trusted_key: syz.0.2194 sent an empty control message without MSG_MORE. [ 195.602768][T13480] netlink: 'syz.1.2195': attribute type 5 has an invalid length. [ 196.964498][T13546] xt_TCPMSS: Only works on TCP SYN packets [ 196.971227][T13546] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 196.998124][T13547] __nla_validate_parse: 14 callbacks suppressed [ 196.998146][T13547] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2216'. [ 197.019122][T13547] netlink: 'syz.4.2216': attribute type 1 has an invalid length. [ 197.030727][T13547] netlink: 'syz.4.2216': attribute type 2 has an invalid length. [ 197.039722][T13547] netlink: 'syz.4.2216': attribute type 1 has an invalid length. [ 197.053237][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 197.121422][T13558] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 197.146170][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 197.156441][T13554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.297127][T13577] netlink: 'syz.0.2227': attribute type 3 has an invalid length. [ 197.444392][T13590] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 197.454096][T13590] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.479620][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 197.513091][T13598] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2233'. [ 197.576430][T13603] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2235'. [ 197.641501][T13608] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2237'. [ 197.797362][T13622] xt_nfacct: accounting object `syz1' does not exists [ 197.800851][T13630] netlink: 'syz.4.2244': attribute type 2 has an invalid length. [ 197.812375][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 197.812489][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 197.812604][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 197.846275][T13630] : entered promiscuous mode [ 197.974062][T13638] tipc: Enabling of bearer rejected, already enabled [ 197.984664][T13638] tipc: Resetting bearer [ 197.992091][T13639] team0: Port device netdevsim0 added [ 198.178901][T13651] can: request_module (can-proto-0) failed. [ 198.501813][T13679] pim6reg: entered allmulticast mode [ 198.509624][T13679] pim6reg: left allmulticast mode [ 198.555219][T13681] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 198.626311][T13684] tipc: Invalid UDP bearer configuration [ 198.626349][T13684] tipc: Enabling of bearer rejected, failed to enable media [ 198.696071][T13684] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.704760][T13684] bond0: (slave bond7): Enslaving as an active interface with a down link [ 199.360125][T13718] openvswitch: netlink: Flow actions attr not present in new flow. [ 199.403947][T13720] NCSI netlink: No device for ifindex 813332851 [ 199.756208][ T4193] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:61:c1:d6 [ 199.963370][T13767] xfrm0 speed is unknown, defaulting to 1000 [ 199.971411][T13767] lo speed is unknown, defaulting to 1000 [ 200.096843][T13767] siw: device registration error -23 [ 200.263449][T13788] validate_nla: 6 callbacks suppressed [ 200.263469][T13788] netlink: 'syz.1.2291': attribute type 3 has an invalid length. [ 200.282025][ T8389] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:61:c1:d6 [ 200.372832][T13800] pimreg3: entered allmulticast mode [ 200.746534][T13834] xfrm0 speed is unknown, defaulting to 1000 [ 200.773583][T13834] lo speed is unknown, defaulting to 1000 [ 200.797679][ T8389] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:61:c1:d6 [ 200.888595][T13843] geneve3: entered promiscuous mode [ 200.893849][T13843] geneve3: entered allmulticast mode [ 201.057513][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.065064][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.073024][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.081046][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.088914][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 201.107176][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.133864][T13855] xfrm0 speed is unknown, defaulting to 1000 [ 201.141564][T13855] lo speed is unknown, defaulting to 1000 [ 201.178437][T13834] netlink: 'syz.4.2301': attribute type 4 has an invalid length. [ 201.187450][T13860] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 201.219771][T13834] netlink: 'syz.4.2301': attribute type 4 has an invalid length. [ 201.247907][T13834] siw: device registration error -23 [ 201.345079][T13855] chnl_net:caif_netlink_parms(): no params data found [ 201.359662][ T8398] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:61:c1:d6 [ 201.473110][T13882] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 201.496558][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.506754][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.517359][T13855] bridge_slave_0: entered allmulticast mode [ 201.524587][T13855] bridge_slave_0: entered promiscuous mode [ 201.553440][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.560995][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.568583][T13855] bridge_slave_1: entered allmulticast mode [ 201.575472][T13855] bridge_slave_1: entered promiscuous mode [ 201.662190][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.665250][T13898] x_tables: duplicate underflow at hook 2 [ 201.688251][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.718325][T13901] netlink: 'syz.4.2310': attribute type 11 has an invalid length. [ 201.743710][T13855] team0: Port device team_slave_0 added [ 201.760453][T13855] team0: Port device team_slave_1 added [ 201.812282][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.846291][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.882825][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.898942][ T8398] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:61:c1:d6 [ 201.922069][T13908] batman_adv: batadv0: Interface deactivated: dummy0 [ 201.932440][T13908] batman_adv: batadv0: Removing interface: dummy0 [ 201.946260][T13908] bridge_slave_0: left allmulticast mode [ 201.955054][T13908] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.964950][T13908] bridge_slave_1: left allmulticast mode [ 201.971603][T13920] netlink: 'syz.4.2313': attribute type 10 has an invalid length. [ 201.973256][T13908] bridge_slave_1: left promiscuous mode [ 201.995716][T13908] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.024894][T13908] team0: Port device team_slave_0 removed [ 202.040381][T13908] team0: Port device team_slave_1 removed [ 202.058582][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.069484][T13908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.091089][T13908] team0: Port device netdevsim0 removed [ 202.102540][T13908] bond4: (slave gretap1): Releasing active interface [ 202.135640][T13908] team0: Port device bridge2 removed [ 202.146281][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.155401][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.181643][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.289054][T13855] hsr_slave_0: entered promiscuous mode [ 202.295513][T13855] hsr_slave_1: entered promiscuous mode [ 202.307393][T13855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.320708][T13855] Cannot create hsr debugfs directory [ 202.463050][T13937] xfrm0 speed is unknown, defaulting to 1000 [ 202.483469][T13937] lo speed is unknown, defaulting to 1000 [ 202.501722][T13855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.610408][T13855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.703976][T13855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.793294][T13855] team0: Port device  removed [ 202.801706][T13855] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.813844][T13937] netlink: 'syz.4.2316': attribute type 4 has an invalid length. [ 202.821125][T13955] __nla_validate_parse: 47 callbacks suppressed [ 202.821146][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 202.827442][T13937] netlink: 'syz.4.2316': attribute type 4 has an invalid length. [ 202.850930][T13937] siw: device registration error -23 [ 202.910770][T13855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.933344][T13855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.952300][T13855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.970487][T13855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.101102][T13855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.134283][T13855] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.159193][T13973] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.187736][ T54] Bluetooth: hci4: command tx timeout [ 203.314581][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.321783][ T8391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.351207][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.358372][ T8391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.587561][T13855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.636675][T13855] veth0_vlan: entered promiscuous mode [ 203.652436][T13855] veth1_vlan: entered promiscuous mode [ 203.687030][T13855] veth0_macvtap: entered promiscuous mode [ 203.696293][T13855] veth1_macvtap: entered promiscuous mode [ 203.712698][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.723440][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.734046][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.744821][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.755258][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.765991][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.777381][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.789192][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.800477][T13855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.814951][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.829575][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.841957][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.854425][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.866301][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.879084][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.891688][T13855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.905625][T13855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.921687][T13855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.931131][T13855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.940206][T13855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.996288][ T8398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.008461][ T8398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.034422][ T8389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.045419][ T8389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.512381][T13996] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 204.613318][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.823828][T14012] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2331'. [ 204.847051][T14012] xfrm0 speed is unknown, defaulting to 1000 [ 204.854886][T14012] lo speed is unknown, defaulting to 1000 [ 205.209666][T14033] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 205.218870][T14033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.250215][T14033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.266707][T14033] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 205.401317][T14046] Cannot find del_set index 3 as target [ 205.456474][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'. [ 205.466632][T14052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 205.521373][T14059] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.2347'. [ 205.538780][T14059] netlink: zone id is out of range [ 205.543968][T14059] netlink: zone id is out of range [ 205.597087][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 205.638206][ T8391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.792543][T14073] netlink: 'syz.1.2354': attribute type 9 has an invalid length. [ 205.800772][T14073] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2354'. [ 205.945274][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.957681][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.966091][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.979917][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.987407][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.995139][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.021258][T14085] xfrm0 speed is unknown, defaulting to 1000 [ 206.028133][T14085] lo speed is unknown, defaulting to 1000 [ 206.167274][T14085] chnl_net:caif_netlink_parms(): no params data found [ 206.191799][T14109] xt_SECMARK: invalid mode: 0 [ 206.287778][T14085] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.307873][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.315184][T14085] bridge_slave_0: entered allmulticast mode [ 206.323216][T14085] bridge_slave_0: entered promiscuous mode [ 206.331950][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.339543][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.348481][T14085] bridge_slave_1: entered allmulticast mode [ 206.356412][T14085] bridge_slave_1: entered promiscuous mode [ 206.382429][T14085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.394194][T14085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.429305][T14085] team0: Port device team_slave_0 added [ 206.437164][T14085] team0: Port device team_slave_1 added [ 206.466615][T14085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.470961][T14128] can: request_module (can-proto-0) failed. [ 206.479119][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.506190][T14085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.518502][T14085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.525479][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.552519][T14085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.563723][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2369'. [ 206.608673][T14085] hsr_slave_0: entered promiscuous mode [ 206.614934][T14085] hsr_slave_1: entered promiscuous mode [ 206.621720][T14085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.630031][T14085] Cannot create hsr debugfs directory [ 206.754536][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 206.766483][T14137] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.774254][T14137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.781553][T14137] IPv6: NLM_F_CREATE should be set when creating new route [ 206.788847][T14137] IPv6: NLM_F_CREATE should be set when creating new route [ 206.927436][T14141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2375'. [ 207.071801][T14149] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 207.078984][T14149] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 207.090950][ T8398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.100059][ T8398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.176729][ T8391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.222785][ T8391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.290030][ T8391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.506594][ T8391] bridge_slave_1: left allmulticast mode [ 207.512523][ T8391] bridge_slave_1: left promiscuous mode [ 207.520048][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.528796][ T8391] bridge_slave_0: left allmulticast mode [ 207.534580][ T8391] bridge_slave_0: left promiscuous mode [ 207.546241][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.625737][T14181] xfrm0 speed is unknown, defaulting to 1000 [ 207.772738][ T8391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.787231][ T8391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.800811][ T8391] bond0 (unregistering): Released all slaves [ 207.823630][T14181] lo speed is unknown, defaulting to 1000 [ 207.932755][T14195] __nla_validate_parse: 2 callbacks suppressed [ 207.932774][T14195] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2389'. [ 208.077829][ T5846] Bluetooth: hci4: command tx timeout [ 208.095388][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.123694][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.141745][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.155088][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.165515][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.176492][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.182294][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'. [ 208.196949][ T8391] hsr_slave_0: left promiscuous mode [ 208.204070][ T8391] hsr_slave_1: left promiscuous mode [ 208.210624][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.218679][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.227017][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.234686][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.245635][ T8391] veth1_macvtap: left promiscuous mode [ 208.246331][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 208.251197][ T8391] veth0_macvtap: left promiscuous mode [ 208.251299][ T8391] veth1_vlan: left promiscuous mode [ 208.251371][ T8391] veth0_vlan: left promiscuous mode [ 208.417446][ T8391] team0 (unregistering): Port device team_slave_1 removed [ 208.432390][ T8391] team0 (unregistering): Port device team_slave_0 removed [ 208.496054][T14207] vlan1: entered promiscuous mode [ 208.501997][T14207] vlan1: entered allmulticast mode [ 208.595348][T14085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.606790][T14200] xfrm0 speed is unknown, defaulting to 1000 [ 208.613822][T14085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.629333][T14085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.644556][T14200] lo speed is unknown, defaulting to 1000 [ 208.644909][T14085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.668878][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2395'. [ 208.685352][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2395'. [ 