last executing test programs: 1m2.947193163s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000eeffffffffff3e000000080003008c01e05a7dcb24d898d7f7c0c0cbd66f9d54d242b75a6b6eaeed3b856a863b48da8fc72ec5607167eb6792288479f34f77b06e652134304262ba74344b837935407e1bcf1db01a985dc4b2e33044020c416949332ace7947427e7dc386c271c82f84527be658b64dfa235dd88c78a8cec06c5449317a4fd2f518203826881d49e24064ffe33456dcdec62d5b33fe6e8b6ea6c04a", @ANYRES32=r5, @ANYBLOB="1c005e80080006000000000008000700000000000800050000000200"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x4]}, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030104000000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) 51.374533187s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000eeffffffffff3e000000080003008c01e05a7dcb24d898d7f7c0c0cbd66f9d54d242b75a6b6eaeed3b856a863b48da8fc72ec5607167eb6792288479f34f77b06e652134304262ba74344b837935407e1bcf1db01a985dc4b2e33044020c416949332ace7947427e7dc386c271c82f84527be658b64dfa235dd88c78a8cec06c5449317a4fd2f518203826881d49e24064ffe33456dcdec62d5b33fe6e8b6ea6c04a", @ANYRES32=r5, @ANYBLOB="1c005e80080006000000000008000700000000000800050000000200"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x4]}, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030104000000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) 43.326925527s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000eeffffffffff3e000000080003008c01e05a7dcb24d898d7f7c0c0cbd66f9d54d242b75a6b6eaeed3b856a863b48da8fc72ec5607167eb6792288479f34f77b06e652134304262ba74344b837935407e1bcf1db01a985dc4b2e33044020c416949332ace7947427e7dc386c271c82f84527be658b64dfa235dd88c78a8cec06c5449317a4fd2f518203826881d49e24064ffe33456dcdec62d5b33fe6e8b6ea6c04a", @ANYRES32=r5, @ANYBLOB="1c005e80080006000000000008000700000000000800050000000200"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x4]}, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030104000000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) 34.700700754s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000eeffffffffff3e000000080003008c01e05a7dcb24d898d7f7c0c0cbd66f9d54d242b75a6b6eaeed3b856a863b48da8fc72ec5607167eb6792288479f34f77b06e652134304262ba74344b837935407e1bcf1db01a985dc4b2e33044020c416949332ace7947427e7dc386c271c82f84527be658b64dfa235dd88c78a8cec06c5449317a4fd2f518203826881d49e24064ffe33456dcdec62d5b33fe6e8b6ea6c04a", @ANYRES32=r5, @ANYBLOB="1c005e80080006000000000008000700000000000800050000000200"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x4]}, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030104000000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) 24.372711974s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000eeffffffffff3e000000080003008c01e05a7dcb24d898d7f7c0c0cbd66f9d54d242b75a6b6eaeed3b856a863b48da8fc72ec5607167eb6792288479f34f77b06e652134304262ba74344b837935407e1bcf1db01a985dc4b2e33044020c416949332ace7947427e7dc386c271c82f84527be658b64dfa235dd88c78a8cec06c5449317a4fd2f518203826881d49e24064ffe33456dcdec62d5b33fe6e8b6ea6c04a", @ANYRES32=r5, @ANYBLOB="1c005e80080006000000000008000700000000000800050000000200"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x4]}, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030104000000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) 13.042062662s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000eeffffffffff3e000000080003008c01e05a7dcb24d898d7f7c0c0cbd66f9d54d242b75a6b6eaeed3b856a863b48da8fc72ec5607167eb6792288479f34f77b06e652134304262ba74344b837935407e1bcf1db01a985dc4b2e33044020c416949332ace7947427e7dc386c271c82f84527be658b64dfa235dd88c78a8cec06c5449317a4fd2f518203826881d49e24064ffe33456dcdec62d5b33fe6e8b6ea6c04a", @ANYRES32=r5, @ANYBLOB="1c005e80080006000000000008000700000000000800050000000200"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x4]}, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030104000000280900020000000004010000000800010001000000"], 0x30}}, 0x8080) 3.203407812s ago: executing program 4 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x3843c}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}]}]}, 0x78}}, 0x80) 2.815457618s ago: executing program 3 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000000000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.526292285s ago: executing program 4 (id=1799): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f00000000c0)=0x4, 0x4) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0xc, 0x1ff, 0x8, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000010401030000000000000000000000270500010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) 2.504874138s ago: executing program 3 (id=1800): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xf, 0x3, 0x9, 0x7fffffff, 0x6, 0xa0, 0x40004}, 0x19) socketpair(0x2b, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x11, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd"], 0xffe) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0806", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xc, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x700, 0x507, 0x7ff}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x8001, 0x5, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @multicast2, {[@end, @rr={0x7, 0xf, 0x1e, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_prespec={0x44, 0x3c, 0x99, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xa}, {@rand_addr=0x64010101, 0x2}, {@local, 0x1}, {@remote, 0x4}, {@local, 0x4}, {@empty, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x1}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x57, [@local, @loopback, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x911d137e58f7b9a2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 2.251219712s ago: executing program 3 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0xc6, 0x3ff, 0x8040, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @value, @void, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd2a, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) close(r5) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x6, 0x28, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1f, 0x40, 0x1, 0x47806bcc}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x200, 0xf81, 0x21010, r0, 0xafd6, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x3, @void, @value, @void, @value}, 0x50) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r8, 0x112, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@id, &(0x7f0000000400)=0x10, 0x800) bind$packet(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 2.153913671s ago: executing program 2 (id=1802): r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xffff, 0xfffffff9, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x67, 0x0, 0xb, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20004014) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) socket$inet6(0xa, 0x1, 0x20001) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7, 0xfffffffffffffff9, 0x8, 0x100, 0x5, 0x81, 0x82b6, 0xf4}, 0x0, &(0x7f00000000c0)={0x59, 0xe, 0x1, 0x3f100, 0x8000000000000000, 0xc, 0x6, 0x1}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (async) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x168, 0x0, 0x228, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0xff000000, 'nicvf0\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0xca}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x7, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010200000000000000020000fffd05000100070000000900020073797a30000000000c0087800800124000000101050005000a0000000507041c0000000011000300526173683a69702c706f727400000000"], 0x58}}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1.943883805s ago: executing program 4 (id=1803): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1.874648218s ago: executing program 0 (id=1804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003b00070100000000000000000400000004000000040008800800010004"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) 1.802352848s ago: executing program 2 (id=1805): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000000)={@default, @bcast, @null, 0xa, 0x1ff, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f0000000000)) 1.753435219s ago: executing program 3 (id=1806): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @multicast1}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x7, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x8, 0x80, 0x5b9, 0x4f19}}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r1, 0xe1fcd11e8713af3f, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r8, 0x3}, 0x18) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r8, 0x1, {0x2}, 0x1}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.655683209s ago: executing program 4 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x32, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008004a000aac0f0004004400100049000aac0f000100000002ac0f0004001e01"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.514176613s ago: executing program 2 (id=1808): r0 = socket(0x2a, 0x2, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0x0, 0x10}}}, 0x24}}, 0x40) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x54, 0x2, 0x6}]}}]}, 0x38}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.499176677s ago: executing program 0 (id=1809): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000880)=""/87, 0x57}, {0x0, 0x1000000}], 0x3}}], 0x48}, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)="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", 0x241}], 0x1}}], 0x1, 0x0) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000140)="4fac2de17e96bd48be70e3964e6812afa44429cf18372b1f0f9ea45d1fbc27bb6290bfa0c5f058dcb5cba73076195ec16598a50c94bf4bd928c201407628e7caf30693b1a2ada13e8a19e8d9674113bb7c8170626b618ff78aa9a153632a202315c0eae4e141b74cfa94ef1d2c0bb5941f643ad0750c6b540f964ead9830c5a629e65ac0cb4a55f8191df753aca525fe443a6911ed6207b55c06b57d") 1.399685859s ago: executing program 4 (id=1810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@private2, @loopback, 0x3}}) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0xfffd, 0x0, 0xf0}) r4 = socket$inet(0x2, 0x802, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000440)=0x8, 0x4) write(r4, &(0x7f0000000080)="08008edf773c8000", 0xfd) (async) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x1f, 0x0, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1.305925725s ago: executing program 2 (id=1811): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x448, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000000180c200000008004600240000000000119078ac1e0001ac1414000703020000000000000c90780100000000"], 0x0) r1 = socket(0x22, 0x2, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, 0x0) 1.245616493s ago: executing program 3 (id=1812): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet6(r1, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket(0x200000100000011, 0x3, 0x0) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x18, r4, 0x1, 0x4, 0x6, @link_local}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000d000000001d23"], 0x1c}], 0x1}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 1.090126592s ago: executing program 4 (id=1813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x2, 0x45, 0x80, 0x57}, {0xfffd, 0x8, 0x9, 0x1}, {0x7, 0x4, 0x5, 0x9ea1}, {0x0, 0x4, 0xfd}, {0x8, 0x60, 0x9, 0x26a}, {0xa3, 0x6, 0x2, 0xd}, {0x1ff, 0x8, 0x10, 0xc67b}, {0x8, 0x35, 0x4, 0xffffffff}]}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}}, 0x40000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000008580)={0xa, 0x4e24, 0xad, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000008640), 0x4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf251f00000008000700e0000001080002000500000008000800ac1e01010c0001006e6c383032313100"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0xa, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x8) 1.011213752s ago: executing program 2 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, 0x0, 0x40895) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x23, 0x70bd23, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c5}, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="34b9785e", @ANYRES16=r1, @ANYBLOB="00012abd7000fedbdf255400000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000a0006000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000090) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r6, &(0x7f00000002c0)={0x23, 0xff, 0x2, 0x8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r11}, 0x14) syz_emit_ethernet(0x5a, &(0x7f00000003c0)=ANY=[], 0x0) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r8) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r12, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004100}, 0x8000) 758.3019ms ago: executing program 2 (id=1815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x70bd25, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "c87b656e285d281181111413f0081ddc21c51ffc7e9526ed8503c2aa9a5e0a96d01a3ad6c30d6baa1bdf0f6c4db0f4286fccba8944cee7e579a8dc8b3cde07b51c0a437334c8c52b2cc9301fdc5a473aaf13fbd5536aa0c719f9e37963f8e40ae29ee94ccd6deef4750b5d9d6e8dc3967a4a5190ce4bc0dc8fac276a4270ec73d98334dbb9a2c0797698e4386e2c1872d2a04e6904ccd29d2a7b59082689da3602b982a9a619fa91f33a33723f92930f8a430d10ca1d979db27615a77556811503f3e6f300770b42f29d54f7f5f2fbe93144d1ee8a63e74d5f84c61acf20e8931d09f7c29048edbaff2ea4b29242fd9eec8082002947c4fa12d0fbffe2c4befd", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "0c0b0ac4394b70b5"}}}]}, 0x154}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe90}}], 0x1, 0x41, 0x0) (async, rerun: 32) socket(0x1e, 0x804, 0x0) 544.603957ms ago: executing program 0 (id=1816): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x4d, 0x0}}], 0x1, 0x20000000) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2}}, 0x0, 0x7ffe}, 0x90) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="9bb8442afce24880561482fd601e6170", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x0, 0x7, 0x3, 0x3e, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x200}}, @sadb_x_sec_ctx={0x1a, 0x18, 0x0, 0x88, 0xc4, "be2ce26c8223e6db26603017786ad0dd9ae4d43fb43bfaf448c4b9bf97d62bb08b687cde1003b2a6a73a2a342ce65ce857beeb73e6df15b3e58beddae2eef50c6b970c63f372d4d40c3af9fdd3df7bd4d6503aa41104e8961c43afa9ce89022b54f24a994c714a64bb2eb448adf2684be6d09003c0d4fae45e32f24ca9336dad0f9975f70c15c3bf9aa9f0db8fabe79c6ac8abd7c82df3e98f83d1ef2379381c6ed350cd33a4e58429c39717b361fe3dd5a1c928c36057ecca7891117b08670874f69f92"}, @sadb_x_policy={0x8, 0x12, 0x1, 0x6, 0x0, 0x6e6bb4, 0x40000000, {0x6, 0x33, 0xff, 0x8, 0x0, 0x9, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1}}, @sadb_x_sec_ctx={0x13, 0x18, 0x34, 0xe, 0x90, "bfe572ab7cb8a77768c1a986a0f8cdc859f29d5ebb9cdd719ceb94a3579af234f18c47ac0ad54b4797a9e7ac983464b06db2c105a7bf746f05afed422aa8da045146425b499b12f57fb61e79369c7479a11fa481fa46b10d0cde6807922c2a6732c5bc6371e7885d82efd52eb9ea9c68e6e2a5e665c73a531b57bead716010016af828cfd44aedeafedfc7e001ac214b"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x5, 0x7, 0x70, 0x3}]}, 0x1f0}}, 0x40012) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x0, 0x10010, r1, 0x89ad8000) 258.920835ms ago: executing program 3 (id=1817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0xc6, 0x3ff, 0x8040, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @value, @void, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd2a, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) close(r5) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x6, 0x28, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1f, 0x40, 0x1, 0x47806bcc}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x200, 0xf81, 0x21010, r0, 0xafd6, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x3, @void, @value, @void, @value}, 0x50) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r8, 0x112, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x1}, 0x10) bind$packet(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 194.167239ms ago: executing program 0 (id=1818): mmap(&(0x7f0000000000/0x2000)=nil, 0xf0ff1f, 0x0, 0xd6071, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x20f, &(0x7f0000000440)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x1, 0x5, 0x201, 0x64, 0x0, 0x8f, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x10, 0x40, 0x0, 0x3, [0xc, 0x774, 0x1000]}, @rr={0x7, 0x17, 0xc9, [@multicast2, @multicast2, @loopback, @loopback, @rand_addr=0x64010102]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x78, 0x1, [], "fbcdaf61244bad900bdab893fdade4125dbed12c1132f746c0716533d04c71de847ecc9867aedf149181559b809dd0e7ba2da30cdbb527ff40c2a58bbec245e55b2e37ca2961323ec3bdd154181b8f7e7e8ecb0b18eb533aba2d4b543af7029ddc62d20de58a1af5066878d373c7d0c0976a10ca0032ca28"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xff, 0x0], "104f3443a5628bd99543d054d6da145b297bec3c54bd1764b29d697de8875e9cd8da785e36b93fbb2c68ed244893e1ab5b7ff070397ebca9c411c20f86bbc0f427f2b7e1471906461f73b5505621f41b8ef10d7238276a83b756cf37e598cb4c288c2e7b2cec70e869ec5af000fc08378a82fdc3fab8b953b1959623b059f4193285d962cc532478e9f6002368878aa7a9c71a618d6c78d0cddb79e9149bdc32eb1f7ed088e3aeb2017631056dfb97fc"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x81, 0x0], "ea6d38"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x7, 0x1, 0x0, 0x0, 0x5, 0x6c}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x7, 0x2, 0x1, 0x0, 0x7, 0x2}, 0x2, {0x101, 0xdae8, 0x1, 