last executing test programs: 18m20.336374725s ago: executing program 32 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x133}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 18m19.321253888s ago: executing program 33 (id=1205): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffff", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100005800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 17m36.936585181s ago: executing program 34 (id=1484): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x4, 0x9) 14m40.94239942s ago: executing program 35 (id=2647): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 11m30.758475821s ago: executing program 36 (id=3437): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2}, 0x2fa}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) 11m29.674212824s ago: executing program 37 (id=3444): pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}}, 0x40) 11m29.189451854s ago: executing program 38 (id=3447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}]}, 0x24}}, 0x20040010) 8m21.651047574s ago: executing program 39 (id=4342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)="0002ee1df30a750f4ebafac14d3c638075b5", 0x12}], 0x2) 6m37.075286738s ago: executing program 40 (id=4927): bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) 2m51.370960126s ago: executing program 1 (id=7060): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x800, 0x9d37, {{0x5, 0x4, 0x1, 0x3e, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @local}}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048091}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 2m51.33519867s ago: executing program 0 (id=7063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x40a18}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 2m50.822252378s ago: executing program 1 (id=7066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}], 0x2) 2m50.809848134s ago: executing program 0 (id=7068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x2, 0x1}, {0x5, 0x10}, {0xd, 0x3}}}, 0x2f}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m50.720806062s ago: executing program 4 (id=7070): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r3, 0x1) 2m49.606396679s ago: executing program 4 (id=7077): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x800, 0x9d37, {{0x5, 0x4, 0x1, 0x3e, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @local}}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048091}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 2m49.04483475s ago: executing program 3 (id=7078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m49.037532133s ago: executing program 6 (id=7079): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) 2m49.026878109s ago: executing program 0 (id=7080): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2m49.026576947s ago: executing program 4 (id=7081): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002160) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m48.673401652s ago: executing program 0 (id=7082): r0 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 2m48.573753864s ago: executing program 4 (id=7083): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x4c}}, 0x0) 2m48.566480127s ago: executing program 1 (id=7084): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m48.509273653s ago: executing program 3 (id=7085): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m48.508580704s ago: executing program 6 (id=7086): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000600)="b26c199dabf24d2f20b81934b2b658fab977c8a2506a1b019d5edaf7f137fe99ba06f30b49a38799567fcb5c50f9617a8dc77993c797edd39dab6f06e5885bacf1285c4869917e566ce250d71f25", 0x4e, 0x4003b00, 0x0, 0x0) 2m44.145444052s ago: executing program 3 (id=7087): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.144642149s ago: executing program 4 (id=7088): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0", 0xd8}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3", 0xa5}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cb", 0x1}], 0x1}}], 0x2, 0x14042082) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m44.124811163s ago: executing program 0 (id=7089): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000013c0)=""/19, 0x13}, {&(0x7f0000001700)=""/7, 0x7}, {&(0x7f0000001740)=""/241, 0xf1}], 0x3}, 0x100) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x22, 0x280000, 0x8000, 0xb6}}}}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x7, 0x0, 0x3, "42b872"}}) 2m44.080139603s ago: executing program 6 (id=7090): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 2m44.079920966s ago: executing program 1 (id=7091): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m43.741297568s ago: executing program 3 (id=7092): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 2m43.739704132s ago: executing program 6 (id=7093): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000000200000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) 2m43.598527329s ago: executing program 4 (id=7094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}], 0x2) 2m43.488060839s ago: executing program 3 (id=7095): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa0500"/265], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 2m43.420521699s ago: executing program 6 (id=7096): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) 2m42.862938532s ago: executing program 1 (id=7097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff00}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m42.648585616s ago: executing program 1 (id=7098): r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m42.507092011s ago: executing program 0 (id=7099): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x4c}}, 0x0) 2m42.2799765s ago: executing program 3 (id=7100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) 2m42.279569214s ago: executing program 6 (id=7101): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 2m14.066140118s ago: executing program 41 (id=7100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) 2m8.636412524s ago: executing program 42 (id=7098): r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m8.444978296s ago: executing program 43 (id=7101): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 2m8.211878421s ago: executing program 44 (id=7099): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x4c}}, 0x0) 2m7.962077911s ago: executing program 45 (id=7094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}], 0x2) 52.643988737s ago: executing program 5 (id=7409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 52.353615728s ago: executing program 5 (id=7412): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 52.069269751s ago: executing program 5 (id=7413): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x48080) 51.795359129s ago: executing program 5 (id=7417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet(0x2, 0x1, 0x100) sendmmsg$nfc_llcp(r0, &(0x7f0000007100)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x24000800) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) 51.470156661s ago: executing program 5 (id=7421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000080000000200", @ANYBLOB], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 49.105386732s ago: executing program 5 (id=7425): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000002380)=[@assoc={0x18, 0x117, 0x4, 0xfffff9ff}, @iv={0xc8, 0x117, 0x2, 0xaf, "59c885933c568ac2b5489390c2ce107ccdf6426c8255458f061cd832c1051322fa48211e255783fdbfe67c234391fe4ae89eef9b44e54911da9fc0972c157eff731acff8c695888e153c52ddd481b6e1453a31fa3c77fd457a12771e8ca3f98cd302302b6b446c4a2f93f689f61011ba76f7c3880205441fc56d06c14d4bf89e4d1058e246df02a175bf4c0e712bbe0045a79a0cb8f32ca54f303a8bcf8af998c3429a4362cc595e297c3ac92ebf46"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xa8, 0x117, 0x2, 0x90, "09bf75d86234e4ddd7f0c185ef690b1627647d42446f518af13fb0883a7944359a8b9ec6a6193a53ed364b71db3286af54ec67ab91c79dfd1f8b358d0ae0e610082f5545eb73a27c9377f5c1dc751fbf954e7ee3d7e75d46080d5006641a1105185d0bb0ea3f6ab8f273217678fa03db80de7dc26ca5824f2bac9c7ad6a1952bb7233d55b170ce3fd37cffff42a6cd76"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x108, 0x117, 0x2, 0xef, "a47265708d43fa51ddd53abd32ed2eb22e39a140341703a5376f90002cc001c1327ae116b9c557aaf60f9c1715a56d9899dc80b0f828143d20e198b6c90106b604d0fb084f0c2af8cb64f544f5e9868da6ef80719fc9cb3a837b627c427c249c8ed89fae4d28d8b7ce85fc015e1049fc4ad73bd05fece3d8a999c7fc9287217def5e53780c6305a579725e0a3ce3608e2298f18da49168a56386844b8de0ef1a498e76266b847336a9bde664e0ae21609c5c8a40eebc7d4b0e35056181586be161f25acf484edc3c07bb2158ed62fb8901482cfc451bfffbf1bce8d457841ab6d315b653368d89bfb4ecb803313b46"}, @assoc={0x18, 0x117, 0x4, 0xbe86}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x69, "57a381a66f8bd2f46f46f29361d22bf3c82c174b5919030a3183f1fed16337f4d187e0586bcd2ec1d2d293f9627f48fad7b3f8377064d3799a8ef0360ba4c8d0745957031b16c8967afbd256a478339b26762fcf10f6eac6a4632873f799a46f6c7f37ced7b6738da5"}], 0x3a0, 0x8800}], 0x1, 0x20000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20082cbd7000fedbdf25700000000c0099000010ce006f2a5ee9"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000880)=""/182, 0xb6}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000580), 0x6e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x10}}], 0x10}}], 0x3, 0x0, 0x0) 33.913389932s ago: executing program 46 (id=7425): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000002380)=[@assoc={0x18, 0x117, 0x4, 0xfffff9ff}, @iv={0xc8, 0x117, 0x2, 0xaf, "59c885933c568ac2b5489390c2ce107ccdf6426c8255458f061cd832c1051322fa48211e255783fdbfe67c234391fe4ae89eef9b44e54911da9fc0972c157eff731acff8c695888e153c52ddd481b6e1453a31fa3c77fd457a12771e8ca3f98cd302302b6b446c4a2f93f689f61011ba76f7c3880205441fc56d06c14d4bf89e4d1058e246df02a175bf4c0e712bbe0045a79a0cb8f32ca54f303a8bcf8af998c3429a4362cc595e297c3ac92ebf46"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xa8, 0x117, 0x2, 0x90, "09bf75d86234e4ddd7f0c185ef690b1627647d42446f518af13fb0883a7944359a8b9ec6a6193a53ed364b71db3286af54ec67ab91c79dfd1f8b358d0ae0e610082f5545eb73a27c9377f5c1dc751fbf954e7ee3d7e75d46080d5006641a1105185d0bb0ea3f6ab8f273217678fa03db80de7dc26ca5824f2bac9c7ad6a1952bb7233d55b170ce3fd37cffff42a6cd76"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x108, 0x117, 0x2, 0xef, "a47265708d43fa51ddd53abd32ed2eb22e39a140341703a5376f90002cc001c1327ae116b9c557aaf60f9c1715a56d9899dc80b0f828143d20e198b6c90106b604d0fb084f0c2af8cb64f544f5e9868da6ef80719fc9cb3a837b627c427c249c8ed89fae4d28d8b7ce85fc015e1049fc4ad73bd05fece3d8a999c7fc9287217def5e53780c6305a579725e0a3ce3608e2298f18da49168a56386844b8de0ef1a498e76266b847336a9bde664e0ae21609c5c8a40eebc7d4b0e35056181586be161f25acf484edc3c07bb2158ed62fb8901482cfc451bfffbf1bce8d457841ab6d315b653368d89bfb4ecb803313b46"}, @assoc={0x18, 0x117, 0x4, 0xbe86}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x69, "57a381a66f8bd2f46f46f29361d22bf3c82c174b5919030a3183f1fed16337f4d187e0586bcd2ec1d2d293f9627f48fad7b3f8377064d3799a8ef0360ba4c8d0745957031b16c8967afbd256a478339b26762fcf10f6eac6a4632873f799a46f6c7f37ced7b6738da5"}], 0x3a0, 0x8800}], 0x1, 0x20000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20082cbd7000fedbdf25700000000c0099000010ce006f2a5ee9"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000880)=""/182, 0xb6}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000580), 0x6e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x10}}], 0x10}}], 0x3, 0x0, 0x0) 5.803239748s ago: executing program 7 (id=7603): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5.441873293s ago: executing program 7 (id=7604): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e4", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) 5.164251503s ago: executing program 7 (id=7605): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in6=@local, @in6=@private2, 0x3c, 0x2, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.819524032s ago: executing program 7 (id=7607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x0, 0xb5a000, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.088090314s ago: executing program 9 (id=7612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.922574383s ago: executing program 2 (id=7615): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x2a, 0x5, 0x4, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="181100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800004dfbffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200", @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000068000100020001000000000034000200010000006500000002000000060000"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0xf) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd700500000000000000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) 2.853613377s ago: executing program 9 (id=7616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff4, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x240008c4) 2.670062579s ago: executing program 8 (id=7617): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.129292508s ago: executing program 7 (id=7618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0xbff, 0x4, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(0x0, r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) 1.855652096s ago: executing program 2 (id=7619): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1.697000797s ago: executing program 2 (id=7620): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe) 1.553318121s ago: executing program 2 (id=7621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.480694675s ago: executing program 8 (id=7622): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000100)={0xa, 0xffff, 0x0, @local, 0x3}, 0x1c) 1.367814998s ago: executing program 9 (id=7623): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040)=0x100, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 1.244341769s ago: executing program 8 (id=7624): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x400, 0x318, 0x3e0, 0x318, 0x0, 0x230, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x27}, 0xffffff00, 0xff, 'team0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x73, 0x3, 0xa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x4, 0x6, 0x4, 0x4], 0x4, 0x7}, {0x2, [0x6, 0x4, 0x0, 0x4, 0x3, 0x2], 0x1, 0x1}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff, 'dvmrp1\x00', 'wlan1\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x8, 0x1, [0x11, 0x3d, 0x24, 0x9, 0x1a, 0x26, 0x34, 0x3a, 0xd, 0x20, 0x35, 0x21, 0x28, 0x18, 0x2d, 0x2f], 0x2, 0x5, 0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0xda, 0x2}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'nicvf0\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0xb9fabc69d410e86}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @local, 0xffffff00, 0xff, 'gretap0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x1a}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 1.233712424s ago: executing program 2 (id=7625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 953.933644ms ago: executing program 8 (id=7626): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad88714", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) 949.333053ms ago: executing program 9 (id=7627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x48000) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 925.096723ms ago: executing program 7 (id=7628): ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14, 0x0) connect(r1, &(0x7f00000004c0)=@in={0x2, 0x4e20, @loopback}, 0x10) 554.233291ms ago: executing program 8 (id=7629): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f000000cdc0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="8cd0", 0x2}], 0x1}}], 0x1, 0x8000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) 340.568058ms ago: executing program 9 (id=7630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, 0x0}], 0x1, 0x48844) poll(&(0x7f0000000180)=[{r1, 0x1010}], 0x1, 0x9) 12.913527ms ago: executing program 2 (id=7631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006000000180000", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.527172ms ago: executing program 8 (id=7632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff4, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x240008c4) 0s ago: executing program 9 (id=7633): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf2502000000", @ANYRES32=r7], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) kernel console output (not intermixed with test programs): 0 [ 814.978114][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.285816][T18427] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4301'. [ 815.353752][T18428] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4301'. [ 