208.874415][T14085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.892525][T14085] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.907353][T14200] chnl_net:caif_netlink_parms(): no params data found [ 208.979106][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.986242][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.012744][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.019916][ T4193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.080994][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.096821][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.106486][T14200] bridge_slave_0: entered allmulticast mode [ 209.127471][T14200] bridge_slave_0: entered promiscuous mode [ 209.136644][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.144154][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.151752][T14200] bridge_slave_1: entered allmulticast mode [ 209.158844][T14200] bridge_slave_1: entered promiscuous mode [ 209.190323][T14200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.204078][ T8391] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.221271][T14200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.268055][ T8391] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.284155][T14200] team0: Port device team_slave_0 added [ 209.296027][T14200] team0: Port device team_slave_1 added [ 209.320907][T14200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.328115][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.355324][T14200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.370874][ T8391] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.384992][T14200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.392534][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.420340][T14200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.458655][T14200] hsr_slave_0: entered promiscuous mode [ 209.464863][T14200] hsr_slave_1: entered promiscuous mode [ 209.471448][T14200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.480934][T14200] Cannot create hsr debugfs directory [ 209.487798][ T8391] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.606382][ T8391] bridge_slave_1: left allmulticast mode [ 209.613304][ T8391] bridge_slave_1: left promiscuous mode [ 209.624316][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.633225][ T8391] bridge_slave_0: left allmulticast mode [ 209.640530][ T8391] bridge_slave_0: left promiscuous mode [ 209.646211][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.763053][ T8391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.773595][ T8391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.783641][ T8391] bond0 (unregistering): Released all slaves [ 209.806465][T14085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.838902][ T69] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 209.860130][T14085] veth0_vlan: entered promiscuous mode [ 209.880858][T14085] veth1_vlan: entered promiscuous mode [ 209.904017][T14085] veth0_macvtap: entered promiscuous mode [ 209.914642][T14085] veth1_macvtap: entered promiscuous mode [ 209.928518][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.943625][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.954092][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.965846][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.976358][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.988197][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.001707][T14085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.042882][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.054323][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.066197][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.080084][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.090285][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.101071][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.111965][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 210.113704][T14085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.145544][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 210.152762][T14085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.163780][ T5846] Bluetooth: hci4: command tx timeout [ 210.175244][T14271] netlink: 'syz.1.2406': attribute type 14 has an invalid length. [ 210.179796][T14085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.192320][T14085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.201098][T14085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.229106][ T5846] Bluetooth: hci5: command tx timeout [ 210.268310][T14278] tipc: Enabling of bearer rejected, already enabled [ 210.307271][ T8391] hsr_slave_0: left promiscuous mode [ 210.315968][ T8391] hsr_slave_1: left promiscuous mode [ 210.322070][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.333455][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.345723][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.356075][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.367134][ T8391] veth1_macvtap: left promiscuous mode [ 210.376522][ T8391] veth0_macvtap: left promiscuous mode [ 210.382359][ T8391] veth1_vlan: left promiscuous mode [ 210.392401][ T8391] veth0_vlan: left promiscuous mode [ 210.509268][ T8391] team0 (unregistering): Port device team_slave_1 removed [ 210.521546][ T8391] team0 (unregistering): Port device team_slave_0 removed [ 210.610609][T14200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.634654][ T8400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.660951][ T8400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.682716][T14200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.707874][T14200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.720840][T14200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.747277][ T8400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.770465][ T8400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.803906][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 210.856815][T14200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.920479][T14200] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.943215][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.950379][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.977872][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.985041][ T8394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.035789][T14200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.156941][T14200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.363789][T14200] veth0_vlan: entered promiscuous mode [ 211.374854][T14200] veth1_vlan: entered promiscuous mode [ 211.403056][T14200] veth0_macvtap: entered promiscuous mode [ 211.415554][T14200] veth1_macvtap: entered promiscuous mode [ 211.430762][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.441790][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.446413][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2422'. [ 211.453178][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.472057][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.482150][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.492941][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.503834][T14200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.514136][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.524853][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.536082][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.546911][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.558211][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.569304][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.580337][T14200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.596787][T14200] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.605902][T14200] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.614997][T14200] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.625197][T14200] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.644564][T14335] openvswitch: netlink: Tunnel attr 241 out of range max 16 [ 211.700200][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.717502][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.739715][ T8391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.748878][ T8391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.895719][T14346] xfrm0 speed is unknown, defaulting to 1000 [ 211.903015][T14348] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2428'. [ 211.904009][T14346] lo speed is unknown, defaulting to 1000 [ 212.008325][T14346] netlink: 'syz.1.2427': attribute type 4 has an invalid length. [ 212.029504][T14346] netlink: 'syz.1.2427': attribute type 4 has an invalid length. [ 212.053112][T14346] siw: device registration error -23 [ 212.093500][ T4193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.483362][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.492189][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.499741][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.511370][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.519160][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.526441][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.555309][T14377] xfrm0 speed is unknown, defaulting to 1000 [ 212.563979][T14377] lo speed is unknown, defaulting to 1000 [ 212.675947][T14377] chnl_net:caif_netlink_parms(): no params data found [ 212.710173][T14389] veth0: entered promiscuous mode [ 212.740136][T14391] veth0: left promiscuous mode [ 212.770638][T14377] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.778324][T14377] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.785530][T14377] bridge_slave_0: entered allmulticast mode [ 212.794660][T14377] bridge_slave_0: entered promiscuous mode [ 212.802329][T14377] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.809570][T14377] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.817062][T14377] bridge_slave_1: entered allmulticast mode [ 212.825000][T14377] bridge_slave_1: entered promiscuous mode [ 212.845368][T14377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.857435][T14377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.882185][T14377] team0: Port device team_slave_0 added [ 212.889911][T14377] team0: Port device team_slave_1 added [ 212.912478][T14377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.919512][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.945913][T14377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.962852][T14377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.970011][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.996340][T14377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.032041][T14377] hsr_slave_0: entered promiscuous mode [ 213.039361][T14377] hsr_slave_1: entered promiscuous mode [ 213.045411][T14377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.053402][T14377] Cannot create hsr debugfs directory [ 213.190195][T14366] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 213.226012][ T4193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.281766][ T4193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.335567][ T4193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.407461][ T4193] bridge_slave_1: left allmulticast mode [ 213.413497][ T4193] bridge_slave_1: left promiscuous mode [ 213.419639][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.429710][ T4193] bridge_slave_0: left allmulticast mode [ 213.435428][ T4193] bridge_slave_0: left promiscuous mode [ 213.441327][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.581710][ T4193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.592482][ T4193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.602913][ T4193] bond0 (unregistering): Released all slaves [ 213.726418][T14404] xfrm0 speed is unknown, defaulting to 1000 [ 213.748879][T14404] lo speed is unknown, defaulting to 1000 [ 213.751845][T14406] __nla_validate_parse: 3 callbacks suppressed [ 213.751864][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 213.935217][ T4193] hsr_slave_0: left promiscuous mode [ 213.953954][ T4193] hsr_slave_1: left promiscuous mode [ 213.969535][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.970192][ T4193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.984850][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.984880][ T4193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.000648][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.009264][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.009571][ T4193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.016759][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.027398][ T4193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.033655][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.048824][ T4193] veth1_macvtap: left promiscuous mode [ 214.054366][ T4193] veth0_macvtap: left promiscuous mode [ 214.055896][T14407] netlink: 'syz.1.2443': attribute type 4 has an invalid length. [ 214.059971][ T4193] veth1_vlan: left promiscuous mode [ 214.060042][ T4193] veth0_vlan: left promiscuous mode [ 214.106711][T14409] netlink: 'syz.1.2443': attribute type 4 has an invalid length. [ 214.186577][ T4193] team0 (unregistering): Port device team_slave_1 removed [ 214.202926][ T4193] team0 (unregistering): Port device team_slave_0 removed [ 214.268541][T14404] siw: device registration error -23 [ 214.286380][T14410] xfrm0 speed is unknown, defaulting to 1000 [ 214.305179][T14377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.322439][T14410] lo speed is unknown, defaulting to 1000 [ 214.322890][T14377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.349904][T14377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.363031][T14377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.468389][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 214.548302][ T5846] Bluetooth: hci4: command tx timeout [ 214.601102][T14377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.625047][T14410] chnl_net:caif_netlink_parms(): no params data found [ 214.636279][ T4193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.675599][T14377] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.701779][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.708917][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.720139][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 214.732923][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.740094][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.754692][ T4193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.820827][T14410] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.829052][T14410] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.836318][T14410] bridge_slave_0: entered allmulticast mode [ 214.843628][T14410] bridge_slave_0: entered promiscuous mode [ 214.856284][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.865964][T14410] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.875441][T14410] bridge_slave_1: entered allmulticast mode [ 214.883524][T14410] bridge_slave_1: entered promiscuous mode [ 214.906235][ T4193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.948755][T14441] vxlan1: entered promiscuous mode [ 214.953902][T14441] vxlan1: entered allmulticast mode [ 214.961372][T14441] netlink: 'syz.4.2452': attribute type 29 has an invalid length. [ 214.972810][T14410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.992987][T14410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.034253][T14410] team0: Port device team_slave_0 added [ 215.043473][ T4193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.064195][T14410] team0: Port device team_slave_1 added [ 215.113173][T14410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.125073][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.171537][T14410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.190338][T14410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.197351][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.223505][T14410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.270350][T14377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.300713][T14410] hsr_slave_0: entered promiscuous mode [ 215.306933][T14410] hsr_slave_1: entered promiscuous mode [ 215.313439][T14410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.321346][T14410] Cannot create hsr debugfs directory [ 215.336788][T14457] xfrm0 speed is unknown, defaulting to 1000 [ 215.343067][ T4193] bridge_slave_1: left allmulticast mode [ 215.349061][ T4193] bridge_slave_1: left promiscuous mode [ 215.355830][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.365373][ T4193] bridge_slave_0: left allmulticast mode [ 215.371339][ T4193] bridge_slave_0: left promiscuous mode [ 215.377054][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.433231][T14457] lo speed is unknown, defaulting to 1000 [ 215.572784][ T4193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.583427][ T4193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.593588][ T4193] bond0 (unregistering): Released all slaves [ 215.610700][T14458] netlink: 'syz.4.2455': attribute type 4 has an invalid length. [ 215.622753][T14458] netlink: 'syz.4.2455': attribute type 4 has an invalid length. [ 215.668492][ T5883] lo speed is unknown, defaulting to 1000 [ 215.701888][T14377] veth0_vlan: entered promiscuous mode [ 215.762199][T14377] veth1_vlan: entered promiscuous mode [ 215.813506][T14377] veth0_macvtap: entered promiscuous mode [ 215.826250][T14377] veth1_macvtap: entered promiscuous mode [ 215.871939][ T4193] hsr_slave_0: left promiscuous mode [ 215.892893][ T4193] hsr_slave_1: left promiscuous mode [ 215.908563][ T4193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.916078][ T4193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.928234][ T4193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.935718][ T4193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.945418][ T4193] veth1_macvtap: left promiscuous mode [ 215.951303][ T4193] veth0_macvtap: left promiscuous mode [ 215.956854][ T4193] veth1_vlan: left promiscuous mode [ 215.962296][ T4193] veth0_vlan: left promiscuous mode [ 216.068067][ T5846] Bluetooth: hci5: command tx timeout [ 216.141359][ T4193] team0 (unregistering): Port device team_slave_1 removed [ 216.154858][ T4193] team0 (unregistering): Port device team_slave_0 removed [ 216.182458][T14482] netlink: 'syz.1.2462': attribute type 159 has an invalid length. [ 216.267278][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.278492][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.288614][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.299410][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.310602][T14377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.336248][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.358545][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.369094][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.380017][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.391732][T14377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.393114][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'. [ 216.414982][T14410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.429957][T14377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.439065][T14377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.448422][T14377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.457274][T14377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.468569][T14410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.491150][T14410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.493584][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2466'. [ 216.517068][T14410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.550633][ T8395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.566772][ T8395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.591518][ T8395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.602762][ T8395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.627795][ T5846] Bluetooth: hci4: command tx timeout [ 216.672807][T14410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.694358][T14410] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.705505][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.712626][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.730139][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.737250][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.863985][T14410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.006368][T14410] veth0_vlan: entered promiscuous mode [ 217.017346][T14410] veth1_vlan: entered promiscuous mode [ 217.041441][T14410] veth0_macvtap: entered promiscuous mode [ 217.051639][T14410] veth1_macvtap: entered promiscuous mode [ 217.064739][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.076013][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.086056][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.097243][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.107978][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.118586][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.129665][T14410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.146835][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.162393][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.174116][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.177022][T14504] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 217.188024][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.195242][T14504] netlink: 'syz.4.2467': attribute type 17 has an invalid length. [ 217.210109][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 217.219166][T14410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.219683][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2467'. [ 217.238926][T14410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.250814][T14410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.262348][T14410] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.271638][T14410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.281236][T14410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.290877][T14410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.373879][ T8398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.392345][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.414433][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.437351][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.446247][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.781343][ T8398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.934963][T14512] xfrm0 speed is unknown, defaulting to 1000 [ 217.942468][T14512] lo speed is unknown, defaulting to 1000 [ 218.053903][T14512] netlink: 'syz.1.2469': attribute type 4 has an invalid length. [ 218.063014][T14512] netlink: 'syz.1.2469': attribute type 4 has an invalid length. [ 218.077932][T14512] siw: device registration error -23 [ 218.148759][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.157102][ T8398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.157982][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.174821][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.192078][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.199827][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.207085][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.247881][T14517] xfrm0 speed is unknown, defaulting to 1000 [ 218.254704][T14517] lo speed is unknown, defaulting to 1000 [ 218.265350][ T8398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.436049][T14517] chnl_net:caif_netlink_parms(): no params data found [ 218.442524][T14530] netlink: 'syz.1.2474': attribute type 64 has an invalid length. [ 218.450949][T14530] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2474'. [ 218.463356][ T8398] bridge_slave_1: left allmulticast mode [ 218.474866][ T8398] bridge_slave_1: left promiscuous mode [ 218.481801][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.493829][ T8398] bridge_slave_0: left allmulticast mode [ 218.500297][ T8398] bridge_slave_0: left promiscuous mode [ 218.506133][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.681563][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.692767][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.702931][ T8398] bond0 (unregistering): Released all slaves [ 218.804248][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.811930][T14517] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.822532][T14517] bridge_slave_0: entered allmulticast mode [ 218.830365][T14517] bridge_slave_0: entered promiscuous mode [ 218.847872][T14517] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.855187][T14517] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.868535][T14517] bridge_slave_1: entered allmulticast mode [ 218.875414][T14517] bridge_slave_1: entered promiscuous mode [ 218.875514][T14551] xt_hashlimit: max too large, truncated to 1048576 [ 218.925508][T14517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.964998][T14517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.993393][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2481'. [ 219.013681][T14517] team0: Port device team_slave_0 added [ 219.036785][T14517] team0: Port device team_slave_1 added [ 219.080885][T14517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.098328][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.137965][T14517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.152919][T14517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.160322][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.190286][T14517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.283497][T14560] xfrm0 speed is unknown, defaulting to 1000 [ 219.382439][T14517] hsr_slave_0: entered promiscuous mode [ 219.399042][T14517] hsr_slave_1: entered promiscuous mode [ 219.405174][T14517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.422710][T14517] Cannot create hsr debugfs directory [ 219.433746][T14560] lo speed is unknown, defaulting to 1000 [ 219.463610][T14561] netlink: 'syz.1.2484': attribute type 4 has an invalid length. [ 219.474870][ T8398] hsr_slave_0: left promiscuous mode [ 219.481130][ T8398] hsr_slave_1: left promiscuous mode [ 219.487036][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.495956][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.504208][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.512157][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.522642][T14566] netlink: 'syz.1.2484': attribute type 4 has an invalid length. [ 219.530749][ T8398] veth1_macvtap: left promiscuous mode [ 219.536282][ T8398] veth0_macvtap: left promiscuous mode [ 219.542526][ T8398] veth1_vlan: left promiscuous mode [ 219.548182][ T8398] veth0_vlan: left promiscuous mode [ 219.702066][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.713540][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 219.718107][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.730221][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.738455][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.745879][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 219.745899][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.761044][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.865139][T14570] xfrm0 speed is unknown, defaulting to 1000 [ 219.876593][T14570] lo speed is unknown, defaulting to 1000 [ 220.018026][T14570] chnl_net:caif_netlink_parms(): no params data found [ 220.066283][T14570] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.073875][T14570] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.081594][T14570] bridge_slave_0: entered allmulticast mode [ 220.089170][T14570] bridge_slave_0: entered promiscuous mode [ 220.096718][T14570] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.104117][T14570] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.112359][T14570] bridge_slave_1: entered allmulticast mode [ 220.121217][T14570] bridge_slave_1: entered promiscuous mode [ 220.149447][T14570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.160939][T14570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.186780][T14570] team0: Port device team_slave_0 added [ 220.194368][T14570] team0: Port device team_slave_1 added [ 220.229464][T14570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.236447][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.264129][ T5146] Bluetooth: hci4: command tx timeout [ 220.268232][T14570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.282304][T14570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.289453][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.315743][T14570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.335820][T14517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.345016][T14517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.358378][ T8398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.370507][T14517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.381108][T14517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.411485][T14570] hsr_slave_0: entered promiscuous mode [ 220.418092][T14570] hsr_slave_1: entered promiscuous mode [ 220.424101][T14570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.431803][T14570] Cannot create hsr debugfs directory [ 220.443505][ T8398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.485014][ T8398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.546116][T14570] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.564801][ T8398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.595507][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.612160][T14517] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.623076][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.630205][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.643159][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.650280][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.710056][T14570] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.766214][T14570] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.789618][T14517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.812465][T14570] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.835868][T14517] veth0_vlan: entered promiscuous mode [ 220.845684][T14517] veth1_vlan: entered promiscuous mode [ 220.903363][T14517] veth0_macvtap: entered promiscuous mode [ 220.917460][T14590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.918465][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 220.930589][T14589] netlink: 'syz.1.2487': attribute type 3 has an invalid length. [ 220.945274][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2486'. [ 220.949891][T14517] veth1_macvtap: entered promiscuous mode [ 220.958336][T14590] netlink: 'syz.1.2487': attribute type 3 has an invalid length. [ 220.969833][T14589] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2487'. [ 220.978035][T14590] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2487'. [ 220.986619][ T8398] bridge_slave_1: left allmulticast mode [ 220.994197][ T8398] bridge_slave_1: left promiscuous mode [ 221.004640][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.014846][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 221.030511][ T8398] bridge_slave_0: left allmulticast mode [ 221.036208][ T8398] bridge_slave_0: left promiscuous mode [ 221.044661][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.069229][ T8398] bridge_slave_1: left allmulticast mode [ 221.074920][ T8398] bridge_slave_1: left promiscuous mode [ 221.096440][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.110984][ T8398] bridge_slave_0: left allmulticast mode [ 221.116692][ T8398] bridge_slave_0: left promiscuous mode [ 221.125836][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.182899][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.194199][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.210928][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.219766][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.227241][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.237711][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.302022][T14570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.513028][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.523310][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.533445][ T8398] bond0 (unregistering): Released all slaves [ 221.544675][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.557886][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.568591][ T8398] bond0 (unregistering): Released all slaves [ 221.581306][T14570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.603120][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.613944][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.624342][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.635182][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.645346][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.656171][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.668081][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.685816][T14597] xfrm0 speed is unknown, defaulting to 1000 [ 221.692554][T14570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.712483][T14570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.727870][T14597] lo speed is unknown, defaulting to 1000 [ 221.737249][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.750594][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.760706][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.772109][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.782693][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.793790][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.806095][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.828796][ T5146] Bluetooth: hci3: command tx timeout [ 221.840413][T14517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.854363][T14517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.871826][T14517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.880759][T14517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.965535][T14627] xfrm0 speed is unknown, defaulting to 1000 [ 222.030045][T14627] lo speed is unknown, defaulting to 1000 [ 222.090462][ T8400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.110652][ T8400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.146191][ T8395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.154237][ T8395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.170057][T14630] netlink: 'syz.4.2497': attribute type 4 has an invalid length. [ 222.185417][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 222.228585][T14630] netlink: 'syz.4.2497': attribute type 4 has an invalid length. [ 222.254059][ T1203] lo speed is unknown, defaulting to 1000 [ 222.271477][ T2149] lo speed is unknown, defaulting to 1000 [ 222.296339][T14570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.324552][T14597] chnl_net:caif_netlink_parms(): no params data found [ 222.341796][T14570] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.349280][T14627] siw: device registration error -23 [ 222.375593][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.382813][ T8400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.400322][ T8398] hsr_slave_0: left promiscuous mode [ 222.406298][ T8398] hsr_slave_1: left promiscuous mode [ 222.416591][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.434826][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.444244][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.469113][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.491868][ T8398] hsr_slave_0: left promiscuous mode [ 222.522469][ T8398] hsr_slave_1: left promiscuous mode [ 222.528675][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.536128][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.545767][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.553838][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.565357][ T8398] veth1_macvtap: left promiscuous mode [ 222.571503][ T8398] veth0_macvtap: left promiscuous mode [ 222.577162][ T8398] veth1_vlan: left promiscuous mode [ 222.582875][ T8398] veth0_vlan: left promiscuous mode [ 222.592671][ T8398] veth1_macvtap: left promiscuous mode [ 222.598422][ T8398] veth0_macvtap: left promiscuous mode [ 222.604076][ T8398] veth1_vlan: left promiscuous mode [ 222.609568][ T8398] veth0_vlan: left promiscuous mode [ 222.724866][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.731987][ T8400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.741011][T14654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.815310][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 222.839590][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 222.977227][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 222.994873][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 223.137207][T14597] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.155301][T14597] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.162936][T14597] bridge_slave_0: entered allmulticast mode [ 223.170208][T14597] bridge_slave_0: entered promiscuous mode [ 223.177995][T14597] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.185100][T14597] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.196691][T14597] bridge_slave_1: entered allmulticast mode [ 223.203799][T14597] bridge_slave_1: entered promiscuous mode [ 223.238582][T14597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.247022][T14660] netlink: 'syz.1.2503': attribute type 4 has an invalid length. [ 223.262776][T14597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.272009][ T5146] Bluetooth: hci5: command tx timeout [ 223.298605][T14597] team0: Port device team_slave_0 added [ 223.308128][T14597] team0: Port device team_slave_1 added [ 223.333455][T14597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.341165][T14597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.372486][T14597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.384820][T14597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.394161][T14597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.420530][T14597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.472882][T14597] hsr_slave_0: entered promiscuous mode [ 223.481177][T14597] hsr_slave_1: entered promiscuous mode [ 223.487340][T14597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.495424][T14597] Cannot create hsr debugfs directory [ 223.608726][T14570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.734700][T14570] veth0_vlan: entered promiscuous mode [ 223.764843][T14570] veth1_vlan: entered promiscuous mode [ 223.777018][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 223.794713][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 223.848034][T14570] veth0_macvtap: entered promiscuous mode [ 223.862110][T14570] veth1_macvtap: entered promiscuous mode [ 223.896202][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.917757][ T5146] Bluetooth: hci3: command tx timeout [ 223.947658][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.961962][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.972887][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.984603][T14570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.996726][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.008059][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.018610][T14570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.030051][T14570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.047406][T14570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.078126][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.080041][T14570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.098865][T14570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.107806][T14570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.109858][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.116508][T14570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.132690][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.144020][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.167304][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.177869][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.187984][T14690] netlink: 'syz.1.2509': attribute type 7 has an invalid length. [ 224.196804][T14597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.213047][T14597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.231455][T14597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.242649][T14691] netlink: 'syz.1.2509': attribute type 7 has an invalid length. [ 224.256042][T14687] xfrm0 speed is unknown, defaulting to 1000 [ 224.269209][T14597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.287916][T14690] syzkaller1: entered promiscuous mode [ 224.293482][T14690] syzkaller1: entered allmulticast mode [ 224.302086][T14687] lo speed is unknown, defaulting to 1000 [ 224.352808][ T8398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.382850][T14697] xfrm0 speed is unknown, defaulting to 1000 [ 224.434520][T14697] lo speed is unknown, defaulting to 1000 [ 224.434585][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.465396][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.486001][ T8398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.597256][ T8398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.616543][T14709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2514'. [ 224.674223][T14697] netlink: 'syz.4.2511': attribute type 4 has an invalid length. [ 224.691462][ T8391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.708273][ T8391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.722822][T14687] chnl_net:caif_netlink_parms(): no params data found [ 224.733680][T14700] netlink: 'syz.4.2511': attribute type 4 has an invalid length. [ 224.750964][ T8398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.801524][T14697] siw: device registration error -23 [ 224.861524][T14597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.919939][T14597] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.940707][T14687] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.956099][T14687] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.971469][T14687] bridge_slave_0: entered allmulticast mode [ 224.979791][T14687] bridge_slave_0: entered promiscuous mode [ 225.019686][T14687] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.027078][T14687] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.040488][T14687] bridge_slave_1: entered allmulticast mode [ 225.049095][T14687] bridge_slave_1: entered promiscuous mode [ 225.072115][ T8398] bridge_slave_1: left allmulticast mode [ 225.078664][ T8398] bridge_slave_1: left promiscuous mode [ 225.085740][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.099477][ T8398] bridge_slave_0: left allmulticast mode [ 225.105173][ T8398] bridge_slave_0: left promiscuous mode [ 225.112091][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.171012][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.178227][ T8391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.200368][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.207593][ T8395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.348032][ T5146] Bluetooth: hci5: command tx timeout [ 225.383429][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.394623][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.404574][ T8398] bond0 (unregistering): Released all slaves [ 225.414877][T14687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.426332][T14687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.461912][T14687] team0: Port device team_slave_0 added [ 225.476248][T14687] team0: Port device team_slave_1 added [ 225.514753][T14687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.521960][T14687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.550760][T14687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.569822][T14687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.576835][T14687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.604260][T14687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.640823][T14687] hsr_slave_0: entered promiscuous mode [ 225.647049][T14687] hsr_slave_1: entered promiscuous mode [ 225.653362][T14687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.662554][T14687] Cannot create hsr debugfs directory [ 225.775632][ T8398] hsr_slave_0: left promiscuous mode [ 225.783576][ T8398] hsr_slave_1: left promiscuous mode [ 225.790289][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.798475][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.806224][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.814423][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.824211][ T8398] veth1_macvtap: left promiscuous mode [ 225.830272][ T8398] veth0_macvtap: left promiscuous mode [ 225.835861][ T8398] veth1_vlan: left promiscuous mode [ 225.841504][ T8398] veth0_vlan: left promiscuous mode [ 225.952661][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 225.986058][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 226.186205][T14756] xfrm0 speed is unknown, defaulting to 1000 [ 226.227716][ T5146] Bluetooth: hci4: command tx timeout [ 226.254519][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.265052][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.274133][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.287340][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.294958][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 226.302547][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.320562][T14597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.332842][T14756] lo speed is unknown, defaulting to 1000 [ 226.422742][T14760] xfrm0 speed is unknown, defaulting to 1000 [ 226.425888][T14759] netlink: 'syz.1.2526': attribute type 4 has an invalid length. [ 226.456056][T14759] netlink: 'syz.1.2526': attribute type 4 has an invalid length. [ 226.462124][T14760] lo speed is unknown, defaulting to 1000 [ 226.468517][T14597] veth0_vlan: entered promiscuous mode [ 226.508667][T14756] siw: device registration error -23 [ 226.514367][T14597] veth1_vlan: entered promiscuous mode [ 226.537663][T14597] veth0_macvtap: entered promiscuous mode [ 226.546473][T14597] veth1_macvtap: entered promiscuous mode [ 226.660937][T14597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.671730][T14597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.682007][T14597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.693169][T14597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.704905][T14597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.744600][T14597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.756666][T14597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.758167][T14780] sctp: [Deprecated]: syz.1.2530 (pid 14780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.758167][T14780] Use struct sctp_sack_info instead [ 226.766777][T14597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.798934][T14597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.810567][T14597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.856741][T14597] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.866893][T14597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.875901][T14597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.885102][T14597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.906582][T14760] chnl_net:caif_netlink_parms(): no params data found [ 226.923263][T14687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.933560][T14687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.973990][T14687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.987984][T14687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.013186][T14760] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.020693][T14760] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.030038][T14760] bridge_slave_0: entered allmulticast mode [ 227.036714][T14760] bridge_slave_0: entered promiscuous mode [ 227.049584][T14760] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.056853][T14760] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.064637][T14760] bridge_slave_1: entered allmulticast mode [ 227.071678][T14760] bridge_slave_1: entered promiscuous mode [ 227.105214][T14760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.117385][T14760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.160579][T14760] team0: Port device team_slave_0 added [ 227.172596][T14760] team0: Port device team_slave_1 added [ 227.179803][ T8398] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.216294][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.225668][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.228751][T14760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.240653][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.269409][T14760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.296675][ T8398] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.308931][T14760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.315894][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.342835][T14760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.386721][ T8394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.391746][T14760] hsr_slave_0: entered promiscuous mode [ 227.400805][ T8394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.410242][T14760] hsr_slave_1: entered promiscuous mode [ 227.416496][T14760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.424840][T14760] Cannot create hsr debugfs directory [ 227.438232][ T5146] Bluetooth: hci5: command tx timeout [ 227.511128][ T8398] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.581774][T14687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.613645][ T8398] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.644626][T14687] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.660562][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.667743][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.684930][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.692133][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.816086][ T8398] bridge_slave_1: left allmulticast mode [ 227.838735][ T8398] bridge_slave_1: left promiscuous mode [ 227.844573][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.895578][ T8398] bridge_slave_0: left allmulticast mode [ 227.904463][ T8398] bridge_slave_0: left promiscuous mode [ 227.912670][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.074125][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.084495][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.094435][ T8398] bond0 (unregistering): Released all slaves [ 228.122718][T14687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.156672][T14687] veth0_vlan: entered promiscuous mode [ 228.168328][T14687] veth1_vlan: entered promiscuous mode [ 228.200002][T14687] veth0_macvtap: entered promiscuous mode [ 228.211507][T14687] veth1_macvtap: entered promiscuous mode [ 228.226157][T14687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.238397][T14687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.249362][T14687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.260537][T14687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.270626][T14687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.281192][T14687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.292255][T14687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.307832][ T5146] Bluetooth: hci4: command tx timeout [ 228.315842][T14687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.326600][T14687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.336981][T14687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.347922][T14687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.358502][T14687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.369113][T14687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.379968][T14687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.387891][ T5146] Bluetooth: hci3: command tx timeout [ 228.404070][T14687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.413245][T14687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.422040][T14687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.431215][T14687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.477319][T14760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.504150][T14760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.519983][T14760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.529489][T14760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.549122][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.556976][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.574196][ T8398] hsr_slave_0: left promiscuous mode [ 228.581562][ T8398] hsr_slave_1: left promiscuous mode [ 228.587249][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.595085][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.603428][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.612839][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.623120][ T8398] veth1_macvtap: left promiscuous mode [ 228.629521][ T8398] veth0_macvtap: left promiscuous mode [ 228.635108][ T8398] veth1_vlan: left promiscuous mode [ 228.640526][ T8398] veth0_vlan: left promiscuous mode [ 228.760014][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 228.778138][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 228.841394][ T8389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.858177][ T8389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.915226][T14760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.937951][T14760] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.950005][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.957134][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.970564][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.977708][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.009563][T14760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.105172][T14760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.233674][ T8398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.261218][T14760] veth0_vlan: entered promiscuous mode [ 229.272540][T14760] veth1_vlan: entered promiscuous mode [ 229.295229][T14760] veth0_macvtap: entered promiscuous mode [ 229.304800][T14760] veth1_macvtap: entered promiscuous mode [ 229.316300][ T8398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.335180][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.346264][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.356484][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.367248][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.377200][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.388665][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.399897][T14760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.412131][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.423683][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.435141][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.446010][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.455987][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.466879][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.478325][T14760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.503474][T14760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.527987][T14760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.536746][T14760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.546367][T14760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.566079][ T8398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.576908][T14820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2536'. [ 229.684802][ T8398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.783940][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.801262][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.814505][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.819412][T14834] xfrm0 speed is unknown, defaulting to 1000 [ 229.829025][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.836313][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.845143][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.854713][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.862457][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.890359][T14834] lo speed is unknown, defaulting to 1000 [ 229.921752][T14835] xfrm0 speed is unknown, defaulting to 1000 [ 229.923187][ T8394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.946046][ T8394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.995752][T14835] lo speed is unknown, defaulting to 1000 [ 230.011331][ T8398] bridge_slave_1: left allmulticast mode [ 230.017025][ T8398] bridge_slave_1: left promiscuous mode [ 230.023289][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.034029][ T8398] bridge_slave_0: left allmulticast mode [ 230.040165][ T8398] bridge_slave_0: left promiscuous mode [ 230.045939][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.213943][T14840] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 230.241796][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.254055][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.264278][ T8398] bond0 (unregistering): Released all slaves [ 230.275830][T14841] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 230.309616][ T46] lo speed is unknown, defaulting to 1000 [ 230.317343][ T5832] lo speed is unknown, defaulting to 1000 [ 230.442219][T14835] chnl_net:caif_netlink_parms(): no params data found [ 230.505972][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.514238][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.522535][T14835] bridge_slave_0: entered allmulticast mode [ 230.530133][T14835] bridge_slave_0: entered promiscuous mode [ 230.538710][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.545863][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.553663][T14835] bridge_slave_1: entered allmulticast mode [ 230.560685][T14835] bridge_slave_1: entered promiscuous mode [ 230.583613][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.596312][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.640163][ T8398] hsr_slave_0: left promiscuous mode [ 230.646142][ T8398] hsr_slave_1: left promiscuous mode [ 230.654879][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.663477][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.674224][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.682565][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.694969][ T8398] veth1_macvtap: left promiscuous mode [ 230.701891][ T8398] veth0_macvtap: left promiscuous mode [ 230.707675][ T8398] veth1_vlan: left promiscuous mode [ 230.713115][ T8398] veth0_vlan: left promiscuous mode [ 230.749691][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 230.827418][T14835] team0: Port device team_slave_0 added [ 230.862999][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.870525][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.878880][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.886621][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.895135][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.903113][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.963416][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 230.978541][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 231.055322][T14835] team0: Port device team_slave_1 added [ 231.114694][T14857] xfrm0 speed is unknown, defaulting to 1000 [ 231.132980][T14857] lo speed is unknown, defaulting to 1000 [ 231.144707][T14863] netlink: 'syz.4.2544': attribute type 1 has an invalid length. [ 231.152710][T14863] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2544'. [ 231.162883][T14863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2544'. [ 231.179649][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.186638][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.214239][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.226661][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.233989][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.260508][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.321357][T14835] hsr_slave_0: entered promiscuous mode [ 231.330040][T14835] hsr_slave_1: entered promiscuous mode [ 231.336031][T14835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.344077][T14835] Cannot create hsr debugfs directory [ 231.437280][T14857] chnl_net:caif_netlink_parms(): no params data found [ 231.515256][T14857] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.522573][T14857] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.529862][T14857] bridge_slave_0: entered allmulticast mode [ 231.537377][T14857] bridge_slave_0: entered promiscuous mode [ 231.545529][T14857] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.552751][T14857] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.560737][T14857] bridge_slave_1: entered allmulticast mode [ 231.568655][T14857] bridge_slave_1: entered promiscuous mode [ 231.591008][T14857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.603344][T14857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.623232][ T8398] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.646900][T14857] team0: Port device team_slave_0 added [ 231.654122][T14857] team0: Port device team_slave_1 added [ 231.675191][T14857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.682854][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.709271][T14857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.725378][T14857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.732786][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.761109][T14857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.791597][T14857] hsr_slave_0: entered promiscuous mode [ 231.799487][T14857] hsr_slave_1: entered promiscuous mode [ 231.805460][T14857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.813173][T14857] Cannot create hsr debugfs directory [ 231.872718][T14835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.887206][T14835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.897191][T14835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.908631][ T5146] Bluetooth: hci4: command tx timeout [ 231.919768][T14835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.937320][T14857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.002966][T14835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.016974][T14857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.037844][T14878] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20002 [ 232.058426][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 232.073660][T14835] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.083001][T14879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 232.123836][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.131078][ T8391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.140709][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.147864][ T8391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.181494][T14857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.331840][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.343247][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.353324][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.362829][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.372732][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.381764][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.476888][T14857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.528129][T14890] xfrm0 speed is unknown, defaulting to 1000 [ 232.545333][T14890] lo speed is unknown, defaulting to 1000 [ 232.637157][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.713899][ T8398] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.747397][T14835] veth0_vlan: entered promiscuous mode [ 232.758800][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2550'. [ 232.765022][T14857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.807092][T14857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.824334][T14835] veth1_vlan: entered promiscuous mode [ 232.833256][ T8398] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.884264][T14857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.944664][T14857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.951645][ T5146] Bluetooth: hci3: command tx timeout [ 233.002989][T14915] xfrm0 speed is unknown, defaulting to 1000 [ 233.013399][T14890] chnl_net:caif_netlink_parms(): no params data found [ 233.039291][T14835] veth0_macvtap: entered promiscuous mode [ 233.058306][ T8398] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.077345][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 233.097777][T14915] lo speed is unknown, defaulting to 1000 [ 233.112763][T14835] veth1_macvtap: entered promiscuous mode [ 233.134853][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.152561][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.164630][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.175370][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.185556][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.196659][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.206995][T14922] netlink: 'syz.4.2553': attribute type 4 has an invalid length. [ 233.211106][T14835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.243775][T14924] bridge0: port 1(gretap0) entered blocking state [ 233.250447][T14924] bridge0: port 1(gretap0) entered disabled state [ 233.258067][T14918] netlink: 'syz.4.2553': attribute type 4 has an invalid length. [ 233.270369][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.282085][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.292484][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.303548][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.313714][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.324392][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.336999][T14835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.373588][ T46] lo speed is unknown, defaulting to 1000 [ 233.388636][T14835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.397376][T14835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.406451][T14835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.415798][T14835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.442810][ T8] lo speed is unknown, defaulting to 1000 [ 233.485609][T14890] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.493082][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.500899][T14890] bridge_slave_0: entered allmulticast mode [ 233.508473][T14890] bridge_slave_0: entered promiscuous mode [ 233.516408][T14890] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.523827][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.531392][T14890] bridge_slave_1: entered allmulticast mode [ 233.538674][T14890] bridge_slave_1: entered promiscuous mode [ 233.554290][ T8398] bridge_slave_1: left allmulticast mode [ 233.560110][ T8398] bridge_slave_1: left promiscuous mode [ 233.565854][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.574631][ T8398] bridge_slave_0: left allmulticast mode [ 233.582030][ T8398] bridge_slave_0: left promiscuous mode [ 233.588152][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.597407][ T8398] bridge_slave_1: left allmulticast mode [ 233.603480][ T8398] bridge_slave_1: left promiscuous mode [ 233.609364][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.618380][ T8398] bridge_slave_0: left allmulticast mode [ 233.624053][ T8398] bridge_slave_0: left promiscuous mode [ 233.629983][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.707095][T14890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.904281][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.918255][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.928755][ T8398] bond0 (unregistering): Released all slaves [ 233.940925][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.952728][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.963158][ T8398] bond0 (unregistering): Released all slaves [ 233.979582][T14890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.988109][ T5146] Bluetooth: hci4: command tx timeout [ 234.031085][T14890] team0: Port device team_slave_0 added [ 234.057197][T14890] team0: Port device team_slave_1 added [ 234.108485][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2559'. [ 234.118672][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.126899][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'. [ 234.128559][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.136731][T14890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.153678][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.180724][T14890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.193900][T14890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.202200][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.229330][T14890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.242577][T14857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.467701][ T5146] Bluetooth: hci5: command tx timeout [ 235.028009][ T5146] Bluetooth: hci3: command tx timeout [ 236.067752][ T5146] Bluetooth: hci4: command tx timeout [ 236.547736][ T5146] Bluetooth: hci5: command tx timeout [ 237.107782][ T5146] Bluetooth: hci3: command tx timeout [ 238.147856][ T5146] Bluetooth: hci4: command tx timeout [ 238.627701][ T5146] Bluetooth: hci5: command tx timeout [ 239.187723][ T5146] Bluetooth: hci3: command tx timeout [ 240.709495][ T5846] Bluetooth: hci5: command tx timeout [ 249.552447][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.555333][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.560826][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.566828][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.578140][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.581008][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.588355][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.595337][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.602558][ T5146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.608942][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 249.616036][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.622795][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.667669][ T54] Bluetooth: hci6: command tx timeout [ 251.667857][ T5834] Bluetooth: hci7: command tx timeout [ 253.747693][ T5834] Bluetooth: hci6: command tx timeout [ 253.751674][ T54] Bluetooth: hci7: command tx timeout [ 255.827825][ T54] Bluetooth: hci7: command tx timeout [ 255.828111][ T5834] Bluetooth: hci6: command tx timeout [ 256.079580][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.908120][ T5834] Bluetooth: hci7: command tx timeout [ 257.908850][ T54] Bluetooth: hci6: command tx timeout [ 292.162341][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 292.169823][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 292.177094][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 292.184914][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 292.192657][ T5834] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 292.200051][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 293.880568][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 293.888023][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 293.895320][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 293.903110][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 293.910852][ T5834] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 293.919587][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 294.227782][ T5834] Bluetooth: hci8: command tx timeout [ 294.695931][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 294.703394][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 