last executing test programs: 58.377674073s ago: executing program 4 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x10, 0x5, 0x80000001, 0x4, 0x84, 0xaf, 0xb}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x10000}, &(0x7f00000001c0)=0x8) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000308010200000000000000000a00000605000300060000000900010073797a3000000000050003002100000005000300060000000900010073797a3100000000050003003a0000000900010073797a30000000002cbab05eccfa6d53d894095edb2dfbaadbd73d4e55515e50a474c3"], 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x68}}, 0x40041) 53.314836233s ago: executing program 2 (id=2439): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) close(r1) socket$inet6(0xa, 0x40000080806, 0x0) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) listen(r0, 0x6) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) (async) close(r1) (async) 50.15472632s ago: executing program 4 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x10, 0x5, 0x80000001, 0x4, 0x84, 0xaf, 0xb}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x10000}, &(0x7f00000001c0)=0x8) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000308010200000000000000000a00000605000300060000000900010073797a3000000000050003002100000005000300060000000900010073797a3100000000050003003a0000000900010073797a30000000002cbab05eccfa6d53d894095edb2dfbaadbd73d4e55515e50a474c3"], 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x68}}, 0x40041) 47.488019981s ago: executing program 2 (id=2439): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) close(r1) socket$inet6(0xa, 0x40000080806, 0x0) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) listen(r0, 0x6) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) (async) close(r1) (async) 43.117247286s ago: executing program 4 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x10, 0x5, 0x80000001, 0x4, 0x84, 0xaf, 0xb}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x10000}, &(0x7f00000001c0)=0x8) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000308010200000000000000000a00000605000300060000000900010073797a3000000000050003002100000005000300060000000900010073797a3100000000050003003a0000000900010073797a30000000002cbab05eccfa6d53d894095edb2dfbaadbd73d4e55515e50a474c3"], 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x68}}, 0x40041) 40.956392778s ago: executing program 2 (id=2439): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) close(r1) socket$inet6(0xa, 0x40000080806, 0x0) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) listen(r0, 0x6) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) (async) close(r1) (async) 39.184325492s ago: executing program 0 (id=2916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dontfrag={{0x14}}], 0x18}, 0x97ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r11, r10, 0x2, 0x6, 0x4000, @void, @value}, 0x10) socket$inet6(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r13}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 39.160307699s ago: executing program 0 (id=2918): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x6, 0x8004, 0x5, 0x6, 0x2a, 0x7, 0x20000, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x2e}, 0x8) sendto$inet6(r0, &(0x7f0000000000)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x55) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) shutdown(r0, 0x1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/65, 0x41}, {0x0}, {0x0}], 0x8}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x9, 0x4) 39.110292549s ago: executing program 0 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_kthread_work_queue_work\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9815}, 0x1c) listen(r0, 0x9) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r5, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d00010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2050a0005"], 0x28}}, 0x0) 36.807306682s ago: executing program 4 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x10, 0x5, 0x80000001, 0x4, 0x84, 0xaf, 0xb}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x10000}, &(0x7f00000001c0)=0x8) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000308010200000000000000000a00000605000300060000000900010073797a3000000000050003002100000005000300060000000900010073797a3100000000050003003a0000000900010073797a30000000002cbab05eccfa6d53d894095edb2dfbaadbd73d4e55515e50a474c3"], 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x68}}, 0x40041) 34.014990573s ago: executing program 2 (id=2439): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) close(r1) socket$inet6(0xa, 0x40000080806, 0x0) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) listen(r0, 0x6) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) (async) close(r1) (async) 32.338121239s ago: executing program 0 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_kthread_work_queue_work\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9815}, 0x1c) listen(r0, 0x9) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r5, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d00010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2050a0005"], 0x28}}, 0x0) 29.221091968s ago: executing program 4 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x10, 0x5, 0x80000001, 0x4, 0x84, 0xaf, 0xb}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x10000}, &(0x7f00000001c0)=0x8) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000308010200000000000000000a00000605000300060000000900010073797a3000000000050003002100000005000300060000000900010073797a3100000000050003003a0000000900010073797a30000000002cbab05eccfa6d53d894095edb2dfbaadbd73d4e55515e50a474c3"], 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x68}}, 0x40041) 27.336884658s ago: executing program 2 (id=2439): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) close(r1) socket$inet6(0xa, 0x40000080806, 0x0) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) listen(r0, 0x6) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) (async) close(r1) (async) 26.052424617s ago: executing program 0 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_kthread_work_queue_work\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9815}, 0x1c) listen(r0, 0x9) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r5, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d00010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2050a0005"], 0x28}}, 0x0) 22.550804244s ago: executing program 4 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x10, 0x5, 0x80000001, 0x4, 0x84, 0xaf, 0xb}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x10000}, &(0x7f00000001c0)=0x8) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000308010200000000000000000a00000605000300060000000900010073797a3000000000050003002100000005000300060000000900010073797a3100000000050003003a0000000900010073797a30000000002cbab05eccfa6d53d894095edb2dfbaadbd73d4e55515e50a474c3"], 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x68}}, 0x40041) 20.462096894s ago: executing program 2 (id=2439): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) close(r1) socket$inet6(0xa, 0x40000080806, 0x0) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) listen(r0, 0x6) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x24008018, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="bae33903d6d26c693aa0207f1ea7196ac1", 0x11}], 0x1, 0x0, 0x0, 0x40000c4}], 0x1, 0x80) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) (async) close(r1) (async) 19.763156817s ago: executing program 0 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_kthread_work_queue_work\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9815}, 0x1c) listen(r0, 0x9) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r5, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d00010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2050a0005"], 0x28}}, 0x0) 15.969394576s ago: executing program 1 (id=3101): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 15.841632946s ago: executing program 3 (id=3104): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x120, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 15.835072638s ago: executing program 1 (id=3105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) r5 = getpid() sendmsg$unix(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000010"], 0x30}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, 0x0, 0x4004400) r8 = getpid() getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000004e40)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4) r9 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x1230, 0x3c, 0x1, 0x70bd29, 0x25dfdbfb, {0x18}, [@typed={0x8, 0x13a, 0x0, 0x0, @pid}, @generic="d362c6ee2be44878a55992c96d9a9fa2d0cead5db6dd696d464f179d0d889e96dddc771397908c34d72d8b0c01b5b6c1ee0680dc667dc3b05722b335b7d247b667dd62623d80ee2638c1b86f3dcf101f63fbbf1fb0a6a8c6ad6b7ef3baf93da98c3ec1debfb7fe0d1ea945e3657533f525a29ea72d1470fb6d79011c", @nested={0x10e3, 0x102, 0x0, 0x1, [@generic="00cf471a94399d7f817f17c2255ea5b16559c7bc8538fb597c0aca7aca3b8bff5fa791fc6ffbf2f5870d65979b55c2d5827d0a718cc2e734af1d5b4610d9e7df900bf098f3d643dbe341812c9a2647cdd4af5bb6c256621df29a45721d2067f7c33ce0966edf9198b14c7c526d366baf24741b4282d2f76993e8dfc75629b61508ebbfd2dabf", @typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @pid=r5}, @generic="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", @typed={0x4, 0xe4}, @generic="ed81a82c1a61827d6a82d4c614be4e5f41425cd5511d280793ba21afe3071a537eed04c373862bbed3211cd1e1b8ae901f88ac31c23fef5e79"]}, @generic="4a49e230c119feb883e74a33fd5d4fde8b95d0b164b148080ac281", @nested={0x86, 0xfb, 0x0, 0x1, [@generic="856e57356b04806648f269e46622231c4b905c5d89d9737196e17f2495ce2fd870798ccaecca6490063531b97ae8de250fb3da0f673c0e3f0ae9702c327182b69264629dfdfb6d04434cc46576b1d504331ba6746011a6b68162fdc084da38070d0e31ac196add143e4e", @typed={0x8, 0x82, 0x0, 0x0, @pid=r8}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x4a}]}, @typed={0x8, 0x5b, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x4c, 0x0, 0x0, @fd=r1}]}, 0x1230}, 0x1, 0x0, 0x0, 0x1}, 0x4801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r10, r1, 0x0, r1}, 0x10) socket$unix(0x1, 0x1, 0x0) 15.775536595s ago: executing program 1 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001200010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001000089f200"/16], 0x28}}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x3ff, 0x3ff, {{0x7, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x7f, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 15.646545529s ago: executing program 3 (id=3107): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000a7227db8083e47432bd5b79d634136e56f1742d750638d119bf2eb55", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x6, 0x9, 0x2, 0x2, 0x5, 0xffffffff}}, {0x4}}]}]}, 0xc8}}, 0x0) 15.461201063s ago: executing program 3 (id=3108): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd70000000000014000000080003", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x22000010}, 0x0) 15.445633514s ago: executing program 3 (id=3109): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x8}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @mcast1, 0x9}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x12}], 0x400000000000172, 0x4001c00) (async) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x1, 0x4) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 15.36649549s ago: executing program 3 (id=3110): r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$l2tp(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x9, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc800) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x80000000) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000006c0)={0xa, 0x4e20, 0x4004, @loopback}, 0x1c) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0xb9, r4, 0x7}, 0xc) 15.342558252s ago: executing program 1 (id=3111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e20, @empty}}) (async) sendmmsg(r1, 0x0, 0x0, 0x4000040) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000cd4d22500000000068305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657489315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) (async) close(r0) 15.253257315s ago: executing program 3 (id=3112): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="273bfefdae71789b47dd8d9cf8b78efd1a3efc3b6b0c11fe2eaf68751ace492ad99ab7c3b5c8e1eb2ef9902e6c6e68f59baa954f1b3cde79fe5fdb4aa6821469acc57bba2f140d592e74bee5666d02fb362c12e5cd7c5439b0732cf83fd1b2c60e40fb659cefc59099264ef24c929ee554292416df49863c66adf3a2280ab255644e67f9a17dd3a34d657039cfbd06c998c935bb51eefd92fd2a5a80d2be444f94b825963b9df582afd49e409c93010c829b1043b94b7cd4b24887f93cdbf206891cf9ed322085989c47399e5b89c70adfbf315b877874a80dea2c80b80d6d97ec500a6e01e7a38622dc0a03fd9353fea94524244cf13d4f80f2c41fdfe1", 0xfe}, {&(0x7f00000003c0)="bcddfdf37d4ec9d9465ab27d668101ad0811f0716d19d20193b596221be4f209a092f7726503b9e0ee74483ca2b31b9c84d2428088ffd7461d740de9e92336e155b631f68bea6965ffba4fe120e3e3bf9cbb4e2c0d6aa1f79059b437c02abbd803034e26925445bb974a9ed6c2ad4d80b2bb200e351971dfced8b84c76b22cb73fa39608e858a1deec2d63569d97248df588bd8f8d8e77e9fb3f643906722b0c3ed1994e5899782c42a84838469694fd9dc1346d3ed905f4b65ce69343b800b29d873a1fe9409278", 0xc8}, {&(0x7f00000000c0)="9d0a8f9ac180be9e13440a9074ec79f7508edd5fdd1064c7358704e958357f3092c4390499ed8f6a857b40cdf037949425681830863862ef1ecb5c4c727b1614928de47b9c14fe5f4a5bfd73d9ec16586f5164d2a077bc133c672391c10cde7ccbbc6db9edd3be93499852f0a20d1b42914f3d7556a1f0", 0x77}, {&(0x7f00000004c0)="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", 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}, {&(0x7f00000014c0)="dd2bcff84a15d855516478c44cc7f845d208a306a6d7d178bc1f3d8951c83c2f4f6c5ebb216f51f05256079b2389a34c5560e1ef0c7d4ec23edd774d58bc522216e5a326661c5e0584eb4a396bca2d378468788e477c0666eeb5a6954a2c7a071d9c0c6c1cdee16490385a9172276cbaf87ea37e13ea611ce155dccc30e2ce624aa0ab6e280d9c78c92cb2f01e5b04d44a0655d354535927c1fde0b9aeae1f8e8f8b657388444766a5858620cffc3b65595ea28fbe85cee45e69c266572a9850fbfff95bbfa7796c7189db6d", 0xcc}, {&(0x7f00000015c0)="2fc096640a31a11b43c4d1b70d56de2309eccf7ad9b3ca4d71b6ac2b34df2e7a04018eee64de1a1c9821380c83efbf28dc969d6e91f9388b7940c2f058fbff9e981cecc54b74beaa3a603d878541af29c662d0a68aa48aac246beafbb02b655586bc18ddc49f842ec0355bd6508baa8cab4b6f660202842b6dbb545c0b2112ff7a47fcbe", 0x84}], 0x3, &(0x7f0000001680)=[{0x18, 0x10c, 0x2, "1c52416695"}, {0x50, 0x10b, 0x3, "5ab75597fae1b2e905bddaecf620aef6f1ffb7001ecc9c6253ea06182f71ec0d7616ebef8592f5938d400c4388431190b1db9d9dd507dea9f3376464255563ad"}], 0x68}}, {{&(0x7f0000001700)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)="d0b92a4d5caec929a089a308f7219e1edfb21017a59ca779c91e4138c991c58540ba27c93a6eba7a658000d5f8a34169657fbc7b3df446726d8bc50e93e0e0bf418857a8c9ff1a405d507230dea85c0b54a91827fd24567905dd82b4fde9fbbc8a62f65ae6a6fafea2f4420379fa473964496dcec8049a8d3c7dff45ae29f11441cca888ab41c1df8be6c0175a8f36cc77869c90d3b9c9c1", 0x98}, {&(0x7f0000001840)="0006dedca517f50824f213dc368ad245a12cc3520dbf59e83e67f9ee76746551b3d2e590c71511b86a33a23b5bc575107fc3fb4b52e0a60d9c1b5ea131625470ecc40f235cb91256a2f0fb17798b45af5370491519542be4520d4497a9ddfaaf52d06bcb2bf1285ea13238e097f128bf", 0x70}, {&(0x7f00000018c0)="ed4e3b4fcd15ae79901e066db985d7596c3fc94eda1db41d65d42cb93d9c3d9edbccdb140e7b23612fb75b1e2faef48732cdcfd80701c3a49acbf98e5ac24af93a3f62d147dd77ad5e8302c4a79dc92ea35b05b068bfa16996e05473c7b9392caa9121959397762a6acbb5af4a202783e616b33efd381c39bb47b8715d2dbfb32b7f03a6aac3a44363f9eb0fd580403725d33b087fd41c4dfa8cb11c62709f9ffac86b6269c6cf2d7319be0f13f5caf32623b349fd72eb8b64d8712591b60859a1a8a4d9b03c98f3d796311500ba0c6e46bbb8e3a991c8881af58e6e7682eb3e561f1ac82c132dc20d247265792dd3766567", 0xf2}, {&(0x7f00000019c0)="6583647b73a8c99065922a2220c2ec0a108a37f6bb84e7486e3e99f2a44f5a1b69770264963636dfa6934d6f572f4fe0d0b0425e7217b4fd4e2dee797969b11ced251799941b8074935b846cee0f9129db51233b30191ac992b61a910af98c1ea48c40d6fe0ca5cd9fbe674c830d15c80d5b49e360fe95ab914bffb2eb4c495fcd0530a4d04cb58543c369ec4b9570b93b2c62ac28d27e7ff00ea0736c085b4f73c2bf83c04a5e40b3289c427a7c53307df972c6006934d160599b5b842a61bc50", 0xc1}, {&(0x7f0000000340)="150d00128cf0122c8b6c2118c6778619a056706a3fe0fa6de3754d625c7e5ad2637df22d5b49423bbe4154", 0x2b}, {&(0x7f0000001ac0)="9249df5dfe6f7c61c8e46d1422ed1e2609f997f6b807a6f1258325c144f9295e71daf0d8fa7c634a23f237327b563db3c693bb3094670b6989ebd24b5cf736c81834c6eba723a3b6b6aa", 0x4a}, {&(0x7f0000001b40)="f1d1cbc8bbe9b7c6076e984208cea54e032932bcc0768ecad344fe27af5d176d325c1432ba2c59d9627185a369cc59c6a1cd1e1c5fdd6cc62ba4f92ba616d1e8337c2bc11d101a3b32e93027cb8dff5bc4832f34e8ffef7b647acaf636bb249d717ddfc62ea6b62c40caea49e0d53d5038c72121428685f2fc09e2ccf8482ae513d1e69053", 0x85}, {&(0x7f0000001c00)="ed0a8c042d7c1abef9327ad795e1c55721390fd628e0c96a5934ff32cdd111b39e2af30b7a71892011079fe154be735272", 0x31}], 0x8}}], 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) connect$unix(r2, &(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffee3, 0x2, 0xf1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) 15.249817632s ago: executing program 1 (id=3113): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x130, 0x37f, 0x148, 0x130, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000400000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7000000}}], 0x48}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x100, 0x1403, 0x8, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6e3a9000) 15.211950326s ago: executing program 1 (id=3114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f00000000c0)=0x10001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @window={0x3, 0x8, 0x7a12}, @timestamp, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0xfffffffe, 0x2, 0x7138, 0x7, 0x9}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24020000", @ANYRES16=r0, @ANYBLOB="bdf90ed5986f2d26ff22b821050004002000000000006300000008000300", @ANYRESDEC=r5, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r10 = socket$inet6(0xa, 0x809, 0xff) connect$inet6(r10, &(0x7f0000000180)={0xa, 0xfffd, 0x0, @empty}, 0x1c) r11 = accept4(r10, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x80, 0x80800) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e21, 0xf, @private1, 0xe1}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000), 0x4) sendfile(r0, r6, &(0x7f0000000340)=0x3, 0x7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'cpuacct'}, {0x0, 'blkio'}, {0x2d, 'cpuacct'}, {0x6, 'freezer'}]}, 0x22) 14.579901ms ago: executing program 32 (id=3114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f00000000c0)=0x10001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @window={0x3, 0x8, 0x7a12}, @timestamp, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0xfffffffe, 0x2, 0x7138, 0x7, 0x9}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24020000", @ANYRES16=r0, @ANYBLOB="bdf90ed5986f2d26ff22b821050004002000000000006300000008000300", @ANYRESDEC=r5, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r10 = socket$inet6(0xa, 0x809, 0xff) connect$inet6(r10, &(0x7f0000000180)={0xa, 0xfffd, 0x0, @empty}, 0x1c) r11 = accept4(r10, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x80, 0x80800) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e21, 0xf, @private1, 0xe1}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000), 0x4) sendfile(r0, r6, &(0x7f0000000340)=0x3, 0x7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'cpuacct'}, {0x0, 'blkio'}, {0x2d, 'cpuacct'}, {0x6, 'freezer'}]}, 0x22) 0s ago: executing program 33 (id=3112): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000003c0)="bcddfdf37d4ec9d9465ab27d668101ad0811f0716d19d20193b596221be4f209a092f7726503b9e0ee74483ca2b31b9c84d2428088ffd7461d740de9e92336e155b631f68bea6965ffba4fe120e3e3bf9cbb4e2c0d6aa1f79059b437c02abbd803034e26925445bb974a9ed6c2ad4d80b2bb200e351971dfced8b84c76b22cb73fa39608e858a1deec2d63569d97248df588bd8f8d8e77e9fb3f643906722b0c3ed1994e5899782c42a84838469694fd9dc1346d3ed905f4b65ce69343b800b29d873a1fe9409278", 0xc8}, {&(0x7f00000000c0)="9d0a8f9ac180be9e13440a9074ec79f7508edd5fdd1064c7358704e958357f3092c4390499ed8f6a857b40cdf037949425681830863862ef1ecb5c4c727b1614928de47b9c14fe5f4a5bfd73d9ec16586f5164d2a077bc133c672391c10cde7ccbbc6db9edd3be93499852f0a20d1b42914f3d7556a1f0", 0x77}, {&(0x7f00000004c0)="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", 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}, {&(0x7f00000014c0)="dd2bcff84a15d855516478c44cc7f845d208a306a6d7d178bc1f3d8951c83c2f4f6c5ebb216f51f05256079b2389a34c5560e1ef0c7d4ec23edd774d58bc522216e5a326661c5e0584eb4a396bca2d378468788e477c0666eeb5a6954a2c7a071d9c0c6c1cdee16490385a9172276cbaf87ea37e13ea611ce155dccc30e2ce624aa0ab6e280d9c78c92cb2f01e5b04d44a0655d354535927c1fde0b9aeae1f8e8f8b657388444766a5858620cffc3b65595ea28fbe85cee45e69c266572a9850fbfff95bbfa7796c7189db6d", 