last executing test programs: 52.952320978s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0xffff}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) r2 = socket$inet6_sctp(0xa, 0x12e3182177aedd38, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x177, 0x8200, 0x3a, 0xffff8001, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x84) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', r6, r7, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newae={0x80, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xa, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa36}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@local, 0x0, 0x67, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c011}, 0x8001) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000740)={0x401, 0x1, 0x9, 0x40}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={r3, 0x18, "e5f8f94eaa425cbf55a7006063df0ee228364251f37330aa"}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000800)={r3, 0x38f7, 0x6, 0x400, 0x5, 0x1000, 0x1000, 0x8001, {r10, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x7, 0x1000, 0x80000000, 0x4}}, &(0x7f00000008c0)=0xb0) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000000900)=""/149, 0x95) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000c00)={0x8, 0x9, 0x8, 0x8, 0xff, 0xf7, 0x0, 0xb, 0x1, 0x6, 0x6, 0xd, 0x9, 0x6}, 0xe) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/41, 0x29}], 0xa) 48.313281215s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0xffff}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) r2 = socket$inet6_sctp(0xa, 0x12e3182177aedd38, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x177, 0x8200, 0x3a, 0xffff8001, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x84) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', r6, r7, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newae={0x80, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xa, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa36}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@local, 0x0, 0x67, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c011}, 0x8001) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000740)={0x401, 0x1, 0x9, 0x40}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={r3, 0x18, "e5f8f94eaa425cbf55a7006063df0ee228364251f37330aa"}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000800)={r3, 0x38f7, 0x6, 0x400, 0x5, 0x1000, 0x1000, 0x8001, {r10, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x7, 0x1000, 0x80000000, 0x4}}, &(0x7f00000008c0)=0xb0) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000000900)=""/149, 0x95) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000c00)={0x8, 0x9, 0x8, 0x8, 0xff, 0xf7, 0x0, 0xb, 0x1, 0x6, 0x6, 0xd, 0x9, 0x6}, 0xe) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/41, 0x29}], 0xa) 42.874901697s ago: executing program 4 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x28}}, 0x4004) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x7, 0xa}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000094}, 0x0) unshare(0x22020400) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x8c, &(0x7f0000000480)}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r13, &(0x7f0000000740)=""/4096, 0x1000, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 42.728530459s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getpid() 42.088246169s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0xffff}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) r2 = socket$inet6_sctp(0xa, 0x12e3182177aedd38, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x177, 0x8200, 0x3a, 0xffff8001, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x84) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', r6, r7, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newae={0x80, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xa, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa36}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@local, 0x0, 0x67, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c011}, 0x8001) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000740)={0x401, 0x1, 0x9, 0x40}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={r3, 0x18, "e5f8f94eaa425cbf55a7006063df0ee228364251f37330aa"}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000800)={r3, 0x38f7, 0x6, 0x400, 0x5, 0x1000, 0x1000, 0x8001, {r10, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x7, 0x1000, 0x80000000, 0x4}}, &(0x7f00000008c0)=0xb0) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000000900)=""/149, 0x95) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000c00)={0x8, 0x9, 0x8, 0x8, 0xff, 0xf7, 0x0, 0xb, 0x1, 0x6, 0x6, 0xd, 0x9, 0x6}, 0xe) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/41, 0x29}], 0xa) 36.028564561s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getpid() 35.062453958s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0xffff}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) r2 = socket$inet6_sctp(0xa, 0x12e3182177aedd38, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x177, 0x8200, 0x3a, 0xffff8001, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x84) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', r6, r7, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newae={0x80, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xa, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa36}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@local, 