294.711099][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 294.719096][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 294.726700][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 294.734187][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 295.987869][ T5834] Bluetooth: hci9: command tx timeout [ 296.307902][ T5834] Bluetooth: hci8: command tx timeout [ 296.787740][ T5834] Bluetooth: hci10: command tx timeout [ 298.067737][ T5834] Bluetooth: hci9: command tx timeout [ 298.388289][ T5834] Bluetooth: hci8: command tx timeout [ 298.867936][ T5834] Bluetooth: hci10: command tx timeout [ 300.147883][ T5834] Bluetooth: hci9: command tx timeout [ 300.467944][ T5834] Bluetooth: hci8: command tx timeout [ 300.947772][ T5834] Bluetooth: hci10: command tx timeout [ 302.227908][ T5834] Bluetooth: hci9: command tx timeout [ 303.027738][ T5834] Bluetooth: hci10: command tx timeout [ 309.811878][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 309.816645][ T5146] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 309.819985][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 309.826445][ T5146] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 309.838453][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 309.841290][ T5146] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 309.848577][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 309.856388][ T5146] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 309.863473][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 309.871569][ T5146] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 309.876998][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 309.884097][ T5146] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 311.907960][ T5146] Bluetooth: hci11: command tx timeout [ 311.908178][ T5846] Bluetooth: hci12: command tx timeout [ 313.987947][ T5846] Bluetooth: hci11: command tx timeout [ 313.992576][ T5146] Bluetooth: hci12: command tx timeout [ 316.067967][ T5146] Bluetooth: hci12: command tx timeout [ 316.068091][ T5846] Bluetooth: hci11: command tx timeout [ 317.510029][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.147930][ T5846] Bluetooth: hci12: command tx timeout [ 318.153476][ T5846] Bluetooth: hci11: command tx timeout [ 354.599547][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 354.606941][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 354.614854][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 354.623570][ T5841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 354.631955][ T5841] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 354.639556][ T5841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 355.427675][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 355.433265][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 355.433788][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 356.416759][ T5846] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 356.424404][ T5846] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 356.431894][ T5846] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 356.439778][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 356.447422][ T5846] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 356.455197][ T5846] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 356.707756][ T5846] Bluetooth: hci13: command tx timeout [ 357.337068][ T5146] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 357.344512][ T5146] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 357.352595][ T5146] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 357.361052][ T5146] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 357.368678][ T5146] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 357.376066][ T5146] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 358.469956][ T5146] Bluetooth: hci14: command tx timeout [ 358.787786][ T5146] Bluetooth: hci13: command tx timeout [ 359.427651][ T5146] Bluetooth: hci15: command tx timeout [ 360.547714][ T5146] Bluetooth: hci14: command tx timeout [ 360.877620][ T5146] Bluetooth: hci13: command tx timeout [ 361.517729][ T5146] Bluetooth: hci15: command tx timeout [ 362.627681][ T5146] Bluetooth: hci14: command tx timeout [ 362.947780][ T5146] Bluetooth: hci13: command tx timeout [ 363.589842][ T5146] Bluetooth: hci15: command tx timeout [ 364.707732][ T5146] Bluetooth: hci14: command tx timeout [ 365.667997][ T5146] Bluetooth: hci15: command tx timeout [ 370.496345][ T5846] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 370.502388][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 370.507387][ T5846] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 370.515153][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 370.518004][ T5846] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 370.525233][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 370.532733][ T5846] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 370.544239][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 370.546795][ T5846] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 370.554858][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 370.560725][ T5846] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 370.572770][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 372.627694][ T5834] Bluetooth: hci17: command tx timeout [ 372.627736][ T54] Bluetooth: hci16: command tx timeout [ 374.707709][ T5834] Bluetooth: hci17: command tx timeout [ 374.717760][ T5834] Bluetooth: hci16: command tx timeout [ 375.908572][ T5834] Bluetooth: hci7: command 0x0406 tx timeout [ 375.908623][ T5146] Bluetooth: hci6: command 0x0406 tx timeout [ 376.787686][ T5846] Bluetooth: hci16: command tx timeout [ 376.787864][ T5146] Bluetooth: hci17: command tx timeout [ 378.867970][ T5146] Bluetooth: hci16: command tx timeout [ 378.868002][ T5846] Bluetooth: hci17: command tx timeout [ 378.950169][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.028405][ T30] INFO: task kworker/u8:13:8389 blocked for more than 143 seconds. [ 393.036355][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 393.043763][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.052530][ T30] task:kworker/u8:13 state:D stack:22800 pid:8389 tgid:8389 ppid:2 flags:0x00004000 [ 393.062914][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 393.069071][ T30] Call Trace: [ 393.072353][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.075281][ T30] __schedule+0x186c/0x4be0 [ 393.080094][ T30] ? schedule+0x90/0x320 [ 393.084403][ T30] ? schedule+0x90/0x320 [ 393.088800][ T30] ? __pfx___schedule+0x10/0x10 [ 393.093696][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.127596][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.132538][ T30] ? kthread_data+0x52/0xd0 [ 393.137083][ T30] ? schedule+0x90/0x320 [ 393.151651][ T30] ? wq_worker_sleeping+0x66/0x240 [ 393.156860][ T30] ? schedule+0x90/0x320 [ 393.161741][ T30] schedule+0x14b/0x320 [ 393.165967][ T30] schedule_preempt_disabled+0x13/0x30 [ 393.171573][ T30] __mutex_lock+0x817/0x1010 [ 393.176204][ T30] ? __mutex_lock+0x602/0x1010 [ 393.181179][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 393.186423][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 393.194139][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 393.199447][ T30] addrconf_dad_work+0x10e/0x16a0 [ 393.204504][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.209632][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 393.215145][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.221641][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.226500][ T30] ? process_scheduled_works+0x976/0x1840 [ 393.232341][ T30] process_scheduled_works+0xa66/0x1840 [ 393.238002][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.244020][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 393.249703][ T30] ? assign_work+0x364/0x3d0 [ 393.254318][ T30] worker_thread+0x870/0xd30 [ 393.259093][ T30] ? __kthread_parkme+0x169/0x1d0 [ 393.264153][ T30] ? __pfx_worker_thread+0x10/0x10 [ 393.269423][ T30] kthread+0x7a9/0x920 [ 393.273527][ T30] ? __pfx_worker_thread+0x10/0x10 [ 393.278756][ T30] ? __pfx_kthread+0x10/0x10 [ 393.283395][ T30] ? __pfx_kthread+0x10/0x10 [ 393.288175][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.293021][ T30] ? __pfx_kthread+0x10/0x10 [ 393.297892][ T30] ? __pfx_kthread+0x10/0x10 [ 393.302519][ T30] ret_from_fork+0x4b/0x80 [ 393.306938][ T30] ? __pfx_kthread+0x10/0x10 [ 393.311608][ T30] ret_from_fork_asm+0x1a/0x30 [ 393.316403][ T30] [ 393.319515][ T30] INFO: task kworker/u8:17:8398 blocked for more than 143 seconds. [ 393.327586][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 393.334890][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.343744][ T30] task:kworker/u8:17 state:D stack:23248 pid:8398 tgid:8398 ppid:2 flags:0x00004000 [ 393.354134][ T30] Workqueue: netns cleanup_net [ 393.359026][ T30] Call Trace: [ 393.362320][ T30] [ 393.365268][ T30] __schedule+0x186c/0x4be0 [ 393.369889][ T30] ? schedule+0x90/0x320 [ 393.374191][ T30] ? schedule+0x90/0x320 [ 393.378626][ T30] ? __pfx___schedule+0x10/0x10 [ 393.383530][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.388655][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.393449][ T30] ? kthread_data+0x52/0xd0 [ 393.398021][ T30] ? schedule+0x90/0x320 [ 393.402292][ T30] ? wq_worker_sleeping+0x66/0x240 [ 393.407409][ T30] ? schedule+0x90/0x320 [ 393.411875][ T30] schedule+0x14b/0x320 [ 393.416073][ T30] schedule_preempt_disabled+0x13/0x30 [ 393.421810][ T30] __mutex_lock+0x817/0x1010 [ 393.426452][ T30] ? __mutex_lock+0x602/0x1010 [ 393.431428][ T30] ? unregister_netdevice_many_notify+0x1c2c/0x2030 [ 393.438130][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 393.443195][ T30] ? __pfx___might_resched+0x10/0x10 [ 393.448581][ T30] ? __pfx_device_del+0x10/0x10 [ 393.453474][ T30] unregister_netdevice_many_notify+0x1c2c/0x2030 [ 393.460169][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 393.467007][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.471857][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.476926][ T30] unregister_netdevice_queue+0x303/0x370 [ 393.482720][ T30] ? __pfx_up_write+0x10/0x10 [ 393.487425][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 393.493810][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 393.499715][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 393.505469][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 393.511492][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 393.518046][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.522856][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 393.528326][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 393.533980][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 393.540186][ T30] hwsim_exit_net+0x5c1/0x670 [ 393.544916][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 393.550235][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 393.556084][ T30] cleanup_net+0x812/0xd60 [ 393.560586][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 393.565554][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.570444][ T30] ? process_scheduled_works+0x976/0x1840 [ 393.576199][ T30] process_scheduled_works+0xa66/0x1840 [ 393.581905][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.587995][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 393.593576][ T30] ? assign_work+0x364/0x3d0 [ 393.598271][ T30] worker_thread+0x870/0xd30 [ 393.602894][ T30] ? __kthread_parkme+0x169/0x1d0 [ 393.607992][ T30] ? __pfx_worker_thread+0x10/0x10 [ 393.613124][ T30] kthread+0x7a9/0x920 [ 393.617199][ T30] ? __pfx_worker_thread+0x10/0x10 [ 393.622455][ T30] ? __pfx_kthread+0x10/0x10 [ 393.627092][ T30] ? __pfx_kthread+0x10/0x10 [ 393.631989][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.636809][ T30] ? __pfx_kthread+0x10/0x10 [ 393.641620][ T30] ? __pfx_kthread+0x10/0x10 [ 393.646239][ T30] ret_from_fork+0x4b/0x80 [ 393.650752][ T30] ? __pfx_kthread+0x10/0x10 [ 393.655374][ T30] ret_from_fork_asm+0x1a/0x30 [ 393.660281][ T30] [ 393.663336][ T30] INFO: task syz.2.740:8527 blocked for more than 143 seconds. [ 393.671236][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 393.678700][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.687391][ T30] task:syz.2.740 state:D stack:23664 pid:8527 tgid:8526 ppid:5829 flags:0x00004006 [ 393.697727][ T30] Call Trace: [ 393.701048][ T30] [ 393.704001][ T30] __schedule+0x186c/0x4be0 [ 393.708652][ T30] ? schedule+0x90/0x320 [ 393.713019][ T30] ? schedule+0x90/0x320 [ 393.717288][ T30] ? __pfx___schedule+0x10/0x10 [ 393.722336][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.727719][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.732523][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 393.738785][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.745284][ T30] ? schedule+0x90/0x320 [ 393.749780][ T30] schedule+0x14b/0x320 [ 393.754093][ T30] schedule_preempt_disabled+0x13/0x30 [ 393.759666][ T30] __mutex_lock+0x817/0x1010 [ 393.764290][ T30] ? __mutex_lock+0x602/0x1010 [ 393.769145][ T30] ? netdev_run_todo+0x961/0x10d0 [ 393.774197][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 393.779347][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.785354][ T30] ? __init_swait_queue_head+0xae/0x150 [ 393.791002][ T30] netdev_run_todo+0x961/0x10d0 [ 393.795885][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 393.801239][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 393.807164][ T30] ? vxcan_dellink+0xef/0x140 [ 393.811903][ T30] ? __pfx_vxcan_dellink+0x10/0x10 [ 393.817038][ T30] rtnl_dellink+0x760/0x8d0 [ 393.821711][ T30] ? __pfx_rtnl_dellink+0x10/0x10 [ 393.826792][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.833347][ T30] ? apparmor_capable+0x13b/0x1b0 [ 393.838602][ T30] ? bpf_lsm_capable+0x9/0x10 [ 393.843313][ T30] ? security_capable+0x7e/0x2d0 [ 393.848480][ T30] ? __pfx_rtnl_dellink+0x10/0x10 [ 393.853540][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 393.858631][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 393.863781][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.869357][ T30] ? ref_tracker_free+0x643/0x7e0 [ 393.874410][ T30] netlink_rcv_skb+0x1e3/0x430 [ 393.879282][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.884779][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.890140][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.895399][ T30] netlink_unicast+0x7f6/0x990 [ 393.900296][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 393.905604][ T30] ? __virt_addr_valid+0x45f/0x530 [ 393.910884][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 393.916096][ T30] ? __check_object_size+0x47a/0x730 [ 393.921464][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 393.926257][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.931630][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 393.936596][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.942097][ T30] __sock_sendmsg+0x221/0x270 [ 393.946817][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 393.951661][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.956969][ T30] ? __fget_files+0x2a/0x410 [ 393.961788][ T30] ? __fget_files+0x2a/0x410 [ 393.966433][ T30] __sys_sendmsg+0x269/0x350 [ 393.971217][ T30] ? __pfx_futex_wake+0x10/0x10 [ 393.976100][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.981349][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.987792][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.992594][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.997367][ T30] do_syscall_64+0xf3/0x230 [ 394.001968][ T30] ? clear_bhb_loop+0x35/0x90 [ 394.006668][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.012645][ T30] RIP: 0033:0x7f1cbf98cda9 [ 394.017349][ T30] RSP: 002b:00007f1cbd7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.025915][ T30] RAX: ffffffffffffffda RBX: 00007f1cbfba5fa0 RCX: 00007f1cbf98cda9 [ 394.033983][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 394.042103][ T30] RBP: 00007f1cbfa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 394.050156][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.058360][ T30] R13: 0000000000000000 R14: 00007f1cbfba5fa0 R15: 00007ffef00d4ff8 [ 394.066374][ T30] [ 394.069636][ T30] INFO: task syz-executor:14835 blocked for more than 144 seconds. [ 394.077875][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 394.085178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.093918][ T30] task:syz-executor state:D stack:21360 pid:14835 tgid:14835 ppid:1 flags:0x00004006 [ 394.104223][ T30] Call Trace: [ 394.107571][ T30] [ 394.110529][ T30] __schedule+0x186c/0x4be0 [ 394.115069][ T30] ? schedule+0x90/0x320 [ 394.119406][ T30] ? schedule+0x90/0x320 [ 394.123673][ T30] ? __pfx___schedule+0x10/0x10 [ 394.128610][ T30] ? __pfx_lock_release+0x10/0x10 [ 394.133663][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.138542][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 394.144581][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.151457][ T30] ? schedule+0x90/0x320 [ 394.155755][ T30] schedule+0x14b/0x320 [ 394.160018][ T30] schedule_preempt_disabled+0x13/0x30 [ 394.165600][ T30] __mutex_lock+0x817/0x1010 [ 394.170279][ T30] ? __mutex_lock+0x602/0x1010 [ 394.175090][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 394.181521][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 394.186569][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 394.192626][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 394.198711][ T30] wiphy_register+0x1be5/0x27b0 [ 394.203599][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 394.208880][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 394.214022][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 394.220197][ T30] ieee80211_register_hw+0x354e/0x4240 [ 394.225681][ T30] ? ieee80211_register_hw+0x15c1/0x4240 [ 394.231605][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 