817.175526][T18485] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4323'. [ 817.198398][T18485] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4323'. [ 819.673802][T18529] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4340'. [ 819.674495][T18529] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4340'. [ 823.701383][T18538] ip6gre1: left allmulticast mode [ 834.020634][T18575] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4357'. [ 834.890607][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.933024][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.949746][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.959530][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.974989][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 836.077102][T18619] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4369'. [ 837.158011][ T5610] Bluetooth: hci2: command tx timeout [ 838.649605][T18689] tipc: Enabling of bearer rejected, failed to enable media [ 839.238004][ T5610] Bluetooth: hci2: command tx timeout [ 841.175158][T18759] tipc: Enabling of bearer rejected, failed to enable media [ 841.319359][ T5610] Bluetooth: hci2: command tx timeout [ 841.707084][T18786] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4421'. [ 842.027529][T18787] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4421'. [ 842.458298][ T1042] bridge_slave_1: left allmulticast mode [ 842.458322][ T1042] bridge_slave_1: left promiscuous mode [ 842.458479][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.585934][ T1042] bridge_slave_0: left allmulticast mode [ 842.585956][ T1042] bridge_slave_0: left promiscuous mode [ 842.586106][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.397881][ T5610] Bluetooth: hci2: command tx timeout [ 843.729650][T18828] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4434'. [ 844.058256][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.063911][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.064959][ T1042] bond0 (unregistering): Released all slaves [ 844.105929][ T1042] bond1 (unregistering): Released all slaves [ 844.156712][ T1042] bond2 (unregistering): Released all slaves [ 844.238597][T18829] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4434'. [ 845.062989][T18593] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.063068][T18593] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.063191][T18593] bridge_slave_0: entered allmulticast mode [ 845.099857][T18593] bridge_slave_0: entered promiscuous mode [ 845.119289][T18593] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.120063][T18593] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.120180][T18593] bridge_slave_1: entered allmulticast mode [ 845.168058][T18593] bridge_slave_1: entered promiscuous mode [ 845.418575][T18870] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4446'. [ 845.555804][T18873] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4446'. [ 845.650109][T18593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.683828][T18593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.121107][T18593] team0: Port device team_slave_0 added [ 846.154062][T18593] team0: Port device team_slave_1 added [ 846.563097][ T1042] hsr_slave_0: left promiscuous mode [ 846.575688][ T1042] hsr_slave_1: left promiscuous mode [ 846.576266][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.636366][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.580143][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 847.643446][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 848.134410][T18924] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4458'. [ 848.189308][T18593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.189320][T18593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.189339][T18593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.195018][T18926] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4458'. [ 848.239865][T18593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.239875][T18593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.239894][T18593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.665066][T18938] syz_tun: entered allmulticast mode [ 848.745202][T18593] hsr_slave_0: entered promiscuous mode [ 848.746036][T18593] hsr_slave_1: entered promiscuous mode [ 848.792188][T18593] debugfs: 'hsr0' already exists in 'hsr' [ 848.792205][T18593] Cannot create hsr debugfs directory [ 848.951137][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4464'. [ 849.145599][T18930] syz_tun: left allmulticast mode [ 849.440730][T18957] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4469'. [ 849.461429][T18957] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4469'. [ 852.647900][ T5610] Bluetooth: hci1: link tx timeout [ 852.648105][ T5610] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 854.679144][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 854.762127][T19051] bridge_slave_1: left allmulticast mode [ 854.762155][T19051] bridge_slave_1: left promiscuous mode [ 854.762324][T19051] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.802450][T19051] bridge_slave_0: left allmulticast mode [ 854.802472][T19051] bridge_slave_0: left promiscuous mode [ 854.803072][T19051] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.844673][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 856.764519][T18593] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 856.793294][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4503'. [ 856.812027][T18593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.828118][T18593] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 856.861875][T18593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.887938][T18593] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 857.017545][T18593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 857.223042][T18593] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 857.284629][T18593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.965505][T18593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.052432][T18593] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.097724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.106638][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.147198][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4512'. [ 858.249031][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.249131][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.394410][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 860.583163][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4522'. [ 861.681673][T19215] bridge_slave_0: left allmulticast mode [ 861.681695][T19215] bridge_slave_0: left promiscuous mode [ 861.686081][T19215] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.794210][T19215] bridge_slave_1: left allmulticast mode [ 861.794230][T19215] bridge_slave_1: left promiscuous mode [ 861.810097][T19215] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.886036][T19215] bond0: (slave bond_slave_0): Releasing backup interface [ 861.905546][T19215] bond0: (slave bond_slave_1): Releasing backup interface [ 861.928085][T19215] team0: Port device team_slave_0 removed [ 861.947456][T19215] team0: Port device team_slave_1 removed [ 861.953671][T19215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.039889][T19215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.047007][T19215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 862.108574][T19217] team0: Port device xfrm0 added [ 862.241836][T18593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.313803][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 863.913988][T18593] veth0_vlan: entered promiscuous mode [ 863.962356][T18593] veth1_vlan: entered promiscuous mode [ 864.341495][T18593] veth0_macvtap: entered promiscuous mode [ 864.396531][T18593] veth1_macvtap: entered promiscuous mode [ 864.534886][T18593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.593796][T18593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.869997][ T3308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.871695][ T3378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.871728][ T3378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.913796][ T3378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.807492][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.807508][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.371672][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.371690][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.099079][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 868.318357][T19325] syzkaller0: entered promiscuous mode [ 868.318381][T19325] syzkaller0: entered allmulticast mode [ 869.021238][T19342] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4566'. [ 875.110654][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.110706][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.034997][T19464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4597'. [ 882.731659][T19509] bridge_slave_0: left allmulticast mode [ 882.731686][T19509] bridge_slave_0: left promiscuous mode [ 882.731902][T19509] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.833635][T19509] bridge_slave_1: left allmulticast mode [ 882.833673][T19509] bridge_slave_1: left promiscuous mode [ 882.856147][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.949345][T19509] bond0: (slave bond_slave_0): Releasing backup interface [ 882.974984][T19509] bond0: (slave bond_slave_1): Releasing backup interface [ 883.013010][T19509] team0: Port device team_slave_0 removed [ 883.046512][T19509] team0: Port device team_slave_1 removed [ 883.046866][T19509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.075661][T19509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.101720][T19509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 883.105632][T19515] tipc: Started in network mode [ 883.105653][T19515] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 883.105772][T19515] tipc: Enabled bearer , priority 0 [ 884.253806][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'. [ 884.311561][ T197] tipc: Node number set to 11578026 [ 885.953346][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4639'. [ 888.959046][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4665'. [ 889.035819][T19678] macvtap1: entered promiscuous mode [ 889.035836][T19678] erspan0: entered promiscuous mode [ 889.037197][T19678] macvtap1: entered allmulticast mode [ 889.037212][T19678] erspan0: entered allmulticast mode [ 889.200575][T19681] erspan0: left allmulticast mode [ 889.200597][T19681] erspan0: left promiscuous mode [ 889.206684][T19681] macvtap1: left promiscuous mode [ 889.206701][T19681] macvtap1: left allmulticast mode [ 897.992123][T19740] team0: Device xfrm0 is of different type [ 898.033272][T19747] tipc: Started in network mode [ 898.033293][T19747] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 898.033397][T19747] tipc: Enabled bearer , priority 0 [ 898.348403][ T5604] Bluetooth: hci2: link tx timeout [ 898.354582][ T5604] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 899.222433][ T10] tipc: Node number set to 11578026 [ 899.661323][T19792] tipc: Started in network mode [ 899.661344][T19792] tipc: Node identity 36f2db8b324c, cluster identity 4711 [ 899.661481][T19792] tipc: Enabled bearer , priority 0 [ 899.878313][ T5610] Bluetooth: hci2: link tx timeout [ 899.878326][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 900.440576][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 900.860229][ T10] tipc: Node number set to 79616907 [ 901.491586][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4719'. [ 903.028758][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4737'. [ 903.154939][T19889] macvtap1: entered promiscuous mode [ 903.154954][T19889] erspan0: entered promiscuous mode [ 903.185669][T19889] macvtap1: entered allmulticast mode [ 903.185692][T19889] erspan0: entered allmulticast mode [ 904.270025][T19926] netlink: 'syz.4.4750': attribute type 5 has an invalid length. [ 904.270040][T19926] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4750'. [ 904.525429][T19929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4751'. [ 904.578565][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4751'. [ 904.748428][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4751'. [ 904.956862][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4757'. [ 904.990717][T19941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.851465][T19995] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4775'. [ 907.292617][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4779'. [ 908.086852][T20025] bridge_slave_0: left allmulticast mode [ 908.086876][T20025] bridge_slave_0: left promiscuous mode [ 908.087035][T20025] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.155802][T20030] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4788'. [ 908.300511][T20035] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4789'. [ 908.301128][T20025] bridge_slave_1: left allmulticast mode [ 908.301147][T20025] bridge_slave_1: left promiscuous mode [ 908.301282][T20025] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.426175][T20025] bond0: (slave bond_slave_0): Releasing backup interface [ 908.499650][T20025] bond0: (slave bond_slave_1): Releasing backup interface [ 908.601856][T20025] team0: Port device team_slave_0 removed [ 908.647942][T20025] team0: Port device team_slave_1 removed [ 908.651996][T20025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.652016][T20025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.703473][T20025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.703491][T20025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.725014][T20025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 908.821139][T20028] team0: Port device xfrm0 added [ 909.966101][T20072] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4802'. [ 909.966900][T20073] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4801'. [ 911.494753][T20113] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4815'. [ 911.757080][T20120] netlink: 'syz.3.4817': attribute type 1 has an invalid length. [ 913.689121][ T197] IPVS: starting estimator thread 0... [ 913.778152][T20173] IPVS: using max 13 ests per chain, 31200 per kthread [ 915.415113][ T5921] IPVS: starting estimator thread 0... [ 915.517871][T20209] IPVS: using max 13 ests per chain, 31200 per kthread [ 919.345683][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4894'. [ 919.345705][T20314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4894'. [ 920.199837][T20320] tipc: Resetting bearer [ 920.980463][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 920.980485][T20345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4906'. [ 921.637908][ T3106] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.638157][ T66] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.638183][ T66] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.638227][ T66] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.594985][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4918'. [ 922.595007][T20377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4918'. [ 924.040742][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4934'. [ 924.040766][T20419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4934'. [ 924.082780][T20418] team0: Device xfrm0 is of different type [ 924.114912][T20420] tipc: Started in network mode [ 924.114931][T20420] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 924.115126][T20420] tipc: Enabled bearer , priority 0 [ 928.161612][ T197] tipc: Node number set to 11578026 [ 928.745623][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4947'. [ 935.297560][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4970'. [ 936.520916][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.520960][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.129131][T20614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.146025][T20614] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.188909][T20614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.035830][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 939.078140][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 939.104541][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 939.132300][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 939.132877][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 939.525973][T20614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.550324][T20614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.609196][T20614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.609212][T20614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.669204][T20614] veth1_vlan: left promiscuous mode [ 939.690126][T20614] veth0_vlan: left