0x0, 0x67, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c011}, 0x8001) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000740)={0x401, 0x1, 0x9, 0x40}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={r3, 0x18, "e5f8f94eaa425cbf55a7006063df0ee228364251f37330aa"}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000800)={r3, 0x38f7, 0x6, 0x400, 0x5, 0x1000, 0x1000, 0x8001, {r10, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x7, 0x1000, 0x80000000, 0x4}}, &(0x7f00000008c0)=0xb0) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000000900)=""/149, 0x95) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000c00)={0x8, 0x9, 0x8, 0x8, 0xff, 0xf7, 0x0, 0xb, 0x1, 0x6, 0x6, 0xd, 0x9, 0x6}, 0xe) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/41, 0x29}], 0xa) 28.936493853s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getpid() 28.31648765s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0xffff}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) r2 = socket$inet6_sctp(0xa, 0x12e3182177aedd38, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x177, 0x8200, 0x3a, 0xffff8001, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x84) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', r6, r7, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newae={0x80, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xa, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa36}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@local, 0x0, 0x67, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c011}, 0x8001) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000740)={0x401, 0x1, 0x9, 0x40}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={r3, 0x18, "e5f8f94eaa425cbf55a7006063df0ee228364251f37330aa"}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000800)={r3, 0x38f7, 0x6, 0x400, 0x5, 0x1000, 0x1000, 0x8001, {r10, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x7, 0x1000, 0x80000000, 0x4}}, &(0x7f00000008c0)=0xb0) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000000900)=""/149, 0x95) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000c00)={0x8, 0x9, 0x8, 0x8, 0xff, 0xf7, 0x0, 0xb, 0x1, 0x6, 0x6, 0xd, 0x9, 0x6}, 0xe) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/41, 0x29}], 0xa) 23.097603911s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getpid() 21.353640375s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0xffff}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) r2 = socket$inet6_sctp(0xa, 0x12e3182177aedd38, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x177, 0x8200, 0x3a, 0xffff8001, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x84) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', r6, r7, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newae={0x80, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xa, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa36}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@local, 0x0, 0x67, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c011}, 0x8001) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000740)={0x401, 0x1, 0x9, 0x40}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={r3, 0x18, "e5f8f94eaa425cbf55a7006063df0ee228364251f37330aa"}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000800)={r3, 0x38f7, 0x6, 0x400, 0x5, 0x1000, 0x1000, 0x8001, {r10, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x7, 0x1000, 0x80000000, 0x4}}, &(0x7f00000008c0)=0xb0) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000000900)=""/149, 0x95) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000c00)={0x8, 0x9, 0x8, 0x8, 0xff, 0xf7, 0x0, 0xb, 0x1, 0x6, 0x6, 0xd, 0x9, 0x6}, 0xe) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/41, 0x29}], 0xa) 18.160241754s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getpid() 16.951387988s ago: executing program 2 (id=1409): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000700), &(0x7f0000000740)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="0302000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYRESDEC=r1, @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r10 = socket$kcm(0x10, 0x400000002, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="021801020200000039bd7000ffdbdf2598949850cde1d207d7009c0d781b41fa76f455e6983514dc932969956faa874fca3068c5f915030000003a2f167f2a7d2d3bb375663016b44f4fe25b63bc6473900dec1a1b808e3abded89c86084e41eae4f401d72832d6db3f1206800"/119], 0x10}}, 0x4040000) (async) sendmsg$key(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="021801020200000039bd7000ffdbdf2598949850cde1d207d7009c0d781b41fa76f455e6983514dc932969956faa874fca3068c5f915030000003a2f167f2a7d2d3bb375663016b44f4fe25b63bc6473900dec1a1b808e3abded89c86084e41eae4f401d72832d6db3f1206800"/119], 0x10}}, 0x4040000) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000005000)=""/4111, 0x1006}, {&(0x7f0000002580)=""/4107, 0x100b}, {&(0x7f0000004000)=""/4071, 0xfe7}, {&(0x7f0000001140)=""/178, 0xb9}, {&(0x7f0000001480)=""/118, 0x76}], 0x5}, 0x40002020) pread64(r9, &(0x7f00000011c0)=""/99, 0x63, 0x0) 16.764595495s ago: executing program 1 (id=1411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0002465e7e342872cde8cebb21aa4039b483d6a0935fbcf2c4d49000100000000000f000000000000e000000200"/76, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e30000000000000000000000014000000020a090100000000000000000000000014000000110001"], 