394.238107][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 394.243958][ T30] ? __asan_memset+0x23/0x50 [ 394.249313][ T30] ? __hrtimer_init+0x170/0x250 [ 394.254299][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 394.260221][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 394.266324][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 394.271719][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 394.277542][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 394.283144][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 394.289558][ T30] genl_rcv_msg+0xb14/0xec0 [ 394.294098][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.299375][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 394.304609][ T30] ? kasan_save_track+0x51/0x80 [ 394.310238][ T30] ? __sys_sendto+0x363/0x4c0 [ 394.314970][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 394.320473][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 394.326118][ T30] ? __pfx___might_resched+0x10/0x10 [ 394.331970][ T30] netlink_rcv_skb+0x1e3/0x430 [ 394.336809][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.342428][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.348245][ T30] ? lock_release+0xbf/0xa30 [ 394.353656][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 394.359968][ T30] genl_rcv+0x28/0x40 [ 394.364019][ T30] netlink_unicast+0x7f6/0x990 [ 394.369343][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 394.374687][ T30] ? __virt_addr_valid+0x45f/0x530 [ 394.380449][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 394.385528][ T30] ? __check_object_size+0x47a/0x730 [ 394.391543][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 394.396378][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.402182][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 394.407167][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.412879][ T30] __sock_sendmsg+0x221/0x270 [ 394.417932][ T30] __sys_sendto+0x363/0x4c0 [ 394.422490][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 394.428007][ T30] ? xfd_validate_state+0x6e/0x150 [ 394.433162][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 394.440077][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.445014][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 394.452503][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.457328][ T30] __x64_sys_sendto+0xde/0x100 [ 394.462687][ T30] do_syscall_64+0xf3/0x230 [ 394.467232][ T30] ? clear_bhb_loop+0x35/0x90 [ 394.472852][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.479130][ T30] RIP: 0033:0x7faf4538ec3c [ 394.483610][ T30] RSP: 002b:00007ffccf769990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 394.492887][ T30] RAX: ffffffffffffffda RBX: 00007faf460d4620 RCX: 00007faf4538ec3c [ 394.501331][ T30] RDX: 0000000000000024 RSI: 00007faf460d4670 RDI: 0000000000000003 [ 394.509644][ T30] RBP: 0000000000000000 R08: 00007ffccf7699e4 R09: 000000000000000c [ 394.518015][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 394.526033][ T30] R13: 0000000000000000 R14: 00007faf460d4670 R15: 0000000000000000 [ 394.534456][ T30] [ 394.537854][ T30] INFO: task syz-executor:14857 blocked for more than 144 seconds. [ 394.545790][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 394.554754][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.563823][ T30] task:syz-executor state:D stack:20176 pid:14857 tgid:14857 ppid:1 flags:0x00000004 [ 394.575090][ T30] Call Trace: [ 394.578561][ T30] [ 394.581519][ T30] __schedule+0x186c/0x4be0 [ 394.586057][ T30] ? schedule+0x90/0x320 [ 394.590640][ T30] ? schedule+0x90/0x320 [ 394.594920][ T30] ? __pfx___schedule+0x10/0x10 [ 394.599872][ T30] ? __pfx_lock_release+0x10/0x10 [ 394.604929][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.609963][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 394.615918][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.622516][ T30] ? schedule+0x90/0x320 [ 394.626816][ T30] schedule+0x14b/0x320 [ 394.631181][ T30] schedule_preempt_disabled+0x13/0x30 [ 394.636725][ T30] __mutex_lock+0x817/0x1010 [ 394.641438][ T30] ? __mutex_lock+0x602/0x1010 [ 394.646233][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 394.651530][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 394.657163][ T30] ? __nla_parse+0x40/0x60 [ 394.661865][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 394.666850][ T30] ? lock_release+0xbf/0xa30 [ 394.671546][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 394.676604][ T30] ? stack_trace_save+0x118/0x1d0 [ 394.681742][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 394.687158][ T30] ? bpf_lsm_capable+0x9/0x10 [ 394.691901][ T30] ? security_capable+0x7e/0x2d0 [ 394.696878][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 394.702500][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 394.707667][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 394.712850][ T30] ? lock_release+0xbf/0xa30 [ 394.717577][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.723094][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 394.728185][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.733002][ T30] ? lock_acquire+0xe3/0x550 [ 394.737756][ T30] netlink_rcv_skb+0x1e3/0x430 [ 394.742589][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.748150][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.753495][ T30] ? net_generic+0x1f/0x240 [ 394.758724][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.763989][ T30] netlink_unicast+0x7f6/0x990 [ 394.768829][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 394.774163][ T30] ? __virt_addr_valid+0x45f/0x530 [ 394.779537][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 394.784599][ T30] ? __check_object_size+0x47a/0x730 [ 394.790038][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 394.794838][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.800205][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 394.805206][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.810560][ T30] __sock_sendmsg+0x221/0x270 [ 394.815279][ T30] __sys_sendto+0x363/0x4c0 [ 394.819933][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 394.825033][ T30] ? __phys_addr+0xba/0x170 [ 394.829647][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 394.836535][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 394.843110][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.847965][ T30] __x64_sys_sendto+0xde/0x100 [ 394.852785][ T30] do_syscall_64+0xf3/0x230 [ 394.857289][ T30] ? clear_bhb_loop+0x35/0x90 [ 394.862605][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.868981][ T30] RIP: 0033:0x7f01d5d8ec3c [ 394.873478][ T30] RSP: 002b:00007ffd193283c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 394.882172][ T30] RAX: ffffffffffffffda RBX: 00007f01d6ad4620 RCX: 00007f01d5d8ec3c [ 394.890251][ T30] RDX: 0000000000000028 RSI: 00007f01d6ad4670 RDI: 0000000000000003 [ 394.898492][ T30] RBP: 0000000000000000 R08: 00007ffd19328414 R09: 000000000000000c [ 394.906865][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 394.915020][ T30] R13: 0000000000000000 R14: 00007f01d6ad4670 R15: 0000000000000000 [ 394.923123][ T30] [ 394.926187][ T30] INFO: task syz-executor:14890 blocked for more than 145 seconds. [ 394.934406][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 394.941820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.950887][ T30] task:syz-executor state:D stack:22096 pid:14890 tgid:14890 ppid:1 flags:0x00004004 [ 394.961139][ T30] Call Trace: [ 394.965016][ T30] [ 394.968097][ T30] __schedule+0x186c/0x4be0 [ 394.972643][ T30] ? schedule+0x90/0x320 [ 394.976921][ T30] ? schedule+0x90/0x320 [ 394.981360][ T30] ? __pfx___schedule+0x10/0x10 [ 394.986246][ T30] ? __pfx_lock_release+0x10/0x10 [ 394.991439][ T30] ? rcu_is_watching+0x15/0xb0 [ 394.996248][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 395.002203][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.008759][ T30] ? schedule+0x90/0x320 [ 395.013035][ T30] schedule+0x14b/0x320 [ 395.017200][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.022829][ T30] __mutex_lock+0x817/0x1010 [ 395.027711][ T30] ? __mutex_lock+0x602/0x1010 [ 395.032653][ T30] ? rtnl_newlink+0xce2/0x2210 [ 395.037509][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.042570][ T30] ? ns_capable+0x8a/0xf0 [ 395.046911][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 395.053087][ T30] rtnl_newlink+0xce2/0x2210 [ 395.057885][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.062956][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.068531][ T30] ? lock_release+0xbf/0xa30 [ 395.073174][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.078114][ T30] ? lock_release+0xbf/0xa30 [ 395.082733][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 395.087842][ T30] ? lock_release+0xbf/0xa30 [ 395.092473][ T30] ? deref_stack_reg+0x17c/0x210 [ 395.097415][ T30] ? __pfx_lock_release+0x10/0x10 [ 395.102593][ T30] ? stack_trace_save+0x118/0x1d0 [ 395.108056][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 395.113401][ T30] ? deref_stack_reg+0x17c/0x210 [ 395.118838][ T30] ? preempt_count_add+0x93/0x190 [ 395.123885][ T30] ? 0xffffffffa000094c [ 395.128138][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 395.133452][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 395.138774][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.144954][ T30] ? kernel_text_address+0xa7/0xe0 [ 395.150180][ T30] ? __kernel_text_address+0xd/0x40 [ 395.155450][ T30] ? unwind_get_return_address+0x4d/0x90 [ 395.161179][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.165986][ T30] ? lock_release+0xbf/0xa30 [ 395.171398][ T30] ? __pfx_lock_release+0x10/0x10 [ 395.176467][ T30] ? apparmor_capable+0x13b/0x1b0 [ 395.181631][ T30] ? bpf_lsm_capable+0x9/0x10 [ 395.186345][ T30] ? security_capable+0x7e/0x2d0 [ 395.191404][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.196485][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 395.201520][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 395.206675][ T30] ? lock_release+0xbf/0xa30 [ 395.211384][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.216892][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 395.222086][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.226893][ T30] ? lock_acquire+0xe3/0x550 [ 395.231621][ T30] netlink_rcv_skb+0x1e3/0x430 [ 395.236429][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.241984][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.247310][ T30] ? net_generic+0x1f/0x240 [ 395.251921][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.257149][ T30] netlink_unicast+0x7f6/0x990 [ 395.262051][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 395.267384][ T30] ? __virt_addr_valid+0x45f/0x530 [ 395.273511][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 395.278623][ T30] ? __check_object_size+0x47a/0x730 [ 395.284020][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 395.288891][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.294206][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 395.299299][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.304624][ T30] __sock_sendmsg+0x221/0x270 [ 395.309415][ T30] __sys_sendto+0x363/0x4c0 [ 395.313963][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 395.319092][ T30] ? __phys_addr+0xba/0x170 [ 395.325815][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.332273][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.338744][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.343548][ T30] __x64_sys_sendto+0xde/0x100 [ 395.348746][ T30] do_syscall_64+0xf3/0x230 [ 395.353284][ T30] ? clear_bhb_loop+0x35/0x90 [ 395.358144][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.364074][ T30] RIP: 0033:0x7f619b78ec3c [ 395.368565][ T30] RSP: 002b:00007fff82178870 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 395.377590][ T30] RAX: ffffffffffffffda RBX: 00007f619c4d4620 RCX: 00007f619b78ec3c [ 395.385593][ T30] RDX: 0000000000000020 RSI: 00007f619c4d4670 RDI: 0000000000000003 [ 395.393756][ T30] RBP: 0000000000000000 R08: 00007fff821788c4 R09: 000000000000000c [ 395.401886][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 395.409971][ T30] R13: 0000000000000000 R14: 00007f619c4d4670 R15: 0000000000000000 [ 395.418127][ T30] [ 395.421226][ T30] INFO: task syz.1.2560:14945 blocked for more than 145 seconds. [ 395.429077][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 395.436376][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.445200][ T30] task:syz.1.2560 state:D stack:22480 pid:14945 tgid:14944 ppid:5835 flags:0x00000004 [ 395.455469][ T30] Call Trace: [ 395.458875][ T30] [ 395.461848][ T30] __schedule+0x186c/0x4be0 [ 395.466387][ T30] ? schedule+0x90/0x320 [ 395.470714][ T30] ? schedule+0x90/0x320 [ 395.475538][ T30] ? __pfx___schedule+0x10/0x10 [ 395.480487][ T30] ? __pfx_lock_release+0x10/0x10 [ 395.485542][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.490391][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 395.496313][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.502863][ T30] ? schedule+0x90/0x320 [ 395.507140][ T30] schedule+0x14b/0x320 [ 395.511465][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.516981][ T30] __mutex_lock+0x817/0x1010 [ 395.521634][ T30] ? __mutex_lock+0x602/0x1010 [ 395.526429][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 395.531615][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.536713][ T30] ? bpf_lsm_capable+0x9/0x10 [ 395.541566][ T30] ? security_capable+0x7e/0x2d0 [ 395.546546][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 395.551639][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 395.556792][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.562566][ T30] ? ref_tracker_free+0x643/0x7e0 [ 395.567878][ T30] netlink_rcv_skb+0x1e3/0x430 [ 395.572687][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.578864][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.584199][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.589629][ T30] netlink_unicast+0x7f6/0x990 [ 395.594430][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 395.599766][ T30] ? __virt_addr_valid+0x45f/0x530 [ 395.604909][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 395.610024][ T30] ? __check_object_size+0x47a/0x730 [ 395.615354][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 395.620188][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.625502][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 395.630512][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.635851][ T30] __sock_sendmsg+0x221/0x270 [ 395.640601][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 395.645434][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.650801][ T30] ? __fget_files+0x2a/0x410 [ 395.655446][ T30] ? __fget_files+0x2a/0x410 [ 395.660240][ T30] __sys_sendmsg+0x269/0x350 [ 395.664874][ T30] ? __pfx_futex_wake+0x10/0x10 [ 395.670130][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 395.675293][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.682471][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.687276][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.692090][ T30] do_syscall_64+0xf3/0x230 [ 395.696616][ T30] ? clear_bhb_loop+0x35/0x90 [ 395.701361][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.707276][ T30] RIP: 0033:0x7fbcfbb8cda9 [ 395.711750][ T30] RSP: 002b:00007fbcfca8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.720215][ T30] RAX: ffffffffffffffda RBX: 00007fbcfbda5fa0 RCX: 00007fbcfbb8cda9 [ 395.728458][ T30] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000005 [ 395.736462][ T30] RBP: 00007fbcfbc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 395.744507][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.752538][ T30] R13: 0000000000000000 R14: 00007fbcfbda5fa0 R15: 00007ffd89849448 [ 395.760609][ T30] [ 395.763703][ T30] INFO: task syz.4.2562:14953 blocked for more than 146 seconds. [ 395.771484][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 395.778836][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.788910][ T30] task:syz.4.2562 state:D stack:26864 pid:14953 tgid:14952 ppid:5830 flags:0x00000004 [ 395.799339][ T30] Call Trace: [ 395.802681][ T30] [ 395.805620][ T30] __schedule+0x186c/0x4be0 [ 395.810678][ T30] ? schedule+0x90/0x320 [ 395.814960][ T30] ? schedule+0x90/0x320 [ 395.819286][ T30] ? __pfx___schedule+0x10/0x10 [ 395.824165][ T30] ? __pfx_lock_release+0x10/0x10 [ 395.829418][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.834217][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 395.840171][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.846677][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.851529][ T30] ? schedule+0x90/0x320 [ 395.855801][ T30] schedule+0x14b/0x320 [ 395.860014][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.865502][ T30] __mutex_lock+0x817/0x1010 [ 395.870158][ T30] ? __mutex_lock+0x602/0x1010 [ 395.874945][ T30] ? genl_rcv_msg+0x121/0xec0 [ 395.879699][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.885289][ T30] ? 