promiscuous mode [ 939.705342][T20614] veth0_vlan: entered promiscuous mode [ 939.732166][T20614] veth1_vlan: entered promiscuous mode [ 939.780365][T20614] veth1_macvtap: left promiscuous mode [ 939.796823][T20614] veth0_macvtap: left promiscuous mode [ 939.806936][T20614] veth0_macvtap: entered promiscuous mode [ 939.826537][T20614] veth1_macvtap: entered promiscuous mode [ 939.902826][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.904098][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.926642][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.944246][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.031324][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.031451][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.035889][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.035970][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.813425][ T3378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.814481][ T3378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.814509][ T3378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.814534][ T3378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.183583][T20675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5010'. [ 941.183671][T20675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5010'. [ 941.183687][T20675] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5010'. [ 941.237920][ T5604] Bluetooth: hci3: command tx timeout [ 941.365856][T20677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5010'. [ 943.318571][ T5604] Bluetooth: hci3: command tx timeout [ 944.995170][T20764] syzkaller0: entered promiscuous mode [ 944.995190][T20764] syzkaller0: entered allmulticast mode [ 945.405127][ T5604] Bluetooth: hci3: command tx timeout [ 945.596857][T20640] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.599787][T20640] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.602527][T20640] bridge_slave_0: entered allmulticast mode [ 945.631880][T20640] bridge_slave_0: entered promiscuous mode [ 945.686370][T20640] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.686478][T20640] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.686626][T20640] bridge_slave_1: entered allmulticast mode [ 945.728525][T20640] bridge_slave_1: entered promiscuous mode [ 945.956280][T20640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.987290][T20640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.201716][T20640] team0: Port device team_slave_0 added [ 946.228280][T20640] team0: Port device team_slave_1 added [ 946.504984][T20640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.504996][T20640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.544413][T20640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.602148][T20640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.602159][T20640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.602178][T20640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.335591][T20640] hsr_slave_0: entered promiscuous mode [ 947.355762][T20640] hsr_slave_1: entered promiscuous mode [ 947.356365][T20640] debugfs: 'hsr0' already exists in 'hsr' [ 947.356381][T20640] Cannot create hsr debugfs directory [ 947.478142][ T5604] Bluetooth: hci3: command tx timeout [ 947.533379][T20838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.350395][T20865] batadv_slave_0: Caught tx_queue_len zero misconfig [ 948.892229][T20882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5074'. [ 949.123900][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5076'. [ 949.123922][T20887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5076'. [ 949.877271][T20887] macvlan2: entered allmulticast mode [ 949.877286][T20887] gretap0: entered allmulticast mode [ 950.916285][T20640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 950.950933][T20640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 950.953126][T20640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.039942][T20640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.048506][T20640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.099361][T20640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.103681][T20640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 951.151110][T20640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.157140][T20943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5102'. [ 951.489858][T20955] ip6_vti0: Caught tx_queue_len zero misconfig [ 951.813066][T20640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.894256][T20640] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.941771][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.945630][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.076408][T20966] ip6erspan0: entered allmulticast mode [ 952.110558][T20969] ip6erspan0: entered allmulticast mode [ 952.131318][ T3106] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.134218][ T3106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.374932][T21002] team0: Device xfrm0 is of different type [ 953.388030][T21004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5123'. [ 953.419611][T21005] tipc: Started in network mode [ 953.419630][T21005] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 953.419776][T21005] tipc: Enabled bearer , priority 0 [ 954.419920][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5133'. [ 954.538019][ T197] tipc: Node number set to 11578026 [ 954.636051][T20640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.762840][T21042] tipc: Enabling of bearer rejected, already enabled [ 955.091856][T20640] veth0_vlan: entered promiscuous mode [ 955.165040][T20640] veth1_vlan: entered promiscuous mode [ 955.305757][T21051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5138'. [ 955.355700][T20640] veth0_macvtap: entered promiscuous mode [ 955.472083][T20640] veth1_macvtap: entered promiscuous mode [ 955.593564][T20640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.642172][T20640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.809390][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5145'. [ 955.901240][T21066] team0: Port device xfrm0 added [ 955.933545][T21065] tipc: Enabling of bearer rejected, already enabled [ 956.038764][T19186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.041140][ T1508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.041422][ T1508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.041662][ T1508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.114237][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.114251][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.711539][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.711553][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.143524][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5192'. [ 962.174388][T21226] block nbd0: not configured, cannot reconfigure [ 964.012275][T21281] openvswitch: netlink: IP tunnel dst address not specified [ 966.875447][T21320] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5250'. [ 967.368074][T21336] syzkaller1: entered promiscuous mode [ 967.368090][T21336] syzkaller1: entered allmulticast mode [ 967.932643][T21355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5264'. [ 969.361364][T21380] syzkaller1: entered promiscuous mode [ 969.361381][T21380] syzkaller1: entered allmulticast mode [ 969.879685][T21370] syz.0.5272 (21370) used greatest stack depth: 16448 bytes left [ 970.774253][T21430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5297'. [ 972.611049][T21499] block nbd0: not configured, cannot reconfigure [ 973.305983][T21521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5339'. [ 974.253654][T21554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5354'. [ 975.895624][T21606] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5378'. [ 977.003447][T21633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5392'. [ 977.222079][T21639] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5395'. [ 978.012439][T21662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5406'. [ 978.149384][T21667] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5408'. [ 979.082671][T21694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5420'. [ 980.524499][T21722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5432'. [ 980.833398][T21733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5437'. [ 981.365353][T21742] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5440'. [ 982.000543][T21754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5445'. [ 982.103743][T21756] IPv6: NLM_F_CREATE should be specified when creating new route [ 982.155800][T21756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 982.155810][T21756] IPv6: NLM_F_CREATE should be set when creating new route [ 982.328092][T21759] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 982.328113][T21759] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 982.399146][T21765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5449'. [ 982.656296][T21771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5452'. [ 983.123291][T21785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5458'. [ 984.560456][T21821] IPv6: NLM_F_CREATE should be specified when creating new route [ 984.560567][T21821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 984.560575][T21821] IPv6: NLM_F_CREATE should be set when creating new route [ 985.843000][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5493'. [ 985.904862][T21859] tipc: Enabled bearer , priority 0 [ 985.939854][T21858] tipc: Disabling bearer [ 986.005327][ T5604] Bluetooth: hci1: link tx timeout [ 986.005340][ T5604] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 987.202898][T21887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5503'. [ 988.046298][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 990.820686][T21980] syzkaller0: entered promiscuous mode [ 990.820702][T21980] syzkaller0: entered allmulticast mode [ 990.853307][T21974] tipc: Started in network mode [ 990.853326][T21974] tipc: Node identity c29d6386d8ed, cluster identity 4711 [ 990.957884][T21974] tipc: Enabled bearer , priority 0 [ 990.985411][T21973] tipc: Resetting bearer [ 991.230188][T21973] tipc: Disabling bearer [ 991.803717][T22006] netlink: 592 bytes leftover after parsing attributes in process `syz.4.5548'. [ 992.272597][T22017] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 992.302935][ T197] IPVS: starting estimator thread 0... [ 992.397956][T22021] IPVS: using max 13 ests per chain, 31200 per kthread [ 995.829919][T22114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5585'. [ 996.081374][T22121] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5588'. [ 997.015652][T22150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5598'. [ 997.970260][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.970305][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.736256][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5627'. [ 1001.454877][T22279] syzkaller1: entered promiscuous mode [ 1001.454903][T22279] syzkaller1: entered allmulticast mode [ 1002.366971][T22306] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1002.367207][T22306] team0: Device ipvlan2 failed to register rx_handler [ 1003.370989][T22339] syzkaller1: entered promiscuous mode [ 1003.371006][T22339] syzkaller1: entered allmulticast mode [ 1005.466849][T22388] syzkaller1: entered promiscuous mode [ 1005.466869][T22388] syzkaller1: entered allmulticast mode [ 1005.926861][T22400] syzkaller0: entered promiscuous mode [ 1005.926879][T22400] syzkaller0: entered allmulticast mode [ 1006.964992][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1006.965016][T22426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1007.315287][T22431] syzkaller1: entered promiscuous mode [ 1007.315310][T22431] syzkaller1: entered allmulticast mode [ 1007.340582][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1007.750943][T22450] ip6erspan0: entered allmulticast mode [ 1008.017551][T22460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5704'. [ 1008.076568][T22460] team0: Device xfrm0 is of different type [ 1008.157373][T22463] tipc: Enabled bearer , priority 0 [ 1008.356556][T22469] block nbd0: not configured, cannot reconfigure [ 1008.657640][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1009.271822][ T197] tipc: Node number set to 443573126 [ 1009.460389][T22500] block nbd0: not configured, cannot reconfigure [ 1010.474466][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1010.571049][T22532] macvtap1: entered promiscuous mode [ 1010.571064][T22532] erspan0: entered promiscuous mode [ 1010.571948][T22532] macvtap1: entered allmulticast mode [ 1010.573381][T22532] erspan0: entered allmulticast mode [ 1011.217450][T22560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1011.500343][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1011.647514][T22572] erspan0: entered promiscuous mode [ 1011.654705][T22572] macvtap1: entered promiscuous mode [ 1011.654830][T22572] macvtap1: entered allmulticast mode [ 1011.654840][T22572] erspan0: entered allmulticast mode [ 1012.236642][T22598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1012.377452][T22600] syz_tun: entered allmulticast mode [ 1012.817637][T22599] syz_tun: left allmulticast mode [ 1013.708919][T22632] bridge_slave_0: left allmulticast mode [ 1013.708941][T22632] bridge_slave_0: left promiscuous mode [ 1013.710323][T22632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.763497][T22632] bridge_slave_1: left allmulticast mode [ 1013.763517][T22632] bridge_slave_1: left promiscuous mode [ 1013.763708][T22632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.833797][T22632] bond0: (slave bond_slave_0): Releasing backup interface [ 1013.892575][T22632] bond0: (slave bond_slave_1): Releasing backup interface [ 1013.992872][T22632] team0: Port device team_slave_0 removed [ 1014.027239][T22632] team0: Port device team_slave_1 removed [ 1014.035661][T22632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.035679][T22632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.061692][T22632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.061710][T22632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.064848][T22632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1014.173061][ T1042] tipc: Resetting bearer [ 1014.434456][T22571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.733671][T22657] block nbd0: not configured, cannot reconfigure [ 1015.815328][T22695] lo: Caught tx_queue_len zero misconfig [ 1015.815347][T22695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1016.286428][T22707] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 1017.349150][T22744] netlink: 'syz.1.5831': attribute type 16 has an invalid length. [ 1017.349165][T22744] netlink: 'syz.1.5831': attribute type 17 has an invalid length. [ 1017.569224][T22748] syzkaller0: entered promiscuous mode [ 1017.569242][T22748] syzkaller0: entered allmulticast mode [ 1017.593774][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1017.766566][T22757] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5837'. [ 1019.131958][ T36] audit: type=1800 audit(1785503796.573:261): pid=22796 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5855" name="idVendor" dev="configfs" ino=72130 res=0 errno=0 [ 1020.316253][T22821] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5865'. [ 1020.330755][T22821] syzkaller1: entered promiscuous mode [ 1020.330771][T22821] syzkaller1: entered allmulticast mode [ 1021.061258][ T36] audit: type=1800 audit(1785503798.473:262): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5873" name="idVendor" dev="configfs" ino=72313 res=0 errno=0 [ 1021.106377][ T36] audit: type=1800 audit(1785503798.503:263): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5873" name="serialnumber" dev="configfs" ino=72317 res=0 errno=0 [ 1021.195278][ T36] audit: type=1800 audit(1785503798.623:264): pid=22845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5873" name="manufacturer" dev="configfs" ino=72322 res=0 errno=0 [ 1021.234346][T22843] syzkaller0: entered promiscuous mode [ 1021.234362][T22843] syzkaller0: entered allmulticast mode [ 1021.274625][ T36] audit: type=1800 audit(1785503798.703:265): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5873" name="product" dev="configfs" ino=72326 res=0 errno=0 [ 1021.349777][ T36] audit: type=1800 audit(1785503798.783:266): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5873" name="configuration" dev="configfs" ino=72330 res=0 errno=0 [ 1021.349813][ T36] audit: type=1800 audit(1785503798.783:267): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5873" name="UDC" dev="configfs" ino=72331 res=0 errno=0 [ 1022.400815][ T36] audit: type=1800 audit(1785503799.833:268): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5887" name="idVendor" dev="configfs" ino=72438 