0xd0}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 16.763641457s ago: executing program 2 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7, 0x8, 0xa298ea9ceb191779, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20, 0x7800, 0x7, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001b40)={'ip_vti0\x00', &(0x7f0000001b80)={'erspan0\x00', 0x0, 0x80, 0x40, 0x41, 0x3, {{0x2f, 0x4, 0x0, 0x4, 0xbc, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @empty, {[@cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x0, 0x3, '\n'}, {0x0, 0x4, "a501"}, {0x7, 0xb, "c377b0109ac3cfdeaa"}, {0x7, 0xf, "11b61022bda807565178b70749"}, {0x5, 0x7, "c2bef2e6ef"}, {0x2, 0xe, "82ab3021f91b82946a59cb60"}]}, @ssrr={0x89, 0x7, 0xa4, [@loopback]}, @noop, @noop, @generic={0x7, 0x10, "62fe6604f1688f00000000000000"}, @cipso={0x86, 0x16, 0x0, [{0x0, 0xa, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x6, 0x6, "04000000"}]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x3, [{@broadcast, 0x5}, {@empty, 0xffff}]}, @timestamp={0x44, 0x1c, 0xea, 0x0, 0x0, [0x4, 0x1, 0x5, 0x5, 0x7fff, 0xffff]}, @rr={0x7, 0xb, 0x7f, [@remote, @remote]}, @noop]}}}}}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x26e542, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d000bcc000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000a000200aac4aaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f00000022c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004009f0700028177000000070055040000007500060d01010000400006000002000099000201040000000100010a0200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRESDEC=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYRES16=r11, @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000051000003800010024000100616374697665706f7274000000000000000000000000172c5435a7cd9f6ed300000000000000000000050003000300000008000400000000cdb7cb464e1589f6528fc6f74e801242a47b83575a73c6afaf5676a6f15367f743cbf5f43358d961bdac19c01e7f022842fc79dd2cc96ac85d2f9075cb65dc94b378a5b3029167d1f67fde33d39d24083159581ccc1ead7b9425d3e3fef69038cffaa368cae4668a5a2f66f8d3eba579", @ANYRES32=r6, @ANYBLOB="0800016e11b124e5166efc4060ab7c24454400884a7d00abebfc7f2b9e32533d8e856ee5e69565da0e12579ce4ed8f9e9477acc9adabf16740a13c80152674f0b6f96a4732266b65b60dc878ba1531176b9abecddd953f2928e7c94fdecddea1d1c345e6f629de9f798da6bcce517977636bd6ec997f29ae2262528e69b385deb9035da56580a2e2ac08c2bc920949799f018d8b73844c97fb30", @ANYRES32=r8, @ANYRES16=r3, @ANYRES32=r11, @ANYRES8=r7], 0x380}}, 0x90) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f00000000c0)=0x81, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r13, &(0x7f0000000040)="2f019c28", 0x4, 0x800, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r13, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) ioctl$SIOCGSTAMP(r13, 0x8906, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x18}}, 0x20040051) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xfff8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000440)=""/260, 0x104}, {&(0x7f0000000940)=""/4074, 0xfea}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000004}], 0x4, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16.646868904s ago: executing program 1 (id=1414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00000000c0)="441f080300c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e24a5c87", 0x1d) r6 = epoll_create(0x7) r7 = epoll_create1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) r9 = epoll_create1(0x0) write$cgroup_int(r5, &(0x7f0000000100)=0xffffffff, 0x12) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010020bd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00f7202ba5", @ANYRESDEC, @ANYRES8=r7, @ANYBLOB="65909710a0e85c1c81622331316e2be369021506372417d6e95f0fb345da2b1415cfe1717e8be719b2ca26e16d913b909a5338a1ec76dbbfd029db7d7f06e5bdcfba304258c9ff3e74a49c9135e0623e7b1bf634055af524aea2eeb48b19df5630da97473b2c51b887671140396405cfa2e284a371ef4363f7785b85b8c095a938a2e75fd6d464767b90bdca"], 0x24}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f6) recvmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/19, 0x13}], 0x1}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000018c0)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xe, 0x1}, {0x11f8af629573faa1, 0xffe3}}}, 0x24}}, 0xc804) 16.014065349s ago: executing program 0 (id=1420): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000016000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000600000000e5000500000000002604fdffff02000014010000033800001d130000000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 15.917594909s ago: executing program 0 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c"], 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@arp={0x806, @generic={0x4, 0x80d5, 0x6, 0x0, 0x9, @remote, "", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "93c5ed5be0ec4b2c"}}}}, 0x0) 15.85463657s ago: executing program 2 (id=1422): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 15.813920651s ago: executing program 2 (id=1423): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) close(r0) 15.7277682s ago: executing program 2 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000300), 0x20000000, 0x2}, 0x20) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x800) r11 = accept(r0, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80) getsockname$packet(r11, &(0x7f0000000100), &(0x7f0000000140)=0x14) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) ioctl$IMGETVERSION(r9, 