0x8, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x3, "691ea2aac8afe08ee5bbe05d3a5348212e1ad6ace75fa7b353dd7a5c06375ef28081c97a2dedaf20aa97303b05b177b276bf325ac43793a8d1943827cceaef380cd29f709c439d7e117df97d5f9c"}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x0, 0x34}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYRESDEC=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaa81a6946c0f3d0725baaaaaaaaaaaaaaa0008004500f2a7ec74edd2457d90780a0101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc00000090780000020000000402007ea2898405704bcf372ce60000"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000061a00010000000000fbdbdf250a1b24b9f80700adf2f96f583a4618000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc0000000000000000000000000000010800020002000000"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x1c0e, @private2, 0x1000}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mmap(&(0x7f0000b79000/0x10000)=nil, 0x200000, 0x0, 0xf442febf1daae972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x30}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x40004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 94.123613ms ago: executing program 0 (id=1819): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x2, 0x80000, 0x200) r2 = accept4$unix(r1, &(0x7f0000000200), &(0x7f00000000c0)=0x6e, 0x800) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 0 (id=1820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) accept4$alg(r1, 0x0, 0x0, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x20008040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="009d0feb58a6d5ed362cd310b09e6d0000000000000000000000ffffff227301"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4028}, 0x24000080) kernel console output (not intermixed with test programs): atadv_slave_0 [ 116.540598][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.556625][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.564125][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.599480][ T3904] veth1_macvtap: left promiscuous mode [ 116.605257][ T3904] veth0_macvtap: left promiscuous mode [ 116.610848][ T3904] veth1_vlan: left promiscuous mode [ 116.616366][ T3904] veth0_vlan: left promiscuous mode [ 117.080181][ T3904] team0 (unregistering): Port device team_slave_1 removed [ 117.139465][ T3904] team0 (unregistering): Port device team_slave_0 removed [ 117.510844][ T8151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.531296][ T8257] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 117.540119][ T8260] veth0_vlan: left promiscuous mode [ 117.560793][ T8260] veth0_vlan: entered promiscuous mode [ 117.584702][ T8151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.605748][ T5245] Bluetooth: hci0: command tx timeout [ 117.626552][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 117.637654][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 117.733214][ T8277] nftables ruleset with unbound chain [ 117.828082][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.902857][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.927432][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.934904][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.961749][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.968984][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.071373][ T8151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.094658][ T8151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.143878][ T8295] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 118.175131][ T8295] netlink: 9392 bytes leftover after parsing attributes in process `syz.4.942'. [ 118.204902][ T8295] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 118.205250][ T8302] netlink: 'syz.3.945': attribute type 4 has an invalid length. [ 118.259943][ T8302] sctp: [Deprecated]: syz.3.945 (pid 8302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.259943][ T8302] Use struct sctp_sack_info instead [ 118.287219][ T8302] sctp: [Deprecated]: syz.3.945 (pid 8302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.287219][ T8302] Use struct sctp_sack_info instead [ 118.374262][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 118.389374][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.947'. [ 118.433963][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 118.457792][ T8312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'. [ 118.490026][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.599803][ T8151] veth0_vlan: entered promiscuous mode [ 118.631074][ T8151] veth1_vlan: entered promiscuous mode [ 118.707863][ T8151] veth0_macvtap: entered promiscuous mode [ 118.738272][ T8151] veth1_macvtap: entered promiscuous mode [ 118.773484][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.801938][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.813306][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.824819][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.834783][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.845957][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.874241][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.899614][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.916890][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.932485][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.950036][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.961291][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.990520][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.036044][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.065521][ T8352] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.088034][ T8151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.109339][ T8151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.145171][ T8151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.153930][ T8151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.192406][ T8348] pim6reg1: entered promiscuous mode [ 119.208491][ T8348] pim6reg1: entered allmulticast mode [ 119.220616][ T8358] macsec0: entered promiscuous mode [ 119.231735][ T8358] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 119.382289][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.403382][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.434456][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.452019][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.832507][ T8388] netlink: 'syz.2.969': attribute type 3 has an invalid length. [ 120.142747][ T8413] netlink: 'syz.4.976': attribute type 9 has an invalid length. [ 120.277920][ T8427] C: renamed from team_slave_0 [ 120.315966][ T8427] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 120.323662][ T8427] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.755620][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.356765][ T8470] IPVS: Error connecting to the multicast addr [ 121.633464][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.642717][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.670037][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.691534][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.705492][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.713101][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.859513][ T8482] Cannot find set identified by id 3 to match [ 122.118640][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.228775][ T8517] xt_CT: No such helper "snmp" [ 122.415665][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.508819][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.524886][ T8538] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 122.632196][ T8547] ipt_REJECT: TCP_RESET invalid for non-tcp [ 122.641767][ T8543] __nla_validate_parse: 7 callbacks suppressed [ 122.641784][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 122.673477][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 122.822280][ T8558] xt_hashlimit: max too large, truncated to 1048576 [ 122.836378][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 122.961537][ T11] bridge_slave_1: left allmulticast mode [ 122.977661][ T11] bridge_slave_1: left promiscuous mode [ 122.991929][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.050597][ T11] bridge_slave_0: left allmulticast mode [ 123.067397][ T11] bridge_slave_0: left promiscuous mode [ 123.082316][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.767726][ T54] Bluetooth: hci0: command tx timeout [ 124.361003][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.372094][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.383726][ T11] bond0 (unregistering): Released all slaves [ 124.518266][ T8580] pim6reg1: entered promiscuous mode [ 124.523611][ T8580] pim6reg1: entered allmulticast mode [ 124.530457][ T8587] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 124.610059][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.620547][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.633864][ T8480] bridge_slave_0: entered allmulticast mode [ 124.651788][ T8480] bridge_slave_0: entered promiscuous mode [ 124.732611][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.740597][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.748373][ T8480] bridge_slave_1: entered allmulticast mode [ 124.763397][ T8480] bridge_slave_1: entered promiscuous mode [ 124.876666][ T8602] netlink: 'syz.3.1026': attribute type 4 has an invalid length. [ 124.898454][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 124.937624][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.958833][ T8599] netlink: 'syz.3.1026': attribute type 4 has an invalid length. [ 125.020514][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.167518][ T8613] sctp: [Deprecated]: syz.4.1033 (pid 8613) Use of int in max_burst socket option. [ 125.167518][ T8613] Use struct sctp_assoc_value instead [ 125.235392][ T8480] team0: Port device team_slave_0 added [ 125.257981][ T11] hsr_slave_0: left promiscuous mode [ 125.272572][ T11] hsr_slave_1: left promiscuous mode [ 125.296122][ T8620] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1036'. [ 125.305979][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.313445][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.337930][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.345623][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.376709][ T11] veth1_macvtap: left promiscuous mode [ 125.382272][ T11] veth0_macvtap: left promiscuous mode [ 125.388008][ T11] veth1_vlan: left promiscuous mode [ 125.393310][ T11] veth0_vlan: left promiscuous mode [ 125.415200][ T8628] FAULT_INJECTION: forcing a failure. [ 125.415200][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.438575][ T8628] CPU: 1 UID: 0 PID: 8628 Comm: syz.4.1037 Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 125.449324][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.459420][ T8628] Call Trace: [ 125.462735][ T8628] [ 125.465767][ T8628] dump_stack_lvl+0x241/0x360 [ 125.470455][ T8628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.475661][ T8628] ? __pfx__printk+0x10/0x10 [ 125.480285][ T8628] ? __pfx_lock_release+0x10/0x10 [ 125.485342][ T8628] should_fail_ex+0x3b0/0x4e0 [ 125.490051][ T8628] _copy_from_user+0x2f/0xe0 [ 125.494673][ T8628] copy_msghdr_from_user+0xae/0x680 [ 125.499908][ T8628] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.505763][ T8628] __sys_sendmsg+0x22d/0x380 [ 125.510378][ T8628] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.515524][ T8628] ? __pfx_vfs_write+0x10/0x10 [ 125.520339][ T8628] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.526702][ T8628] ? do_syscall_64+0x100/0x230 [ 125.531499][ T8628] ? do_syscall_64+0xb6/0x230 [ 125.536199][ T8628] do_syscall_64+0xf3/0x230 [ 125.540694][ T8628] ? clear_bhb_loop+0x35/0x90 [ 125.545390][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.551380][ T8628] RIP: 0033:0x7f697477dff9 [ 125.555795][ T8628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.575406][ T8628] RSP: 002b:00007f69754cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.583828][ T8628] RAX: ffffffffffffffda RBX: 00007f6974936058 RCX: 00007f697477dff9 [ 125.591794][ T8628] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 125.599760][ T8628] RBP: 00007f69754cd090 R08: 0000000000000000 R09: 0000000000000000 [ 125.607735][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.615715][ T8628] R13: 0000000000000001 R14: 00007f6974936058 R15: 00007ffe6d3415f8 [ 125.623691][ T8628] [ 125.848070][ T54] Bluetooth: hci0: command tx timeout [ 126.001748][ T11] team0 (unregistering): Port device team_slave_1 removed [ 126.046695][ T11] team0 (unregistering): Port device team_slave_0 removed [ 126.441749][ T8480] team0: Port device team_slave_1 added [ 126.464853][ T8621] wg0: entered allmulticast mode [ 126.470004][ T8623] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1034'. [ 126.574735][ T8636] netlink: 'syz.4.1041': attribute type 40 has an invalid length. [ 126.588000][ T8638] netlink: 'syz.0.1040': attribute type 3 has an invalid length. [ 126.592381][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 126.603826][ T8638] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1040'. [ 126.617974][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.625864][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.659459][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.680234][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.694988][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.743613][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.988734][ T8480] hsr_slave_0: entered promiscuous mode [ 127.007769][ T8480] hsr_slave_1: entered promiscuous mode [ 127.041615][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.050061][ T8480] Cannot create hsr debugfs directory [ 127.111176][ T8662] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1048'. [ 127.144904][ T8662] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 127.233455][ T8667] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 127.270053][ T8670] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1049'. [ 127.291718][ T8670] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 127.323446][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 127.337574][ T8673] netlink: 'syz.4.1052': attribute type 40 has an invalid length. [ 127.435388][ T8677] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 127.829426][ T8713] netlink: 'syz.0.1065': attribute type 40 has an invalid length. [ 127.895977][ T8718] netlink: 'syz.3.1066': attribute type 13 has an invalid length. [ 127.938806][ T54] Bluetooth: hci0: command tx timeout [ 127.970765][ T8723] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 128.111965][ T8480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.128163][ T8480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.143203][ T8480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.153709][ T8480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.248879][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.267974][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.302218][ T8480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.312732][ T8480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.410211][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.417391][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.456118][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.463269][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.509366][ T8748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.599072][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.754852][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1075'. [ 128.763886][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 128.821244][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 128.906663][ T8760] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.916213][ T8760] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.925399][ T8760] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.934423][ T8760] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.943643][ T8760] geneve2: entered promiscuous mode [ 128.949455][ T8760] geneve2: entered allmulticast mode [ 128.977522][ T8480] veth0_vlan: entered promiscuous mode [ 129.012459][ T8480] veth1_vlan: entered promiscuous mode [ 129.105559][ T8779] delete_channel: no stack [ 129.130500][ T8480] veth0_macvtap: entered promiscuous mode [ 129.158805][ T8480] veth1_macvtap: entered promiscuous mode [ 129.190138][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.223599][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.243303][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.254216][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.264740][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.282590][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.297525][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.305822][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 129.312425][ T8795] sctp: [Deprecated]: syz.2.1085 (pid 8795) Use of int in maxseg socket option. [ 129.312425][ T8795] Use struct sctp_assoc_value instead [ 129.316116][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1083'. [ 129.350995][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.381248][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.404830][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.419065][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.429540][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.440285][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.452232][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.464851][ T8480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.474019][ T8480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.484664][ T8480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.493567][ T8480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.517844][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 129.683166][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.714282][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.733931][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.751461][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.403981][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 130.433501][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 130.548606][ T8832] syzkaller1: entered promiscuous mode [ 130.559055][ T8832] syzkaller1: entered allmulticast mode [ 130.595156][ T8835] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 130.614718][ T8835] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 130.680722][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1097'. [ 131.010151][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 131.210028][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.862588][ T8877] validate_nla: 2 callbacks suppressed [ 131.862608][ T8877] netlink: 'syz.0.1107': attribute type 32 has an invalid length. [ 132.225344][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.264278][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.276237][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.294234][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.302271][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.309751][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.532514][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.646364][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.737444][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.877812][ T8904] chnl_net:caif_netlink_parms(): no params data found [ 132.895930][ T8943] netlink: 'syz.4.1128': attribute type 2 has an invalid length. [ 133.041787][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.074960][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.082493][ T8904] bridge_slave_0: entered allmulticast mode [ 133.090656][ T8904] bridge_slave_0: entered promiscuous mode [ 133.099111][ T11] bridge_slave_1: left allmulticast mode [ 133.105558][ T11] bridge_slave_1: left promiscuous mode [ 133.111485][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.123650][ T11] bridge_slave_0: left allmulticast mode [ 133.133043][ T11] bridge_slave_0: left promiscuous mode [ 133.139200][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.651424][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.665463][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.677400][ T11] bond0 (unregistering): Released all slaves [ 133.734240][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.745385][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.752753][ T8904] bridge_slave_1: entered allmulticast mode [ 133.773286][ T8904] bridge_slave_1: entered promiscuous mode [ 133.866813][ T8904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.936741][ T8904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.961608][ T8969] __nla_validate_parse: 3 callbacks suppressed [ 133.961626][ T8969] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1134'. [ 133.997546][ T8904] team0: Port device team_slave_0 added [ 134.011567][ T8904] team0: Port device team_slave_1 added [ 134.043663][ T8967] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1135'. [ 134.130445][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 134.140313][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.147844][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.177938][ T8904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.214146][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.221819][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.266556][ T8904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.382884][ T8904] hsr_slave_0: entered promiscuous mode [ 134.405253][ T54] Bluetooth: hci0: command tx timeout [ 134.412971][ T8904] hsr_slave_1: entered promiscuous mode [ 134.429313][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 134.439049][ T8904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.446774][ T8904] Cannot create hsr debugfs directory [ 134.508550][ T11] hsr_slave_0: left promiscuous mode [ 134.521352][ T11] hsr_slave_1: left promiscuous mode [ 134.541381][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.562371][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.591259][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.599808][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.631733][ T11] veth1_macvtap: left promiscuous mode [ 134.639548][ T11] veth0_macvtap: left promiscuous mode [ 134.646931][ T11] veth1_vlan: left promiscuous mode [ 134.652376][ T11] veth0_vlan: left promiscuous mode [ 135.129015][ T11] team0 (unregistering): Port device team_slave_1 removed [ 135.170687][ T11] team0 (unregistering): Port device team_slave_0 removed [ 135.563097][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 135.988951][ T9025] netlink: 'syz.4.1154': attribute type 29 has an invalid length. [ 136.151303][ T9029] netlink: 'syz.4.1156': attribute type 4 has an invalid length. [ 136.222998][ T9029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1156'. [ 136.373223][ T8904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.382508][ T9038] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 136.392048][ T8904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.402895][ T8904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.418688][ T8904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.485102][ T54] Bluetooth: hci0: command tx timeout [ 136.587138][ T8904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.613613][ T8904] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.637501][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.644687][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.653791][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.660918][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.868866][ T8904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.912830][ T8904] veth0_vlan: entered promiscuous mode [ 136.930617][ T8904] veth1_vlan: entered promiscuous mode [ 136.959667][ T8904] veth0_macvtap: entered promiscuous mode [ 136.969314][ T8904] veth1_macvtap: entered promiscuous mode [ 136.999878][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.011278][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.035276][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.048386][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.059123][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.071010][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.082374][ T9060] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 137.093211][ T8904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.100842][ T9060] netlink: 9260 bytes leftover after parsing attributes in process `syz.2.1163'. [ 137.116133][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.127694][ T9060] netlink: 'syz.2.1163': attribute type 2 has an invalid length. [ 137.136702][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.147114][ T9060] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 137.155879][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.167221][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.193271][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.207558][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.235526][ T8904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.251596][ T8904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.268185][ T8904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.290111][ T8904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.303587][ T8904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.313089][ T9064] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.1165'. [ 137.324076][ T9064] netlink: 133 bytes leftover after parsing attributes in process `syz.2.1165'. [ 137.361736][ T9069] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1166'. [ 137.440763][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.456979][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.499507][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.517648][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.720775][ T9087] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 137.732264][ T9087] netlink: 'syz.4.1171': attribute type 2 has an invalid length. [ 138.297142][ T9098] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 138.361247][ T9100] FAULT_INJECTION: forcing a failure. [ 138.361247][ T9100] name failslab, interval 1, probability 0, space 0, times 1 [ 138.374401][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.3.1176 Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 138.385210][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.395285][ T9100] Call Trace: [ 138.398570][ T9100] [ 138.401503][ T9100] dump_stack_lvl+0x241/0x360 [ 138.406186][ T9100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.411386][ T9100] ? __pfx__printk+0x10/0x10 [ 138.415986][ T9100] ? __kmalloc_noprof+0xb0/0x400 [ 138.420936][ T9100] ? __pfx___might_resched+0x10/0x10 [ 138.426229][ T9100] should_fail_ex+0x3b0/0x4e0 [ 138.430912][ T9100] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 138.437183][ T9100] should_failslab+0xac/0x100 [ 138.441863][ T9100] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 138.448111][ T9100] __kmalloc_noprof+0xd8/0x400 [ 138.452876][ T9100] ? apparmor_capable+0x13b/0x1b0 [ 138.457902][ T9100] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 138.464154][ T9100] genl_rcv_msg+0x802/0xec0 [ 138.468657][ T9100] ? mark_lock+0x9a/0x360 [ 138.472988][ T9100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.478027][ T9100] ? __pfx_lock_acquire+0x10/0x10 [ 138.483055][ T9100] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 138.488429][ T9100] ? __pfx_nl80211_start_ap+0x10/0x10 [ 138.493810][ T9100] ? __pfx_nl80211_post_doit+0x10/0x10 [ 138.499270][ T9100] ? __pfx___might_resched+0x10/0x10 [ 138.504579][ T9100] netlink_rcv_skb+0x1e3/0x430 [ 138.509363][ T9100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.514402][ T9100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.519697][ T9100] ? __netlink_deliver_tap+0x77e/0x7c0 [ 138.525165][ T9100] genl_rcv+0x28/0x40 [ 138.529324][ T9100] netlink_unicast+0x7f6/0x990 [ 138.534103][ T9100] ? __pfx_netlink_unicast+0x10/0x10 [ 138.539386][ T9100] ? __virt_addr_valid+0x183/0x530 [ 138.544497][ T9100] ? __check_object_size+0x48e/0x900 [ 138.549789][ T9100] netlink_sendmsg+0x8e4/0xcb0 [ 138.554580][ T9100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.559874][ T9100] ? aa_sock_msg_perm+0x91/0x160 [ 138.564867][ T9100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.570159][ T9100] __sock_sendmsg+0x221/0x270 [ 138.574848][ T9100] ____sys_sendmsg+0x52a/0x7e0 [ 138.579623][ T9100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.584934][ T9100] __sys_sendmsg+0x292/0x380 [ 138.589531][ T9100] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.594661][ T9100] ? __pfx_vfs_write+0x10/0x10 [ 138.599449][ T9100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.605782][ T9100] ? do_syscall_64+0x100/0x230 [ 138.610547][ T9100] ? do_syscall_64+0xb6/0x230 [ 138.615222][ T9100] do_syscall_64+0xf3/0x230 [ 138.619725][ T9100] ? clear_bhb_loop+0x35/0x90 [ 138.624404][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.630308][ T9100] RIP: 0033:0x7f63d477dff9 [ 138.634733][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.654360][ T9100] RSP: 002b:00007f63d5548038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.662788][ T9100] RAX: ffffffffffffffda RBX: 00007f63d4935f80 RCX: 00007f63d477dff9 [ 138.670758][ T9100] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 138.678728][ T9100] RBP: 00007f63d5548090 R08: 0000000000000000 R09: 0000000000000000 [ 138.686971][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.694974][ T9100] R13: 0000000000000000 R14: 00007f63d4935f80 R15: 00007ffc7b28d5b8 [ 138.703068][ T9100] [ 138.759395][ T9103] bridge2: entered promiscuous mode [ 138.775214][ T9103] bridge2: entered allmulticast mode [ 138.786909][ T9103] team0: Port device bridge2 added [ 138.966220][ T9123] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 138.990745][ T9123] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 139.189795][ T3453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.067209][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.077108][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.087021][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.095299][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.102852][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.110960][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.153730][ T9143] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 140.162123][ T9143] __nla_validate_parse: 3 callbacks suppressed [ 140.162142][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 140.193762][ T9148] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1190'. [ 140.355782][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.410283][ T9158] team0 (unregistering): Port device C removed [ 140.432294][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 140.458957][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.493104][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.502795][ T9161] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1194'. [ 140.530435][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.557399][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.570373][ T9164] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 140.582650][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.612220][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.663875][ T9156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 140.740683][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 140.867088][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.874226][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.889451][ T9140] bridge_slave_0: entered allmulticast mode [ 140.925835][ T9140] bridge_slave_0: entered promiscuous mode [ 140.998817][ T3453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.022453][ T9181] FAULT_INJECTION: forcing a failure. [ 141.022453][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 141.035310][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.035383][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.057801][ T9140] bridge_slave_1: entered allmulticast mode [ 141.068367][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.3.1199 Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 141.071568][ T9140] bridge_slave_1: entered promiscuous mode [ 141.079079][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.079093][ T9181] Call Trace: [ 141.079101][ T9181] [ 141.079110][ T9181] dump_stack_lvl+0x241/0x360 [ 141.079139][ T9181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.079157][ T9181] ? __pfx__printk+0x10/0x10 [ 141.079190][ T9181] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 141.079216][ T9181] ? __pfx___might_resched+0x10/0x10 [ 141.079246][ T9181] should_fail_ex+0x3b0/0x4e0 [ 141.079277][ T9181] should_failslab+0xac/0x100 [ 141.079299][ T9181] ? __alloc_skb+0x1c3/0x440 [ 141.079319][ T9181] kmem_cache_alloc_node_noprof+0x71/0x320 [ 141.079349][ T9181] __alloc_skb+0x1c3/0x440 [ 141.079373][ T9181] ? __pfx___alloc_skb+0x10/0x10 [ 141.079399][ T9181] ? netlink_ack_tlv_len+0x6e/0x200 [ 141.079428][ T9181] netlink_ack+0x13f/0xa30 [ 141.079451][ T9181] ? __pfx_lock_acquire+0x10/0x10 [ 141.079476][ T9181] ? __pfx_nl80211_start_ap+0x10/0x10 [ 141.079497][ T9181] ? __pfx_nl80211_post_doit+0x10/0x10 [ 141.079534][ T9181] netlink_rcv_skb+0x262/0x430 [ 141.079561][ T9181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.079585][ T9181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.079623][ T9181] ? __netlink_deliver_tap+0x77e/0x7c0 [ 141.079653][ T9181] genl_rcv+0x28/0x40 [ 141.079673][ T9181] netlink_unicast+0x7f6/0x990 [ 141.079703][ T9181] ? __pfx_netlink_unicast+0x10/0x10 [ 141.079723][ T9181] ? __virt_addr_valid+0x183/0x530 [ 141.079745][ T9181] ? __check_object_size+0x48e/0x900 [ 141.079771][ T9181] netlink_sendmsg+0x8e4/0xcb0 [ 141.079803][ T9181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.079826][ T9181] ? aa_sock_msg_perm+0x91/0x160 [ 141.079854][ T9181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.079872][ T9181] __sock_sendmsg+0x221/0x270 [ 141.079899][ T9181] ____sys_sendmsg+0x52a/0x7e0 [ 141.079926][ T9181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.262108][ T9181] __sys_sendmsg+0x292/0x380 [ 141.266733][ T9181] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.271889][ T9181] ? __pfx_vfs_write+0x10/0x10 [ 141.276712][ T9181] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.283084][ T9181] ? do_syscall_64+0x100/0x230 [ 141.287985][ T9181] ? do_syscall_64+0xb6/0x230 [ 141.292683][ T9181] do_syscall_64+0xf3/0x230 [ 141.297191][ T9181] ? clear_bhb_loop+0x35/0x90 [ 