res=0 errno=0 [ 1022.428983][ T36] audit: type=1800 audit(1785503799.843:269): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5887" name="serialnumber" dev="configfs" ino=72439 res=0 errno=0 [ 1022.436091][ T36] audit: type=1800 audit(1785503799.873:270): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5887" name="manufacturer" dev="configfs" ino=72440 res=0 errno=0 [ 1022.586487][T22876] syzkaller0: entered promiscuous mode [ 1022.586505][T22876] syzkaller0: entered allmulticast mode [ 1022.634641][T22876] tipc: Enabled bearer , priority 0 [ 1022.650787][T22875] tipc: Resetting bearer [ 1022.890509][T22875] tipc: Disabling bearer [ 1023.250500][T22889] IPVS: Error connecting to the multicast addr [ 1024.001335][T22912] syzkaller0: entered promiscuous mode [ 1024.001353][T22912] syzkaller0: entered allmulticast mode [ 1024.208042][T22918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5903'. [ 1024.231885][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5903'. [ 1024.794405][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 1024.794418][ T36] audit: type=1800 audit(1785503802.233:280): pid=22938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5914" name="idVendor" dev="configfs" ino=72786 res=0 errno=0 [ 1024.831526][ T36] audit: type=1800 audit(1785503802.263:281): pid=22938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5914" name="serialnumber" dev="configfs" ino=72790 res=0 errno=0 [ 1024.859149][ T36] audit: type=1800 audit(1785503802.303:282): pid=22938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5914" name="manufacturer" dev="configfs" ino=72792 res=0 errno=0 [ 1024.859181][ T36] audit: type=1800 audit(1785503802.303:283): pid=22938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5914" name="product" dev="configfs" ino=72793 res=0 errno=0 [ 1024.925446][ T36] audit: type=1800 audit(1785503802.353:284): pid=22938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5914" name="configuration" dev="configfs" ino=72794 res=0 errno=0 [ 1024.982438][ T36] audit: type=1800 audit(1785503802.423:285): pid=22938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5914" name="UDC" dev="configfs" ino=72796 res=0 errno=0 [ 1025.734290][T22960] tipc: Enabled bearer , priority 0 [ 1025.736102][T22959] syzkaller0: entered promiscuous mode [ 1025.736117][T22959] syzkaller0: entered allmulticast mode [ 1026.386714][ T36] audit: type=1800 audit(1785503803.813:286): pid=22973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5929" name="idVendor" dev="configfs" ino=72952 res=0 errno=0 [ 1026.515516][ T36] audit: type=1800 audit(1785503803.953:287): pid=22973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5929" name="serialnumber" dev="configfs" ino=72953 res=0 errno=0 [ 1026.542500][ T36] audit: type=1800 audit(1785503803.983:288): pid=22973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5929" name="manufacturer" dev="configfs" ino=72990 res=0 errno=0 [ 1026.546226][ T36] audit: type=1800 audit(1785503803.983:289): pid=22973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5929" name="product" dev="configfs" ino=72993 res=0 errno=0 [ 1026.887325][T22981] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5933'. [ 1027.279196][T22996] tipc: Enabled bearer , priority 0 [ 1027.436620][T22994] tipc: Disabling bearer [ 1027.936513][T23017] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1028.048004][T23019] netlink: 'syz.4.5949': attribute type 12 has an invalid length. [ 1028.048018][T23019] netlink: 'syz.4.5949': attribute type 29 has an invalid length. [ 1028.048026][T23019] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5949'. [ 1028.048054][T23019] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5949'. [ 1028.653969][T23034] tipc: Enabled bearer , priority 0 [ 1028.950235][T23032] tipc: Disabling bearer [ 1029.053397][T23046] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5961'. [ 1029.527489][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1029.972840][T23068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1030.101380][T23072] tipc: Enabled bearer , priority 0 [ 1030.760158][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 1030.828362][T23069] tipc: Disabling bearer [ 1030.923594][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1031.113077][T23099] netlink: 'syz.1.5984': attribute type 1 has an invalid length. [ 1031.329322][T23099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.780579][T23125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1031.780602][T23125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1031.872073][T23128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5997'. [ 1032.262972][T23146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1032.278896][T23145] netlink: 'syz.4.6005': attribute type 12 has an invalid length. [ 1032.278909][T23145] netlink: 'syz.4.6005': attribute type 29 has an invalid length. [ 1032.278917][T23145] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6005'. [ 1032.278929][T23145] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6005'. [ 1033.485945][T23177] syzkaller0: entered promiscuous mode [ 1033.486008][T23177] syzkaller0: entered allmulticast mode [ 1034.458607][T23208] syzkaller0: entered promiscuous mode [ 1034.458626][T23208] syzkaller0: entered allmulticast mode [ 1034.614230][T23216] netlink: 'syz.4.6037': attribute type 1 has an invalid length. [ 1034.823018][T23216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.192003][T23235] netlink: 136 bytes leftover after parsing attributes in process `syz.6.6043'. [ 1036.098625][T23262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1036.098691][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1036.537017][T23278] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6064'. [ 1036.974574][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6073'. [ 1039.521470][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1039.786603][T23378] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6109'. [ 1039.962699][T23383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1039.962721][T23383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1041.735928][T23445] syzkaller0: entered promiscuous mode [ 1041.735945][T23445] syzkaller0: entered allmulticast mode [ 1042.331756][T23469] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6150'. [ 1042.331778][T23469] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6150'. [ 1042.669028][T23481] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6156'. [ 1043.286910][T23503] netlink: 'syz.3.6166': attribute type 1 has an invalid length. [ 1043.516469][T23503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.745915][T23509] bond1: (slave geneve2): making interface the new active one [ 1043.767521][T23509] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1043.900865][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.901788][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.932268][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.180781][ T3378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.758520][T23543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1044.758541][T23543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1044.824280][T23540] trusted_key: syz.3.6178 sent an empty control message without MSG_MORE. [ 1046.780454][T23604] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 1046.780475][T23604] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 1047.688178][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1047.713559][T23623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1048.383993][T23644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6220'. [ 1049.043769][T23667] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.864997][T23679] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6233'. [ 1049.928893][T23684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1051.008453][T23715] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6248'. [ 1051.557926][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.646414][T23734] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1052.186529][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1052.470225][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1052.529932][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1052.535373][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1052.560616][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1052.562341][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1053.815950][T23778] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1054.677891][ T5604] Bluetooth: hci0: command tx timeout [ 1055.049165][T23794] syzkaller0: entered promiscuous mode [ 1055.049182][T23794] syzkaller0: entered allmulticast mode [ 1055.130894][T23794] tipc: Enabled bearer , priority 0 [ 1055.187821][T23792] tipc: Resetting bearer [ 1055.259631][T23807] netlink: 'syz.6.6284': attribute type 16 has an invalid length. [ 1055.259645][T23807] netlink: 'syz.6.6284': attribute type 17 has an invalid length. [ 1055.259654][T23807] netlink: 'syz.6.6284': attribute type 27 has an invalid length. [ 1055.437105][T23792] tipc: Disabling bearer [ 1056.251974][T23835] netlink: 'syz.6.6296': attribute type 12 has an invalid length. [ 1056.274420][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6296'. [ 1056.758289][ T5604] Bluetooth: hci0: command tx timeout [ 1057.345184][T23747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.345257][T23747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.345387][T23747] bridge_slave_0: entered allmulticast mode [ 1057.383713][T23747] bridge_slave_0: entered promiscuous mode [ 1057.415017][T23747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.415106][T23747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.415251][T23747] bridge_slave_1: entered allmulticast mode [ 1057.453232][T23747] bridge_slave_1: entered promiscuous mode [ 1057.725974][T23747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.726245][T23877] netlink: 'syz.0.6312': attribute type 13 has an invalid length. [ 1057.883070][T23747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.059065][T23747] team0: Port device team_slave_0 added [ 1058.078945][T23747] team0: Port device team_slave_1 added [ 1058.256190][T23747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.256202][T23747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.256220][T23747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.322069][T23747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.322082][T23747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.322102][T23747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.714286][T23747] hsr_slave_0: entered promiscuous mode [ 1058.730833][T23747] hsr_slave_1: entered promiscuous mode [ 1058.790533][T23747] debugfs: 'hsr0' already exists in 'hsr' [ 1058.790564][T23747] Cannot create hsr debugfs directory [ 1058.838309][ T5604] Bluetooth: hci0: command tx timeout [ 1059.401345][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.401388][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.473893][T23907] syzkaller0: entered promiscuous mode [ 1059.473909][T23907] syzkaller0: entered allmulticast mode [ 1059.541732][T23907] tipc: Enabled bearer , priority 0 [ 1059.569973][T23905] tipc: Resetting bearer [ 1059.619883][T23905] tipc: Disabling bearer [ 1059.864800][T23919] netlink: 'syz.4.6330': attribute type 16 has an invalid length. [ 1059.864816][T23919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1060.537255][T23747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.917910][ T5604] Bluetooth: hci0: command tx timeout [ 1061.520035][T23747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.798428][T23747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.178154][T23747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.639751][T23747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1064.665539][T23747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1064.681616][T23747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1064.718011][T23747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.729638][T23747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1064.828681][T23747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1064.835677][T23747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1064.952157][T23747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1065.429859][T23747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.575338][T23747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.618486][ T3106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.731201][ T3106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.766103][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.780280][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.257252][T24048] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1068.473657][T23747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.854062][T23747] veth0_vlan: entered promiscuous mode [ 1069.115330][T23747] veth1_vlan: entered promiscuous mode [ 1069.403009][T24118] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6404'. [ 1069.424632][T23747] veth0_macvtap: entered promiscuous mode [ 1069.471054][T23747] veth1_macvtap: entered promiscuous mode [ 1069.547377][T23747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.694736][T23747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.870795][ T6001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.871421][ T6001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.871450][ T6001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.871474][ T6001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.377417][T24126] tipc: Enabled bearer , priority 0 [ 1071.054584][T24125] tipc: Disabling bearer [ 1071.573452][T19186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.573469][T19186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.320170][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.320186][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.987608][T24174] syz_tun: entered allmulticast mode [ 1073.001440][T24172] syz_tun: left allmulticast mode [ 1073.430530][T24183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6429'. [ 1074.326069][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1074.371148][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1074.408582][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1074.415946][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1074.421740][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1076.330627][T24226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1076.598082][ T5604] Bluetooth: hci4: command tx timeout [ 1078.643594][T24197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.645265][T24197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.645414][T24197] bridge_slave_0: entered allmulticast mode [ 1078.677940][ T5604] Bluetooth: hci4: command tx timeout [ 1078.678526][T24197] bridge_slave_0: entered promiscuous mode [ 1078.715091][T24197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.715182][T24197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.715334][T24197] bridge_slave_1: entered allmulticast mode [ 1078.749938][T24197] bridge_slave_1: entered promiscuous mode [ 1078.872361][T24261] netlink: 'syz.6.6453': attribute type 12 has an invalid length. [ 1078.890359][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6453'. [ 1078.956914][T24197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.001960][T24197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.246812][T24197] team0: Port device team_slave_0 added [ 1079.269839][T24197] team0: Port device team_slave_1 added [ 1079.491861][T24197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.491876][T24197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.491896][T24197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.551156][T24197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.551169][T24197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.551187][T24197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.058050][T24197] hsr_slave_0: entered promiscuous mode [ 1080.079169][T24197] hsr_slave_1: entered promiscuous mode [ 1080.079921][T24197] debugfs: 'hsr0' already exists in 'hsr' [ 1080.079939][T24197] Cannot create hsr debugfs directory [ 1080.283829][T24283] tipc: Enabling of bearer rejected, failed to enable media [ 1080.675552][T24292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6462'. [ 1080.758097][ T5604] Bluetooth: hci4: command tx timeout [ 1082.841717][ T5604] Bluetooth: hci4: command tx timeout [ 1083.724108][T24358] netlink: 'syz.4.6487': attribute type 12 has an invalid length. [ 1083.750190][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1084.546361][T24364] netlink: 