0xcc}, {&(0x7f00000015c0)="2fc096640a31a11b43c4d1b70d56de2309eccf7ad9b3ca4d71b6ac2b34df2e7a04018eee64de1a1c9821380c83efbf28dc969d6e91f9388b7940c2f058fbff9e981cecc54b74beaa3a603d878541af29c662d0a68aa48aac246beafbb02b655586bc18ddc49f842ec0355bd6508baa8cab4b6f660202842b6dbb545c0b2112ff7a47fcbe", 0x84}], 0x3, &(0x7f0000001680)=[{0x18, 0x10c, 0x2, "1c52416695"}, {0x50, 0x10b, 0x3, "5ab75597fae1b2e905bddaecf620aef6f1ffb7001ecc9c6253ea06182f71ec0d7616ebef8592f5938d400c4388431190b1db9d9dd507dea9f3376464255563ad"}], 0x68}}, {{&(0x7f0000001700)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)="d0b92a4d5caec929a089a308f7219e1edfb21017a59ca779c91e4138c991c58540ba27c93a6eba7a658000d5f8a34169657fbc7b3df446726d8bc50e93e0e0bf418857a8c9ff1a405d507230dea85c0b54a91827fd24567905dd82b4fde9fbbc8a62f65ae6a6fafea2f4420379fa473964496dcec8049a8d3c7dff45ae29f11441cca888ab41c1df8be6c0175a8f36cc77869c90d3b9c9c1", 0x98}, {&(0x7f0000001840)="0006dedca517f50824f213dc368ad245a12cc3520dbf59e83e67f9ee76746551b3d2e590c71511b86a33a23b5bc575107fc3fb4b52e0a60d9c1b5ea131625470ecc40f235cb91256a2f0fb17798b45af5370491519542be4520d4497a9ddfaaf52d06bcb2bf1285ea13238e097f128bf", 0x70}, {&(0x7f00000018c0)="ed4e3b4fcd15ae79901e066db985d7596c3fc94eda1db41d65d42cb93d9c3d9edbccdb140e7b23612fb75b1e2faef48732cdcfd80701c3a49acbf98e5ac24af93a3f62d147dd77ad5e8302c4a79dc92ea35b05b068bfa16996e05473c7b9392caa9121959397762a6acbb5af4a202783e616b33efd381c39bb47b8715d2dbfb32b7f03a6aac3a44363f9eb0fd580403725d33b087fd41c4dfa8cb11c62709f9ffac86b6269c6cf2d7319be0f13f5caf32623b349fd72eb8b64d8712591b60859a1a8a4d9b03c98f3d796311500ba0c6e46bbb8e3a991c8881af58e6e7682eb3e561f1ac82c132dc20d247265792dd3766567", 0xf2}, {&(0x7f00000019c0)="6583647b73a8c99065922a2220c2ec0a108a37f6bb84e7486e3e99f2a44f5a1b69770264963636dfa6934d6f572f4fe0d0b0425e7217b4fd4e2dee797969b11ced251799941b8074935b846cee0f9129db51233b30191ac992b61a910af98c1ea48c40d6fe0ca5cd9fbe674c830d15c80d5b49e360fe95ab914bffb2eb4c495fcd0530a4d04cb58543c369ec4b9570b93b2c62ac28d27e7ff00ea0736c085b4f73c2bf83c04a5e40b3289c427a7c53307df972c6006934d160599b5b842a61bc50", 0xc1}, {&(0x7f0000000340)="150d00128cf0122c8b6c2118c6778619a056706a3fe0fa6de3754d625c7e5ad2637df22d5b49423bbe4154", 0x2b}, {&(0x7f0000001ac0)="9249df5dfe6f7c61c8e46d1422ed1e2609f997f6b807a6f1258325c144f9295e71daf0d8fa7c634a23f237327b563db3c693bb3094670b6989ebd24b5cf736c81834c6eba723a3b6b6aa", 0x4a}, {&(0x7f0000001b40)="f1d1cbc8bbe9b7c6076e984208cea54e032932bcc0768ecad344fe27af5d176d325c1432ba2c59d9627185a369cc59c6a1cd1e1c5fdd6cc62ba4f92ba616d1e8337c2bc11d101a3b32e93027cb8dff5bc4832f34e8ffef7b647acaf636bb249d717ddfc62ea6b62c40caea49e0d53d5038c72121428685f2fc09e2ccf8482ae513d1e69053", 0x85}, {&(0x7f0000001c00)="ed0a8c042d7c1abef9327ad795e1c55721390fd628e0c96a5934ff32cdd111b39e2af30b7a71892011079fe154be735272", 0x31}], 0x8}}], 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) connect$unix(r2, &(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffee3, 0x2, 0xf1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) kernel console output (not intermixed with test programs): ress (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.615086][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.625411][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.639691][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.650519][T14638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.652844][ T5850] Bluetooth: hci0: command tx timeout [ 208.741953][T14912] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.752142][ T1440] hsr_slave_0: left promiscuous mode [ 208.757823][ T1440] hsr_slave_1: left promiscuous mode [ 208.764028][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.771423][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.779277][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.787253][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.799610][ T1440] veth1_macvtap: left promiscuous mode [ 208.805323][ T1440] veth0_macvtap: left promiscuous mode [ 208.810923][ T1440] veth1_vlan: left promiscuous mode [ 208.816940][ T1440] veth0_vlan: left promiscuous mode [ 208.867970][T14916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.876193][T14916] bond8: (slave vcan4): The slave device specified does not support setting the MAC address [ 208.887747][T14916] bond8: (slave vcan4): Error -95 calling set_mac_address [ 208.948289][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 208.971027][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 209.048071][T14927] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 209.086773][T14638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.097382][T14638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.106440][T14638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.115579][T14638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.209608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.229647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.295754][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.317745][T14725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.318227][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.351440][T14725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.386053][T14725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.405250][T14725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.540712][T14951] 8021q: adding VLAN 0 to HW filter on device bond11 [ 209.572289][T14951] 8021q: adding VLAN 0 to HW filter on device bond11 [ 209.585833][T14951] bond11: (slave vcan8): The slave device specified does not support setting the MAC address [ 209.605306][T14951] bond11: (slave vcan8): Error -95 calling set_mac_address [ 209.625522][T14958] .: renamed from bond0 [ 209.646753][T14725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.662022][T14958] __nla_validate_parse: 11 callbacks suppressed [ 209.662037][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 209.673933][T14725] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.691333][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.691966][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 209.698456][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.744678][T14725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.752666][T14960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2873'. [ 209.759330][T14725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.781211][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.788326][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.877576][T14967] xt_TCPMSS: Only works on TCP SYN packets [ 209.898038][ T3007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.914217][T14967] tipc: Invalid UDP bearer configuration [ 209.914247][T14967] tipc: Enabling of bearer rejected, failed to enable media [ 209.989864][ T3007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.013789][T14725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.040065][T14725] veth0_vlan: entered promiscuous mode [ 210.049168][T14725] veth1_vlan: entered promiscuous mode [ 210.057446][ T3007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.079883][T14725] veth0_macvtap: entered promiscuous mode [ 210.088266][T14725] veth1_macvtap: entered promiscuous mode [ 210.099564][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.112851][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.123404][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.133937][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.144006][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.154840][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.164903][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.175808][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.186568][T14725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.198665][ T3007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.212847][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.223386][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.234165][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.244618][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.254576][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.265239][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.275850][T14725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.287272][T14725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.296625][T14725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.305345][T14725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.314605][T14725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.348298][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.363320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.378119][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.386279][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.435660][ T3007] bridge_slave_1: left allmulticast mode [ 210.442591][ T3007] bridge_slave_1: left promiscuous mode [ 210.448223][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.457604][ T3007] bridge_slave_0: left allmulticast mode [ 210.463621][ T3007] bridge_slave_0: left promiscuous mode [ 210.469229][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.564381][ T3007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.574365][ T3007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.583816][ T3007] bond0 (unregistering): Released all slaves [ 210.870040][ T3007] hsr_slave_0: left promiscuous mode [ 210.876213][ T3007] hsr_slave_1: left promiscuous mode [ 210.882930][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.890321][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.908757][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.916457][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.926038][ T3007] veth1_macvtap: left promiscuous mode [ 210.931519][ T3007] veth0_macvtap: left promiscuous mode [ 210.937427][ T3007] veth1_vlan: left promiscuous mode [ 210.942861][ T3007] veth0_vlan: left promiscuous mode [ 211.017800][ T3007] team0 (unregistering): Port device team_slave_1 removed [ 211.031995][ T3007] team0 (unregistering): Port device team_slave_0 removed [ 211.438363][T14978] validate_nla: 8 callbacks suppressed [ 211.438379][T14978] netlink: 'syz.0.2878': attribute type 32 has an invalid length. [ 211.471193][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 211.500167][T14978] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 211.538901][T14986] tipc: Resetting bearer [ 211.563051][T14986] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 211.582168][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2881'. [ 211.723425][T15002] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 211.751150][T15002] 8021q: adding VLAN 0 to HW filter on device bond13 [ 211.772261][T15002] 8021q: adding VLAN 0 to HW filter on device bond13 [ 211.779207][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.784942][T15002] bond13: (slave vcan7): The slave device specified does not support setting the MAC address [ 211.799515][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.800298][T15002] bond13: (slave vcan7): Error -95 calling set_mac_address [ 211.809793][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.822412][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.829947][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.837776][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.865638][T15004] lo speed is unknown, defaulting to 1000 [ 211.885922][T15012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2888'. [ 211.956803][ T3011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.016747][ T9] hid-generic 0005:046D:0009.0004: item fetching failed at offset 0/1 [ 212.035885][ T9] hid-generic 0005:046D:0009.0004: probe with driver hid-generic failed with error -22 [ 212.081497][T15004] chnl_net:caif_netlink_parms(): no params data found [ 212.122940][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.130086][T15004] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.137483][T15004] bridge_slave_0: entered allmulticast mode [ 212.144896][T15004] bridge_slave_0: entered promiscuous mode [ 212.151623][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.158990][T15004] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.166395][T15004] bridge_slave_1: entered allmulticast mode [ 212.173339][T15004] bridge_slave_1: entered promiscuous mode [ 212.191101][T15004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.201501][T15004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.219818][T15004] team0: Port device team_slave_0 added [ 212.226989][T15004] team0: Port device team_slave_1 added [ 212.242297][T15004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.249296][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.275409][T15004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.286893][T15004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.293860][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.319754][T15004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.348069][T15004] hsr_slave_0: entered promiscuous mode [ 212.354141][T15004] hsr_slave_1: entered promiscuous mode [ 212.359927][T15004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.367515][T15004] Cannot create hsr debugfs directory [ 212.446014][ T3007] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 212.667938][T15004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.694657][T15004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.725299][T15004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.738719][T15004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.861037][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.868660][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.879478][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.893991][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.901435][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.911999][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.932550][T15004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.962216][T15004] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.981044][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.988148][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.007894][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.015013][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.048856][T15046] lo speed is unknown, defaulting to 1000 [ 213.273284][T15004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.413698][T15085] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2908'. [ 213.423998][T15085] NCSI netlink: No device for ifindex 0 [ 213.429632][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2909'. [ 213.464365][T15046] chnl_net:caif_netlink_parms(): no params data found [ 213.505837][ T3011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.610889][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2914'. [ 213.635037][ T3011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.674939][T15046] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.694489][T15046] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.711828][T15046] bridge_slave_0: entered allmulticast mode [ 213.718427][T15046] bridge_slave_0: entered promiscuous mode [ 213.734164][T15046] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.742038][T15046] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.749932][T15046] bridge_slave_1: entered allmulticast mode [ 213.759372][T15046] bridge_slave_1: entered promiscuous mode [ 213.769835][ T3011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.803703][T15046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.816616][T15046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.853935][ T5850] Bluetooth: hci0: command tx timeout [ 213.864343][T15004] veth0_vlan: entered promiscuous mode [ 213.874726][T15046] team0: Port device team_slave_0 added [ 213.886201][T15004] veth1_vlan: entered promiscuous mode [ 213.927723][T15046] team0: Port device team_slave_1 added [ 213.964097][T15046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.971048][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.001489][T15046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.025816][T15046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.041238][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.081137][T15046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.097758][ T3011] bridge_slave_1: left allmulticast mode [ 214.104006][ T3011] bridge_slave_1: left promiscuous mode [ 214.109764][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.122091][ T3011] bridge_slave_0: left allmulticast mode [ 214.127740][ T3011] bridge_slave_0: left promiscuous mode [ 214.134044][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.171330][T15004] veth0_macvtap: entered promiscuous mode [ 214.181157][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.193902][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.201125][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.210193][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.218179][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.227127][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.338447][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.350647][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.366415][ T3011] bond0 (unregistering): Released all slaves [ 214.390838][T15046] hsr_slave_0: entered promiscuous mode [ 214.402643][T15046] hsr_slave_1: entered promiscuous mode [ 214.408626][T15046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.422385][T15046] Cannot create hsr debugfs directory [ 214.441972][T15004] veth1_macvtap: entered promiscuous mode [ 214.490858][T15126] lo speed is unknown, defaulting to 1000 [ 214.501129][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.515778][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.526168][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.536902][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.564560][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.575620][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.585688][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.597308][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.631473][T15004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.647979][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.658691][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.668890][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.680096][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.690362][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.701105][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.711676][T15004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.731464][T15148] delete_channel: no stack [ 214.747555][T15148] --map-set only usable from mangle table [ 214.758502][T15151] netlink: 'syz.1.2930': attribute type 1 has an invalid length. [ 214.772923][T15004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.782629][T15004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.792784][T15004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.805641][T15004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.848457][T15151] 8021q: adding VLAN 0 to HW filter on device bond12 [ 214.887782][T15155] 8021q: adding VLAN 0 to HW filter on device bond12 [ 214.895360][T15155] bond12: (slave vcan8): The slave device specified does not support setting the MAC address [ 214.910153][T15155] bond12: (slave vcan8): Error -95 calling set_mac_address [ 214.942412][T15160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2933'. [ 214.974022][ T5850] Bluetooth: hci4: command tx timeout [ 215.053233][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.072248][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.195227][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.205060][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.235192][ T3011] hsr_slave_0: left promiscuous mode [ 215.240945][ T3011] hsr_slave_1: left promiscuous mode [ 215.248068][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.257258][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.266308][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.276072][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.287832][ T3011] veth1_macvtap: left promiscuous mode [ 215.293441][ T3011] veth0_macvtap: left promiscuous mode [ 215.298988][ T3011] veth1_vlan: left promiscuous mode [ 215.304494][ T3011] veth0_vlan: left promiscuous mode [ 215.371552][T15170] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 215.455705][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 215.479917][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 