141.301984][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.307903][ T9181] RIP: 0033:0x7f63d477dff9 [ 141.312342][ T9181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.332173][ T9181] RSP: 002b:00007f63d5527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.340631][ T9181] RAX: ffffffffffffffda RBX: 00007f63d4936058 RCX: 00007f63d477dff9 [ 141.348627][ T9181] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 141.356630][ T9181] RBP: 00007f63d5527090 R08: 0000000000000000 R09: 0000000000000000 [ 141.364610][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.372606][ T9181] R13: 0000000000000001 R14: 00007f63d4936058 R15: 00007ffc7b28d5b8 [ 141.380636][ T9181] [ 141.466607][ T3453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.520216][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.546507][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.589013][ T3453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.622060][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'. [ 141.632095][ T9199] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 141.714386][ T9140] team0: Port device team_slave_0 added [ 141.754119][ T9140] team0: Port device team_slave_1 added [ 141.801089][ T9214] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 141.819854][ T9214] netlink: 'syz.0.1209': attribute type 2 has an invalid length. [ 141.840266][ T9214] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1209'. [ 141.929239][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.947168][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.984489][ T9215] net_ratelimit: 25 callbacks suppressed [ 141.984508][ T9215] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 142.023073][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.123373][ T9230] netlink: 'syz.3.1215': attribute type 1 has an invalid length. [ 142.132548][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.155404][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.181920][ T54] Bluetooth: hci0: command tx timeout [ 142.200775][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.346661][ T3453] bridge_slave_1: left allmulticast mode [ 142.352366][ T3453] bridge_slave_1: left promiscuous mode [ 142.362422][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.398434][ T3453] bridge_slave_0: left allmulticast mode [ 142.404226][ T3453] bridge_slave_0: left promiscuous mode [ 142.411064][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.730233][ T9265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1226'. [ 142.831491][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.844403][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.856581][ T3453] bond0 (unregistering): Released all slaves [ 142.869997][ T9140] hsr_slave_0: entered promiscuous mode [ 142.877680][ T9140] hsr_slave_1: entered promiscuous mode [ 142.884034][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.892323][ T9140] Cannot create hsr debugfs directory [ 142.906543][ T9251] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 142.954987][ T9256] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 142.990422][ T9257] pim6reg: entered allmulticast mode [ 143.476461][ T9287] sctp: [Deprecated]: syz.3.1230 (pid 9287) Use of int in max_burst socket option. [ 143.476461][ T9287] Use struct sctp_assoc_value instead [ 143.718390][ T9301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1238'. [ 144.088032][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.100638][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.111298][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.124490][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.135316][ T9334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'. [ 144.148551][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.161056][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.171359][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.181320][ T9336] netlink: 'syz.0.1246': attribute type 11 has an invalid length. [ 144.191221][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.201959][ T9336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1246'. [ 144.219276][ T3453] hsr_slave_0: left promiscuous mode [ 144.232487][ T3453] hsr_slave_1: left promiscuous mode [ 144.239962][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.247820][ T54] Bluetooth: hci0: command tx timeout [ 144.254927][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.263116][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.270980][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.297448][ T3453] veth1_macvtap: left promiscuous mode [ 144.303711][ T3453] veth0_macvtap: left promiscuous mode [ 144.310023][ T3453] veth1_vlan: left promiscuous mode [ 144.316009][ T3453] veth0_vlan: left promiscuous mode [ 144.761017][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 144.804950][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 145.218547][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 145.228356][ T9335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.243490][ T9335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.367588][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 145.600179][ T9353] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1255'. [ 145.768384][ T9367] sctp: [Deprecated]: syz.2.1258 (pid 9367) Use of int in max_burst socket option deprecated. [ 145.768384][ T9367] Use struct sctp_assoc_value instead [ 145.843177][ T9140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.861327][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 145.873346][ T9140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.892742][ T9140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.919078][ T9140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.932464][ T9373] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 145.942255][ T9378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1260'. [ 145.981609][ T9381] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1262'. [ 146.027101][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 146.130975][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.180827][ T9390] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1265'. [ 146.187424][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.209927][ T9391] netlink: 'syz.2.1264': attribute type 11 has an invalid length. [ 146.220018][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.227217][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.264180][ T3904] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.271369][ T3904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.320623][ T9401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 146.330650][ T54] Bluetooth: hci0: command tx timeout [ 146.411869][ T9399] netlink: 'syz.2.1268': attribute type 12 has an invalid length. [ 146.471929][ T9411] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1269'. [ 146.770743][ T9431] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.789156][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.898441][ T9436] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 146.926458][ T9140] veth0_vlan: entered promiscuous mode [ 146.960896][ T9140] veth1_vlan: entered promiscuous mode [ 147.022708][ T9140] veth0_macvtap: entered promiscuous mode [ 147.042759][ T9140] veth1_macvtap: entered promiscuous mode [ 147.111385][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.137617][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.165860][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.195507][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.218877][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.248910][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.272677][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.300991][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.314431][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.331381][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.353228][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.375712][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.392183][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.410467][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.460099][ T9140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.491052][ T9140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.514637][ T9140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.532509][ T9140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.593062][ T9470] tipc: Started in network mode [ 147.606187][ T9470] tipc: Node identity ac1414aa, cluster identity 4711 [ 147.640523][ T9470] tipc: Enabled bearer , priority 10 [ 147.760916][ T9478] netlink: 'syz.4.1293': attribute type 1 has an invalid length. [ 147.794309][ T9476] syzkaller0: entered promiscuous mode [ 147.800146][ T9476] syzkaller0: entered allmulticast mode [ 147.810944][ T9484] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 147.826006][ T9484] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 147.834002][ T9484] netlink: 'syz.2.1294': attribute type 2 has an invalid length. [ 147.845277][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.868738][ T9478] Unknown options in mask 1f4 [ 147.874386][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.406327][ T54] Bluetooth: hci0: command tx timeout [ 148.767634][ T46] tipc: Node number set to 2886997162 [ 149.503598][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.533442][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.541549][ T3791] team0: left allmulticast mode [ 149.564184][ T3791] team_slave_0: left allmulticast mode [ 149.584739][ T3791] team_slave_1: left allmulticast mode [ 149.591382][ T3791] team0: left promiscuous mode [ 149.613887][ T3791] team_slave_0: left promiscuous mode [ 149.633482][ T3791] team_slave_1: left promiscuous mode [ 149.643895][ T3791] bridge0: port 3(team0) entered disabled state [ 149.670364][ T3791] bridge_slave_0: left allmulticast mode [ 149.676717][ T3791] bridge_slave_0: left promiscuous mode [ 149.683981][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.785860][ T3791] ip6gretap0 (unregistering): left allmulticast mode [ 150.042212][ T3791] team0: Port device bridge1 removed [ 150.200173][ T3791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.212188][ T3791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.225341][ T3791] bond0 (unregistering): Released all slaves [ 150.237888][ T3791] bond1 (unregistering): Released all slaves [ 150.437175][ T9505] pim6reg1: entered promiscuous mode [ 150.442505][ T9505] pim6reg1: entered allmulticast mode [ 150.619804][ T9513] __nla_validate_parse: 5 callbacks suppressed [ 150.619824][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 151.003049][ T3791] batadv_slave_0: left promiscuous mode [ 151.017675][ T3791] hsr_slave_0: left promiscuous mode [ 151.023488][ T3791] hsr_slave_1: left promiscuous mode [ 151.029714][ T3791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.037283][ T3791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.045515][ T3791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.052923][ T3791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.073908][ T3791] veth1_macvtap: left promiscuous mode [ 151.079596][ T3791] veth0_macvtap: left promiscuous mode [ 151.089003][ T3791] veth1_vlan: left promiscuous mode [ 151.095772][ T3791] veth0_vlan: left promiscuous mode [ 151.479515][ T3791] team0 (unregistering): Port device team_slave_1 removed [ 151.519013][ T3791] team0 (unregistering): Port device team_slave_0 removed [ 152.039529][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.064085][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.078039][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.090937][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.102858][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.111320][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.137873][ T9534] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 152.189983][ T9534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.223062][ T9540] bond3: (slave bridge5): making interface the new active one [ 152.238988][ T9540] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 152.301816][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'. [ 152.409810][ T9564] IPv6: sit2: Disabled Multicast RS [ 152.637669][ T9550] chnl_net:caif_netlink_parms(): no params data found [ 152.695786][ T3453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.750534][ T9580] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.1323'. [ 152.764349][ T9580] netlink: 'syz.2.1323': attribute type 3 has an invalid length. [ 152.781142][ T9580] netlink: 121 bytes leftover after parsing attributes in process `syz.2.1323'. [ 152.793638][ T3453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.884488][ T3453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.911829][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.916291][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 152.931159][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.940155][ T9550] bridge_slave_0: entered allmulticast mode [ 152.947820][ T9550] bridge_slave_0: entered promiscuous mode [ 152.978785][ T3453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.993911][ T9550] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.001812][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.010060][ T9550] bridge_slave_1: entered allmulticast mode [ 153.017664][ T9550] bridge_slave_1: entered promiscuous mode [ 153.053556][ T9550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.080190][ T9550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.120908][ T9550] team0: Port device team_slave_0 added [ 153.132534][ T9550] team0: Port device team_slave_1 added [ 153.214220][ T9550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.231698][ T9550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.263101][ T9550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.316159][ T9550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.323155][ T9550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.352140][ T9550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.392976][ T3453] bridge_slave_1: left allmulticast mode [ 153.399731][ T3453] bridge_slave_1: left promiscuous mode [ 153.410450][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.421652][ T3453] bridge_slave_0: left allmulticast mode [ 153.433328][ T3453] bridge_slave_0: left promiscuous mode [ 153.443100][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.009504][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.024062][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.035353][ T3453] bond0 (unregistering): Released all slaves [ 154.061442][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1334'. [ 154.094020][ T9550] hsr_slave_0: entered promiscuous mode [ 154.102358][ T9550] hsr_slave_1: entered promiscuous mode [ 154.114505][ T9550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.146548][ T9550] Cannot create hsr debugfs directory [ 154.165385][ T54] Bluetooth: hci0: command tx timeout [ 154.299239][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 154.327560][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1337'. [ 154.760398][ T3453] hsr_slave_0: left promiscuous mode [ 154.792057][ T3453] hsr_slave_1: left promiscuous mode [ 154.816531][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.824291][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.850096][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.870687][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.893481][ T3453] veth1_macvtap: left promiscuous mode [ 154.899403][ T3453] veth0_macvtap: left promiscuous mode [ 154.905364][ T3453] veth1_vlan: left promiscuous mode [ 154.910733][ T3453] veth0_vlan: left promiscuous mode [ 155.312011][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 155.367970][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 155.754337][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 156.128700][ T9550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.160373][ T9550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.190468][ T9550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.211140][ T9550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.245370][ T54] Bluetooth: hci0: command tx timeout [ 156.264111][ T9651] netlink: 'syz.4.1350': attribute type 8 has an invalid length. [ 156.384095][ T9550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.407293][ T9550] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.431175][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.438416][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.471331][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.478625][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.571241][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'. [ 156.738531][ T9550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.751554][ T9682] netlink: 'syz.2.1360': attribute type 8 has an invalid length. [ 156.793693][ T9550] veth0_vlan: entered promiscuous mode [ 156.812666][ T9550] veth1_vlan: entered promiscuous mode [ 156.863206][ T9550] veth0_macvtap: entered promiscuous mode [ 156.879783][ T9550] veth1_macvtap: entered promiscuous mode [ 156.909996][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.921536][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.933035][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.944055][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.962778][ T9550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.983813][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.015853][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.026487][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.038267][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.049985][ T9550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.073582][ T9550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.089803][ T9550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.099869][ T9550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.113955][ T9550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.233601][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.253974][ T3791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.254036][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.268520][ T3791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.361450][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 157.531190][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 157.876172][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 157.897462][ T9736] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1378'. [ 158.072400][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 158.810439][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.811926][ T9776] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1388'. [ 159.987634][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1394'. [ 160.029601][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.042054][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.051078][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.073355][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.130083][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.141158][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.181875][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.295527][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.408647][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.537297][ T9796] chnl_net:caif_netlink_parms(): no params data found [ 160.576894][ T35] bridge_slave_1: left allmulticast mode [ 160.582848][ T35] bridge_slave_1: left promiscuous mode [ 160.590398][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.601470][ T35] bridge_slave_0: left allmulticast mode [ 160.608265][ T35] bridge_slave_0: left promiscuous mode [ 160.614239][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.037125][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.050664][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.058326][ T9831] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1405'. [ 161.069234][ T9831] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 161.080013][ T35] bond0 (unregistering): Released all slaves [ 161.107734][ T9826] ip_vti0: entered promiscuous mode [ 161.113460][ T9826] vlan2: entered promiscuous mode [ 161.128933][ T9826] ip_vti0: left promiscuous mode [ 161.181313][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 161.261031][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 161.272478][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1407'. [ 161.292302][ T9837] openvswitch: netlink: Flow key attribute not present in set flow. [ 161.415524][ T9844] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 161.423308][ T9844] netlink: 'syz.0.1409': attribute type 3 has an invalid length. [ 161.456238][ T9844] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1409'. [ 161.467205][ T9844] NCSI netlink: No device for ifindex 131080 [ 161.473863][ T9850] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1411'. [ 161.484188][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 161.505010][ T9848] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1410'. [ 161.528717][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.546958][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.569583][ T9796] bridge_slave_0: entered allmulticast mode [ 161.588105][ T9796] bridge_slave_0: entered promiscuous mode [ 161.622531][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.653527][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.673707][ T9796] bridge_slave_1: entered allmulticast mode [ 161.692737][ T9796] bridge_slave_1: entered promiscuous mode [ 161.803204][ T35] hsr_slave_0: left promiscuous mode [ 161.815981][ T35] hsr_slave_1: left promiscuous mode [ 161.824084][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.839329][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.853428][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.861495][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.881538][ T35] veth1_macvtap: left promiscuous mode [ 161.887224][ T35] veth0_macvtap: left promiscuous mode [ 161.892799][ T35] veth1_vlan: left promiscuous mode [ 161.898281][ T35] veth0_vlan: left promiscuous mode [ 162.247002][ T5245] Bluetooth: hci0: command tx timeout [ 162.373126][ T35] team0 (unregistering): Port device team_slave_1 removed [ 162.417551][ T35] team0 (unregistering): Port device team_slave_0 removed [ 162.865005][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.877421][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1418'. [ 162.924854][ T9874] syzkaller1: entered promiscuous mode [ 162.930381][ T9874] syzkaller1: entered allmulticast mode [ 162.970647][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.031448][ T9881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1421'. [ 163.158610][ T9796] team0: Port device team_slave_0 added [ 163.186194][ T9796] team0: Port device team_slave_1 added [ 163.296992][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.319437][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.364749][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.380149][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.387178][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.413335][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.497206][ T9796] hsr_slave_0: entered promiscuous mode [ 163.516368][ T9796] hsr_slave_1: entered promiscuous mode [ 163.534026][ T9796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.551989][ T9796] Cannot create hsr debugfs directory [ 163.704354][ T9916] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 163.985632][ T9796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.996124][ T9796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.005199][ T9796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.014042][ T9796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.076228][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.101815][ T9796] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.133524][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.140733][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.162291][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.169540][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.325066][ T5245] Bluetooth: hci0: command tx timeout [ 164.381281][ T9934] xt_time: unknown flags 0x4 [ 164.612123][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.793246][ T9796] veth0_vlan: entered promiscuous mode [ 164.808441][ T9796] veth1_vlan: entered promiscuous mode [ 164.940554][ T9796] veth0_macvtap: entered promiscuous mode [ 164.958725][ T9796] veth1_macvtap: entered promiscuous mode [ 165.027904][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.079738][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.126015][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.159531][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.183978][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.202538][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.213366][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.223581][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.234243][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.250493][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.277520][ T9796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.294313][ T9796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.316441][ T9796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.336070][ T9796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.418734][ T9996] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 165.612557][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.629740][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.695239][ T3791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.723477][ T3791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.271723][T10050] __nla_validate_parse: 11 callbacks suppressed [ 166.271744][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1471'. [ 166.398473][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 166.400801][T10060] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1476'. [ 166.478285][T10062] IPVS: stopping master sync thread 7243 ... [ 166.570254][T10064] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1477'. [ 166.623101][T10064] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1477'. [ 166.688534][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'. [ 166.719101][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'. [ 166.743473][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'. [ 166.767501][T10079] x_tables: duplicate underflow at hook 1 [ 166.773673][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'. [ 166.789914][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'. [ 166.903111][T10084] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 167.177254][T10107] netlink: 'syz.0.1495': attribute type 3 has an invalid length. [ 167.305776][T10113] delete_channel: no stack [ 167.393300][T10125] pimreg: entered allmulticast mode [ 167.440810][T10125] pimreg: left allmulticast mode [ 167.572414][ T3791] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.191969][ T3791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.252488][ T3791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.319808][ T3791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.389696][ T3791] bridge_slave_1: left allmulticast mode [ 168.395455][ T3791] bridge_slave_1: left promiscuous mode [ 168.401121][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.412843][ T3791] bridge_slave_0: left allmulticast mode [ 168.418883][ T3791] bridge_slave_0: left promiscuous mode [ 168.425225][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.823586][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.846883][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.864227][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.874488][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.890842][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.910157][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.058559][ T3791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.070619][ T3791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.084276][ T3791] bond0 (unregistering): Released all slaves [ 169.231282][T10158] netlink: 'syz.4.1512': attribute type 10 has an invalid length. [ 169.272660][T10158] bridge0: port 3(dummy0) entered blocking state [ 169.296365][T10158] bridge0: port 3(dummy0) entered disabled state [ 169.336080][T10158] dummy0: entered allmulticast mode [ 169.375873][T10158] dummy0: entered promiscuous mode [ 169.784467][T10198] netlink: 'syz.0.1520': attribute type 6 has an invalid length. [ 170.025921][T10214] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20002 [ 170.071024][ T3791] hsr_slave_0: left promiscuous mode [ 170.095372][ T3791] hsr_slave_1: left promiscuous mode [ 170.103131][ T3791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.111056][ T3791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.132458][ T3791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.144134][ T3791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.201673][ T3791] veth1_macvtap: left promiscuous mode [ 170.212566][ T3791] veth0_macvtap: left promiscuous mode [ 170.218919][ T3791] veth1_vlan: left promiscuous mode [ 170.224381][ T3791] veth0_vlan: left promiscuous mode [ 170.676953][ T3791] team0 (unregistering): Port device team_slave_1 removed [ 170.720862][ T3791] team0 (unregistering): Port device team_slave_0 removed [ 170.965926][ T54] Bluetooth: hci0: command tx timeout [ 171.192983][T10238] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 171.220747][T10143] chnl_net:caif_netlink_parms(): no params data found [ 171.227480][T10238] netlink: 'syz.0.1534': attribute type 11 has an invalid length. [ 171.253398][T10238] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 171.453300][T10248] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 171.475430][T10254] __nla_validate_parse: 42 callbacks suppressed [ 171.475450][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 171.493736][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.502345][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.511620][T10143] bridge_slave_0: entered allmulticast mode [ 171.520094][T10143] bridge_slave_0: entered promiscuous mode [ 171.531126][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.538963][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.546347][T10143] bridge_slave_1: entered allmulticast mode [ 171.553455][T10143] bridge_slave_1: entered promiscuous mode [ 171.566518][T10248] pim6reg: entered allmulticast mode [ 171.593367][T10256] pim6reg: left allmulticast mode [ 171.679211][T10266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1543'. [ 171.738083][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.764256][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.823038][T10276] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 171.840485][T10276] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.1547'. [ 171.857255][T10276] netlink: 'syz.2.1547': attribute type 2 has an invalid length. [ 171.866636][T10276] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1547'. [ 171.911527][T10143] team0: Port device team_slave_0 added [ 171.965109][T10143] team0: Port device team_slave_1 added [ 172.012654][T10286] netlink: 'syz.0.1550': attribute type 8 has an invalid length. [ 172.103014][T10289] netlink: 'syz.4.1552': attribute type 9 has an invalid length. [ 172.115255][T10289] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1552'. [ 172.155553][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 172.255309][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.262353][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.288666][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.301284][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.308726][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.335579][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.376411][T10309] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 172.384379][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 172.431000][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 172.458883][T10143] hsr_slave_0: entered promiscuous mode [ 172.471878][T10143] hsr_slave_1: entered promiscuous mode [ 172.478899][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.487366][T10143] Cannot create hsr debugfs directory [ 172.492970][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1557'. [ 172.657143][T10321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.681585][T10329] Bluetooth: MGMT ver 1.23 [ 172.781844][T10328] openvswitch: netlink: Unknown key attributes 2 [ 172.826075][T10336] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 172.865493][T10336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.879907][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1563'. [ 172.957675][T10343] veth1: mtu less than device minimum [ 173.044843][ T54] Bluetooth: hci0: command tx timeout [ 173.255838][T10365] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 173.347541][T10371] tc_dump_action: action bad kind [ 173.425338][T10143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.439653][T10143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.466496][T10143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.489027][T10143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.590620][T10143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.608599][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.640637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.647830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.698380][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.705621][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.737472][T10391] netlink: 'syz.4.1580': attribute type 11 has an invalid length. [ 173.738760][T10143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.759782][T10143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.024411][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.080198][T10143] veth0_vlan: entered promiscuous mode [ 174.091206][T10143] veth1_vlan: entered promiscuous mode [ 174.117439][T10143] veth0_macvtap: entered promiscuous mode [ 174.126706][T10143] veth1_macvtap: entered promiscuous mode [ 