'syz.3.6488': attribute type 12 has an invalid length. [ 1084.546382][T24364] netlink: 'syz.3.6488': attribute type 29 has an invalid length. [ 1084.546400][T24364] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6488'. [ 1085.094301][T24375] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6492'. [ 1086.826661][T24413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6510'. [ 1087.226095][T24426] netlink: 'syz.4.6513': attribute type 12 has an invalid length. [ 1087.226110][T24426] netlink: 'syz.4.6513': attribute type 29 has an invalid length. [ 1087.226120][T24426] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6513'. [ 1088.991837][T24462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1090.509766][T24197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1090.542443][T24197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1090.698770][T24197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1090.825506][T24197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.865652][T24197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1090.955372][T24197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.974964][T24197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1091.002329][T24197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1091.852394][T24197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.948881][T24197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.991538][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.991626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.131188][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.136509][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.194860][T24560] syzkaller1: entered promiscuous mode [ 1093.194878][T24560] syzkaller1: entered allmulticast mode [ 1094.780629][T24197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.126975][T24197] veth0_vlan: entered promiscuous mode [ 1095.216402][T24197] veth1_vlan: entered promiscuous mode [ 1095.412314][T24197] veth0_macvtap: entered promiscuous mode [ 1095.449789][T24197] veth1_macvtap: entered promiscuous mode [ 1095.538421][T24197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.584006][T24197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.628934][ T1483] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.630134][ T3106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.630161][ T3106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.630184][ T3106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.429553][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.429568][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.697600][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.697617][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.747542][T24655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1098.870929][T24674] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6607'. [ 1099.373719][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1099.434896][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1099.446990][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1099.458692][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1099.459386][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.069553][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1100.714814][T24700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1100.847593][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6616'. [ 1101.639003][ T5610] Bluetooth: hci5: command tx timeout [ 1101.933232][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 1102.631153][T24747] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1103.718473][ T5610] Bluetooth: hci5: command tx timeout [ 1104.306077][T24679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.306149][T24679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.306295][T24679] bridge_slave_0: entered allmulticast mode [ 1104.345781][T24679] bridge_slave_0: entered promiscuous mode [ 1104.377169][T24679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.377250][T24679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.403346][T24679] bridge_slave_1: entered allmulticast mode [ 1104.430000][T24679] bridge_slave_1: entered promiscuous mode [ 1104.662886][T24679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.708703][T24679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.876667][T24679] team0: Port device team_slave_0 added [ 1104.894144][T24679] team0: Port device team_slave_1 added [ 1105.094546][T24679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.094559][T24679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.094578][T24679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.154017][T24679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.154030][T24679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.154048][T24679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.486254][T24679] hsr_slave_0: entered promiscuous mode [ 1105.499339][T24679] hsr_slave_1: entered promiscuous mode [ 1105.500009][T24679] debugfs: 'hsr0' already exists in 'hsr' [ 1105.500025][T24679] Cannot create hsr debugfs directory [ 1105.799662][ T5610] Bluetooth: hci5: command tx timeout [ 1106.237421][T24802] netlink: 'syz.0.6651': attribute type 1 has an invalid length. [ 1106.237434][T24802] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1106.367116][T24803] netlink: 'syz.6.6652': attribute type 12 has an invalid length. [ 1106.383267][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6652'. [ 1107.483563][T24808] syz_tun: entered allmulticast mode [ 1107.889732][ T5610] Bluetooth: hci5: command tx timeout [ 1108.383191][T24829] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6659'. [ 1108.412149][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6660'. [ 1109.147925][T24679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.265375][T24831] syzkaller1: entered promiscuous mode [ 1109.265391][T24831] syzkaller1: entered allmulticast mode [ 1109.295934][T24846] syz_tun: entered allmulticast mode [ 1109.409791][T24852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6666'. [ 1109.409813][T24852] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1110.012237][T24679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.590683][T24879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6676'. [ 1110.590702][T24879] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1110.736864][T24679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.951884][T24899] netlink: 296 bytes leftover after parsing attributes in process `syz.6.6681'. [ 1112.447460][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6686'. [ 1112.447480][T24909] openvswitch: netlink: Message has 16 unknown bytes. [ 1114.055722][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6694'. [ 1114.406095][T24946] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6699'. [ 1114.465685][T24940] bridge0: entered allmulticast mode [ 1114.579422][T24942] pim6reg: entered allmulticast mode [ 1115.039584][T24679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1115.071633][T24679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.092182][T24679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1115.180310][T24679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.202512][T24679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1115.261447][T24679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.280632][T24679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1115.356445][T24679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.426391][T24970] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1116.052938][T24984] bridge0: entered allmulticast mode [ 1116.103563][T24986] pim6reg: entered allmulticast mode [ 1116.446040][T24995] netlink: 'syz.0.6717': attribute type 4 has an invalid length. [ 1116.813918][T25004] netlink: 'syz.3.6720': attribute type 1 has an invalid length. [ 1116.813932][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1117.570564][T25012] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6722'. [ 1118.213244][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6724'. [ 1118.485520][T25021] netlink: 'syz.0.6724': attribute type 12 has an invalid length. [ 1120.851832][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.892911][T24679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.935203][T25031] tipc: Started in network mode [ 1124.935214][T25031] tipc: Node identity , cluster identity 4711 [ 1124.935223][T25031] tipc: Failed to obtain node identity [ 1124.935240][T25031] tipc: Enabling of bearer rejected, failed to enable media [ 1125.206184][T24679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.248853][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.283150][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.330257][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.330334][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.809035][T25086] tipc: Started in network mode [ 1126.809046][T25086] tipc: Node identity , cluster identity 4711 [ 1126.809055][T25086] tipc: Failed to obtain node identity [ 1126.809071][T25086] tipc: Enabling of bearer rejected, failed to enable media [ 1128.401761][T25127] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6757'. [ 1128.468447][T25127] syzkaller1: entered promiscuous mode [ 1128.468464][T25127] syzkaller1: entered allmulticast mode [ 1128.835919][ T5262] veth0_vlan: left promiscuous mode [ 1128.959355][ T5603] veth0_vlan: entered promiscuous mode [ 1129.035088][T24679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.643068][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6773'. [ 1130.973339][T24679] veth0_vlan: entered promiscuous mode [ 1131.080924][T24679] veth1_vlan: entered promiscuous mode [ 1131.239403][T25196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6776'. [ 1131.341644][T24679] veth0_macvtap: entered promiscuous mode [ 1131.381904][T24679] veth1_macvtap: entered promiscuous mode [ 1131.490084][T24679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.649658][T24679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.673642][T25207] syz_tun: entered allmulticast mode [ 1131.817357][ T3378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.817961][ T3378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.970687][T25200] syz_tun: left allmulticast mode [ 1132.618102][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6784'. [ 1132.878054][ T1508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.879919][T19186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.286079][ T645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.286095][ T645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.490688][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6787'. [ 1133.574147][T25238] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6787'. [ 1133.605559][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.605572][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.851868][T25274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6802'. [ 1134.908196][T25275] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6802'. [ 1137.430332][T25329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1137.936675][T25337] syz_tun: entered allmulticast mode [ 1137.946163][T25335] syz_tun: left allmulticast mode [ 1138.692490][T25354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1141.294220][T25401] syz_tun: entered allmulticast mode [ 1141.573591][T25400] syz_tun: left allmulticast mode [ 1143.135248][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1143.135271][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1143.783739][T25453] tipc: Started in network mode [ 1143.783750][T25453] tipc: Node identity , cluster identity 4711 [ 1143.783759][T25453] tipc: Failed to obtain node identity [ 1143.783775][T25453] tipc: Enabling of bearer rejected, failed to enable media [ 1146.669036][T25526] netlink: 'syz.4.6896': attribute type 1 has an invalid length. [ 1146.669050][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6896'. [ 1147.753131][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6906'. [ 1149.425418][T25585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6916'. [ 1150.087441][T25596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6920'. [ 1151.079862][T25620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6932'. [ 1152.946304][T25665] tipc: Started in network mode [ 1152.946316][T25665] tipc: Node identity , cluster identity 4711 [ 1152.946325][T25665] tipc: Failed to obtain node identity [ 1152.946341][T25665] tipc: Enabling of bearer rejected, failed to enable media [ 1153.354036][T25672] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1153.641926][ T5610] Bluetooth: hci3: command 0x0405 tx timeout [ 1153.989589][T25687] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6960'. [ 1154.102215][T25687] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1154.749684][T25707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6970'. [ 1156.117016][T25746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1156.155583][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6986'. [ 1157.944351][T25774] syz_tun (unregistering): left allmulticast mode [ 1160.287559][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1162.829402][T25912] tipc: Started in network mode [ 1162.829415][T25912] tipc: Node identity , cluster identity 4711 [ 1162.829425][T25912] tipc: Failed to obtain node identity [ 1162.829443][T25912] tipc: Enabling of bearer rejected, failed to enable media [ 1164.280946][ T3106] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.296192][ T1483] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.314614][ T3106] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.685983][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1165.397955][ T645] team0: Port device xfrm0 removed [ 1165.695852][ T645] erspan0 (unregistering): left allmulticast mode [ 1165.695875][ T645] erspan0 (unregistering): left promiscuous mode [ 1166.007798][ T645] bond0 (unregistering): Released all slaves [ 1166.099937][T25999] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7076'. [ 1166.438662][T26014] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7079'. [ 1166.490250][ T645] tipc: Disabling bearer [ 1166.546929][ T645] tipc: Left network mode [ 1166.617787][ T6001] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.617818][ T6001] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.617841][ T6001] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.617863][ T6001] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.414170][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7090'. [ 1171.757578][T26050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1172.024017][T26060] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7096'. [ 1172.836673][T26073] netlink: 'syz.1.7098': attribute type 10 has an invalid length. [ 1173.127319][T26081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1181.137934][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 1183.164791][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1206.557551][T26073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.577461][T26073] bond0: (slave team0): Enslaving as an active interface with an up link [ 1206.926899][T26086] Bluetooth: hci4: command tx timeout [ 1207.122503][ T645] hsr_slave_0: left promiscuous mode [ 1207.160565][ T645] hsr_slave_1: left promiscuous mode [ 1207.887872][T24680] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1208.022912][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1208.035458][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1208.038163][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1208.038601][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1208.046533][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1208.172327][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1208.195113][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1208.195979][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1208.275327][T26086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1208.864180][T24680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1208.904631][T24680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1208.942145][T24680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1209.002011][ T5604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1209.039587][ T5604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1209.043493][ T5604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1209.045772][ T5604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1209.071079][ T5604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1209.181240][ T5610] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1209.183270][ T5610] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1209.682044][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1209.772882][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1209.799177][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1209.810650][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1209.811108][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1210.386684][T24680] Bluetooth: hci1: command tx timeout [ 1210.449201][T24680] Bluetooth: hci6: command tx timeout [ 1210.829565][T26081] syz_tun (unregistering): left allmulticast mode [ 1211.161639][T24680] Bluetooth: hci7: command tx timeout [ 1211.406320][T24680] Bluetooth: hci8: command tx timeout [ 1211.957870][T24680] Bluetooth: hci4: command tx timeout [ 1212.437977][T24680] Bluetooth: hci1: command tx timeout [ 1212.560152][T24680] Bluetooth: hci6: command tx timeout [ 1213.251317][T24680] Bluetooth: hci7: command tx timeout [ 1213.478159][T24680] Bluetooth: hci8: command tx timeout [ 1213.565875][ T645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1213.565899][ T645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.039409][T24680] Bluetooth: hci4: command tx timeout [ 1214.068000][ T645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.068024][ T645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.399462][ T645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.399487][ T645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.519787][T24680] Bluetooth: hci1: command tx timeout [ 1214.619730][T24680] Bluetooth: hci6: command tx timeout [ 1214.637009][ T645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.637032][ T645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.317830][T24680] Bluetooth: hci7: command tx timeout [ 1215.558062][T24680] Bluetooth: hci8: command tx timeout [ 1216.117979][ T5610] Bluetooth: hci4: command tx timeout [ 1216.598008][ T5610] Bluetooth: hci1: command tx timeout [ 1216.701884][ T5610] Bluetooth: hci6: command tx timeout [ 1216.726363][ T645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.814008][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1217.136562][ T645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.208433][T26098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.208553][T26098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.208690][T26098] bridge_slave_0: entered allmulticast mode [ 1217.215047][T26098] bridge_slave_0: entered promiscuous mode [ 1217.304450][T26098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.304521][T26098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.304641][T26098] bridge_slave_1: entered allmulticast mode [ 1217.306309][T26098] bridge_slave_1: entered promiscuous mode [ 1217.397842][ T5610] Bluetooth: hci7: command tx timeout [ 1217.516162][ T645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.545342][T26097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.545430][T26097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.545748][T26097] bridge_slave_0: entered allmulticast mode [ 1217.580999][T26097] bridge_slave_0: entered promiscuous mode [ 1217.637989][ T5610] Bluetooth: hci8: command tx timeout [ 1217.662683][T26097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.662787][T26097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.662908][T26097] bridge_slave_1: entered allmulticast mode [ 1217.664554][T26097] bridge_slave_1: entered promiscuous mode [ 1217.722698][T26098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.824744][ T645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.850080][T26098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.990708][T26097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.049421][T26112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.049523][T26112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.049836][T26112] bridge_slave_0: entered allmulticast mode [ 1218.051721][T26112] bridge_slave_0: entered promiscuous mode [ 1218.093637][T26097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.093913][T26104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.093982][T26104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.094100][T26104] bridge_slave_0: entered allmulticast mode [ 1218.134369][T26104] bridge_slave_0: entered promiscuous mode [ 1218.155514][T26098] team0: Port device team_slave_0 added [ 1218.155809][T26103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.155878][T26103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.156000][T26103] bridge_slave_0: entered allmulticast mode [ 1218.157581][T26103] bridge_slave_0: entered promiscuous mode [ 1218.202566][ T5610] Bluetooth: hci4: command tx timeout [ 1218.240179][T26112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.240250][T26112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.240370][T26112] bridge_slave_1: entered allmulticast mode [ 1218.243005][T26112] bridge_slave_1: entered promiscuous mode [ 1218.299115][T26104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.299207][T26104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.299347][T26104] bridge_slave_1: entered allmulticast mode [ 1218.301341][T26104] bridge_slave_1: entered promiscuous mode [ 1218.304526][T26098] team0: Port device team_slave_1 added [ 1218.307081][T26103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.307197][T26103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.307339][T26103] bridge_slave_1: entered allmulticast mode [ 1218.364917][T26103] bridge_slave_1: entered promiscuous mode [ 1218.473823][T26097] team0: Port device team_slave_0 added [ 1218.547035][T26097] team0: Port device team_slave_1 added [ 1218.823811][T26112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.826133][T26098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.826142][T26098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.826159][T26098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.898996][T26104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.908863][T26103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.963878][T26112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.964434][T26098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.964443][T26098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.964460][T26098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.035223][T26104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.052449][T26103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.323151][T26097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.323163][T26097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.323181][T26097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.498807][T26097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.498818][T26097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.498836][T26097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.503266][T26112] team0: Port device team_slave_0 added [ 1219.564106][T26104] team0: Port device team_slave_0 added [ 1219.613453][T26103] team0: Port device team_slave_0 added [ 1219.637243][T26112] team0: Port device team_slave_1 added [ 1219.647369][T26104] team0: Port device team_slave_1 added [ 1219.822020][T26103] team0: Port device team_slave_1 added [ 1219.923756][T26098] hsr_slave_0: entered promiscuous mode [ 1219.924683][T26098] hsr_slave_1: entered promiscuous mode [ 1219.925293][T26098] debugfs: 'hsr0' already exists in 'hsr' [ 1219.925308][T26098] Cannot create hsr debugfs directory [ 1219.976073][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1220.086859][T26112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.086870][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.086887][T26112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.087919][T26104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.087928][T26104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.087945][T26104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.185444][T26103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.185455][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.185472][T26103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.186554][T26104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.186563][T26104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.186580][T26104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.315422][ T645] bridge_slave_1: left allmulticast mode [ 1220.315444][ T645] bridge_slave_1: left promiscuous mode [ 1220.315638][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.337458][ T645] bridge_slave_0: left allmulticast mode [ 1220.337478][ T645] bridge_slave_0: left promiscuous mode [ 1220.350712][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.380176][ T645] bridge_slave_1: left allmulticast mode [ 1220.380197][ T645] bridge_slave_1: left promiscuous mode [ 1220.380346][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.386717][ T645] bridge_slave_0: left allmulticast mode [ 1220.386735][ T645] bridge_slave_0: left promiscuous mode [ 1220.386869][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.442526][ T645] pim6reg: left allmulticast mode [ 1220.459207][ T645] bridge0: left allmulticast mode [ 1220.783549][ T645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.786339][ T645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.807363][ T645] bond0 (unregistering): Released all slaves [ 1221.040421][ T645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.044069][ T645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.046720][ T645] bond0 (unregistering): (slave team0): Releasing backup interface [ 1221.073732][ T645] bond0 (unregistering): Released all slaves [ 1221.107085][T26103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.107094][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.107111][T26103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.128529][T26112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.128538][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.128555][T26112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.376900][T26097] hsr_slave_0: entered promiscuous mode [ 1221.384636][T26097] hsr_slave_1: entered promiscuous mode [ 1221.385345][T26097] debugfs: 'hsr0' already exists in 'hsr' [ 1221.385360][T26097] Cannot create hsr debugfs directory [ 1221.774979][T26104] hsr_slave_0: entered promiscuous mode [ 1221.775893][T26104] hsr_slave_1: entered promiscuous mode [ 1221.776563][T26104] debugfs: 'hsr0' already exists in 'hsr' [ 1221.776577][T26104] Cannot create hsr debugfs directory [ 1221.891240][T26103] hsr_slave_0: entered promiscuous mode [ 1221.892181][T26103] hsr_slave_1: entered promiscuous mode [ 1221.892787][T26103] debugfs: 'hsr0' already exists in 'hsr' [ 1221.892808][T26103] Cannot create hsr debugfs directory [ 1221.924066][T26112] hsr_slave_0: entered promiscuous mode [ 1221.925028][T26112] hsr_slave_1: entered promiscuous mode [ 1221.925700][T26112] debugfs: 'hsr0' already exists in 'hsr' [ 1221.925716][T26112] Cannot create hsr debugfs directory [ 1223.513579][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1223.554216][ T645] hsr_slave_0: left promiscuous mode [ 1223.554815][ T645] hsr_slave_1: left promiscuous mode [ 1223.555395][ T645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.555410][ T645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.556071][ T645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.556085][ T645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.618214][ T645] hsr_slave_0: left promiscuous mode [ 1223.618988][ T645] hsr_slave_1: left promiscuous mode [ 1223.619552][ T645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.619567][ T645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.625660][ T645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.625675][ T645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.714497][ T645] veth1_macvtap: left promiscuous mode [ 1223.714561][ T645] veth0_macvtap: left promiscuous mode [ 1223.714706][ T645] veth1_vlan: left promiscuous mode [ 1223.716297][ T645] veth0_vlan: left promiscuous mode [ 1223.751842][ T645] veth1_macvtap: left promiscuous mode [ 1223.751906][ T645] veth0_macvtap: left promiscuous mode [ 1223.752056][ T645] veth1_vlan: left promiscuous mode [ 1223.752167][ T645] veth0_vlan: left promiscuous mode [ 1224.218534][ T645] team0 (unregistering): Port device team_slave_1 removed [ 1224.244095][ T645] team0 (unregistering): Port device team_slave_0 removed [ 1224.713815][ T645] team0 (unregistering): Port device team_slave_1 removed [ 1224.739898][ T645] team0 (unregistering): Port device team_slave_0 removed [ 1227.016334][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1227.376435][ T645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.898703][ T645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.144621][ T5262] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1228.222699][ T645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.444205][ T645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.406424][ T5262] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1229.831426][ T645] bridge_slave_1: left allmulticast mode [ 1229.831453][ T645] bridge_slave_1: left promiscuous mode [ 1229.831660][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.858689][ T645] bridge_slave_0: left allmulticast mode [ 1229.858725][ T645] bridge_slave_0: left promiscuous mode [ 1229.890433][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.545719][ T645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.567335][ T645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.578456][ T645] bond0 (unregistering): Released all slaves [ 1230.586390][ T5262] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1231.602670][ T645] hsr_slave_0: left promiscuous mode [ 1231.604081][ T645] hsr_slave_1: left promiscuous mode [ 1231.604643][ T645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.604658][ T645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.605289][ T645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.605302][ T645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.725837][ T645] veth1_macvtap: left promiscuous mode [ 1231.725901][ T645] veth0_macvtap: left promiscuous mode [ 1231.726140][ T645] veth1_vlan: left promiscuous mode [ 1231.726246][ T645] veth0_vlan: left promiscuous mode [ 1232.257075][ T645] team0 (unregistering): Port device team_slave_1 removed [ 1232.287113][ T645] team0 (unregistering): Port device team_slave_0 removed [ 1232.451903][ T5262] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1233.889104][ T5262] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1234.967586][T26098] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1235.009686][T26098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.014394][T26098] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1235.034143][T26098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.047246][T26098] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1235.077022][T26098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.089732][T26098] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1235.133839][T26098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.689371][T26098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.794039][T26098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.838189][T19177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.838266][T19177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.845432][T26097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1235.886247][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.899556][T26097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1235.924249][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.944612][T26097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1235.990211][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.991609][T26084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.991710][T26084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.066235][T26097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1236.094027][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1236.969948][T26104] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1236.980216][T26104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.999265][T26104] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1237.018670][T26104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.026681][T26097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.044727][T26104] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1237.066025][T26104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.115216][T26104] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1237.182331][T26104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.579893][T26097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.711222][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.711921][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.766523][T19186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.769429][T19186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.901759][T26103] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1237.921708][T26103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.944703][T26103] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1237.991453][T26103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.012831][T26103] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1238.094399][T26103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1238.151960][T26103] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1238.166664][T26103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1238.658996][T26098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.049753][T26112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1239.067500][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1239.094342][T26112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1239.194743][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1239.257356][T26112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1239.295071][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1239.315576][T26112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1239.357330][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1239.407063][T26104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.621135][T26104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.736924][T26084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.737076][T26084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.821252][T26084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.821359][T26084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.932438][T26103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.108449][T26103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.203968][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.204047][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.256199][T26098] veth0_vlan: entered promiscuous mode [ 1240.284785][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.284862][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.397237][T26098] veth1_vlan: entered promiscuous mode [ 1240.499561][T26112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.735064][T26112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.790610][T26098] veth0_macvtap: entered promiscuous mode [ 1240.822567][T26083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.822644][T26083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.874105][T26098] veth1_macvtap: entered promiscuous mode [ 1240.935537][T19177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.935615][T19177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.994943][T26097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.071844][T26098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.139925][T26098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.549423][T26085] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.549791][T26085] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.580137][T26097] veth0_vlan: entered promiscuous mode [ 1241.810073][T26097] veth1_vlan: entered promiscuous mode [ 1242.246352][T19177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.246368][T19177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.511755][T26097] veth0_macvtap: entered promiscuous mode [ 1242.537419][T26084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.537432][T26084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.568834][T26097] veth1_macvtap: entered promiscuous mode [ 1242.650154][T26084] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.735989][T26097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.792983][T26097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.910135][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.294734][T26104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.307517][T26084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.307939][T19186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.308289][T19186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.308397][T19186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.723581][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.171869][T26103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.217526][T19186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.217540][T19186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.692157][T26085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.692171][T26085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.751317][T26083] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.751604][T26083] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.751868][T26083] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.771584][T11057] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.820567][T26112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.728360][T26104] veth0_vlan: entered promiscuous mode [ 1245.849231][T26104] veth1_vlan: entered promiscuous mode [ 1246.114870][T26551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1246.231805][T26103] veth0_vlan: entered promiscuous mode [ 1246.244872][T26104] veth0_macvtap: entered promiscuous mode [ 1246.289080][T26104] veth1_macvtap: entered promiscuous mode [ 1246.311472][T26103] veth1_vlan: entered promiscuous mode [ 1246.464243][T26104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.511666][T26104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.673423][T26103] veth0_macvtap: entered promiscuous mode [ 1246.724717][T26103] veth1_macvtap: entered promiscuous mode [ 1246.741228][T26112] veth0_vlan: entered promiscuous mode [ 1247.199684][T26112] veth1_vlan: entered promiscuous mode [ 1247.282821][T26103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.736194][T26103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.915367][T19186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.915381][T19186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.278990][ T645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.279004][ T645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.317455][T26112] veth0_macvtap: entered promiscuous mode [ 1248.612615][T26112] veth1_macvtap: entered promiscuous mode [ 1249.164312][T26112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.379109][T26112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.793445][T26083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.793461][T26083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.811018][T26597] syzkaller0: entered promiscuous mode [ 1249.811034][T26597] syzkaller0: entered allmulticast mode [ 1250.045199][T26600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1250.045227][T26600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1250.302663][T26600] gretap0: entered promiscuous mode [ 1250.354434][T26600] gretap0: left promiscuous mode [ 1250.596807][T26085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.596822][T26085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.718956][T26084] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719061][T26084] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719537][ T6001] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719562][ T6001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719584][ T6001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719606][ T6001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719628][ T6001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719650][ T6001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719672][ T6001] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719694][ T6001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719715][ T6001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.017881][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.017895][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.118649][T26625] netlink: 'syz.2.7132': attribute type 1 has an invalid length. [ 1252.255171][T26628] vlan2: entered promiscuous mode [ 1252.255187][T26628] veth0_to_bond: entered promiscuous mode [ 1252.255318][T26628] vlan2: entered allmulticast mode [ 1252.255327][T26628] veth0_to_bond: entered allmulticast mode [ 1252.663721][T26634] netlink: 11776 bytes leftover after parsing attributes in process `syz.8.7135'. [ 1252.898606][T26085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.898620][T26085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.077200][T26641] syzkaller0: entered promiscuous mode [ 1253.077217][T26641] syzkaller0: entered allmulticast mode [ 1253.121116][T26641] tipc: Started in network mode [ 1253.121136][T26641] tipc: Node identity f6f6d8d9a835, cluster identity 4711 [ 1253.121335][T26641] tipc: Enabled bearer , priority 0 [ 1253.160773][T26645] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7139'. [ 1253.181565][T26640] tipc: Resetting bearer [ 1253.425504][T26640] tipc: Disabling bearer [ 1253.500176][T26085] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.508092][ T1483] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.508115][ T1483] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.618204][ T1483] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.618446][ T1483] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.394338][T26670] netlink: 13088 bytes leftover after parsing attributes in process `syz.7.7146'. [ 1254.394356][T26670] openvswitch: netlink: Flow actions attr not present in new flow. [ 1255.035791][T26681] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7152'. [ 1256.018518][T26701] bond1 (unregistering): Released all slaves [ 1256.086892][T26713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1256.086905][T26713] IPv6: NLM_F_CREATE should be set when creating new route [ 1256.103118][T26713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1256.719770][T26726] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7167'. [ 1257.665400][T26748] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7173'. [ 1257.887899][T26749] bridge0: entered allmulticast mode [ 1257.949910][T26751] pim6reg: entered allmulticast mode [ 1258.525807][T26767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7179'. [ 1259.045480][T26778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7183'. [ 1260.604533][T26817] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7198'. [ 1260.604871][T26817] unsupported nlmsg_type 40 [ 1262.226321][T26856] vlan2: entered promiscuous mode [ 1262.226338][T26856] macvlan0: entered promiscuous mode [ 1263.648555][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7228'. [ 1264.726190][T26933] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7238'. [ 1264.739498][T26933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7238'. [ 1265.010704][T26939] Dead loop on virtual device ip6_vti0 (net 805), fix it urgently! [ 1265.569563][T26956] netlink: 'syz.8.7246': attribute type 5 has an invalid length. [ 1265.569577][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7246'. [ 1265.890690][T26968] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7252'. [ 1265.896437][T26968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7252'. [ 1265.938007][T26968] bridge0: entered allmulticast mode [ 1266.046381][T26968] pim6reg: entered allmulticast mode [ 1266.067055][T26974] netlink: 92 bytes leftover after parsing attributes in process `syz.9.7254'. [ 1267.343763][T27002] syzkaller0: entered promiscuous mode [ 1267.343780][T27002] syzkaller0: entered allmulticast mode [ 1267.366889][T27002] tipc: Started in network mode [ 1267.366910][T27002] tipc: Node identity d650b373d5bc, cluster identity 4711 [ 1267.367019][T27002] tipc: Enabled bearer , priority 0 [ 1267.420654][T27000] tipc: Resetting bearer [ 1267.521907][T27010] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7267'. [ 1267.608501][T27013] netlink: 'syz.9.7269': attribute type 1 has an invalid length. [ 1267.750120][T27000] tipc: Disabling bearer [ 1268.221222][T27013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.706902][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7276'. [ 1269.153501][T27060] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7282'. [ 1271.621483][T27130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7305'. [ 1271.621507][T27130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7305'. [ 1272.345111][T27152] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7313'. [ 1273.068617][T27173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7321'. [ 1273.068642][T27173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7321'. [ 1273.680781][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7329'. [ 1274.623961][T27223] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7340'. [ 1274.623986][T27223] netlink: 'syz.9.7340': attribute type 7 has an invalid length. [ 1274.623994][T27223] netlink: 'syz.9.7340': attribute type 8 has an invalid length. [ 1274.624002][T27223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7340'. [ 1275.946127][T27261] netlink: 'syz.5.7354': attribute type 1 has an invalid length. [ 1276.627901][T27261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1277.403971][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7363'. [ 1280.055709][T27366] openvswitch: netlink: Missing valid actions attribute. [ 1280.055738][T27366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.348522][T27403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7396'. [ 1282.535095][T27436] openvswitch: netlink: Missing valid actions attribute. [ 1282.535128][T27436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.857853][T27474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7419'. [ 1285.982412][T27478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7421'. [ 1285.982438][T27478] netlink: 'syz.5.7421': attribute type 7 has an invalid length. [ 1285.982446][T27478] netlink: 'syz.5.7421': attribute type 8 has an invalid length. [ 1285.982454][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7421'. [ 1286.406606][T27498] openvswitch: netlink: Missing valid actions attribute. [ 1286.406636][T27498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.742297][T27503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7429'. [ 1287.602504][T27522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7433'. [ 1302.279419][T24680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1302.324477][T24680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1302.326800][T24680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1302.394196][T24680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1302.405084][T24680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1302.878303][T27570] sctp: [Deprecated]: syz.2.7452 (pid 27570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1302.878303][T27570] Use struct sctp_sack_info instead [ 1302.929914][T27571] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7451'. [ 1302.929933][T27571] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7451'. [ 1303.940981][T27598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1304.068112][T27599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7459'. [ 1304.567426][T27612] tls_set_device_offload_rx: netdev not found [ 1304.600530][T24680] Bluetooth: hci0: command tx timeout [ 1304.632529][T27616] sctp: [Deprecated]: syz.2.7464 (pid 27616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1304.632529][T27616] Use struct sctp_sack_info instead [ 1304.712708][T27612] netlink: 'syz.7.7463': attribute type 7 has an invalid length. [ 1304.712785][T27612] netlink: 'syz.7.7463': attribute type 3 has an invalid length. [ 1304.712795][T27612] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1304.763613][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1304.763637][T27615] block nbd0: not configured, cannot reconfigure [ 1305.163716][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.553686][ T3308] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.678229][T24680] Bluetooth: hci0: command tx timeout [ 1307.731519][ T3308] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.034460][T16400] IPVS: starting estimator thread 0... [ 1308.118110][T27685] IPVS: using max 13 ests per chain, 31200 per kthread [ 1308.682270][ T3308] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.759840][T24680] Bluetooth: hci0: command tx timeout [ 1309.347851][T27705] netlink: 244 bytes leftover after parsing attributes in process `syz.7.7489'. [ 1309.972080][T27729] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7496'. [ 1310.103443][ T3308] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.513305][T27736] Bluetooth: MGMT ver 1.23 [ 1310.849261][T24680] Bluetooth: hci0: command tx timeout [ 1311.028738][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7500'. [ 1311.420763][T27751] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7502'. [ 1311.515829][T27754] netlink: 244 bytes leftover after parsing attributes in process `syz.9.7503'. [ 1312.588294][T27774] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7509'. [ 1313.481109][T27790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7513'. [ 1313.793669][T27796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1313.794193][T27796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1314.260152][T27808] syzkaller0: entered promiscuous mode [ 1314.260171][T27808] syzkaller0: entered allmulticast mode [ 1314.297533][T27810] tipc: Started in network mode [ 1314.297552][T27810] tipc: Node identity 62bd9cec097d, cluster identity 4711 [ 1314.298016][T27810] tipc: Enabled bearer , priority 0 [ 1314.426127][T27797] tipc: Resetting bearer [ 1314.665780][T27797] tipc: Disabling bearer [ 1315.113766][ T3308] bridge_slave_1: left allmulticast mode [ 1315.113851][ T3308] bridge_slave_1: left promiscuous mode [ 1315.114046][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.187009][ T3308] bridge_slave_0: left allmulticast mode [ 1315.187033][ T3308] bridge_slave_0: left promiscuous mode [ 1315.187194][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.273787][ T3308] pim6reg: left allmulticast mode [ 1315.273869][ T3308] bridge0: left allmulticast mode [ 1315.649913][T27843] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7525'. [ 1316.896873][ T3308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.921715][ T3308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.939813][ T3308] bond0 (unregistering): Released all slaves [ 1316.975028][ T3308] bond1 (unregistering): Released all slaves [ 1317.684062][T27561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.684146][T27561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.684372][T27561] bridge_slave_0: entered allmulticast mode [ 1317.713683][T27561] bridge_slave_0: entered promiscuous mode [ 1317.790978][T27561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.791049][T27561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.791196][T27561] bridge_slave_1: entered allmulticast mode [ 1317.830550][T27561] bridge_slave_1: entered promiscuous mode [ 1318.535084][T27561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.614584][T27561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.943333][T27905] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7545'. [ 1319.014786][T27561] team0: Port device team_slave_0 added [ 1319.179400][ T3308] hsr_slave_0: left promiscuous mode [ 1319.205117][ T3308] hsr_slave_1: left promiscuous mode [ 1319.205795][ T3308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.205812][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.323714][ T3308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.323735][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.654408][ T3308] veth1_macvtap: left promiscuous mode [ 1319.654473][ T3308] veth0_macvtap: left promiscuous mode [ 1319.654769][ T3308] veth1_vlan: left promiscuous mode [ 1319.682520][ T3308] veth0_vlan: left promiscuous mode [ 1320.731802][ T3308] team0 (unregistering): Port device team_slave_1 removed [ 1320.771494][ T3308] team0 (unregistering): Port device team_slave_0 removed [ 1321.191019][T27561] team0: Port device team_slave_1 added [ 1321.936640][T27561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.936652][T27561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.936671][T27561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.991303][T27561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.991314][T27561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.991332][T27561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.592256][T27561] hsr_slave_0: entered promiscuous mode [ 1322.607397][T27561] hsr_slave_1: entered promiscuous mode [ 1322.630711][T27561] debugfs: 'hsr0' already exists in 'hsr' [ 1322.630728][T27561] Cannot create hsr debugfs directory [ 1323.516604][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7565'. [ 1323.527000][T27993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7564'. [ 1324.891657][ T3308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.069133][ T3308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.247434][T28079] netlink: 'syz.9.7591': attribute type 13 has an invalid length. [ 1328.312000][T28081] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7591'. [ 1329.530519][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7601'. [ 1330.031241][T28081] bond0: (slave bond_slave_0): Releasing backup interface [ 1330.177991][T28081] bond_slave_0: entered promiscuous mode [ 1330.178011][T28081] bond_slave_0: entered allmulticast mode [ 1332.187465][ T3308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.268546][T28163] tipc: Enabled bearer , priority 0 [ 1332.274719][T28158] syzkaller0: entered promiscuous mode [ 1332.274734][T28158] syzkaller0: entered allmulticast mode [ 1332.359964][T28138] tipc: Resetting bearer [ 1332.557336][T28176] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7615'. [ 1332.692755][T28138] tipc: Disabling bearer [ 1332.725637][T28182] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7617'. [ 1332.725662][T28182] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7617'. [ 1332.873876][T28143] Bluetooth: hci6: command 0x0406 tx timeout [ 1332.873903][T28143] Bluetooth: hci1: command 0x0406 tx timeout [ 1332.873920][T28143] Bluetooth: hci7: command 0x0406 tx timeout [ 1332.873936][T28143] Bluetooth: hci8: command 0x0406 tx timeout [ 1333.724401][T28190] syzkaller0: entered promiscuous mode [ 1333.724418][T28190] syzkaller0: entered allmulticast mode [ 1335.714644][T28219] [ 1335.714653][T28219] ====================================================== [ 1335.714687][T28219] WARNING: possible circular locking dependency detected [ 1335.714750][T28219] syzkaller #0 Not tainted [ 1335.714757][T28219] ------------------------------------------------------ [ 1335.714783][T28219] syz.7.7628/28219 is trying to acquire lock: [ 1335.714791][T28219] ffff888025605930 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd70 [ 1335.714943][T28219] [ 1335.714943][T28219] but task is already holding lock: [ 1335.714948][T28219] ffff888025606e18 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 1335.715031][T28219] [ 1335.715031][T28219] which lock already depends on the new lock. [ 1335.715031][T28219] [ 1335.715037][T28219] [ 1335.715037][T28219] the existing dependency chain (in reverse order) is: [ 1335.715041][T28219] [ 1335.715041][T28219] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1335.715099][T28219] lock_sock_nested+0x41/0x130 [ 1335.715178][T28219] smc_listen_out+0x105/0x3c0 [ 1335.715208][T28219] smc_listen_work+0x81d/0x1410 [ 1335.715224][T28219] process_scheduled_works+0xa8e/0x14e0 [ 1335.715239][T28219] worker_thread+0xa47/0xfb0 [ 1335.715271][T28219] kthread+0x388/0x470 [ 1335.715306][T28219] ret_from_fork+0x514/0xb70 [ 1335.715370][T28219] ret_from_fork_asm+0x1a/0x30 [ 1335.715402][T28219] [ 1335.715402][T28219] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1335.715420][T28219] __lock_acquire+0x1520/0x2ce0 [ 1335.715456][T28219] lock_acquire+0x106/0x350 [ 1335.715468][T28219] __flush_work+0x6c5/0xd70 [ 1335.715484][T28219] __cancel_work_sync+0xbe/0x110 [ 1335.715503][T28219] smc_clcsock_release+0x60/0xf0 [ 1335.715546][T28219] __smc_release+0x662/0x7d0 [ 1335.715558][T28219] smc_close_non_accepted+0xd5/0x1f0 [ 1335.715571][T28219] smc_close_active+0xb6b/0xf50 [ 1335.715588][T28219] __smc_release+0x9e/0x7d0 [ 1335.715599][T28219] smc_release+0x2cd/0x580 [ 1335.715612][T28219] sock_close+0xad/0x220 [ 1335.715638][T28219] __fput+0x42a/0xa80 [ 1335.715687][T28219] task_work_run+0x1d9/0x270 [ 1335.715698][T28219] get_signal+0x1182/0x12c0 [ 1335.715743][T28219] arch_do_signal_or_restart+0xbb/0x860 [ 1335.715776][T28219] exit_to_user_mode_loop+0x104/0x730 [ 1335.715805][T28219] do_syscall_64+0x353/0x580 [ 1335.715849][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.715871][T28219] [ 1335.715871][T28219] other info that might help us debug this: [ 1335.715871][T28219] [ 1335.715875][T28219] Possible unsafe locking scenario: [ 1335.715875][T28219] [ 1335.715894][T28219] CPU0 CPU1 [ 1335.715899][T28219] ---- ---- [ 1335.715903][T28219] lock(sk_lock-AF_SMC/1); [ 1335.715915][T28219] lock((work_completion)(&new_smc->smc_listen_work)); [ 1335.715926][T28219] lock(sk_lock-AF_SMC/1); [ 1335.715937][T28219] lock((work_completion)(&new_smc->smc_listen_work)); [ 1335.715947][T28219] [ 1335.715947][T28219] *** DEADLOCK *** [ 1335.715947][T28219] [ 1335.715951][T28219] 3 locks held by syz.7.7628/28219: [ 1335.715958][T28219] #0: ffff88804e254cf8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1335.716002][T28219] #1: ffff888025606e18 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 1335.716040][T28219] #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd70 [ 1335.716075][T28219] [ 1335.716075][T28219] stack backtrace: [ 1335.716090][T28219] CPU: 0 UID: 0 PID: 28219 Comm: syz.7.7628 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1335.716117][T28219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1335.716129][T28219] Call Trace: [ 1335.716134][T28219] [ 1335.716170][T28219] dump_stack_lvl+0xe8/0x150 [ 1335.716238][T28219] print_circular_bug+0x2e1/0x300 [ 1335.716257][T28219] check_noncircular+0x12e/0x150 [ 1335.716276][T28219] __lock_acquire+0x1520/0x2ce0 [ 1335.716296][T28219] ? do_raw_spin_unlock+0xf5/0x210 [ 1335.716338][T28219] ? __flush_work+0x101/0xd70 [ 1335.716355][T28219] lock_acquire+0x106/0x350 [ 1335.716368][T28219] ? __flush_work+0x101/0xd70 [ 1335.716389][T28219] ? __flush_work+0x101/0xd70 [ 1335.716408][T28219] __flush_work+0x6c5/0xd70 [ 1335.716426][T28219] ? __flush_work+0x101/0xd70 [ 1335.716443][T28219] ? __flush_work+0x101/0xd70 [ 1335.716463][T28219] ? __pfx___flush_work+0x10/0x10 [ 1335.716481][T28219] ? __pfx_wq_barrier_func+0x10/0x10 [ 1335.716504][T28219] ? __cancel_work_sync+0x5c/0x110 [ 1335.716524][T28219] __cancel_work_sync+0xbe/0x110 [ 1335.716543][T28219] smc_clcsock_release+0x60/0xf0 [ 1335.716562][T28219] __smc_release+0x662/0x7d0 [ 1335.716577][T28219] smc_close_non_accepted+0xd5/0x1f0 [ 1335.716593][T28219] smc_close_active+0xb6b/0xf50 [ 1335.716611][T28219] ? __pfx_sock_def_readable+0x10/0x10 [ 1335.716630][T28219] ? smc_close_active+0x3ed/0xf50 [ 1335.716649][T28219] __smc_release+0x9e/0x7d0 [ 1335.716661][T28219] ? lockdep_hardirqs_on+0x7a/0x110 [ 1335.716694][T28219] smc_release+0x2cd/0x580 [ 1335.716708][T28219] sock_close+0xad/0x220 [ 1335.716727][T28219] ? __pfx_sock_close+0x10/0x10 [ 1335.716745][T28219] __fput+0x42a/0xa80 [ 1335.716761][T28219] task_work_run+0x1d9/0x270 [ 1335.716774][T28219] ? __pfx_task_work_run+0x10/0x10 [ 1335.716790][T28219] get_signal+0x1182/0x12c0 [ 1335.716805][T28219] ? task_work_add+0x298/0x420 [ 1335.716816][T28219] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1335.716858][T28219] ? __pfx_task_work_add+0x10/0x10 [ 1335.716875][T28219] arch_do_signal_or_restart+0xbb/0x860 [ 1335.716895][T28219] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1335.716921][T28219] exit_to_user_mode_loop+0x104/0x730 [ 1335.716934][T28219] ? rcu_is_watching+0x15/0xb0 [ 1335.716968][T28219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.716983][T28219] do_syscall_64+0x353/0x580 [ 1335.717000][T28219] ? trace_irq_disable+0x3b/0x140 [ 1335.717042][T28219] ? clear_bhb_loop+0x40/0x90 [ 1335.717058][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.717074][T28219] RIP: 0033:0x7f1ea716e019 [ 1335.717103][T28219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.717116][T28219] RSP: 002b:00007f1ea53c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1335.717129][T28219] RAX: fffffffffffffe00 RBX: 00007f1ea73f5fa0 RCX: 00007f1ea716e019 [ 1335.717140][T28219] RDX: 00002000000008c0 RSI: 0000200000000100 RDI: 0000000000000004 [ 1335.717149][T28219] RBP: 00007f1ea720500c R08: 0000000000000000 R09: 0000000000000000 [ 1335.717157][T28219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.717165][T28219] R13: 00007f1ea73f6038 R14: 00007f1ea73f5fa0 R15: 00007ffd7008f398 [ 1335.717181][T28219] [ 1336.090209][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7633'. [ 1336.886856][ T3308] team0: Port device xfrm0 removed [ 1337.073949][ T3308] bond0 (unregistering): Released all slaves [ 1337.271079][ T3308] team0: Port device xfrm0 removed [ 1337.338896][ T3308] erspan0 (unregistering): left allmulticast mode [ 1337.338921][ T3308] erspan0 (unregistering): left promiscuous mode [ 1337.406842][ T3308] gretap0 (unregistering): left allmulticast mode [ 1337.428699][ T3308] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1337.464730][ T3308] bond0 (unregistering): Released all slaves [ 1337.484761][ T3308] bond1 (unregistering): Released all slaves [ 1337.501098][T27561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1337.507546][T27561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1337.523404][T27561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1337.536679][T27561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1337.545594][T27561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1337.555784][T27561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1337.557482][T27561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1337.576421][T27561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1337.653010][ T3308] tipc: Disabling bearer [ 1337.653099][ T3308] tipc: Left network mode [ 1337.655607][ T3308] tipc: Disabling bearer [ 1337.657497][ T3308] tipc: Disabling bearer [ 1337.657748][ T3308] tipc: Left network mode [ 1337.820615][T27561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.844343][T27561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.907997][T19186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.908045][T19186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.910557][T19186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.910601][T19186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.401543][ T3308] hsr_slave_0: left promiscuous mode [ 1338.406373][ T3308] hsr_slave_1: left promiscuous mode [ 1338.433714][ T3308] hsr_slave_0: left promiscuous mode [ 1338.434035][ T3308] hsr_slave_1: left promiscuous mode [ 1339.381048][ T3308] IPVS: stop unused estimator thread 0... [ 1340.004838][ T3308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.005781][ T3308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.006336][ T3308] bond0 (unregistering): Released all slaves [ 1340.038322][ T3308] bond1 (unregistering): Released all slaves [ 1340.057336][ T3308] bond2 (unregistering): Released all slaves [ 1340.120842][T27561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.152588][ T3308] tipc: Disabling bearer [ 1340.152691][ T3308] tipc: Left network mode [ 1340.267085][ T3308] hsr_slave_0: left promiscuous mode [ 1340.275288][ T3308] hsr_slave_1: left promiscuous mode [ 1340.275627][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.276024][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.640033][ T3308] team0 (unregistering): Port device team_slave_1 removed [ 1340.682280][ T3308] team0 (unregistering): Port device team_slave_0 removed [ 1340.932652][T27561] veth0_vlan: entered promiscuous mode [ 1340.937372][T27561] veth1_vlan: entered promiscuous mode [ 1341.021475][T27561] veth0_macvtap: entered promiscuous mode [ 1341.025257][T27561] veth1_macvtap: entered promiscuous mode [ 1341.058492][T27561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.075564][T27561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.107695][ T1042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.107855][ T1042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.107878][ T1042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.107898][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.110534][ T3308] IPVS: stop unused estimator thread 0... [ 1341.222326][T27561] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht' [ 1341.264102][T26087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.264116][T26087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.291219][T27561] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht' [ 1341.355458][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.355471][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.467444][ T5262] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1344.270717][ T5262] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1344.569216][ T5262] 8021q: adding VLAN 0 to HW filter on device eth28