215.557230][T15126] chnl_net:caif_netlink_parms(): no params data found [ 215.664067][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 215.707488][T15046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.756963][T15046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.813131][T15126] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.820225][T15126] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.835903][T15183] openvswitch: netlink: IP tunnel dst address not specified [ 215.843564][T15126] bridge_slave_0: entered allmulticast mode [ 215.850190][T15126] bridge_slave_0: entered promiscuous mode [ 215.857373][T15046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.868011][T15126] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.876355][T15126] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.887095][T15126] bridge_slave_1: entered allmulticast mode [ 215.894474][T15126] bridge_slave_1: entered promiscuous mode [ 215.900914][T15046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.963692][T15126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.994245][T15126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.039859][T15126] team0: Port device team_slave_0 added [ 216.054172][T15126] team0: Port device team_slave_1 added [ 216.110781][T15126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.128390][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.186410][T15126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.210124][T15126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.225815][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.258085][ T5850] Bluetooth: hci3: command tx timeout [ 216.299564][T15126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.307338][ T5832] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 216.351513][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 216.351534][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 216.351544][ T5832] Call Trace: [ 216.351550][ T5832] [ 216.351556][ T5832] dump_stack_lvl+0x241/0x360 [ 216.351582][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.351603][ T5832] ? __pfx__printk+0x10/0x10 [ 216.351621][ T5832] ? ___ratelimit+0x4be/0x690 [ 216.351645][ T5832] ? __pfx____ratelimit+0x10/0x10 [ 216.351668][ T5832] dump_header+0xdb/0x6a0 [ 216.351686][ T5832] oom_kill_process+0x3b8/0x950 [ 216.351706][ T5832] out_of_memory+0xf34/0x12f0 [ 216.351720][ T5832] ? mem_cgroup_out_of_memory+0xf7/0x3c0 [ 216.351742][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 216.351758][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.351781][ T5832] ? __pfx_out_of_memory+0x10/0x10 [ 216.351796][ T5832] ? __pfx_lock_release+0x10/0x10 [ 216.351814][ T5832] ? do_raw_spin_lock+0x14f/0x370 [ 216.351833][ T5832] mem_cgroup_out_of_memory+0x264/0x3c0 [ 216.351853][ T5832] ? percpu_ref_put+0x19/0x180 [ 216.351873][ T5832] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 216.351898][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 216.351916][ T5832] ? memcg1_oom_prepare+0x393/0x460 [ 216.351935][ T5832] try_charge_memcg+0xc99/0x1150 [ 216.351958][ T5832] ? __pfx_try_charge_memcg+0x10/0x10 [ 216.351973][ T5832] ? lock_release+0xbf/0xa30 [ 216.351993][ T5832] ? xa_load+0x2dd/0x350 [ 216.352007][ T5832] ? xa_load+0x147/0x350 [ 216.352028][ T5832] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 216.352047][ T5832] charge_memcg+0x9f/0x170 [ 216.352065][ T5832] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 216.352086][ T5832] __read_swap_cache_async+0x3ba/0x6d0 [ 216.352110][ T5832] ? __pfx___read_swap_cache_async+0x10/0x10 [ 216.352130][ T5832] ? blk_start_plug+0x70/0x1b0 [ 216.352148][ T5832] swap_cluster_readahead+0x390/0x710 [ 216.352170][ T5832] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 216.352199][ T5832] ? __pfx_lock_release+0x10/0x10 [ 216.352217][ T5832] ? xas_start+0x3f8/0x7b0 [ 216.352236][ T5832] swapin_readahead+0x1ba/0xd30 [ 216.352254][ T5832] ? filemap_get_entry+0x328/0x3b0 [ 216.352274][ T5832] ? __pfx_swapin_readahead+0x10/0x10 [ 216.352291][ T5832] ? lock_release+0xbf/0xa30 [ 216.352308][ T5832] ? __pfx_lock_release+0x10/0x10 [ 216.352326][ T5832] ? __pfx_lock_release+0x10/0x10 [ 216.352347][ T5832] ? __filemap_get_folio+0x848/0x940 [ 216.352367][ T5832] ? swap_cache_get_folio+0xa5/0x3c0 [ 216.352386][ T5832] do_swap_page+0x5a0/0x5d90 [ 216.352411][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.352431][ T5832] ? lock_acquire+0xe3/0x550 [ 216.352454][ T5832] ? do_swap_page+0x1f4/0x5d90 [ 216.352475][ T5832] ? __pfx_do_swap_page+0x10/0x10 [ 216.352496][ T5832] ? sched_clock_cpu+0x76/0x490 [ 216.352514][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.352536][ T5832] ? ___pte_offset_map+0x9e/0x380 [ 216.352551][ T5832] ? ___pte_offset_map+0x2c4/0x380 [ 216.352567][ T5832] ? __pfx____pte_offset_map+0x10/0x10 [ 216.352582][ T5832] ? lock_release+0xbf/0xa30 [ 216.352599][ T5832] ? __pfx_default_wake_function+0x10/0x10 [ 216.352626][ T5832] ? pte_offset_map_rw_nolock+0xc4/0x140 [ 216.352643][ T5832] handle_pte_fault+0x5af/0x5ed0 [ 216.352667][ T5832] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 216.352691][ T5832] ? __pfx_handle_pte_fault+0x10/0x10 [ 216.352708][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.352732][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.352753][ T5832] ? lock_release+0xbf/0xa30 [ 216.352773][ T5832] ? __pfx_lock_acquire+0x10/0x10 [ 216.352791][ T5832] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.352811][ T5832] ? __pfx_lock_release+0x10/0x10 [ 216.352831][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.352851][ T5832] ? lock_acquire+0xe3/0x550 [ 216.352871][ T5832] ? __pfx_lock_acquire+0x10/0x10 [ 216.352888][ T5832] ? sched_mm_cid_remote_clear+0x493/0x660 [ 216.352910][ T5832] ? sched_mm_cid_remote_clear+0x174/0x660 [ 216.352935][ T5832] handle_mm_fault+0x1106/0x1bb0 [ 216.352963][ T5832] ? __pfx_handle_mm_fault+0x10/0x10 [ 216.352978][ T5832] ? lock_vma_under_rcu+0x602/0x790 [ 216.352994][ T5832] ? lock_vma_under_rcu+0x1dd/0x790 [ 216.353017][ T5832] ? rcu_is_watching+0x15/0xb0 [ 216.353039][ T5832] exc_page_fault+0x459/0x8b0 [ 216.353062][ T5832] asm_exc_page_fault+0x26/0x30 [ 216.353079][ T5832] RIP: 0033:0x7ffb9678cd4a [ 216.353093][ T5832] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 216.353106][ T5832] RSP: 002b:00007ffce20ef380 EFLAGS: 00010206 [ 216.353121][ T5832] RAX: 0000000000000000 RBX: 0000000000000730 RCX: 0000000000000000 [ 216.353131][ T5832] RDX: feece9b1efae9400 RSI: 0000000000000000 RDI: 000055558b282808 [ 216.353142][ T5832] RBP: 00007ffce20ef3ec R08: 0000000000000000 R09: 0000000000000000 [ 216.353152][ T5832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 216.353162][ T5832] R13: 00000000000927c0 R14: 0000000000034b0d R15: 00007ffce20ef440 [ 216.353181][ T5832] [ 216.838327][ T5832] memory: usage 26400kB, limit 307200kB, failcnt 260 [ 216.845065][ T5832] memory+swap: usage 26620kB, limit 9007199254740988kB, failcnt 0 [ 216.855144][ T5832] kmem: usage 26296kB, limit 9007199254740988kB, failcnt 0 [ 216.862432][ T5832] Memory cgroup stats for /syz1: [ 216.862549][ T5832] cache 0 [ 216.870473][ T5832] rss 0 [ 216.881058][T15046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.889185][ T5832] rss_huge 0 [ 216.892904][ T5832] shmem 0 [ 216.895876][ T5832] mapped_file 0 [ 216.899349][ T5832] dirty 0 [ 216.902423][ T5832] writeback 0 [ 216.905728][ T5832] workingset_refault_anon 13 [ 216.910329][ T5832] workingset_refault_file 0 [ 216.914975][ T5832] swap 225280 [ 216.918282][ T5832] swapcached 0 [ 216.921662][ T5832] pgpgin 61733 [ 216.925193][ T5832] pgpgout 61733 [ 216.928674][ T5832] pgfault 111954 [ 216.932795][ T5832] pgmajfault 10 [ 216.936279][ T5832] inactive_anon 0 [ 216.939910][ T5832] active_anon 0 [ 216.943513][ T5832] inactive_file 0 [ 216.947143][ T5832] active_file 0 [ 216.950601][ T5832] unevictable 0 [ 216.952013][T15126] hsr_slave_0: entered promiscuous mode [ 216.954644][ T5832] hierarchical_memory_limit 314572800 [ 216.960099][T15126] hsr_slave_1: entered promiscuous mode [ 216.965011][ T5832] hierarchical_memsw_limit 9223372036854771712 [ 216.965022][ T5832] total_cache 0 [ 216.965029][ T5832] total_rss 0 [ 216.965035][ T5832] total_rss_huge 0 [ 216.965042][ T5832] total_shmem 0 [ 216.965048][ T5832] total_mapped_file 0 [ 216.965054][ T5832] total_dirty 0 [ 216.965060][ T5832] total_writeback 0 [ 216.965066][ T5832] total_workingset_refault_anon 13 [ 216.965073][ T5832] total_workingset_refault_file 0 [ 216.965080][ T5832] total_swap 225280 [ 216.988620][T15126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.990869][ T5832] total_swapcached 0 [ 216.999814][T15126] Cannot create hsr debugfs directory [ 217.002202][ T5832] total_pgpgin 61733 [ 217.008888][T15046] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.012189][ T5832] total_pgpgout 61733 [ 217.047363][ T5832] total_pgfault 111954 [ 217.048147][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.051417][ T5832] total_pgmajfault 10 [ 217.063321][ T5850] Bluetooth: hci4: command 0x041b tx timeout [ 217.072127][ T5832] total_inactive_anon 0 [ 217.072145][ T5832] total_active_anon 0 [ 217.072152][ T5832] total_inactive_file 0 [ 217.072159][ T5832] total_active_file 0 [ 217.072165][ T5832] total_unevictable 0 [ 217.072172][ T5832] anon_cost 0 [ 217.072178][ T5832] file_cost 0 [ 217.072185][ T5832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2934,pid=15163,uid=0 [ 217.072265][ T5832] Memory cgroup out of memory: OOM victim 15163 (syz.1.2934) is already exiting. Skip killing the task [ 217.139057][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.146149][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.167209][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.174292][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.203739][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.226196][T15126] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.236414][T15126] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.284550][T15126] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.295631][T15126] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.318847][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.339297][T15046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.365793][T15046] veth0_vlan: entered promiscuous mode [ 217.373069][T15126] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.383004][T15126] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.401225][T15046] veth1_vlan: entered promiscuous mode [ 217.416991][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.435349][T15046] veth0_macvtap: entered promiscuous mode [ 217.443750][T15046] veth1_macvtap: entered promiscuous mode [ 217.455489][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.466300][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.476697][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.487294][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.497175][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.507764][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.518127][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.528652][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.539169][T15046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.547784][T15126] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.557570][T15126] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.573911][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.584382][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.594307][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.605392][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.615559][T15046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.626029][T15046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.636493][T15046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.646313][T15046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.655328][T15046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.665271][T15046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.675304][T15046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.734734][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.743066][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.774215][ T3011] bridge_slave_1: left allmulticast mode [ 217.779862][ T3011] bridge_slave_1: left promiscuous mode [ 217.786214][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.795406][ T3011] bridge_slave_0: left allmulticast mode [ 217.801044][ T3011] bridge_slave_0: left promiscuous mode [ 217.806956][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.895278][T15204] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2944'. [ 217.909829][T15204] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 217.978595][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.989579][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.999827][ T3011] bond0 (unregistering): Released all slaves [ 218.009003][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.010764][T15126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.022563][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.030098][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.032963][T15126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.042149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.052324][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.060207][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.067657][T15126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.076904][T15126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.084654][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.094747][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.146952][T15206] lo speed is unknown, defaulting to 1000 [ 218.150304][T15209] dccp_invalid_packet: P.CsCov 5 exceeds packet length 16 [ 218.207740][T15209] netlink: 'syz.1.2945': attribute type 1 has an invalid length. [ 218.216812][T15126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.229547][T15209] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2945'. [ 218.254845][T15126] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.276854][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.283948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.301273][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.308408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.332601][ T5850] Bluetooth: hci3: command tx timeout [ 218.449248][T15211] netlink: 'syz.1.2946': attribute type 10 has an invalid length. [ 218.474819][ T3011] hsr_slave_0: left promiscuous mode [ 218.477201][T15211] netlink: 'syz.1.2946': attribute type 1 has an invalid length. [ 218.490013][ T3011] hsr_slave_1: left promiscuous mode [ 218.497188][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.505257][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.517500][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.525167][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.547443][ T3011] veth1_macvtap: left promiscuous mode [ 218.558682][ T3011] veth0_macvtap: left promiscuous mode [ 218.564537][ T3011] veth1_vlan: left promiscuous mode [ 218.569807][ T3011] veth0_vlan: left promiscuous mode [ 218.615072][T15206] chnl_net:caif_netlink_parms(): no params data found [ 218.719879][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 218.730291][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 218.761044][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 218.797105][T15232] netlink: 'syz.3.2949': attribute type 4 has an invalid length. [ 218.883795][T15126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.988988][T15206] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.005446][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.013900][T15206] bridge_slave_0: entered allmulticast mode [ 219.020537][T15206] bridge_slave_0: entered promiscuous mode [ 219.028126][T15126] veth0_vlan: entered promiscuous mode [ 219.041687][T15206] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.049543][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.057028][T15206] bridge_slave_1: entered allmulticast mode [ 219.063714][T15206] bridge_slave_1: entered promiscuous mode [ 219.085805][T15206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.097916][T15206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.107651][T15126] veth1_vlan: entered promiscuous mode [ 219.129527][T15206] team0: Port device team_slave_0 added [ 219.137325][T15206] team0: Port device team_slave_1 added [ 219.156509][T15206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.163743][T15206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.189982][T15206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.208786][T15126] veth0_macvtap: entered promiscuous mode [ 219.219289][T15206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.226499][T15206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.252785][T15206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.273234][T15126] veth1_macvtap: entered promiscuous mode [ 219.298397][T15206] hsr_slave_0: entered promiscuous mode [ 219.304792][T15206] hsr_slave_1: entered promiscuous mode [ 219.311026][T15206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.318690][T15206] Cannot create hsr debugfs directory [ 219.345420][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.356267][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.366290][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.380135][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.390165][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.400663][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.410741][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.421286][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.431913][T15126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.441021][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.452341][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.462372][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.472924][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.482867][T15126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.493388][T15126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.503753][T15126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.522460][ T3011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.535377][T15126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.544363][T15126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.553666][T15126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.562879][T15126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.629946][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.642400][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.659562][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.667994][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.952369][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.959583][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.970465][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.978042][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.993192][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.003314][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.033030][T15206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.049678][T15206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.061622][T15206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.077303][T15206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.131025][T15265] lo speed is unknown, defaulting to 1000 [ 220.148011][ T3011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.179210][T15277] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.186314][T15277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.205990][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.213080][T15279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.213470][T15281] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2961'. [ 220.289605][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 220.339295][T15206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.354959][T15206] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.395966][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2962'. [ 220.423963][ T3011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.455952][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.463064][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.481310][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.488423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.520776][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 220.531674][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2966'. [ 220.534229][T15265] chnl_net:caif_netlink_parms(): no params data found [ 220.633726][ T3011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.757416][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.766236][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.781055][T15265] bridge_slave_0: entered allmulticast mode [ 220.788886][T15265] bridge_slave_0: entered promiscuous mode [ 220.804343][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.815563][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.823340][T15265] bridge_slave_1: entered allmulticast mode [ 220.830211][T15265] bridge_slave_1: entered promiscuous mode [ 220.839374][T15313] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 220.907538][T15316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2970'. [ 220.907651][ T3011] bridge_slave_1: left allmulticast mode [ 220.923754][ T3011] bridge_slave_1: left promiscuous mode [ 220.929417][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.938588][ T3011] bridge_slave_0: left allmulticast mode [ 220.944686][ T3011] bridge_slave_0: left promiscuous mode [ 220.951393][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.008570][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.065170][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.072427][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.076156][T15327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2972'. [ 221.079598][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.097297][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.104811][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.112198][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.165559][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.176395][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.178111][T15330] sctp: [Deprecated]: syz.3.2970 (pid 15330) Use of int in max_burst socket option deprecated. [ 221.178111][T15330] Use struct sctp_assoc_value instead [ 221.201640][ T3011] bond0 (unregistering): Released all slaves [ 221.214251][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.243787][T15265] team0: Port device team_slave_0 added [ 221.250892][T15265] team0: Port device team_slave_1 added [ 221.260604][T15206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.288121][T15324] lo speed is unknown, defaulting to 1000 [ 221.289953][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.308124][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.335499][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.356200][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.363442][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.391525][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.439850][T15265] hsr_slave_0: entered promiscuous mode [ 221.446394][T15265] hsr_slave_1: entered promiscuous mode [ 221.453333][T15265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.461658][T15265] Cannot create hsr debugfs directory [ 221.624919][T15206] veth0_vlan: entered promiscuous mode [ 221.650694][T15206] veth1_vlan: entered promiscuous mode [ 221.664629][T15324] chnl_net:caif_netlink_parms(): no params data found [ 221.679073][ T3011] hsr_slave_0: left promiscuous mode [ 221.701136][ T3011] hsr_slave_1: left promiscuous mode [ 221.709368][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.718736][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.726444][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.734217][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.743137][ T3011] veth1_macvtap: left promiscuous mode [ 221.748806][ T3011] veth0_macvtap: left promiscuous mode [ 221.754552][ T3011] veth1_vlan: left promiscuous mode [ 221.759772][ T3011] veth0_vlan: left promiscuous mode [ 221.855104][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 221.865822][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 222.040142][T15206] veth0_macvtap: entered promiscuous mode [ 222.051901][T15324] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.059979][T15324] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.070365][T15324] bridge_slave_0: entered allmulticast mode [ 222.078743][T15324] bridge_slave_0: entered promiscuous mode [ 222.086199][T15324] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.095075][T15324] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.102762][ T5850] Bluetooth: hci3: command tx timeout [ 222.103730][T15324] bridge_slave_1: entered allmulticast mode [ 222.115340][T15324] bridge_slave_1: entered promiscuous mode [ 222.123451][T15206] veth1_macvtap: entered promiscuous mode [ 222.138038][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.153421][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.167627][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.180813][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.198001][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.208669][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.220026][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.230868][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.242177][T15206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.257104][T15361] tipc: Enabling of bearer rejected, failed to enable media [ 222.286532][T15361] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2977'. [ 222.287531][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.313487][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.336727][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.347847][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.358579][T15206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.372031][T15206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.383027][T15206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.405926][T15324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.422459][T15324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.462954][T15206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.475340][T15206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.487003][T15206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.496581][T15206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.512820][T15324] team0: Port device team_slave_0 added [ 222.527124][T15324] team0: Port device team_slave_1 added [ 222.551533][T15265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.559913][T15265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.581184][T15265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.590854][T15265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.604294][T15324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.611520][T15324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.639680][T15324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.657803][T15379] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 222.666017][T15379] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 222.675169][T15324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.682435][T15324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.708662][T15324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.726457][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2982'. [ 222.799061][T15324] hsr_slave_0: entered promiscuous mode [ 222.805742][T15324] hsr_slave_1: entered promiscuous mode [ 222.812685][T15324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.820323][T15324] Cannot create hsr debugfs directory [ 222.838255][ T3011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.856397][T15384] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2984'. [ 222.869666][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.877821][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.899473][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.915935][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.957070][ T3011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.051238][ T3011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.089273][T15265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.125165][T15265] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.134207][ T5850] Bluetooth: hci4: command tx timeout [ 223.151549][ T3011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.169941][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.177062][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.190532][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.197658][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.240992][T15265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.244640][T15406] netlink: 'syz.1.2988': attribute type 2 has an invalid length. [ 223.354767][ T3011] bridge_slave_1: left allmulticast mode [ 223.360428][ T3011] bridge_slave_1: left promiscuous mode [ 223.376317][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.387314][ T3011] bridge_slave_0: left allmulticast mode [ 223.393223][ T3011] bridge_slave_0: left promiscuous mode [ 223.398924][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.436106][T15414] netlink: 'syz.1.2991': attribute type 29 has an invalid length. [ 223.546000][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.556570][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.566038][ T3011] bond0 (unregistering): Released all slaves [ 223.574079][T15417] netlink: 'syz.1.2991': attribute type 29 has an invalid length. [ 223.604532][T15265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.707610][T15265] veth0_vlan: entered promiscuous mode [ 223.742025][T15265] veth1_vlan: entered promiscuous mode [ 223.810090][T15265] veth0_macvtap: entered promiscuous mode [ 223.820469][T15265] veth1_macvtap: entered promiscuous mode [ 223.857716][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.891833][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.901650][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.923151][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.933608][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.944100][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.954191][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.964653][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.974806][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.985561][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.996187][T15265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.005514][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.018333][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.029027][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.040124][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.050114][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.061104][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.071048][T15265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.081536][T15265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.096298][T15265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.106149][ T3011] hsr_slave_0: left promiscuous mode [ 224.112032][ T3011] hsr_slave_1: left promiscuous mode [ 224.117605][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.125575][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.133654][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.141041][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.149986][ T3011] veth1_macvtap: left promiscuous mode [ 224.155616][ T3011] veth0_macvtap: left promiscuous mode [ 224.161120][ T3011] veth1_vlan: left promiscuous mode [ 224.166701][ T3011] veth0_vlan: left promiscuous mode [ 224.181917][ T5850] Bluetooth: hci3: command tx timeout [ 224.248623][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 224.262811][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 224.316178][T15265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.326161][T15265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.337907][T15265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.346752][T15265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.376125][T15324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.387940][T15324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.410376][T15324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.420054][T15324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.438252][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.451133][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.477659][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.486351][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.520340][T15324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.547902][T15324] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.567432][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.574515][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.583804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.590861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.618021][T15324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.648469][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.697245][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.714165][T15324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.738712][T15324] veth0_vlan: entered promiscuous mode [ 224.748146][T15324] veth1_vlan: entered promiscuous mode [ 224.766530][T15324] veth0_macvtap: entered promiscuous mode [ 224.775008][T15324] veth1_macvtap: entered promiscuous mode [ 224.787201][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.799401][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.809489][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.820139][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.830102][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.840880][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.850908][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.861531][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.871582][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.882460][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.893603][T15324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.903489][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.918846][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.929552][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.939895][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.950702][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.960723][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.971337][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.981368][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.992135][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.002890][T15324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.013751][T15324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.023183][T15324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.032111][T15324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.040790][T15324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.057378][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.096347][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.111134][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.130382][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.141323][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.161316][ T3011] bridge_slave_1: left allmulticast mode [ 225.167414][ T3011] bridge_slave_1: left promiscuous mode [ 225.174472][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.182863][ T3011] bridge_slave_0: left allmulticast mode [ 225.188499][ T3011] bridge_slave_0: left promiscuous mode [ 225.194705][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.212045][ T5850] Bluetooth: hci4: command tx timeout [ 225.285231][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.295810][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.305075][ T3011] bond0 (unregistering): Released all slaves [ 225.628284][ T3011] hsr_slave_0: left promiscuous mode [ 225.656900][ T3011] hsr_slave_1: left promiscuous mode [ 225.672183][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.679656][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.696351][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.711943][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.721583][ T3011] veth1_macvtap: left promiscuous mode [ 225.727297][ T3011] veth0_macvtap: left promiscuous mode [ 225.736140][ T3011] veth1_vlan: left promiscuous mode [ 225.741485][ T3011] veth0_vlan: left promiscuous mode [ 225.796122][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.806453][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.813751][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.821283][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.828820][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.836723][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.890152][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 225.899894][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 225.950760][T15448] lo speed is unknown, defaulting to 1000 [ 226.047943][T15448] chnl_net:caif_netlink_parms(): no params data found [ 226.080520][T15448] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.090172][T15448] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.097537][T15448] bridge_slave_0: entered allmulticast mode [ 226.104727][T15448] bridge_slave_0: entered promiscuous mode [ 226.112684][T15448] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.119761][T15448] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.126993][T15448] bridge_slave_1: entered allmulticast mode [ 226.133718][T15448] bridge_slave_1: entered promiscuous mode [ 226.153049][T15448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.164046][T15448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.185688][T15448] team0: Port device team_slave_0 added [ 226.195008][T15448] team0: Port device team_slave_1 added [ 226.214505][T15448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.221452][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.247857][T15448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.260106][T15448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.267659][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.294553][T15448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.326435][T15448] hsr_slave_0: entered promiscuous mode [ 226.332854][T15448] hsr_slave_1: entered promiscuous mode [ 226.338969][T15448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.347116][T15448] Cannot create hsr debugfs directory [ 226.379570][ T3011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.493174][T15462] __nla_validate_parse: 3 callbacks suppressed [ 226.493191][T15462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 226.586889][T15468] netlink: 'syz.1.3006': attribute type 29 has an invalid length. [ 226.596657][T15468] netlink: 'syz.1.3006': attribute type 29 has an invalid length. [ 226.616495][T15468] netlink: 508 bytes leftover after parsing attributes in process `syz.1.3006'. [ 226.666232][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.679177][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.690916][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.703192][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.710566][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 226.721841][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.731680][T15448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.747857][T15448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.761432][T15448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.800811][T15448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.809184][T15471] lo speed is unknown, defaulting to 1000 [ 226.909123][T15448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.944536][T15448] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.956890][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.963986][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.979906][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.987023][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.075714][ T3011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.099604][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3014'. [ 227.181149][ T3011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.257795][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.268296][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.276458][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.284632][ T3011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.285300][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.304567][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.311853][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.318292][T15471] chnl_net:caif_netlink_parms(): no params data found [ 227.395333][T15504] lo speed is unknown, defaulting to 1000 [ 227.437950][T15518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3016'. [ 