174.142442][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.152975][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.163105][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.173715][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.185483][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.210586][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.222716][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.246912][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.265291][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.280364][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.328260][T10143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.360716][T10143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.380416][T10143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.391452][T10143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.482655][T10432] : renamed from bond0 (while UP) [ 174.582168][T10432] A link change request failed with some changes committed already. Interface bMtadv_lave_0 may have been left with an inconsistent configuration, please check. [ 174.653791][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.685734][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.725985][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.734010][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.125060][ T5245] Bluetooth: hci0: command tx timeout [ 175.165599][T10470] openvswitch: netlink: Missing valid actions attribute. [ 175.179770][T10470] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.513879][T10503] vlan0: entered allmulticast mode [ 175.712707][T10520] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 175.723485][T10520] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 176.785003][T10560] __nla_validate_parse: 13 callbacks suppressed [ 176.785025][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1638'. [ 176.807800][T10560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.817797][T10560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.828211][T10560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.837654][T10560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.978877][T10572] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1643'. [ 176.992835][T10576] syz.3.1645[10576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.999017][T10574] netlink: 'syz.2.1642': attribute type 1 has an invalid length. [ 177.052251][T10574] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1642'. [ 177.111535][T10574] syz_tun: mtu less than device minimum [ 177.118761][T10584] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1648'. [ 177.129389][T10584] 0·: renamed from hsr0 [ 177.137185][T10584] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.148167][T10584] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.158829][T10584] 0·: entered promiscuous mode [ 177.176211][T10584] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 177.199067][T10591] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1648'. [ 177.208434][ T5245] Bluetooth: hci0: command 0x0419 tx timeout [ 177.216692][T10591] 1·: renamed from 70· (while UP) [ 177.227972][T10591] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 177.569463][T10611] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 177.586425][T10611] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 177.594642][T10611] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.1655'. [ 177.607464][T10613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1656'. [ 177.608063][T10611] netlink: 'syz.2.1655': attribute type 2 has an invalid length. [ 177.625354][T10611] netlink: 185 bytes leftover after parsing attributes in process `syz.2.1655'. [ 177.662073][T10617] netlink: 'syz.3.1657': attribute type 2 has an invalid length. [ 177.681879][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 177.859124][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.933628][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.014465][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.069605][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.153551][ T12] bridge_slave_1: left allmulticast mode [ 178.159480][ T12] bridge_slave_1: left promiscuous mode [ 178.166281][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.178226][ T12] bridge_slave_0: left allmulticast mode [ 178.183921][ T12] bridge_slave_0: left promiscuous mode [ 178.189757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.522697][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.533763][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.544953][ T12] bond0 (unregistering): Released all slaves [ 178.810986][ T12] hsr_slave_0: left promiscuous mode [ 178.825684][ T12] hsr_slave_1: left promiscuous mode [ 178.832051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.844196][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.853114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.860866][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.881675][ T12] veth1_macvtap: left promiscuous mode [ 178.894755][ T12] veth0_macvtap: left promiscuous mode [ 178.900435][ T12] veth1_vlan: left promiscuous mode [ 178.921974][ T12] veth0_vlan: left promiscuous mode [ 179.200954][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.214876][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.243399][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.282314][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.294780][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 179.303574][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.599155][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.644661][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.020055][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 180.288624][T10652] xt_CT: No such helper "pptp" [ 180.589108][T10677] pimreg: entered allmulticast mode [ 180.596458][T10677] pimreg: left allmulticast mode [ 180.773233][T10640] chnl_net:caif_netlink_parms(): no params data found [ 180.938453][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.953538][T10699] sctp: [Deprecated]: syz.2.1677 (pid 10699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.953538][T10699] Use struct sctp_sack_info instead [ 180.985278][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.992561][T10640] bridge_slave_0: entered allmulticast mode [ 181.027876][T10640] bridge_slave_0: entered promiscuous mode [ 181.052279][T10640] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.069266][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.076905][T10640] bridge_slave_1: entered allmulticast mode [ 181.083679][T10640] bridge_slave_1: entered promiscuous mode [ 181.135631][T10640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.152117][T10640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.204632][ T5236] Bluetooth: hci1: command 0x0401 tx timeout [ 181.216753][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 181.223252][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 181.253819][T10640] team0: Port device team_slave_0 added [ 181.293439][T10640] team0: Port device team_slave_1 added [ 181.357745][T10720] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 181.365254][ T5248] Bluetooth: hci0: command tx timeout [ 181.386915][T10640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.401843][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.448179][T10640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.460322][T10716] netlink: 'syz.2.1683': attribute type 9 has an invalid length. [ 181.478671][T10640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.486354][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.512854][T10640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.617014][T10640] hsr_slave_0: entered promiscuous mode [ 181.651471][T10640] hsr_slave_1: entered promiscuous mode [ 181.740163][T10737] wg2: entered promiscuous mode [ 181.762035][T10737] team0: Device wg2 is of different type [ 181.976276][T10744] __nla_validate_parse: 5 callbacks suppressed [ 181.976295][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 182.062752][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 182.603613][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 182.648434][T10767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.681721][T10767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.792281][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 182.862619][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1701'. [ 183.003967][T10777] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1702'. [ 183.384235][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 183.448335][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'. [ 183.460243][ T5248] Bluetooth: hci0: command tx timeout [ 183.516403][T10796] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1706'. [ 183.592621][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 183.692372][T10640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.739791][T10640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.787844][T10806] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.816180][T10640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.902254][T10640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.323230][T10640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.438779][T10640] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.509312][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.516615][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.574220][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.581524][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.687478][T10834] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.696714][T10834] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.705187][T10834] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.713611][T10834] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.731405][T10826] nbd: device at index 3 is going down [ 184.740746][T10835] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.982869][T10827] syz_tun: entered promiscuous mode [ 185.024104][T10827] syz_tun: left promiscuous mode [ 185.127059][T10833] netlink: 'syz.0.1718': attribute type 5 has an invalid length. [ 185.598123][ T5248] Bluetooth: hci0: command tx timeout [ 186.154133][T10640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.364958][T10640] veth0_vlan: entered promiscuous mode [ 186.429520][T10640] veth1_vlan: entered promiscuous mode [ 186.626880][T10640] veth0_macvtap: entered promiscuous mode [ 186.687882][T10640] veth1_macvtap: entered promiscuous mode [ 186.796787][T10888] bond4: entered allmulticast mode [ 186.870709][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.943217][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.007062][T10899] __nla_validate_parse: 4 callbacks suppressed [ 187.007082][T10899] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.1735'. [ 187.027963][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.069287][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.091319][T10899] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 187.130101][T10899] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1735'. [ 187.145872][T10640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.219601][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.289351][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.358662][T10640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.462969][T10640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.519861][T10640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.565562][T10916] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 187.578169][T10640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.605798][ T54] Bluetooth: hci0: command tx timeout [ 187.621667][T10640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.635071][ T5233] sched: DL replenish lagged too much [ 187.773200][T10925] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 188.148314][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 188.161545][T10932] bMtadv_lave_0: renamed from lo [ 188.174042][T10932] bMtadv_lave_0: entered allmulticast mode [ 188.204045][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.249620][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.388116][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.428607][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.447267][T10937] netlink: 'syz.2.1746': attribute type 11 has an invalid length. [ 188.990367][T10937] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 189.333015][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.529511][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.675974][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.781433][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.026199][ T35] bridge_slave_1: left allmulticast mode [ 190.032805][ T35] bridge_slave_1: left promiscuous mode [ 190.042416][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.065767][ T35] bridge_slave_0: left allmulticast mode [ 190.072456][ T35] bridge_slave_0: left promiscuous mode [ 190.081877][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.035762][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.099798][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.141063][ T35] bond0 (unregistering): Released all slaves [ 191.254245][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 191.512044][T10969] unknown channel width for channel at 909000KHz? [ 191.528435][T10969] unknown channel width for channel at 909000KHz? [ 191.602627][ T5248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.755027][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.764218][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.773324][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.781741][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.790834][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.884887][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 191.946639][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 193.356128][ T35] hsr_slave_0: left promiscuous mode [ 193.378028][ T35] hsr_slave_1: left promiscuous mode [ 193.395186][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.409775][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.430110][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.442507][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.488873][ T35] veth1_macvtap: left promiscuous mode [ 193.509582][ T35] veth0_macvtap: left promiscuous mode [ 193.516030][ T35] veth1_vlan: left promiscuous mode [ 193.521531][ T35] veth0_vlan: left promiscuous mode [ 193.846616][ T5248] Bluetooth: hci0: command tx timeout [ 194.952627][ T35] team0 (unregistering): Port device team_slave_1 removed [ 195.029371][ T35] team0 (unregistering): Port device team_slave_0 removed [ 195.827036][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 195.850479][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 195.874974][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 195.905635][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 195.925132][ T5248] Bluetooth: hci0: command tx timeout [ 195.993760][T11031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1773'. [ 196.016168][T11032] netlink: 'syz.2.1773': attribute type 9 has an invalid length. [ 196.943172][T10975] chnl_net:caif_netlink_parms(): no params data found [ 196.950601][T11067] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1782'. [ 197.192960][T11068] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1782'. [ 197.372925][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1783'. [ 197.434198][T11074] netlink: 'syz.3.1783': attribute type 9 has an invalid length. [ 197.443786][T11074] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1783'. [ 197.473934][T10975] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.481785][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.614945][T10975] bridge_slave_0: entered allmulticast mode [ 197.624886][T10975] bridge_slave_0: entered promiscuous mode [ 197.659477][T10975] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.694039][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.721160][T10975] bridge_slave_1: entered allmulticast mode [ 197.755076][T10975] bridge_slave_1: entered promiscuous mode [ 198.006647][ T5248] Bluetooth: hci0: command tx timeout [ 198.118280][T10975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.199397][T10975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.573950][T10975] team0: Port device team_slave_0 added [ 198.634218][T10975] team0: Port device team_slave_1 added [ 199.122733][T10975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.161295][T10975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.293802][T10975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.415204][T10975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.461263][T10975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.538313][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'. [ 199.622790][T10975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.924165][T10975] hsr_slave_0: entered promiscuous mode [ 199.974827][T10975] hsr_slave_1: entered promiscuous mode [ 200.085189][ T5248] Bluetooth: hci0: command tx timeout [ 200.861658][T11181] __nla_validate_parse: 1 callbacks suppressed [ 200.861679][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 200.923493][T11184] xt_l2tp: unknown flags: 18 [ 202.147046][T11221] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1820'. [ 211.953311][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.964775][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.973181][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.989671][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.002619][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.023954][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.315581][ T5248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.325183][ T5248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.333672][ T5248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.341890][ T5248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.349702][ T5248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.357261][ T5248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.409779][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.423655][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.432309][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.444235][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.452047][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.460120][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.524081][ T5248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 213.538142][ T5248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 213.546887][ T5248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 213.555535][ T5248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 213.563120][ T5248] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 213.570633][ T5248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 214.093028][ T5248] Bluetooth: hci5: command tx timeout [ 215.444861][ T5248] Bluetooth: hci6: command tx timeout [ 215.524992][ T5248] Bluetooth: hci7: command tx timeout [ 215.605288][ T5248] Bluetooth: hci8: command tx timeout [ 216.172812][ T5248] Bluetooth: hci5: command tx timeout [ 217.525179][ T5248] Bluetooth: hci6: command tx timeout [ 217.614896][ T5248] Bluetooth: hci7: command tx timeout [ 217.684976][ T5248] Bluetooth: hci8: command tx timeout [ 218.245187][ T5248] Bluetooth: hci5: command tx timeout [ 219.604723][ T5248] Bluetooth: hci6: command tx timeout [ 219.685017][ T5248] Bluetooth: hci7: command tx timeout [ 219.764707][ T5248] Bluetooth: hci8: command tx timeout [ 220.324757][ T5248] Bluetooth: hci5: command tx timeout [ 221.684796][ T5248] Bluetooth: hci6: command tx timeout [ 221.764798][ T5248] Bluetooth: hci7: command tx timeout [ 221.844952][ T5248] Bluetooth: hci8: command tx timeout [ 230.162519][ T3904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.346499][ T3904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.447382][ T3904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.471143][T10975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.499871][T10975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.578931][ T3904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.612739][T10975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.642123][T10975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.013909][T10975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.037696][T10975] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.078758][T10975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.089715][T10975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.160003][ T3904] dummy0: left allmulticast mode [ 231.166476][ T3904] dummy0: left promiscuous mode [ 231.171561][ T3904] bridge0: port 3(dummy0) entered disabled state [ 231.227329][ T3904] bridge_slave_1: left allmulticast mode [ 231.233098][ T3904] bridge_slave_1: left promiscuous mode [ 231.244980][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.282396][ T3904] bridge_slave_0: left allmulticast mode [ 231.304817][ T3904] bridge_slave_0: left promiscuous mode [ 231.310603][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.794439][ T3904] dvmrp1 (unregistering): left allmulticast mode [ 232.147908][ T3904] bond3 (unregistering): (slave bridge5): Releasing active interface [ 232.544204][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.558639][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.572328][ T3904] bond0 (unregistering): Released all slaves [ 232.601186][ T3904] bond1 (unregistering): Released all slaves [ 232.620095][ T3904] bond2 (unregistering): Released all slaves [ 232.850047][ T3904] bond3 (unregistering): Released all slaves [ 232.870010][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.877195][T11124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.917509][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.924693][T11124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.361501][T11231] chnl_net:caif_netlink_parms(): no params data found [ 255.493115][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.512350][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.522340][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.536544][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.550876][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.560631][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.604762][ T54] Bluetooth: hci1: command tx timeout [ 259.684746][ T54] Bluetooth: hci1: command tx timeout [ 261.764698][ T54] Bluetooth: hci1: command tx timeout [ 263.844849][ T54] Bluetooth: hci1: command tx timeout [ 274.763793][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.772884][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.781362][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.793443][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.801359][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.821043][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.000594][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.013800][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.022547][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.030941][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.045070][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.055075][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.123986][ T5248] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.139396][ T5248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.153694][ T5248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.166734][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.175124][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.182488][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.217257][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 275.232556][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 275.241142][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 275.249235][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 275.257213][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 275.265301][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.884900][ T54] Bluetooth: hci2: command tx timeout [ 277.124730][ T54] Bluetooth: hci3: command tx timeout [ 277.205009][ T54] Bluetooth: hci4: command tx timeout [ 277.364726][ T54] Bluetooth: hci9: command tx timeout [ 278.964874][ T54] Bluetooth: hci2: command tx timeout [ 279.204730][ T54] Bluetooth: hci3: command tx timeout [ 279.284991][ T54] Bluetooth: hci4: command tx timeout [ 279.444713][ T54] Bluetooth: hci9: command tx timeout [ 281.044846][ T54] Bluetooth: hci2: command tx timeout [ 281.284740][ T54] Bluetooth: hci3: command tx timeout [ 281.364699][ T54] Bluetooth: hci4: command tx timeout [ 281.524892][ T54] Bluetooth: hci9: command tx timeout [ 283.124772][ T5248] Bluetooth: hci2: command tx timeout [ 283.364705][ T5248] Bluetooth: hci3: command tx timeout [ 283.445080][ T5248] Bluetooth: hci4: command tx timeout [ 283.604695][ T5248] Bluetooth: hci9: command tx timeout [ 314.335074][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 319.746347][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.759645][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.767878][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.776097][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.783689][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 319.794866][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.844947][ T5248] Bluetooth: hci0: command tx timeout [ 323.925002][ T5248] Bluetooth: hci0: command tx timeout [ 326.004810][ T5248] Bluetooth: hci0: command tx timeout [ 328.084908][ T5248] Bluetooth: hci0: command tx timeout [ 334.226620][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.241913][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.250037][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.263047][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.270722][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.278257][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.215290][ T5248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.227294][ T5248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.235808][ T5248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.243740][ T5248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.251790][ T5248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.263668][ T5248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.290151][ T5248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.299187][ T5248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.307622][ T5248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.315542][ T5248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.323081][ T5248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.334205][ T5248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.392162][ T5248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.411238][ T5248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.419399][ T5248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.427903][ T5248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.435812][ T5248] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.443260][ T5248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.324731][ T5248] Bluetooth: hci1: command tx timeout [ 337.364905][ T54] Bluetooth: hci5: command tx timeout [ 337.374795][ T5248] Bluetooth: hci6: command tx timeout [ 337.524828][ T5248] Bluetooth: hci7: command tx timeout [ 338.404727][ T5248] Bluetooth: hci1: command tx timeout [ 339.450673][ T5248] Bluetooth: hci6: command tx timeout [ 339.456350][ T5245] Bluetooth: hci5: command tx timeout [ 339.604872][ T5245] Bluetooth: hci7: command tx timeout [ 339.936483][ T5245] Bluetooth: hci8: command 0x0406 tx timeout [ 340.484878][ T54] Bluetooth: hci1: command tx timeout [ 341.524995][ T54] Bluetooth: hci5: command tx timeout [ 341.530458][ T54] Bluetooth: hci6: command tx timeout [ 341.684878][ T54] Bluetooth: hci7: command tx timeout [ 342.565047][ T54] Bluetooth: hci1: command tx timeout [ 343.604897][ T5245] Bluetooth: hci5: command tx timeout [ 343.610381][ T54] Bluetooth: hci6: command tx timeout [ 343.764700][ T54] Bluetooth: hci7: command tx timeout [ 382.680504][ T5245] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 382.729812][ T5245] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 382.776029][ T5245] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 382.893460][ T5245] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 382.958866][ T5245] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 383.003155][ T5245] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 385.205218][ T5245] Bluetooth: hci10: command tx timeout [ 387.290404][ T5245] Bluetooth: hci10: command tx timeout [ 389.365247][ T5245] Bluetooth: hci10: command tx timeout [ 391.444856][ T5245] Bluetooth: hci10: command tx timeout [ 394.981302][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 394.990572][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 394.999016][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 395.007362][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 395.016876][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 395.024278][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 396.052987][ T5245] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 396.066744][ T5245] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 396.075344][ T5245] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 396.083706][ T5245] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 396.091591][ T5245] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 396.112226][ T5245] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 396.185585][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 396.204882][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 396.213044][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 396.221196][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 396.229177][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 396.236655][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 396.304479][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 396.315110][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 396.323506][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 396.343910][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 396.351955][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 396.359482][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 397.045269][ T54] Bluetooth: hci11: command tx timeout [ 398.164682][ T54] Bluetooth: hci12: command tx timeout [ 398.324754][ T54] Bluetooth: hci13: command tx timeout [ 398.412748][ T54] Bluetooth: hci14: command tx timeout [ 399.124761][ T54] Bluetooth: hci11: command tx timeout [ 400.244700][ T5246] Bluetooth: hci12: command tx timeout [ 400.404756][ T5246] Bluetooth: hci13: command tx timeout [ 400.485224][ T5246] Bluetooth: hci14: command tx timeout [ 401.205033][ T5246] Bluetooth: hci11: command tx timeout [ 401.405297][ T5246] Bluetooth: hci3: command 0x0406 tx timeout [ 401.411376][ T5246] Bluetooth: hci4: command 0x0406 tx timeout [ 401.455063][ T5246] Bluetooth: hci9: command 0x0406 tx timeout [ 401.461130][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 402.330925][ T5236] Bluetooth: hci12: command tx timeout [ 402.484839][ T5236] Bluetooth: hci13: command tx timeout [ 402.572959][ T5236] Bluetooth: hci14: command tx timeout [ 403.284896][ T5236] Bluetooth: hci11: command tx timeout [ 404.405107][T11290] Bluetooth: hci12: command tx timeout [ 404.564711][ T5236] Bluetooth: hci13: command tx timeout [ 404.652970][ T5236] Bluetooth: hci14: command tx timeout [ 442.335799][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 445.621289][ T5236] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 445.671429][ T5236] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 445.710629][ T5236] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 445.812549][ T5236] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 445.890097][ T5236] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 445.928731][ T5236] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 448.164884][T11290] Bluetooth: hci15: command tx timeout [ 450.244821][T11290] Bluetooth: hci15: command tx timeout [ 452.330330][T11290] Bluetooth: hci15: command tx timeout [ 454.404868][T11290] Bluetooth: hci15: command tx timeout [ 456.976012][T11290] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 456.985823][T11290] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 456.998588][T11290] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 457.013862][T11290] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 457.021662][T11290] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 457.029521][T11290] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 457.694703][T11290] Bluetooth: hci6: command 0x0406 tx timeout [ 457.700849][T11290] Bluetooth: hci1: command 0x0406 tx timeout [ 457.764875][T11290] Bluetooth: hci7: command 0x0406 tx timeout [ 457.771074][ T5245] Bluetooth: hci5: command 0x0406 tx timeout [ 458.012576][ T5248] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 458.028244][ T5248] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 458.036959][ T5248] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 458.049225][ T5248] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 458.057505][ T5248] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 458.065137][ T5248] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 458.430720][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 458.446490][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 458.460694][ T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 458.473029][ T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 458.486625][ T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 458.494082][ T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 458.865961][ T54] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 458.886487][ T54] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 458.901776][ T54] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 458.911146][ T54] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 458.919384][ T54] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 458.926871][ T54] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 459.125043][ T5248] Bluetooth: hci16: command tx timeout [ 460.085411][ T5248] Bluetooth: hci17: command tx timeout [ 460.565017][ T5248] Bluetooth: hci18: command tx timeout [ 460.964869][ T5248] Bluetooth: hci19: command tx timeout [ 461.204770][ T5248] Bluetooth: hci16: command tx timeout [ 461.365245][ T30] INFO: task syz-executor:11233 blocked for more than 143 seconds. [ 461.373202][ T30] Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 461.389383][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.399629][ T30] task:syz-executor state:D stack:24128 pid:11233 tgid:11233 ppid:1 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.414692][ T30] Call Trace: [ 461.434968][ T30] [ 461.437971][ T30] __schedule+0x1895/0x4b30 [ 461.442548][ T30] ? __pfx___schedule+0x10/0x10 [ 461.469933][ T30] ? __pfx_lock_release+0x10/0x10 [ 461.539595][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 461.563187][ T30] ? schedule+0x90/0x320 [ 461.594996][ T30] schedule+0x14b/0x320 [ 461.599401][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.640250][ T30] __mutex_lock+0x6a7/0xd70 [ 461.661032][ T30] ? __mutex_lock+0x52a/0xd70 [ 461.680267][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 461.694815][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.700074][ T30] ip_tunnel_init_net+0x20e/0x720 [ 461.744980][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 461.750607][ T30] ? ops_init+0x75/0x590 [ 461.780806][ T30] ops_init+0x31e/0x590 [ 461.800456][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 461.814855][ T30] setup_net+0x287/0x9e0 [ 461.819173][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 461.854875][ T30] ? __pfx_setup_net+0x10/0x10 [ 461.859732][ T30] copy_net_ns+0x33f/0x570 [ 461.864301][ T30] create_new_namespaces+0x425/0x7b0 [ 461.934779][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 461.940584][ T30] ksys_unshare+0x57d/0xa70 [ 461.983684][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 462.005038][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.011559][ T30] ? do_syscall_64+0x100/0x230 [ 462.031406][ T30] __x64_sys_unshare+0x38/0x40 [ 462.041100][ T30] do_syscall_64+0xf3/0x230 [ 462.047169][ T30] ? clear_bhb_loop+0x35/0x90 [ 462.051889][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.062887][ T30] RIP: 0033:0x7f2ac477f7f7 [ 462.068643][ T30] RSP: 002b:00007ffefe4e0b28 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 462.082123][ T30] RAX: ffffffffffffffda RBX: 00007f2ac4935f40 RCX: 00007f2ac477f7f7 [ 462.092677][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 462.105430][ T30] RBP: 00007f2ac4936a38 R08: 0000000000000000 R09: 0000000000000000 [ 462.113650][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 462.127376][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 462.138158][ T30] [ 462.141305][ T30] [ 462.141305][ T30] Showing all locks held in the system: [ 462.152903][ T30] 6 locks held by kworker/0:1/9: [ 462.160291][ T30] 5 locks held by ksoftirqd/0/16: [ 462.166017][ T5248] Bluetooth: hci17: command tx timeout [ 462.181965][ T30] 1 lock held by khungtaskd/30: [ 462.189637][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 462.204613][ T30] 3 locks held by kworker/u8:5/1122: [ 462.210061][ T30] 3 locks held by kworker/u8:7/3791: [ 462.220769][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 462.233287][ T30] #1: ffffc9000cba7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 462.250625][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 462.260071][ T30] 4 locks held by kworker/u8:8/3904: [ 462.271290][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 462.282412][ T30] #1: ffffc9000ce27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 462.299007][ T30] #2: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 462.308693][ T30] #3: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: cfg802154_pernet_exit+0x1b/0xe0 [ 462.325298][ T30] 2 locks held by getty/4989: [ 462.330027][ T30] #0: ffff88802ea850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 462.344491][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 462.360762][ T30] 3 locks held by kworker/1:6/5314: [ 462.366059][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 462.382890][ T30] #1: ffffc900045b7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 462.394278][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 462.411794][ T30] 2 locks held by syz-executor/10975: [ 462.417729][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 462.432580][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 462.444779][ T30] 3 locks held by kworker/u8:9/11124: [ 462.450188][ T30] #0: ffff88802e1c2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 462.468042][ T30] #1: ffffc9000a497d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 462.483150][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 462.498092][ T30] 1 lock held by syz-executor/11224: [ 462.503422][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 462.514578][ T30] 1 lock held by syz-executor/11229: [ 462.520060][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 462.534626][ T30] 1 lock held by syz-executor/11231: [ 462.539958][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 462.555443][ T30] 2 locks held by syz-executor/11233: [ 462.560857][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 462.575421][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 462.590505][ T30] 2 locks held by syz-executor/11252: [ 462.597190][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 462.611285][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 462.622542][ T30] 2 locks held by syz-executor/11254: [ 462.632587][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 462.643448][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 462.654157][ T5248] Bluetooth: hci18: command tx timeout [ 462.681593][ T30] 2 locks held by syz-executor/11256: [ 462.687063][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 462.715124][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 462.735504][ T30] 2 locks held by syz-executor/11258: [ 462.740930][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 462.764968][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 462.782183][ T30] 1 lock held by syz-executor/11261: [ 462.788311][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.803517][ T30] 1 lock held by syz-executor/11264: [ 462.809267][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.824577][ T30] 1 lock held by syz-executor/11269: [ 462.830014][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.844638][ T30] 1 lock held by syz-executor/11270: [ 462.849966][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.864158][ T30] 1 lock held by syz-executor/11273: [ 462.870932][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.884631][ T30] 1 lock held by syz-executor/11276: [ 462.889977][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.905694][ T30] 1 lock held by syz-executor/11279: [ 462.911026][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.926845][ T30] 1 lock held by syz-executor/11284: [ 462.932373][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.944592][ T30] 1 lock held by syz-executor/11286: [ 462.949932][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 462.979245][ T30] 1 lock held by syz-executor/11288: [ 462.986070][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.000158][ T30] 1 lock held by syz-executor/11292: [ 463.007491][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.021803][ T30] 1 lock held by syz-executor/11295: [ 463.028403][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.042643][ T30] 1 lock held by syz-executor/11298: [ 463.048634][ T5248] Bluetooth: hci19: command tx timeout [ 463.064658][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.074159][ T30] 1 lock held by syz-executor/11301: [ 463.084742][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.094238][ T30] 1 lock held by syz-executor/11304: [ 463.104168][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.115367][ T30] [ 463.117719][ T30] ============================================= [ 463.117719][ T30] [ 463.134980][ T30] NMI backtrace for cpu 1 [ 463.139378][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 463.149907][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.160071][ T30] Call Trace: [ 463.163376][ T30] [ 463.166332][ T30] dump_stack_lvl+0x241/0x360 [ 463.171073][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.176290][ T30] ? __pfx__printk+0x10/0x10 [ 463.180915][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 463.185880][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 463.191446][ T30] ? _printk+0xd5/0x120 [ 463.195625][ T30] ? __pfx__printk+0x10/0x10 [ 463.200245][ T30] ? __wake_up_klogd+0xcc/0x110 [ 463.205119][ T30] ? __pfx__printk+0x10/0x10 [ 463.209733][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 463.214781][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.220791][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 463.226798][ T30] watchdog+0xff4/0x1040 [ 463.231065][ T30] ? watchdog+0x1ea/0x1040 [ 463.235514][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.240213][ T30] kthread+0x2f0/0x390 [ 463.244309][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.249008][ T30] ? __pfx_kthread+0x10/0x10 [ 463.253618][ T30] ret_from_fork+0x4b/0x80 [ 463.258060][ T30] ? __pfx_kthread+0x10/0x10 [ 463.262665][ T30] ret_from_fork_asm+0x1a/0x30 [ 463.267466][ T30] [ 463.271440][ T30] Sending NMI from CPU 1 to CPUs 0: [ 463.276756][ C0] NMI backtrace for cpu 0 [ 463.276770][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 463.276789][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.276800][ C0] Workqueue: events nsim_dev_trap_report_work [ 463.276823][ C0] RIP: 0010:__lock_acquire+0x4ad/0x2050 [ 463.276846][ C0] Code: 04 30 84 c0 0f 85 55 13 00 00 44 8b bc 24 e0 00 00 00 48 8b 44 24 10 44 89 30 49 8d 5c e9 24 48 89 d8 48 c1 e8 03 0f b6 04 30 <84> c0 0f 85 65 13 00 00 44 89 3b 44 89 c3 48 89 d8 48 c1 e8 06 48 [ 463.276861][ C0] RSP: 0018:ffffc900000071f0 EFLAGS: 00000803 [ 463.276874][ C0] RAX: 0000000000000000 RBX: ffff88801ce80c1c RCX: 0000000000040000 [ 463.276887][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000002a4d [ 463.276898][ C0] RBP: 0000000000000023 R08: 0000000000000a4d R09: ffff88801ce80ae0 [ 463.276909][ C0] R10: dffffc0000000000 R11: fffffbfff2039e56 R12: ffff88801ce80000 [ 463.276921][ C0] R13: 0000000000000a4d R14: 0000000000042a4d R15: 0000000000000000 [ 463.276932][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 463.276947][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.276959][ C0] CR2: 00007f43d9c656c0 CR3: 000000000e734000 CR4: 00000000003526f0 [ 463.276974][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.276984][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.276994][ C0] Call Trace: [ 463.277000][ C0] [ 463.277007][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 463.277026][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 463.277046][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 463.277070][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 463.277089][ C0] ? nmi_handle+0x14f/0x5a0 [ 463.277105][ C0] ? nmi_handle+0x2a/0x5a0 [ 463.277120][ C0] ? __lock_acquire+0x4ad/0x2050 [ 463.277139][ C0] ? default_do_nmi+0x63/0x160 [ 463.277157][ C0] ? exc_nmi+0x123/0x1f0 [ 463.277174][ C0] ? end_repeat_nmi+0xf/0x53 [ 463.277193][ C0] ? __lock_acquire+0x4ad/0x2050 [ 463.277212][ C0] ? __lock_acquire+0x4ad/0x2050 [ 463.277233][ C0] ? __lock_acquire+0x4ad/0x2050 [ 463.277253][ C0] [ 463.277259][ C0] [ 463.277271][ C0] lock_acquire+0x1ed/0x550 [ 463.277289][ C0] ? __dev_queue_xmit+0x17ca/0x3ed0 [ 463.277310][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 463.277330][ C0] ? validate_xmit_skb+0x9f9/0x1120 [ 463.277348][ C0] ? rcu_read_lock_bh_held+0x7e/0x120 [ 463.277366][ C0] ? __pfx_validate_xmit_skb+0x10/0x10 [ 463.277380][ C0] ? arch_stack_walk+0x11c/0x150 [ 463.277399][ C0] _raw_spin_lock+0x2e/0x40 [ 463.277417][ C0] ? __dev_queue_xmit+0x17ca/0x3ed0 [ 463.277433][ C0] __dev_queue_xmit+0x17ca/0x3ed0 [ 463.277454][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 463.277476][ C0] ? stack_depot_save_flags+0x29/0x830 [ 463.277499][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 463.277515][ C0] ? kasan_save_track+0x51/0x80 [ 463.277530][ C0] ? kasan_save_track+0x3f/0x80 [ 463.277544][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 463.277560][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 463.277578][ C0] ? skb_clone+0x20c/0x390 [ 463.277592][ C0] ? can_can_gw_rcv+0x3ce/0x1070 [ 463.277610][ C0] ? can_rcv_filter+0x11c/0x7f0 [ 463.277624][ C0] ? can_receive+0x31c/0x470 [ 463.277638][ C0] ? can_rcv+0x144/0x260 [ 463.277651][ C0] ? __netif_receive_skb+0x2e0/0x650 [ 463.277669][ C0] ? process_backlog+0x662/0x15b0 [ 463.277685][ C0] ? __napi_poll+0xcb/0x490 [ 463.277701][ C0] ? net_rx_action+0x89b/0x1240 [ 463.277718][ C0] ? handle_softirqs+0x2c5/0x980 [ 463.277736][ C0] ? do_softirq+0x11b/0x1e0 [ 463.277752][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 463.277770][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 463.277786][ C0] ? process_scheduled_works+0xa63/0x1850 [ 463.277805][ C0] ? worker_thread+0x870/0xd30 [ 463.277822][ C0] ? kthread+0x2f0/0x390 [ 463.277836][ C0] ? ret_from_fork+0x4b/0x80 [ 463.277855][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 463.277882][ C0] ? __copy_skb_header+0x437/0x5b0 [ 463.277900][ C0] can_send+0x8b3/0xcd0 [ 463.277913][ C0] ? __copy_skb_header+0x437/0x5b0 [ 463.277932][ C0] ? __pfx_can_send+0x10/0x10 [ 463.277948][ C0] ? skb_clone+0x240/0x390 [ 463.277963][ C0] ? can_can_gw_rcv+0x3c1/0x1070 [ 463.277981][ C0] can_can_gw_rcv+0xde7/0x1070 [ 463.278001][ C0] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 463.278018][ C0] can_rcv_filter+0x11c/0x7f0 [ 463.278033][ C0] ? can_receive+0x1cd/0x470 [ 463.278047][ C0] ? can_receive+0x1cd/0x470 [ 463.278062][ C0] can_receive+0x31c/0x470 [ 463.278078][ C0] can_rcv+0x144/0x260 [ 463.278092][ C0] ? __pfx_can_rcv+0x10/0x10 [ 463.278106][ C0] __netif_receive_skb+0x2e0/0x650 [ 463.278124][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 463.278143][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 463.278160][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.278179][ C0] ? __pfx_lock_release+0x10/0x10 [ 463.278199][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 463.278221][ C0] process_backlog+0x662/0x15b0 [ 463.278240][ C0] ? process_backlog+0x33b/0x15b0 [ 463.278261][ C0] ? __pfx_process_backlog+0x10/0x10 [ 463.278278][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.278299][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.278320][ C0] __napi_poll+0xcb/0x490 [ 463.278338][ C0] net_rx_action+0x89b/0x1240 [ 463.278364][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 463.278381][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 463.278414][ C0] handle_softirqs+0x2c5/0x980 [ 463.278434][ C0] ? do_softirq+0x11b/0x1e0 [ 463.278453][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 463.278479][ C0] do_softirq+0x11b/0x1e0 [ 463.278496][ C0] [ 463.278502][ C0] [ 463.278507][ C0] ? __pfx_do_softirq+0x10/0x10 [ 463.278525][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 463.278546][ C0] ? rcu_is_watching+0x15/0xb0 [ 463.278563][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 463.278581][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 463.278598][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 463.278617][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 463.278635][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 463.278654][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 463.278676][ C0] ? process_scheduled_works+0x976/0x1850 [ 463.278695][ C0] process_scheduled_works+0xa63/0x1850 [ 463.278724][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.278746][ C0] ? assign_work+0x364/0x3d0 [ 463.278766][ C0] worker_thread+0x870/0xd30 [ 463.278789][ C0] ? __kthread_parkme+0x169/0x1d0 [ 463.278810][ C0] ? __pfx_worker_thread+0x10/0x10 [ 463.278828][ C0] kthread+0x2f0/0x390 [ 463.278842][ C0] ? __pfx_worker_thread+0x10/0x10 [ 463.278860][ C0] ? __pfx_kthread+0x10/0x10 [ 463.278875][ C0] ret_from_fork+0x4b/0x80 [ 463.278892][ C0] ? __pfx_kthread+0x10/0x10 [ 463.278907][ C0] ret_from_fork_asm+0x1a/0x30 [ 463.278930][ C0] [ 463.963722][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 463.970621][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00216-g0b84db5d8f25 #0 [ 463.981154][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.991235][ T30] Call Trace: [ 463.994620][ T30] [ 463.997574][ T30] dump_stack_lvl+0x241/0x360 [ 464.002277][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.007502][ T30] ? __pfx__printk+0x10/0x10 [ 464.012134][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.018161][ T30] ? vscnprintf+0x5d/0x90 [ 464.022521][ T30] panic+0x349/0x880 [ 464.026622][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 464.032898][ T30] ? __pfx_panic+0x10/0x10 [ 464.037353][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 464.042851][ T30] ? __irq_work_queue_local+0x137/0x410 [ 464.048432][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 464.053830][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 464.060017][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 464.066201][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 464.072494][ T30] watchdog+0x1033/0x1040 [ 464.076853][ T30] ? watchdog+0x1ea/0x1040 [ 464.081309][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.086013][ T30] kthread+0x2f0/0x390 [ 464.090107][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.094807][ T30] ? __pfx_kthread+0x10/0x10 [ 464.099433][ T30] ret_from_fork+0x4b/0x80 [ 464.103881][ T30] ? __pfx_kthread+0x10/0x10 [ 464.108493][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.113324][ T30] [ 464.116666][ T30] Kernel Offset: disabled [ 464.120994][ T30] Rebooting in 86400 seconds..