0xffffffffa000094c [ 395.889567][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.895776][ T30] ? kernel_text_address+0xa7/0xe0 [ 395.900972][ T30] ? __kernel_text_address+0xd/0x40 [ 395.906208][ T30] ? radix_tree_lookup+0x238/0x290 [ 395.911547][ T30] genl_rcv_msg+0x121/0xec0 [ 395.916188][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.921467][ T30] ? stack_trace_save+0x118/0x1d0 [ 395.926541][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 395.931984][ T30] ? stack_depot_save_flags+0x37/0x940 [ 395.937701][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.942509][ T30] ? lock_acquire+0xe3/0x550 [ 395.947114][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 395.952228][ T30] ? __pfx___might_resched+0x10/0x10 [ 395.957584][ T30] ? rcu_is_watching+0x15/0xb0 [ 395.962401][ T30] ? lock_acquire+0xe3/0x550 [ 395.967001][ T30] netlink_rcv_skb+0x1e3/0x430 [ 395.971870][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.976927][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.982260][ T30] ? lock_release+0xbf/0xa30 [ 395.987437][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 395.992949][ T30] ? net_generic+0x1f/0x240 [ 395.997508][ T30] genl_rcv+0x28/0x40 [ 396.001515][ T30] netlink_unicast+0x7f6/0x990 [ 396.006283][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 396.011664][ T30] ? __virt_addr_valid+0x45f/0x530 [ 396.016805][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 396.021872][ T30] ? __check_object_size+0x47a/0x730 [ 396.027188][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 396.032035][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.037363][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 396.042367][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.047727][ T30] __sock_sendmsg+0x221/0x270 [ 396.052446][ T30] __sys_sendto+0x363/0x4c0 [ 396.056971][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 396.062059][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.067115][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.073739][ T30] ? __pfx___up_read+0x10/0x10 [ 396.078738][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.085103][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.091338][ T30] __x64_sys_sendto+0xde/0x100 [ 396.096238][ T30] do_syscall_64+0xf3/0x230 [ 396.100954][ T30] ? clear_bhb_loop+0x35/0x90 [ 396.105689][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.111787][ T30] RIP: 0033:0x7f00baf8ec3c [ 396.116230][ T30] RSP: 002b:00007f00bbdf1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 396.124766][ T30] RAX: ffffffffffffffda RBX: 00007f00bbdf1fc0 RCX: 00007f00baf8ec3c [ 396.132826][ T30] RDX: 0000000000000024 RSI: 00007f00bbdf2010 RDI: 0000000000000007 [ 396.140987][ T30] RBP: 0000000000000000 R08: 00007f00bbdf1f14 R09: 000000000000000c [ 396.149260][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 396.157265][ T30] R13: 00007f00bbdf1f68 R14: 00007f00bbdf2010 R15: 0000000000000000 [ 396.165408][ T30] [ 396.168491][ T30] INFO: task syz.4.2562:14954 blocked for more than 146 seconds. [ 396.176234][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 396.183848][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.192811][ T30] task:syz.4.2562 state:D stack:28176 pid:14954 tgid:14952 ppid:5830 flags:0x00000004 [ 396.203169][ T30] Call Trace: [ 396.206469][ T30] [ 396.209463][ T30] __schedule+0x186c/0x4be0 [ 396.214009][ T30] ? schedule+0x90/0x320 [ 396.218464][ T30] ? schedule+0x90/0x320 [ 396.222786][ T30] ? __pfx___schedule+0x10/0x10 [ 396.228195][ T30] ? __pfx_lock_release+0x10/0x10 [ 396.233275][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.238163][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 396.244091][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.250498][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.255320][ T30] ? schedule+0x90/0x320 [ 396.259763][ T30] schedule+0x14b/0x320 [ 396.263959][ T30] schedule_preempt_disabled+0x13/0x30 [ 396.269541][ T30] __mutex_lock+0x817/0x1010 [ 396.274176][ T30] ? __mutex_lock+0x602/0x1010 [ 396.279037][ T30] ? genl_rcv_msg+0x121/0xec0 [ 396.283747][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 396.288865][ T30] ? 0xffffffffa000094c [ 396.293040][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 396.299562][ T30] ? kernel_text_address+0xa7/0xe0 [ 396.304730][ T30] ? __kernel_text_address+0xd/0x40 [ 396.310461][ T30] ? radix_tree_lookup+0x238/0x290 [ 396.315678][ T30] genl_rcv_msg+0x121/0xec0 [ 396.320450][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.325519][ T30] ? stack_trace_save+0x118/0x1d0 [ 396.330627][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 396.336021][ T30] ? stack_depot_save_flags+0x37/0x940 [ 396.341685][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.346488][ T30] ? lock_acquire+0xe3/0x550 [ 396.351227][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.356276][ T30] ? __pfx___might_resched+0x10/0x10 [ 396.361650][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.366883][ T30] ? lock_acquire+0xe3/0x550 [ 396.371717][ T30] netlink_rcv_skb+0x1e3/0x430 [ 396.376852][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.381976][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.387370][ T30] ? lock_release+0xbf/0xa30 [ 396.392198][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 396.398497][ T30] ? net_generic+0x1f/0x240 [ 396.403046][ T30] genl_rcv+0x28/0x40 [ 396.407033][ T30] netlink_unicast+0x7f6/0x990 [ 396.411909][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 396.417304][ T30] ? __virt_addr_valid+0x45f/0x530 [ 396.422524][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 396.427680][ T30] ? __check_object_size+0x47a/0x730 [ 396.433008][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 396.437897][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.443211][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 396.448219][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.453533][ T30] __sock_sendmsg+0x221/0x270 [ 396.458306][ T30] __sys_sendto+0x363/0x4c0 [ 396.462850][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 396.467983][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.473056][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.479523][ T30] ? __pfx___up_read+0x10/0x10 [ 396.484309][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.490696][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.495487][ T30] __x64_sys_sendto+0xde/0x100 [ 396.501031][ T30] do_syscall_64+0xf3/0x230 [ 396.505654][ T30] ? clear_bhb_loop+0x35/0x90 [ 396.510391][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.516334][ T30] RIP: 0033:0x7f00baf8ec3c [ 396.520841][ T30] RSP: 002b:00007f00bbdd0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 396.529312][ T30] RAX: ffffffffffffffda RBX: 00007f00bbdd0fc0 RCX: 00007f00baf8ec3c [ 396.537287][ T30] RDX: 0000000000000024 RSI: 00007f00bbdd1010 RDI: 0000000000000007 [ 396.545366][ T30] RBP: 0000000000000000 R08: 00007f00bbdd0f14 R09: 000000000000000c [ 396.553506][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 396.561598][ T30] R13: 00007f00bbdd0f68 R14: 00007f00bbdd1010 R15: 0000000000000000 [ 396.569648][ T30] [ 396.572682][ T30] INFO: task syz-executor:14963 blocked for more than 146 seconds. [ 396.580666][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 396.588018][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.596703][ T30] task:syz-executor state:D stack:25328 pid:14963 tgid:14963 ppid:1 flags:0x00000004 [ 396.607658][ T30] Call Trace: [ 396.610961][ T30] [ 396.613908][ T30] __schedule+0x186c/0x4be0 [ 396.618484][ T30] ? schedule+0x90/0x320 [ 396.622757][ T30] ? schedule+0x90/0x320 [ 396.627005][ T30] ? __pfx___schedule+0x10/0x10 [ 396.631984][ T30] ? __pfx_lock_release+0x10/0x10 [ 396.637049][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.641889][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 396.647865][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.654245][ T30] ? schedule+0x90/0x320 [ 396.658586][ T30] schedule+0x14b/0x320 [ 396.662773][ T30] schedule_preempt_disabled+0x13/0x30 [ 396.668281][ T30] __mutex_lock+0x817/0x1010 [ 396.672894][ T30] ? __mutex_lock+0x602/0x1010 [ 396.677720][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 396.682854][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 396.687930][ T30] ? __nla_parse+0x40/0x60 [ 396.692368][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 396.697305][ T30] ? lock_release+0xbf/0xa30 [ 396.701959][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.707925][ T30] ? stack_trace_save+0x118/0x1d0 [ 396.713015][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 396.718451][ T30] ? bpf_lsm_capable+0x9/0x10 [ 396.723145][ T30] ? security_capable+0x7e/0x2d0 [ 396.728151][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 396.733550][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 396.738538][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 396.743679][ T30] ? lock_release+0xbf/0xa30 [ 396.748317][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 396.753798][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.758895][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.763688][ T30] ? lock_acquire+0xe3/0x550 [ 396.768353][ T30] netlink_rcv_skb+0x1e3/0x430 [ 396.773137][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 396.778755][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.784089][ T30] ? net_generic+0x1f/0x240 [ 396.788704][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 396.793949][ T30] netlink_unicast+0x7f6/0x990 [ 396.798780][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 396.804085][ T30] ? __virt_addr_valid+0x45f/0x530 [ 396.809952][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 396.815010][ T30] ? __check_object_size+0x47a/0x730 [ 396.820400][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 396.825222][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.830569][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 396.835531][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.841034][ T30] __sock_sendmsg+0x221/0x270 [ 396.845740][ T30] __sys_sendto+0x363/0x4c0 [ 396.850313][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 396.855359][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.860441][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.866802][ T30] ? __pfx___up_read+0x10/0x10 [ 396.871812][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.878226][ T30] ? rcu_is_watching+0x15/0xb0 [ 396.883006][ T30] __x64_sys_sendto+0xde/0x100 [ 396.887840][ T30] do_syscall_64+0xf3/0x230 [ 396.892379][ T30] ? clear_bhb_loop+0x35/0x90 [ 396.897086][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.903097][ T30] RIP: 0033:0x7f9c7918ec3c [ 396.907568][ T30] RSP: 002b:00007ffc56adec60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 396.916599][ T30] RAX: ffffffffffffffda RBX: 00007f9c79ed4620 RCX: 00007f9c7918ec3c [ 396.924677][ T30] RDX: 0000000000000028 RSI: 00007f9c79ed4670 RDI: 0000000000000003 [ 396.932705][ T30] RBP: 0000000000000000 R08: 00007ffc56adecb4 R09: 000000000000000c [ 396.940757][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 396.948977][ T30] R13: 0000000000000000 R14: 00007f9c79ed4670 R15: 0000000000000000 [ 396.957076][ T30] [ 396.960180][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 396.969325][ T30] INFO: task syz-executor:14965 blocked for more than 147 seconds. [ 396.977248][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 396.984591][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.993339][ T30] task:syz-executor state:D stack:26352 pid:14965 tgid:14965 ppid:1 flags:0x00000004 [ 397.003589][ T30] Call Trace: [ 397.006883][ T30] [ 397.009872][ T30] __schedule+0x186c/0x4be0 [ 397.014968][ T30] ? schedule+0x90/0x320 [ 397.019295][ T30] ? schedule+0x90/0x320 [ 397.023609][ T30] ? __pfx___schedule+0x10/0x10 [ 397.028521][ T30] ? __pfx_lock_release+0x10/0x10 [ 397.033579][ T30] ? rcu_is_watching+0x15/0xb0 [ 397.038413][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 397.044353][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.050745][ T30] ? schedule+0x90/0x320 [ 397.055009][ T30] schedule+0x14b/0x320 [ 397.059230][ T30] schedule_preempt_disabled+0x13/0x30 [ 397.064805][ T30] __mutex_lock+0x817/0x1010 [ 397.069477][ T30] ? __mutex_lock+0x602/0x1010 [ 397.074261][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 397.079433][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 397.084477][ T30] ? __nla_parse+0x40/0x60 [ 397.088953][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 397.093916][ T30] ? lock_release+0xbf/0xa30 [ 397.098593][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 397.103643][ T30] ? stack_trace_save+0x118/0x1d0 [ 397.108804][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 397.114741][ T30] ? bpf_lsm_capable+0x9/0x10 [ 397.119693][ T30] ? security_capable+0x7e/0x2d0 [ 397.124660][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 397.130084][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 397.135047][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 397.140315][ T30] ? lock_release+0xbf/0xa30 [ 397.144936][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.150473][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 397.155516][ T30] ? rcu_is_watching+0x15/0xb0 [ 397.160337][ T30] ? lock_acquire+0xe3/0x550 [ 397.165038][ T30] netlink_rcv_skb+0x1e3/0x430 [ 397.169877][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.175363][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.180710][ T30] ? net_generic+0x1f/0x240 [ 397.185239][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.190850][ T30] netlink_unicast+0x7f6/0x990 [ 397.195653][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 397.200986][ T30] ? __virt_addr_valid+0x45f/0x530 [ 397.206119][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 397.211241][ T30] ? __check_object_size+0x47a/0x730 [ 397.217088][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 397.221952][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.227260][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 397.232273][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.237680][ T30] __sock_sendmsg+0x221/0x270 [ 397.242387][ T30] __sys_sendto+0x363/0x4c0 [ 397.246906][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 397.251987][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 397.257058][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 397.263483][ T30] ? __pfx___up_read+0x10/0x10 [ 397.268444][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 397.274815][ T30] ? rcu_is_watching+0x15/0xb0 [ 397.279724][ T30] __x64_sys_sendto+0xde/0x100 [ 397.284776][ T30] do_syscall_64+0xf3/0x230 [ 397.289398][ T30] ? clear_bhb_loop+0x35/0x90 [ 397.294102][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.300162][ T30] RIP: 0033:0x7fc45e38ec3c [ 397.304591][ T30] RSP: 002b:00007ffe7f13e820 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 397.313079][ T30] RAX: ffffffffffffffda RBX: 00007fc45f0d4620 RCX: 00007fc45e38ec3c [ 397.321653][ T30] RDX: 0000000000000028 RSI: 00007fc45f0d4670 RDI: 0000000000000003 [ 397.329702][ T30] RBP: 0000000000000000 R08: 00007ffe7f13e874 R09: 000000000000000c [ 397.337818][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 397.345897][ T30] R13: 0000000000000000 R14: 00007fc45f0d4670 R15: 0000000000000000 [ 397.353941][ T30] [ 397.356992][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 397.366085][ T30] INFO: lockdep is turned off. [ 397.371079][ T30] NMI backtrace for cpu 0 [ 397.371093][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 397.371109][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 397.371118][ T30] Call Trace: [ 397.371124][ T30] [ 397.371130][ T30] dump_stack_lvl+0x241/0x360 [ 397.371157][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.371179][ T30] ? __pfx__printk+0x10/0x10 [ 397.371200][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 397.371224][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 397.371246][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 397.371265][ T30] ? _printk+0xd5/0x120 [ 397.371282][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 397.371303][ T30] ? __pfx__printk+0x10/0x10 [ 397.371324][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.371340][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 397.371361][ T30] watchdog+0xff6/0x1040 [ 397.371379][ T30] ? watchdog+0x1ea/0x1040 [ 397.371399][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.371416][ T30] kthread+0x7a9/0x920 [ 397.371435][ T30] ? __pfx_kthread+0x10/0x10 [ 397.371454][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.371472][ T30] ? __pfx_kthread+0x10/0x10 [ 397.371490][ T30] ? __pfx_kthread+0x10/0x10 [ 397.371510][ T30] ? __pfx_kthread+0x10/0x10 [ 397.371533][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.371554][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 397.371576][ T30] ? __pfx_kthread+0x10/0x10 [ 397.371595][ T30] ret_from_fork+0x4b/0x80 [ 397.371611][ T30] ? __pfx_kthread+0x10/0x10 [ 397.371630][ T30] ret_from_fork_asm+0x1a/0x30 [ 397.371649][ T30] [ 397.371655][ T30] Sending NMI from CPU 0 to CPUs 1: [ 397.540378][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 397.541459][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 397.556487][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 397.566739][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 397.576800][ T30] Call Trace: [ 397.580087][ T30] [ 397.583022][ T30] dump_stack_lvl+0x241/0x360 [ 397.587716][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.592940][ T30] ? __pfx__printk+0x10/0x10 [ 397.597546][ T30] ? vscnprintf+0x5d/0x90 [ 397.601896][ T30] panic+0x349/0x880 [ 397.605816][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 397.612005][ T30] ? __pfx_panic+0x10/0x10 [ 397.616426][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 397.621811][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 397.627985][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 397.634161][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 397.640330][ T30] watchdog+0x1035/0x1040 [ 397.644674][ T30] ? watchdog+0x1ea/0x1040 [ 397.649101][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.653786][ T30] kthread+0x7a9/0x920 [ 397.657863][ T30] ? __pfx_kthread+0x10/0x10 [ 397.662461][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.667149][ T30] ? __pfx_kthread+0x10/0x10 [ 397.671749][ T30] ? __pfx_kthread+0x10/0x10 [ 397.676349][ T30] ? __pfx_kthread+0x10/0x10 [ 397.680947][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.686154][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 397.691379][ T30] ? __pfx_kthread+0x10/0x10 [ 397.695992][ T30] ret_from_fork+0x4b/0x80 [ 397.700422][ T30] ? __pfx_kthread+0x10/0x10 [ 397.705033][ T30] ret_from_fork_asm+0x1a/0x30 [ 397.709822][ T30] [ 397.712982][ T30] Kernel Offset: disabled [ 397.717309][ T30] Rebooting in 86400 seconds..