227.458158][T15471] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.469176][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.494951][T15471] bridge_slave_0: entered allmulticast mode [ 227.508139][T15471] bridge_slave_0: entered promiscuous mode [ 227.535949][T15520] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 227.544212][T15520] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 227.545638][T15471] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.552168][T15520] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 227.552746][T15520] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 227.563473][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.582976][T15471] bridge_slave_1: entered allmulticast mode [ 227.589612][T15471] bridge_slave_1: entered promiscuous mode [ 227.636182][T15448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.677383][ T3011] bridge_slave_1: left allmulticast mode [ 227.686844][ T3011] bridge_slave_1: left promiscuous mode [ 227.694039][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.707582][ T3011] bridge_slave_0: left allmulticast mode [ 227.713268][ T3011] bridge_slave_0: left promiscuous mode [ 227.718934][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.748656][T15526] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 227.852411][ T5846] Bluetooth: hci0: command tx timeout [ 227.874487][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.884699][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.894064][ T3011] bond0 (unregistering): Released all slaves [ 227.909275][T15471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.921380][T15471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.990551][T15471] team0: Port device team_slave_0 added [ 227.997924][T15471] team0: Port device team_slave_1 added [ 228.047390][T15549] netlink: 'syz.1.3024': attribute type 75 has an invalid length. [ 228.049350][T15504] chnl_net:caif_netlink_parms(): no params data found [ 228.074020][T15471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.081381][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.113038][T15471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.134670][T15471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.142935][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.169033][T15471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.222130][T15471] hsr_slave_0: entered promiscuous mode [ 228.228125][T15471] hsr_slave_1: entered promiscuous mode [ 228.234490][T15471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.243256][T15471] Cannot create hsr debugfs directory [ 228.311347][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.319200][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.327843][T15504] bridge_slave_0: entered allmulticast mode [ 228.334623][T15504] bridge_slave_0: entered promiscuous mode [ 228.341582][T15504] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.348765][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.355994][T15504] bridge_slave_1: entered allmulticast mode [ 228.366017][T15504] bridge_slave_1: entered promiscuous mode [ 228.384191][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3027'. [ 228.397673][T15448] veth0_vlan: entered promiscuous mode [ 228.453776][ T3011] hsr_slave_0: left promiscuous mode [ 228.459729][ T3011] hsr_slave_1: left promiscuous mode [ 228.471921][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.479900][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.487963][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.496343][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.508187][ T3011] veth1_macvtap: left promiscuous mode [ 228.514164][ T3011] veth0_macvtap: left promiscuous mode [ 228.519771][ T3011] veth1_vlan: left promiscuous mode [ 228.526513][ T3011] veth0_vlan: left promiscuous mode [ 228.596010][T15504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.607328][T15504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.689722][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 228.701288][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 228.735835][ T5846] Bluetooth: hci3: command tx timeout [ 228.780595][T15448] veth1_vlan: entered promiscuous mode [ 228.827843][T15504] team0: Port device team_slave_0 added [ 228.839508][T15504] team0: Port device team_slave_1 added [ 228.872055][T15448] veth0_macvtap: entered promiscuous mode [ 228.899076][T15504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.922140][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.962162][T15504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.995176][T15504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.036009][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.064598][T15504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.086175][T15448] veth1_macvtap: entered promiscuous mode [ 229.119500][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.146554][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.160929][T15609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3035'. [ 229.170108][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.180637][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.190777][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.201483][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.211400][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.222088][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.232747][T15448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.249223][T15504] hsr_slave_0: entered promiscuous mode [ 229.256103][T15504] hsr_slave_1: entered promiscuous mode [ 229.262227][T15504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.269778][T15504] Cannot create hsr debugfs directory [ 229.283134][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.294504][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.304471][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.315211][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.325453][T15448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.336186][T15448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.347899][T15448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.372109][T15448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.372310][ T5846] Bluetooth: hci4: command tx timeout [ 229.380842][T15448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.395568][T15448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.404407][T15448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.438305][T15613] syzkaller0: entered promiscuous mode [ 229.454845][T15613] syzkaller0: entered allmulticast mode [ 229.457335][T15616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3038'. [ 229.479540][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'. [ 229.584607][T15618] xt_l2tp: invalid flags combination: c [ 229.673820][T15504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.689170][T15471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.715978][T15471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.721745][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.735771][T15471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.737803][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.759986][T15504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.786398][T15471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.800252][T15628] bridge0: port 1(syz_tun) entered blocking state [ 229.808155][T15628] bridge0: port 1(syz_tun) entered disabled state [ 229.814971][T15628] syz_tun: entered allmulticast mode [ 229.820670][T15628] syz_tun: entered promiscuous mode [ 229.826467][T15628] bridge0: port 1(syz_tun) entered blocking state [ 229.832924][T15628] bridge0: port 1(syz_tun) entered forwarding state [ 229.848631][T15624] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 229.859075][T15504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.891302][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.906909][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.933169][ T5846] Bluetooth: hci0: command tx timeout [ 229.949208][T15504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.989862][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3049'. [ 230.035810][T15639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.056872][ T3011] bridge_slave_1: left allmulticast mode [ 230.064192][ T3011] bridge_slave_1: left promiscuous mode [ 230.069854][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.088175][ T3011] bridge_slave_0: left allmulticast mode [ 230.098908][ T3011] bridge_slave_0: left promiscuous mode [ 230.105631][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.174179][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.184796][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.194189][ T3011] bond0 (unregistering): Released all slaves [ 230.227923][T15471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.258902][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 230.311657][T15654] syzkaller0: entered promiscuous mode [ 230.322720][T15654] syzkaller0: entered allmulticast mode [ 230.335020][T15504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.345697][T15504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.356085][T15504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.370393][T15504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.456301][T15471] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.474478][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.481568][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.496155][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.503279][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.546617][T15471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.631113][T15504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.651177][T15504] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.665518][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.672594][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.692649][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.699715][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.734724][T15471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.767995][ T3011] hsr_slave_0: left promiscuous mode [ 230.774034][ T3011] hsr_slave_1: left promiscuous mode [ 230.779966][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.787950][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.795841][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.804961][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.812161][ T5846] Bluetooth: hci3: command tx timeout [ 230.819372][ T3011] veth1_macvtap: left promiscuous mode [ 230.825001][ T3011] veth0_macvtap: left promiscuous mode [ 230.830501][ T3011] veth1_vlan: left promiscuous mode [ 230.835790][ T3011] veth0_vlan: left promiscuous mode [ 230.919611][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 230.929559][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 231.000760][T15471] veth0_vlan: entered promiscuous mode [ 231.019512][T15471] veth1_vlan: entered promiscuous mode [ 231.043011][T15471] veth0_macvtap: entered promiscuous mode [ 231.051175][T15471] veth1_macvtap: entered promiscuous mode [ 231.070043][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.080781][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.091902][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.102678][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.112538][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.123073][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.133126][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.143784][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.154472][T15471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.165587][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.176114][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.187592][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.200096][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.210235][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.221218][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.232080][T15471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.241007][T15471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.250524][T15471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.259571][T15471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.268625][T15471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.311460][T15504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.332957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.340756][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.377429][T15504] veth0_vlan: entered promiscuous mode [ 231.390346][T15504] veth1_vlan: entered promiscuous mode [ 231.390770][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.405607][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.419050][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.434729][T15504] veth0_macvtap: entered promiscuous mode [ 231.445296][T15504] veth1_macvtap: entered promiscuous mode [ 231.451966][ T5846] Bluetooth: hci4: command tx timeout [ 231.469991][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.480543][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.493274][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.503998][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.513941][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.524516][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.534690][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.545196][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.555166][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.566023][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.576535][T15504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.587529][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.598541][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.608446][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.619111][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.629458][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.639997][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.650017][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.660576][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.671333][T15504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.685066][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.699382][T15504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.708395][T15504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.717155][T15504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.726016][T15504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.765624][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.779940][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.797253][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.814687][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.822584][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.857434][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.913946][ T3011] bridge_slave_1: left allmulticast mode [ 231.919593][ T3011] bridge_slave_1: left promiscuous mode [ 231.925456][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.933944][ T3011] bridge_slave_0: left allmulticast mode [ 231.939592][ T3011] bridge_slave_0: left promiscuous mode [ 231.945387][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.034915][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.045009][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.054337][ T3011] bond0 (unregistering): Released all slaves [ 232.532600][T15685] __nla_validate_parse: 2 callbacks suppressed [ 232.532619][T15685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3060'. [ 232.551880][ T3011] hsr_slave_0: left promiscuous mode [ 232.564684][ T3011] hsr_slave_1: left promiscuous mode [ 232.581912][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.589316][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.616104][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.624209][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.631601][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.639411][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.647284][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.655404][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.663057][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.677539][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.694652][ T3011] veth1_macvtap: left promiscuous mode [ 232.702134][ T3011] veth0_macvtap: left promiscuous mode [ 232.708530][ T3011] veth1_vlan: left promiscuous mode [ 232.714080][ T3011] veth0_vlan: left promiscuous mode [ 232.889731][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 232.902967][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 232.969142][T15686] lo speed is unknown, defaulting to 1000 [ 233.249699][T15686] chnl_net:caif_netlink_parms(): no params data found [ 233.337162][ T3011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.423934][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.431151][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.431787][T15686] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.439141][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.453717][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.461068][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.462388][T15686] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.468492][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.490150][T15686] bridge_slave_0: entered allmulticast mode [ 233.497112][T15686] bridge_slave_0: entered promiscuous mode [ 233.504468][T15686] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.511554][T15686] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.518698][T15686] bridge_slave_1: entered allmulticast mode [ 233.525458][T15686] bridge_slave_1: entered promiscuous mode [ 233.564574][T15695] lo speed is unknown, defaulting to 1000 [ 233.584672][T15686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.605561][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3061'. [ 233.636740][T15686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.675270][T15700] netlink: 'syz.3.3061': attribute type 3 has an invalid length. [ 233.763318][T15702] xt_policy: output policy not valid in PREROUTING and INPUT [ 233.771359][T15686] team0: Port device team_slave_0 added [ 233.780118][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.787387][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.788777][T15686] team0: Port device team_slave_1 added [ 233.794829][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.808150][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.816021][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.823332][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.900080][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3062'. [ 233.915423][T15686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.922539][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.949690][T15686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.966370][T15686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.973690][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.999705][T15686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.030483][T15707] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 234.038503][T15707] netlink: 'syz.3.3062': attribute type 2 has an invalid length. [ 234.057204][T15703] lo speed is unknown, defaulting to 1000 [ 234.099888][T15686] hsr_slave_0: entered promiscuous mode [ 234.116521][T15686] hsr_slave_1: entered promiscuous mode [ 234.127659][T15686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.135714][T15686] Cannot create hsr debugfs directory [ 234.224081][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 234.301512][T15695] chnl_net:caif_netlink_parms(): no params data found [ 234.379930][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3067'. [ 234.404482][T15695] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.412292][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.419465][T15695] bridge_slave_0: entered allmulticast mode [ 234.426176][T15695] bridge_slave_0: entered promiscuous mode [ 234.433638][T15695] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.440803][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.448157][T15695] bridge_slave_1: entered allmulticast mode [ 234.455856][T15695] bridge_slave_1: entered promiscuous mode [ 234.505262][ T3011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.537902][T15744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3069'. [ 234.560601][T15695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.579004][T15695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.595280][T15703] chnl_net:caif_netlink_parms(): no params data found [ 234.626102][T15695] team0: Port device team_slave_0 added [ 234.660192][T15695] team0: Port device team_slave_1 added [ 234.717094][T15695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.724801][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.757059][ T5846] Bluetooth: hci0: command tx timeout [ 234.763187][T15695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.785588][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3073'. [ 234.801864][T15757] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3073'. [ 234.815288][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.824862][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.833490][T15703] bridge_slave_0: entered allmulticast mode [ 234.840232][T15703] bridge_slave_0: entered promiscuous mode [ 234.850114][T15695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.857304][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.888272][T15695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.903698][T15768] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 234.911609][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.918816][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.926357][T15703] bridge_slave_1: entered allmulticast mode [ 234.933165][T15703] bridge_slave_1: entered promiscuous mode [ 234.940555][ T3011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.968286][T15686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.012813][T15686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.014975][T15775] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 235.033072][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 235.038150][T15686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.055721][T15686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.080874][T15775] gretap0: entered promiscuous mode [ 235.086241][T15775] macvtap1: entered promiscuous mode [ 235.091560][T15775] macvtap1: entered allmulticast mode [ 235.097098][T15775] gretap0: entered allmulticast mode [ 235.107470][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.118843][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.131240][T15695] hsr_slave_0: entered promiscuous mode [ 235.138648][T15695] hsr_slave_1: entered promiscuous mode [ 235.150263][T15695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.159701][T15695] Cannot create hsr debugfs directory [ 235.195642][T15773] syzkaller0: entered promiscuous mode [ 235.201198][T15773] syzkaller0: entered allmulticast mode [ 235.209163][ T3011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.230630][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'. [ 235.259867][T15703] team0: Port device team_slave_0 added [ 235.318755][T15703] team0: Port device team_slave_1 added [ 235.353506][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.362763][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.390473][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.408175][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.416561][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.443105][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.532771][ T5850] Bluetooth: hci3: command tx timeout [ 235.553167][ T3011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.588294][T15703] hsr_slave_0: entered promiscuous mode [ 235.595361][T15703] hsr_slave_1: entered promiscuous mode [ 235.603148][T15703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.610703][T15703] Cannot create hsr debugfs directory [ 235.749483][ T3011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.799407][T15686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.818172][ T3011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.845777][T15686] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.852265][ T5850] Bluetooth: hci4: command tx timeout [ 235.869168][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.876288][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.891509][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.898596][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.959220][ T3011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.021904][T15818] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 236.035155][T15820] FAULT_INJECTION: forcing a failure. [ 236.035155][T15820] name failslab, interval 1, probability 0, space 0, times 0 [ 236.048606][T15820] CPU: 1 UID: 0 PID: 15820 Comm: syz.1.3091 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 236.048627][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 236.048637][T15820] Call Trace: [ 236.048644][T15820] [ 236.048650][T15820] dump_stack_lvl+0x241/0x360 [ 236.048676][T15820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.048697][T15820] ? __pfx__printk+0x10/0x10 [ 236.048719][T15820] ? __pfx___might_resched+0x10/0x10 [ 236.048739][T15820] should_fail_ex+0x3b0/0x4e0 [ 236.048757][T15820] should_failslab+0xac/0x100 [ 236.048777][T15820] kmem_cache_alloc_node_noprof+0x77/0x380 [ 236.048798][T15820] ? __alloc_skb+0x1c3/0x440 [ 236.048815][T15820] __alloc_skb+0x1c3/0x440 [ 236.048829][T15820] ? __pfx___netlink_lookup+0x10/0x10 [ 236.048850][T15820] ? __pfx___alloc_skb+0x10/0x10 [ 236.048867][T15820] ? netlink_autobind+0xd6/0x2f0 [ 236.048883][T15820] ? netlink_autobind+0x2b0/0x2f0 [ 236.048904][T15820] netlink_sendmsg+0x638/0xcb0 [ 236.048926][T15820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.048945][T15820] ? aa_sock_msg_perm+0x91/0x160 [ 236.048963][T15820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.048979][T15820] __sock_sendmsg+0x221/0x270 [ 236.049000][T15820] ____sys_sendmsg+0x52a/0x7e0 [ 236.049020][T15820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.049036][T15820] ? __fget_files+0x2a/0x410 [ 236.049058][T15820] ? __fget_files+0x2a/0x410 [ 236.049081][T15820] __sys_sendmsg+0x269/0x350 [ 236.049097][T15820] ? bpf_lsm_file_permission+0x9/0x10 [ 236.049115][T15820] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.049137][T15820] ? do_sys_openat2+0x17a/0x1d0 [ 236.049170][T15820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.049190][T15820] ? rcu_is_watching+0x15/0xb0 [ 236.049212][T15820] ? rcu_is_watching+0x15/0xb0 [ 236.049234][T15820] do_syscall_64+0xf3/0x230 [ 236.049250][T15820] ? clear_bhb_loop+0x35/0x90 [ 236.049269][T15820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.049285][T15820] RIP: 0033:0x7ffb9678cda9 [ 236.049299][T15820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.049312][T15820] RSP: 002b:00007ffb9766f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.049329][T15820] RAX: ffffffffffffffda RBX: 00007ffb969a5fa0 RCX: 00007ffb9678cda9 [ 236.049341][T15820] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 236.049351][T15820] RBP: 00007ffb9766f090 R08: 0000000000000000 R09: 0000000000000000 [ 236.049361][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.049370][T15820] R13: 0000000000000000 R14: 00007ffb969a5fa0 R15: 00007ffce20ef018 [ 236.049388][T15820] [ 236.081937][T15686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.415786][T15829] syzkaller0: entered promiscuous mode [ 236.421287][T15829] syzkaller0: entered allmulticast mode [ 236.502926][ T3011] bridge_slave_1: left allmulticast mode [ 236.508591][ T3011] bridge_slave_1: left promiscuous mode [ 236.516115][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.525608][ T3011] bridge_slave_0: left allmulticast mode [ 236.531354][ T3011] bridge_slave_0: left promiscuous mode [ 236.540701][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.553872][ T3011] bridge_slave_1: left allmulticast mode [ 236.559595][ T3011] bridge_slave_1: left promiscuous mode [ 236.568905][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.579193][ T3011] bridge_slave_0: left allmulticast mode [ 236.585429][ T3011] bridge_slave_0: left promiscuous mode [ 236.591076][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.812144][ T5850] Bluetooth: hci0: command tx timeout [ 236.846193][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.861452][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.871341][ T3011] bond0 (unregistering): Released all slaves [ 236.885208][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.895150][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.907770][ T3011] bond0 (unregistering): Released all slaves [ 236.969308][T15686] veth0_vlan: entered promiscuous mode [ 236.990489][T15686] veth1_vlan: entered promiscuous mode [ 237.017223][T15866] gretap0: entered promiscuous mode [ 237.028630][T15866] macvtap2: entered promiscuous mode [ 237.035119][T15866] macvtap2: entered allmulticast mode [ 237.040568][T15866] gretap0: entered allmulticast mode [ 237.091545][T15686] veth0_macvtap: entered promiscuous mode [ 237.121372][T15686] veth1_macvtap: entered promiscuous mode [ 237.134797][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.145398][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.157271][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.168058][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.178486][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.189328][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.199441][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.210189][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.220607][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.232571][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.243530][T15686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.265663][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.280855][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.290770][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.302207][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.312076][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.323279][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.333474][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.344134][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.354901][T15686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.381459][T15876] syzkaller0: entered promiscuous mode [ 237.387293][T15876] syzkaller0: entered allmulticast mode [ 237.403673][T15686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.413623][T15686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.422643][T15686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.443688][T15686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.587693][T15890] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 237.613270][ T5850] Bluetooth: hci3: command tx timeout [ 237.931796][ T5850] Bluetooth: hci4: command tx timeout [ 238.891814][ T5850] Bluetooth: hci0: command tx timeout [ 239.691843][ T5850] Bluetooth: hci3: command tx timeout [ 240.011833][ T5850] Bluetooth: hci4: command tx timeout [ 240.971932][ T5850] Bluetooth: hci0: command tx timeout [ 241.772194][ T5850] Bluetooth: hci3: command tx timeout [ 242.091811][ T5850] Bluetooth: hci4: command tx timeout [ 243.370836][ T6334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.083560][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.090774][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.096235][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.102126][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.105521][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.112377][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.119508][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.126379][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 253.133684][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.140046][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.147277][ T5840] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 253.164881][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.211854][ T5836] Bluetooth: hci5: command tx timeout [ 255.211851][ T5840] Bluetooth: hci6: command tx timeout [ 257.291863][ T5840] Bluetooth: hci6: command tx timeout [ 257.292433][ T5836] Bluetooth: hci5: command tx timeout [ 259.372018][ T5836] Bluetooth: hci5: command tx timeout [ 259.372040][ T5840] Bluetooth: hci6: command tx timeout [ 261.451954][ T5840] Bluetooth: hci6: command tx timeout [ 261.455886][ T5836] Bluetooth: hci5: command tx timeout [ 274.295620][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.840605][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.848059][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.855343][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.863017][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.870406][ T5840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.878351][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.355409][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 296.362770][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 296.369942][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 296.378051][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 296.385710][ T5836] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 296.393079][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 296.891803][ T5840] Bluetooth: hci7: command tx timeout [ 297.264146][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 297.271410][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 297.279047][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 297.286763][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 297.294355][ T5836] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 297.301557][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 298.411928][ T5836] Bluetooth: hci8: command tx timeout [ 298.971981][ T5836] Bluetooth: hci7: command tx timeout [ 299.372211][ T5836] Bluetooth: hci9: command tx timeout [ 300.491881][ T5836] Bluetooth: hci8: command tx timeout [ 301.051887][ T5836] Bluetooth: hci7: command tx timeout [ 301.451780][ T5836] Bluetooth: hci9: command tx timeout [ 302.572034][ T5836] Bluetooth: hci8: command tx timeout [ 303.131815][ T5836] Bluetooth: hci7: command tx timeout [ 303.531849][ T5836] Bluetooth: hci9: command tx timeout [ 304.651819][ T5836] Bluetooth: hci8: command tx timeout [ 305.220406][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 305.611865][ T5836] Bluetooth: hci9: command tx timeout [ 313.353498][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 313.360772][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 313.368473][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 313.376551][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 313.384284][ T5840] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 313.391530][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 313.406299][ T5836] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 313.413944][ T5836] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 313.421217][ T5836] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 313.429500][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 313.437000][ T5836] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 313.444546][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 315.461795][ T5840] Bluetooth: hci10: command tx timeout [ 315.531785][ T5840] Bluetooth: hci11: command tx timeout [ 317.531780][ T5840] Bluetooth: hci10: command tx timeout [ 317.611793][ T5840] Bluetooth: hci11: command tx timeout [ 319.611842][ T5840] Bluetooth: hci10: command tx timeout [ 319.691936][ T5840] Bluetooth: hci11: command tx timeout [ 321.691931][ T5840] Bluetooth: hci10: command tx timeout [ 321.771766][ T5840] Bluetooth: hci11: command tx timeout [ 327.533261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.145202][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.212201][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 357.010238][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 357.017635][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 357.025054][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 357.032821][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 357.040528][ T5840] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 357.048250][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 357.621476][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 357.628870][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 357.636373][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 357.644147][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 357.653076][ T5836] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 357.660373][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 359.131794][ T5846] Bluetooth: hci12: command tx timeout [ 359.626562][ T5850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 359.633980][ T5850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 359.641237][ T5850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 359.649151][ T5850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 359.657051][ T5850] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 359.664516][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 359.691775][ T5846] Bluetooth: hci13: command tx timeout [ 360.332348][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 360.334130][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 361.211823][ T5836] Bluetooth: hci12: command tx timeout [ 361.691723][ T5836] Bluetooth: hci14: command tx timeout [ 361.771861][ T5836] Bluetooth: hci13: command tx timeout [ 363.291880][ T5836] Bluetooth: hci12: command tx timeout [ 363.771748][ T5836] Bluetooth: hci14: command tx timeout [ 363.851864][ T5836] Bluetooth: hci13: command tx timeout [ 365.371983][ T5836] Bluetooth: hci12: command tx timeout [ 365.851730][ T5836] Bluetooth: hci14: command tx timeout [ 365.932002][ T5836] Bluetooth: hci13: command tx timeout [ 367.069958][ T1440] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.931747][ T5836] Bluetooth: hci14: command tx timeout [ 373.704486][ T5850] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 373.715533][ T5850] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 373.722750][ T5850] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 373.730028][T15951] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 373.730593][T15951] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 373.741441][ T5850] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 373.745178][T15951] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 373.756471][ T5850] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 373.758911][T15951] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 373.766309][ T5850] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 373.782371][ T5850] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 373.789638][ T5850] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 375.691808][ T5148] Bluetooth: hci5: command 0x0406 tx timeout [ 375.692004][ T5850] Bluetooth: hci6: command 0x0406 tx timeout [ 375.851796][ T5840] Bluetooth: hci15: command tx timeout [ 375.856060][ T5836] Bluetooth: hci16: command tx timeout [ 377.931702][ T5836] Bluetooth: hci16: command tx timeout [ 377.931744][ T5840] Bluetooth: hci15: command tx timeout [ 380.011898][ T5840] Bluetooth: hci16: command tx timeout [ 380.011989][ T5836] Bluetooth: hci15: command tx timeout [ 382.091887][ T5836] Bluetooth: hci16: command tx timeout [ 382.095640][ T5840] Bluetooth: hci15: command tx timeout [ 397.994746][T15933] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.492587][ T30] INFO: task kworker/u8:4:61 blocked for more than 143 seconds. [ 400.500344][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 400.507651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.516372][ T30] task:kworker/u8:4 state:D stack:23568 pid:61 tgid:61 ppid:2 flags:0x00004000 [ 400.526628][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 400.533623][ T30] Call Trace: [ 400.536913][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.539826][ T30] __schedule+0x186c/0x4be0 [ 400.544467][ T30] ? schedule+0x90/0x320 [ 400.548735][ T30] ? schedule+0x90/0x320 [ 400.577033][ T30] ? __pfx___schedule+0x10/0x10 [ 400.583470][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.588522][ T30] ? rcu_is_watching+0x15/0xb0 [ 400.593610][ T30] ? kthread_data+0x52/0xd0 [ 400.598131][ T30] ? schedule+0x90/0x320 [ 400.602517][ T30] ? wq_worker_sleeping+0x66/0x240 [ 400.607633][ T30] ? schedule+0x90/0x320 [ 400.611972][ T30] schedule+0x14b/0x320 [ 400.616133][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.621577][ T30] __mutex_lock+0x817/0x1010 [ 400.626271][ T30] ? __mutex_lock+0x602/0x1010 [ 400.631036][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 400.637532][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 400.642686][ T30] ? rcu_is_watching+0x15/0xb0 [ 400.647458][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 400.654046][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 400.659970][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.665085][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 400.671079][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 400.678410][ T30] ? rcu_is_watching+0x15/0xb0 [ 400.683306][ T30] ? process_scheduled_works+0x976/0x1840 [ 400.689033][ T30] process_scheduled_works+0xa66/0x1840 [ 400.694689][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.700673][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 400.706259][ T30] ? assign_work+0x364/0x3d0 [ 400.710847][ T30] worker_thread+0x870/0xd30 [ 400.715518][ T30] ? __kthread_parkme+0x169/0x1d0 [ 400.720547][ T30] ? __pfx_worker_thread+0x10/0x10 [ 400.725765][ T30] kthread+0x7a9/0x920 [ 400.729836][ T30] ? __pfx_kthread+0x10/0x10 [ 400.734868][ T30] ? __pfx_worker_thread+0x10/0x10 [ 400.739996][ T30] ? __pfx_kthread+0x10/0x10 [ 400.744655][ T30] ? __pfx_kthread+0x10/0x10 [ 400.749272][ T30] ? __pfx_kthread+0x10/0x10 [ 400.753949][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.759156][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 400.764684][ T30] ? __pfx_kthread+0x10/0x10 [ 400.769288][ T30] ret_from_fork+0x4b/0x80 [ 400.774097][ T30] ? __pfx_kthread+0x10/0x10 [ 400.778700][ T30] ret_from_fork_asm+0x1a/0x30 [ 400.783502][ T30] [ 400.786584][ T30] INFO: task kworker/u8:6:2995 blocked for more than 143 seconds. [ 400.794440][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 400.801830][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.810519][ T30] task:kworker/u8:6 state:D stack:22896 pid:2995 tgid:2995 ppid:2 flags:0x00004000 [ 400.820799][ T30] Workqueue: events_unbound linkwatch_event [ 400.827249][ T30] Call Trace: [ 400.830541][ T30] [ 400.833590][ T30] __schedule+0x186c/0x4be0 [ 400.838099][ T30] ? schedule+0x90/0x320 [ 400.842470][ T30] ? schedule+0x90/0x320 [ 400.846721][ T30] ? __pfx___schedule+0x10/0x10 [ 400.851560][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.856607][ T30] ? rcu_is_watching+0x15/0xb0 [ 400.861391][ T30] ? kthread_data+0x52/0xd0 [ 400.865969][ T30] ? schedule+0x90/0x320 [ 400.870212][ T30] ? wq_worker_sleeping+0x66/0x240 [ 400.875342][ T30] ? schedule+0x90/0x320 [ 400.879591][ T30] schedule+0x14b/0x320 [ 400.883863][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.889331][ T30] __mutex_lock+0x817/0x1010 [ 400.894123][ T30] ? __mutex_lock+0x602/0x1010 [ 400.898895][ T30] ? linkwatch_event+0xe/0x60 [ 400.903603][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 400.908623][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 400.914629][ T30] ? rcu_is_watching+0x15/0xb0 [ 400.919396][ T30] ? process_scheduled_works+0x976/0x1840 [ 400.925233][ T30] linkwatch_event+0xe/0x60 [ 400.929738][ T30] process_scheduled_works+0xa66/0x1840 [ 400.935351][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.941341][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 400.946932][ T30] ? assign_work+0x364/0x3d0 [ 400.951536][ T30] worker_thread+0x870/0xd30 [ 400.956158][ T30] ? __kthread_parkme+0x169/0x1d0 [ 400.961182][ T30] ? __pfx_worker_thread+0x10/0x10 [ 400.966533][ T30] kthread+0x7a9/0x920 [ 400.970613][ T30] ? __pfx_kthread+0x10/0x10 [ 400.975336][ T30] ? __pfx_worker_thread+0x10/0x10 [ 400.980451][ T30] ? __pfx_kthread+0x10/0x10 [ 400.985080][ T30] ? __pfx_kthread+0x10/0x10 [ 400.989671][ T30] ? __pfx_kthread+0x10/0x10 [ 400.994281][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.999479][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 401.004793][ T30] ? __pfx_kthread+0x10/0x10 [ 401.009388][ T30] ret_from_fork+0x4b/0x80 [ 401.013842][ T30] ? __pfx_kthread+0x10/0x10 [ 401.018433][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.023234][ T30] [ 401.026259][ T30] INFO: task kworker/u8:7:3007 blocked for more than 143 seconds. [ 401.034100][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 401.041372][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.050133][ T30] task:kworker/u8:7 state:D stack:22960 pid:3007 tgid:3007 ppid:2 flags:0x00004000 [ 401.060455][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 401.066541][ T30] Call Trace: [ 401.069827][ T30] [ 401.072795][ T30] __schedule+0x186c/0x4be0 [ 401.077304][ T30] ? schedule+0x90/0x320 [ 401.081544][ T30] ? schedule+0x90/0x320 [ 401.085885][ T30] ? __pfx___schedule+0x10/0x10 [ 401.090741][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.095823][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.100591][ T30] ? kthread_data+0x52/0xd0 [ 401.105135][ T30] ? schedule+0x90/0x320 [ 401.109384][ T30] ? wq_worker_sleeping+0x66/0x240 [ 401.114531][ T30] ? schedule+0x90/0x320 [ 401.118772][ T30] schedule+0x14b/0x320 [ 401.123030][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.128493][ T30] __mutex_lock+0x817/0x1010 [ 401.133352][ T30] ? __mutex_lock+0x602/0x1010 [ 401.138127][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 401.143365][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.148401][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 401.153631][ T30] addrconf_dad_work+0x10e/0x16a0 [ 401.158659][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.163789][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 401.169318][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.175669][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.180436][ T30] ? process_scheduled_works+0x976/0x1840 [ 401.186180][ T30] process_scheduled_works+0xa66/0x1840 [ 401.191770][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.197759][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 401.203440][ T30] ? assign_work+0x364/0x3d0 [ 401.208036][ T30] worker_thread+0x870/0xd30 [ 401.212683][ T30] ? __kthread_parkme+0x169/0x1d0 [ 401.217710][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.222849][ T30] kthread+0x7a9/0x920 [ 401.226917][ T30] ? __pfx_kthread+0x10/0x10 [ 401.231488][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.236620][ T30] ? __pfx_kthread+0x10/0x10 [ 401.241211][ T30] ? __pfx_kthread+0x10/0x10 [ 401.245899][ T30] ? __pfx_kthread+0x10/0x10 [ 401.250489][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.255769][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 401.260969][ T30] ? __pfx_kthread+0x10/0x10 [ 401.265589][ T30] ret_from_fork+0x4b/0x80 [ 401.270002][ T30] ? __pfx_kthread+0x10/0x10 [ 401.274671][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.279439][ T30] [ 401.282584][ T30] INFO: task kworker/u8:8:3011 blocked for more than 144 seconds. [ 401.290380][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 401.298900][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.307598][ T30] task:kworker/u8:8 state:D stack:20336 pid:3011 tgid:3011 ppid:2 flags:0x00004000 [ 401.317807][ T30] Workqueue: netns cleanup_net [ 401.322692][ T30] Call Trace: [ 401.325973][ T30] [ 401.328909][ T30] __schedule+0x186c/0x4be0 [ 401.333635][ T30] ? schedule+0x90/0x320 [ 401.337885][ T30] ? schedule+0x90/0x320 [ 401.342341][ T30] ? __pfx___schedule+0x10/0x10 [ 401.347215][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.352271][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.357038][ T30] ? kthread_data+0x52/0xd0 [ 401.361521][ T30] ? schedule+0x90/0x320 [ 401.365851][ T30] ? wq_worker_sleeping+0x66/0x240 [ 401.370964][ T30] ? schedule+0x90/0x320 [ 401.376634][ T30] schedule+0x14b/0x320 [ 401.380781][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.386265][ T30] __mutex_lock+0x817/0x1010 [ 401.390873][ T30] ? __mutex_lock+0x602/0x1010 [ 401.395661][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 401.402277][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.407300][ T30] ? __pfx___might_resched+0x10/0x10 [ 401.412597][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 401.419113][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.423918][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 401.430423][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 401.436778][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.441542][ T30] ? lock_release+0xbf/0xa30 [ 401.446255][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.452618][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 401.459386][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.464200][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.469229][ T30] unregister_netdevice_queue+0x303/0x370 [ 401.474972][ T30] ? __pfx_up_write+0x10/0x10 [ 401.479689][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 401.486039][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 401.491804][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 401.497530][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 401.503375][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 401.509708][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.514500][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 401.519870][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 401.525516][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 401.531588][ T30] hwsim_exit_net+0x5c1/0x670 [ 401.536290][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 401.541470][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 401.547402][ T30] cleanup_net+0x812/0xd60 [ 401.551845][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 401.556762][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.561504][ T30] ? process_scheduled_works+0x976/0x1840 [ 401.567303][ T30] process_scheduled_works+0xa66/0x1840 [ 401.572906][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.578951][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 401.584538][ T30] ? assign_work+0x364/0x3d0 [ 401.589141][ T30] worker_thread+0x870/0xd30 [ 401.593761][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 401.599657][ T30] ? __kthread_parkme+0x169/0x1d0 [ 401.604780][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.609892][ T30] kthread+0x7a9/0x920 [ 401.614081][ T30] ? __pfx_kthread+0x10/0x10 [ 401.618699][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.623848][ T30] ? __pfx_kthread+0x10/0x10 [ 401.628439][ T30] ? __pfx_kthread+0x10/0x10 [ 401.633053][ T30] ? __pfx_kthread+0x10/0x10 [ 401.637643][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.642965][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 401.648168][ T30] ? __pfx_kthread+0x10/0x10 [ 401.652777][ T30] ret_from_fork+0x4b/0x80 [ 401.657191][ T30] ? __pfx_kthread+0x10/0x10 [ 401.661806][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.666569][ T30] [ 401.669620][ T30] INFO: task syz-executor:15686 blocked for more than 144 seconds. [ 401.677560][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 401.685009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.693783][ T30] task:syz-executor state:D stack:21392 pid:15686 tgid:15686 ppid:1 flags:0x00004004 [ 401.704008][ T30] Call Trace: [ 401.707290][ T30] [ 401.710223][ T30] __schedule+0x186c/0x4be0 [ 401.714811][ T30] ? schedule+0x90/0x320 [ 401.719062][ T30] ? schedule+0x90/0x320 [ 401.723413][ T30] ? __pfx___schedule+0x10/0x10 [ 401.728271][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.733312][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.738077][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 401.743994][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 401.750332][ T30] ? schedule+0x90/0x320 [ 401.754592][ T30] schedule+0x14b/0x320 [ 401.758751][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.764321][ T30] __mutex_lock+0x817/0x1010 [ 401.768912][ T30] ? __mutex_lock+0x602/0x1010 [ 401.773984][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 401.780163][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.785289][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.791272][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 401.797276][ T30] wiphy_register+0x1be5/0x27b0 [ 401.802259][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 401.807458][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 401.812585][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 401.818667][ T30] ieee80211_register_hw+0x354e/0x4240 [ 401.824166][ T30] ? ieee80211_register_hw+0x15b1/0x4240 [ 401.829806][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 401.835662][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 401.841474][ T30] ? __asan_memset+0x23/0x50 [ 401.846177][ T30] ? __hrtimer_init+0x170/0x250 [ 401.851033][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 401.856849][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 401.862959][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 401.868077][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 401.873822][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.879722][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 401.886222][ T30] genl_rcv_msg+0xb14/0xec0 [ 401.890722][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.895775][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 401.900972][ T30] ? kasan_save_track+0x51/0x80 [ 401.905847][ T30] ? __sys_sendto+0x363/0x4c0 [ 401.910527][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 401.915567][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.921132][ T30] ? __pfx___might_resched+0x10/0x10 [ 401.926526][ T30] netlink_rcv_skb+0x1e3/0x430 [ 401.931298][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.936410][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.941732][ T30] ? lock_release+0xbf/0xa30 [ 401.946346][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 401.951855][ T30] genl_rcv+0x28/0x40 [ 401.955844][ T30] netlink_unicast+0x7f6/0x990 [ 401.960612][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 401.965999][ T30] ? __virt_addr_valid+0x45f/0x530 [ 401.971109][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 401.976375][ T30] ? __check_object_size+0x47a/0x730 [ 401.982524][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 401.987299][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.992683][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 401.997625][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.003046][ T30] __sock_sendmsg+0x221/0x270 [ 402.007743][ T30] __sys_sendto+0x363/0x4c0 [ 402.012395][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 402.017431][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.023801][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.030130][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.034916][ T30] __x64_sys_sendto+0xde/0x100 [ 402.039678][ T30] do_syscall_64+0xf3/0x230 [ 402.044259][ T30] ? clear_bhb_loop+0x35/0x90 [ 402.048940][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.054849][ T30] RIP: 0033:0x7f826f18ec3c [ 402.059258][ T30] RSP: 002b:00007ffebff36b50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 402.067708][ T30] RAX: ffffffffffffffda RBX: 00007f826fed4620 RCX: 00007f826f18ec3c [ 402.075714][ T30] RDX: 0000000000000024 RSI: 00007f826fed4670 RDI: 0000000000000003 [ 402.083776][ T30] RBP: 0000000000000000 R08: 00007ffebff36ba4 R09: 000000000000000c [ 402.091930][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 402.099908][ T30] R13: 0000000000000000 R14: 00007f826fed4670 R15: 0000000000000000 [ 402.107948][ T30] [ 402.110975][ T30] INFO: task syz-executor:15695 blocked for more than 144 seconds. [ 402.118887][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 402.126233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.134973][ T30] task:syz-executor state:D stack:21552 pid:15695 tgid:15695 ppid:1 flags:0x00000004 [ 402.145830][ T30] Call Trace: [ 402.149110][ T30] [ 402.152176][ T30] __schedule+0x186c/0x4be0 [ 402.156688][ T30] ? schedule+0x90/0x320 [ 402.160910][ T30] ? schedule+0x90/0x320 [ 402.165361][ T30] ? __pfx___schedule+0x10/0x10 [ 402.170222][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.175277][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.180048][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 402.186018][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.192401][ T30] ? schedule+0x90/0x320 [ 402.196907][ T30] schedule+0x14b/0x320 [ 402.201068][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.206850][ T30] __mutex_lock+0x817/0x1010 [ 402.211454][ T30] ? __mutex_lock+0x602/0x1010 [ 402.216260][ T30] ? new_device_store+0x1b4/0x890 [ 402.221306][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.226435][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 402.231463][ T30] new_device_store+0x1b4/0x890 [ 402.236343][ T30] ? __pfx__copy_from_iter+0x10/0x10 [ 402.241759][ T30] ? __pfx_new_device_store+0x10/0x10 [ 402.247129][ T30] ? __virt_addr_valid+0x45f/0x530 [ 402.252363][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 402.257218][ T30] ? bus_attr_store+0x4f/0xb0 [ 402.261961][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 402.267161][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 402.272611][ T30] vfs_write+0xaeb/0xd30 [ 402.276858][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.282775][ T30] ? __pfx_vfs_write+0x10/0x10 [ 402.287555][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 402.292432][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.297899][ T30] ksys_write+0x18f/0x2b0 [ 402.302317][ T30] ? __pfx_ksys_write+0x10/0x10 [ 402.307167][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.311979][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.316743][ T30] do_syscall_64+0xf3/0x230 [ 402.321223][ T30] ? clear_bhb_loop+0x35/0x90 [ 402.326011][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.332203][ T30] RIP: 0033:0x7f608a58b85f [ 402.336628][ T30] RSP: 002b:00007ffd54f79e60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 402.345147][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f608a58b85f [ 402.353166][ T30] RDX: 0000000000000003 RSI: 00007ffd54f79eb0 RDI: 0000000000000005 [ 402.361147][ T30] RBP: 00007f608a60f521 R08: 0000000000000000 R09: 00007ffd54f79cb7 [ 402.369241][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 402.377248][ T30] R13: 00007ffd54f79eb0 R14: 00007f608b2d4620 R15: 0000000000000003 [ 402.385331][ T30] [ 402.388355][ T30] INFO: task syz-executor:15703 blocked for more than 145 seconds. [ 402.396314][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 402.404108][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.412888][ T30] task:syz-executor state:D stack:21424 pid:15703 tgid:15703 ppid:1 flags:0x00004006 [ 402.423198][ T30] Call Trace: [ 402.426474][ T30] [ 402.429386][ T30] __schedule+0x186c/0x4be0 [ 402.433951][ T30] ? schedule+0x90/0x320 [ 402.438199][ T30] ? schedule+0x90/0x320 [ 402.442564][ T30] ? __pfx___schedule+0x10/0x10 [ 402.447421][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.452488][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.457258][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 402.463235][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.469571][ T30] ? schedule+0x90/0x320 [ 402.473865][ T30] schedule+0x14b/0x320 [ 402.478020][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.483584][ T30] __mutex_lock+0x817/0x1010 [ 402.488187][ T30] ? __mutex_lock+0x602/0x1010 [ 402.493052][ T30] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 402.499478][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.504966][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.510001][ T30] unregister_netdevice_notifier_net+0x89/0x3a0 [ 402.516288][ T30] ? _raw_spin_unlock+0x28/0x50 [ 402.521144][ T30] ? mntput_no_expire+0x2da/0x850 [ 402.526281][ T30] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 402.533171][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 402.538526][ T30] ? _raw_spin_unlock+0x28/0x50 [ 402.543450][ T30] ? simple_release_fs+0x9c/0xd0 [ 402.548392][ T30] nsim_dev_hwstats_exit+0x81/0x290 [ 402.553617][ T30] ? devl_port_unregister+0x19d/0x290 [ 402.559000][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 402.564764][ T30] nsim_dev_reload_destroy+0x2ad/0x490 [ 402.570230][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 402.575599][ T30] nsim_drv_remove+0x58/0x160 [ 402.580285][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 402.586439][ T30] bus_remove_device+0x34f/0x420 [ 402.591379][ T30] device_del+0x57a/0x9b0 [ 402.595756][ T30] ? __pfx_device_del+0x10/0x10 [ 402.600623][ T30] device_unregister+0x20/0xc0 [ 402.605960][ T30] del_device_store+0x363/0x480 [ 402.610821][ T30] ? __pfx_del_device_store+0x10/0x10 [ 402.616277][ T30] ? __virt_addr_valid+0x45f/0x530 [ 402.621405][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 402.626396][ T30] ? bus_attr_store+0x4f/0xb0 [ 402.631078][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 402.636317][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 402.641751][ T30] vfs_write+0xaeb/0xd30 [ 402.646010][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.651844][ T30] ? __pfx_vfs_write+0x10/0x10 [ 402.656605][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 402.661445][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.666710][ T30] ksys_write+0x18f/0x2b0 [ 402.671039][ T30] ? __pfx_ksys_write+0x10/0x10 [ 402.675924][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.680690][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.685557][ T30] do_syscall_64+0xf3/0x230 [ 402.690079][ T30] ? clear_bhb_loop+0x35/0x90 [ 402.694798][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.700689][ T30] RIP: 0033:0x7f7a9f58b85f [ 402.705522][ T30] RSP: 002b:00007fff42a430f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 402.714076][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7a9f58b85f [ 402.722191][ T30] RDX: 0000000000000001 RSI: 00007fff42a43140 RDI: 0000000000000005 [ 402.730161][ T30] RBP: 00007f7a9f60f4fd R08: 0000000000000000 R09: 00007fff42a42f47 [ 402.738319][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 402.746365][ T30] R13: 00007fff42a43140 R14: 00007f7aa02d4620 R15: 0000000000000003 [ 402.754392][ T30] [ 402.757430][ T30] INFO: task syz.3.3112:15897 blocked for more than 145 seconds. [ 402.765285][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 402.772607][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.781264][ T30] task:syz.3.3112 state:D stack:24400 pid:15897 tgid:15896 ppid:5841 flags:0x00000004 [ 402.791492][ T30] Call Trace: [ 402.794795][ T30] [ 402.797715][ T30] __schedule+0x186c/0x4be0 [ 402.802346][ T30] ? schedule+0x90/0x320 [ 402.806595][ T30] ? schedule+0x90/0x320 [ 402.811102][ T30] ? __pfx___schedule+0x10/0x10 [ 402.816359][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.821459][ T30] ? rcu_is_watching+0x15/0xb0 [ 402.826386][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 402.832321][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.838650][ T30] ? schedule+0x90/0x320 [ 402.842998][ T30] schedule+0x14b/0x320 [ 402.847160][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.852675][ T30] __mutex_lock+0x817/0x1010 [ 402.857275][ T30] ? __mutex_lock+0x602/0x1010 [ 402.862128][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 402.867241][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.872322][ T30] ? bpf_lsm_capable+0x9/0x10 [ 402.877004][ T30] ? security_capable+0x7e/0x2d0 [ 402.882065][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 402.887005][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 402.892293][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.897759][ T30] ? ref_tracker_free+0x643/0x7e0 [ 402.902848][ T30] netlink_rcv_skb+0x1e3/0x430 [ 402.907614][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.913434][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.918727][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.924052][ T30] netlink_unicast+0x7f6/0x990 [ 402.928819][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 402.934190][ T30] ? __virt_addr_valid+0x45f/0x530 [ 402.939305][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 402.944400][ T30] ? __check_object_size+0x47a/0x730 [ 402.949696][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 402.954501][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.959818][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 402.964872][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.970162][ T30] __sock_sendmsg+0x221/0x270 [ 402.975124][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 402.980401][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.986217][ T30] ? __fget_files+0x2a/0x410 [ 402.990832][ T30] ? __fget_files+0x2a/0x410 [ 402.995485][ T30] __sys_sendmsg+0x269/0x350 [ 403.000074][ T30] ? __pfx_futex_wake+0x10/0x10 [ 403.004998][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.010124][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.016533][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.021303][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.026131][ T30] do_syscall_64+0xf3/0x230 [ 403.030634][ T30] ? clear_bhb_loop+0x35/0x90 [ 403.035340][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.041230][ T30] RIP: 0033:0x7f58f6b8cda9 [ 403.045704][ T30] RSP: 002b:00007f58f7a59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.054382][ T30] RAX: ffffffffffffffda RBX: 00007f58f6da5fa0 RCX: 00007f58f6b8cda9 [ 403.062408][ T30] RDX: 000000003000c81c RSI: 0000000020000000 RDI: 0000000000000003 [ 403.070394][ T30] RBP: 00007f58f6c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.078382][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.086409][ T30] R13: 0000000000000000 R14: 00007f58f6da5fa0 R15: 00007ffe0512f4b8 [ 403.094437][ T30] [ 403.097464][ T30] INFO: task syz.1.3114:15901 blocked for more than 145 seconds. [ 403.105233][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 403.112559][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.121299][ T30] task:syz.1.3114 state:D stack:27824 pid:15901 tgid:15900 ppid:5832 flags:0x00000004 [ 403.131543][ T30] Call Trace: [ 403.134872][ T30] [ 403.137794][ T30] __schedule+0x186c/0x4be0 [ 403.142353][ T30] ? schedule+0x90/0x320 [ 403.146602][ T30] ? schedule+0x90/0x320 [ 403.150827][ T30] ? __pfx___schedule+0x10/0x10 [ 403.155691][ T30] ? __pfx_lock_release+0x10/0x10 [ 403.160733][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.165551][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 403.171450][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.177830][ T30] ? schedule+0x90/0x320 [ 403.182099][ T30] schedule+0x14b/0x320 [ 403.186262][ T30] schedule_preempt_disabled+0x13/0x30 [ 403.191736][ T30] __mutex_lock+0x817/0x1010 [ 403.196322][ T30] ? __mutex_lock+0x602/0x1010 [ 403.201064][ T30] ? genl_rcv_msg+0x121/0xec0 [ 403.205794][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 403.210814][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.215655][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.222082][ T30] ? lock_release+0xbf/0xa30 [ 403.226686][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.231433][ T30] ? radix_tree_lookup+0x238/0x290 [ 403.236596][ T30] genl_rcv_msg+0x121/0xec0 [ 403.241110][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 403.246307][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 403.251343][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 403.256569][ T30] ? kasan_save_track+0x51/0x80 [ 403.261421][ T30] ? __sys_sendto+0x363/0x4c0 [ 403.266134][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.270898][ T30] ? lock_acquire+0xe3/0x550 [ 403.275518][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 403.280889][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 403.285955][ T30] ? __pfx___might_resched+0x10/0x10 [ 403.291247][ T30] netlink_rcv_skb+0x1e3/0x430 [ 403.296124][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 403.301155][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.306462][ T30] ? lock_release+0xbf/0xa30 [ 403.311055][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 403.316543][ T30] genl_rcv+0x28/0x40 [ 403.320564][ T30] netlink_unicast+0x7f6/0x990 [ 403.325382][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 403.330664][ T30] ? __virt_addr_valid+0x45f/0x530 [ 403.335791][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 403.340818][ T30] ? __check_object_size+0x47a/0x730 [ 403.346132][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 403.350895][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.356207][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 403.361160][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.366495][ T30] __sock_sendmsg+0x221/0x270 [ 403.371182][ T30] __sys_sendto+0x363/0x4c0 [ 403.375845][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 403.380883][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 403.386143][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.392510][ T30] ? __pfx___up_read+0x10/0x10 [ 403.397272][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.403645][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.408412][ T30] __x64_sys_sendto+0xde/0x100 [ 403.413206][ T30] do_syscall_64+0xf3/0x230 [ 403.417712][ T30] ? clear_bhb_loop+0x35/0x90 [ 403.422472][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.428378][ T30] RIP: 0033:0x7ffb9678ec3c [ 403.432832][ T30] RSP: 002b:00007ffb9766dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 403.441248][ T30] RAX: ffffffffffffffda RBX: 00007ffb9766dfc0 RCX: 00007ffb9678ec3c [ 403.449290][ T30] RDX: 0000000000000020 RSI: 00007ffb9766e010 RDI: 0000000000000004 [ 403.457829][ T30] RBP: 0000000000000000 R08: 00007ffb9766df14 R09: 000000000000000c [ 403.466559][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 403.474586][ T30] R13: 00007ffb9766df68 R14: 00007ffb9766e010 R15: 0000000000000000 [ 403.482593][ T30] [ 403.485606][ T30] INFO: task syz-executor:15908 blocked for more than 146 seconds. [ 403.493542][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 403.501045][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.509738][ T30] task:syz-executor state:D stack:26768 pid:15908 tgid:15908 ppid:1 flags:0x00000004 [ 403.519958][ T30] Call Trace: [ 403.523266][ T30] [ 403.526271][ T30] __schedule+0x186c/0x4be0 [ 403.530780][ T30] ? schedule+0x90/0x320 [ 403.535052][ T30] ? schedule+0x90/0x320 [ 403.539295][ T30] ? __pfx___schedule+0x10/0x10 [ 403.544184][ T30] ? __pfx_lock_release+0x10/0x10 [ 403.549220][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.554019][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 403.559917][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.566278][ T30] ? schedule+0x90/0x320 [ 403.570520][ T30] schedule+0x14b/0x320 [ 403.574695][ T30] schedule_preempt_disabled+0x13/0x30 [ 403.580153][ T30] __mutex_lock+0x817/0x1010 [ 403.584763][ T30] ? __mutex_lock+0x602/0x1010 [ 403.589524][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 403.594663][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 403.599684][ T30] ? __nla_parse+0x40/0x60 [ 403.604130][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 403.609068][ T30] ? lock_release+0xbf/0xa30 [ 403.613798][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 403.618829][ T30] ? stack_trace_save+0x118/0x1d0 [ 403.623865][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 403.629285][ T30] ? bpf_lsm_capable+0x9/0x10 [ 403.633996][ T30] ? security_capable+0x7e/0x2d0 [ 403.638932][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 403.644353][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 403.649301][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 403.654466][ T30] ? lock_release+0xbf/0xa30 [ 403.659067][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.664579][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 403.669600][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.674394][ T30] ? lock_acquire+0xe3/0x550 [ 403.679002][ T30] netlink_rcv_skb+0x1e3/0x430 [ 403.683817][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.689281][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.694677][ T30] ? net_generic+0x1f/0x240 [ 403.699205][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.704465][ T30] netlink_unicast+0x7f6/0x990 [ 403.709234][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 403.714536][ T30] ? __virt_addr_valid+0x45f/0x530 [ 403.719650][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 403.724687][ T30] ? __check_object_size+0x47a/0x730 [ 403.730017][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 403.734823][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.740107][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 403.745064][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.750345][ T30] __sock_sendmsg+0x221/0x270 [ 403.755084][ T30] __sys_sendto+0x363/0x4c0 [ 403.759589][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 403.764651][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 403.769676][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.776127][ T30] ? __pfx___up_read+0x10/0x10 [ 403.780900][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.787285][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.792103][ T30] __x64_sys_sendto+0xde/0x100 [ 403.796871][ T30] do_syscall_64+0xf3/0x230 [ 403.801361][ T30] ? clear_bhb_loop+0x35/0x90 [ 403.806051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.811985][ T30] RIP: 0033:0x7ffb1978ec3c [ 403.816398][ T30] RSP: 002b:00007fff4ab0a5f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 403.824840][ T30] RAX: ffffffffffffffda RBX: 00007ffb1a4d4620 RCX: 00007ffb1978ec3c [ 403.832867][ T30] RDX: 0000000000000028 RSI: 00007ffb1a4d4670 RDI: 0000000000000003 [ 403.840820][ T30] RBP: 0000000000000000 R08: 00007fff4ab0a644 R09: 000000000000000c [ 403.848818][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 403.856968][ T30] R13: 0000000000000000 R14: 00007ffb1a4d4670 R15: 0000000000000000 [ 403.865049][ T30] [ 403.868103][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 403.877153][ T30] INFO: task syz-executor:15911 blocked for more than 146 seconds. [ 403.885063][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 403.892384][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.901056][ T30] task:syz-executor state:D stack:26544 pid:15911 tgid:15911 ppid:1 flags:0x00000004 [ 403.911245][ T30] Call Trace: [ 403.914582][ T30] [ 403.917513][ T30] __schedule+0x186c/0x4be0 [ 403.922075][ T30] ? schedule+0x90/0x320 [ 403.926331][ T30] ? schedule+0x90/0x320 [ 403.930580][ T30] ? __pfx___schedule+0x10/0x10 [ 403.935567][ T30] ? __pfx_lock_release+0x10/0x10 [ 403.940595][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.945448][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 403.951347][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.957702][ T30] ? schedule+0x90/0x320 [ 403.961961][ T30] schedule+0x14b/0x320 [ 403.966118][ T30] schedule_preempt_disabled+0x13/0x30 [ 403.971569][ T30] __mutex_lock+0x817/0x1010 [ 403.976207][ T30] ? __mutex_lock+0x602/0x1010 [ 403.980973][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 403.986124][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 403.991149][ T30] ? __nla_parse+0x40/0x60 [ 403.995581][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 404.000519][ T30] ? lock_release+0xbf/0xa30 [ 404.005131][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 404.010153][ T30] ? stack_trace_save+0x118/0x1d0 [ 404.015419][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.020802][ T30] ? bpf_lsm_capable+0x9/0x10 [ 404.025507][ T30] ? security_capable+0x7e/0x2d0 [ 404.030448][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.035847][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 404.040828][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 404.046011][ T30] ? lock_release+0xbf/0xa30 [ 404.050614][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.056133][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 404.061169][ T30] ? rcu_is_watching+0x15/0xb0 [ 404.065987][ T30] ? lock_acquire+0xe3/0x550 [ 404.070577][ T30] netlink_rcv_skb+0x1e3/0x430 [ 404.075365][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.080838][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.086154][ T30] ? net_generic+0x1f/0x240 [ 404.090658][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.095976][ T30] netlink_unicast+0x7f6/0x990 [ 404.100758][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 404.106108][ T30] ? __virt_addr_valid+0x45f/0x530 [ 404.111225][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 404.116283][ T30] ? __check_object_size+0x47a/0x730 [ 404.121574][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 404.126385][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.131708][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 404.136649][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.142015][ T30] __sock_sendmsg+0x221/0x270 [ 404.146705][ T30] __sys_sendto+0x363/0x4c0 [ 404.151200][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 404.156253][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 404.161282][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.167640][ T30] ? __pfx___up_read+0x10/0x10 [ 404.172690][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.179026][ T30] ? rcu_is_watching+0x15/0xb0 [ 404.183831][ T30] __x64_sys_sendto+0xde/0x100 [ 404.188593][ T30] do_syscall_64+0xf3/0x230 [ 404.193148][ T30] ? clear_bhb_loop+0x35/0x90 [ 404.197828][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.203741][ T30] RIP: 0033:0x7f880098ec3c [ 404.208151][ T30] RSP: 002b:00007ffcb5c674c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.216583][ T30] RAX: ffffffffffffffda RBX: 00007f88016d4620 RCX: 00007f880098ec3c [ 404.224580][ T30] RDX: 0000000000000028 RSI: 00007f88016d4670 RDI: 0000000000000003 [ 404.232600][ T30] RBP: 0000000000000000 R08: 00007ffcb5c67514 R09: 000000000000000c [ 404.240568][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 404.248707][ T30] R13: 0000000000000000 R14: 00007f88016d4670 R15: 0000000000000000 [ 404.256744][ T30] [ 404.259747][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 404.268840][ T30] INFO: lockdep is turned off. [ 404.273643][ T30] NMI backtrace for cpu 0 [ 404.273654][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 404.273665][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 404.273671][ T30] Call Trace: [ 404.273675][ T30] [ 404.273679][ T30] dump_stack_lvl+0x241/0x360 [ 404.273696][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.273710][ T30] ? __pfx__printk+0x10/0x10 [ 404.273722][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 404.273737][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 404.273752][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 404.273763][ T30] ? _printk+0xd5/0x120 [ 404.273774][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 404.273786][ T30] ? __pfx__printk+0x10/0x10 [ 404.273799][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 404.273809][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 404.273822][ T30] watchdog+0xff6/0x1040 [ 404.273834][ T30] ? watchdog+0x1ea/0x1040 [ 404.273846][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.273857][ T30] kthread+0x7a9/0x920 [ 404.273868][ T30] ? __pfx_kthread+0x10/0x10 [ 404.273885][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.273896][ T30] ? __pfx_kthread+0x10/0x10 [ 404.273907][ T30] ? __pfx_kthread+0x10/0x10 [ 404.273919][ T30] ? __pfx_kthread+0x10/0x10 [ 404.273930][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.273942][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 404.273956][ T30] ? __pfx_kthread+0x10/0x10 [ 404.273967][ T30] ret_from_fork+0x4b/0x80 [ 404.273977][ T30] ? __pfx_kthread+0x10/0x10 [ 404.273989][ T30] ret_from_fork_asm+0x1a/0x30 [ 404.274001][ T30] [ 404.274005][ T30] Sending NMI from CPU 0 to CPUs 1: [ 404.440624][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 404.441737][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 404.441751][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 404.441771][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 404.441781][ T30] Call Trace: [ 404.441789][ T30] [ 404.441797][ T30] dump_stack_lvl+0x241/0x360 [ 404.441824][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.441846][ T30] ? __pfx__printk+0x10/0x10 [ 404.441869][ T30] ? vscnprintf+0x5d/0x90 [ 404.441896][ T30] panic+0x349/0x880 [ 404.441917][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 404.441938][ T30] ? __pfx_panic+0x10/0x10 [ 404.441956][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 404.441979][ T30] ? __irq_work_queue_local+0x137/0x410 [ 404.441999][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 404.442018][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 404.442038][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 404.442059][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 404.442081][ T30] watchdog+0x1035/0x1040 [ 404.442101][ T30] ? watchdog+0x1ea/0x1040 [ 404.442122][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.442141][ T30] kthread+0x7a9/0x920 [ 404.442158][ T30] ? __pfx_kthread+0x10/0x10 [ 404.442179][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.442198][ T30] ? __pfx_kthread+0x10/0x10 [ 404.442216][ T30] ? __pfx_kthread+0x10/0x10 [ 404.442237][ T30] ? __pfx_kthread+0x10/0x10 [ 404.442255][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.442276][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 404.442297][ T30] ? __pfx_kthread+0x10/0x10 [ 404.442316][ T30] ret_from_fork+0x4b/0x80 [ 404.442333][ T30] ? __pfx_kthread+0x10/0x10 [ 404.442351][ T30] ret_from_fork_asm+0x1a/0x30 [ 404.442373][ T30] [ 404.622347][ T30] Kernel Offset: disabled [ 404.626651][ T30] Rebooting in 86400 seconds..