0x80044942, &(0x7f0000000a40)) setsockopt$inet6_tcp_int(r12, 0x6, 0x9, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r14, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xd, 0x4, 0x7}, 0x10, r15, r5, 0x8, &(0x7f0000000900)=[r4, r16, r6], &(0x7f0000000940)=[{0x5, 0x4, 0x2, 0xb}, {0x4, 0x2, 0xc, 0x9}, {0x4, 0x5, 0x5, 0x7}, {0x2, 0x3, 0x10, 0x6}, {0x1, 0x2, 0x4, 0x1}, {0x1, 0x3, 0x6, 0x9}, {0x2, 0x5, 0x0, 0xa}, {0x0, 0x1, 0xb, 0x8}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a0072847a281c63ee20403644ea01000000a0e66d0000000a00000000e1ff8c02cd5eb90e32c1fc493778"], 0x18}}, 0x0) 15.727497946s ago: executing program 1 (id=1425): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000003800000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9, 0x2}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x3, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @empty}]}, 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 15.626234836s ago: executing program 0 (id=1426): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000140)=0x51) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) 15.584794941s ago: executing program 0 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x13, 0x0, &(0x7f0000001980)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x13, 0x0, &(0x7f0000001980)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}}, 0x0) (async) 15.457807391s ago: executing program 1 (id=1428): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x3) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 15.456569661s ago: executing program 2 (id=1429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000015000100"], 0xb8}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) 15.414472094s ago: executing program 0 (id=1430): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000000), &(0x7f0000000080)=0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none, 0x8001, 0x2}, 0xe) 15.401812649s ago: executing program 1 (id=1431): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) (async, rerun: 64) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) (rerun: 64) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x5d, &(0x7f0000000100)="72ea1763563ce4402548687960d535b1906b8799ed41e639b0dca6eeb906eeb2a661d787508a617f426f30ed862888948d371f200f2aaffc038ed6fc4e623bd719ec42f000540fe7a7d2d711a499b35047ec7a80d5abdcb5f594234b6d"}) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x8}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000300)={r4, 0x1000, "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"}, &(0x7f0000001340)=0x1008) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000001380)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001400), &(0x7f0000001440)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001480)={'wlan1\x00'}) (async, rerun: 32) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000014c0)={{0x3fa7e36e, 0x20}, 0x100, './file0\x00'}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001600)={'veth0_to_batadv\x00', @multicast}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'veth0_to_bond\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000017c0)={'erspan0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x3, 0x8, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x20, 0x51, 0x0, 0x6, [0x0, 0xd28d, 0x7ff, 0x7, 0xf6, 0x81, 0x7fff]}, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0x9, [{@multicast2, 0x6}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xdc}, {@remote, 0x8001}, {@empty, 0x8}, {@multicast2}, {@private=0xa010100, 0x5}]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000001800)={'ip6gre0\x00', 0x0, 0x4, 0x47, 0x8, 0x9, 0x22, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, 0x10, 0x700, 0x7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001940)={'ip6tnl0\x00', &(0x7f00000018c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x10, 0x4, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x20, 0x5, 0x3735}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001a00)={'ip6tnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x39, 0x0, 0xf5, 0x8, 0x13, @local, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x8000, 0xa, 0x8}}) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001a40)={0x0, @rand_addr, @empty}, &(0x7f0000001a80)=0xc) (async) getsockname$packet(r5, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b00)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000001c80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0x100, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000800) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001cc0)={'vcan0\x00'}) (rerun: 32) r16 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r16) connect$vsock_stream(r6, &(0x7f0000001d00)={0x28, 0x0, 0x2710, @hyper}, 0x10) 15.285767422s ago: executing program 0 (id=1432): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000020c0)=""/4029, 0xfbd}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000500)=""/192, 0xc0}], 0x8}, 0x2000) 15.283819132s ago: executing program 1 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7, 0x8, 0xa298ea9ceb191779, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20, 0x7800, 0x7, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001b40)={'ip_vti0\x00', &(0x7f0000001b80)={'erspan0\x00', 0x0, 0x80, 0x40, 0x41, 0x3, {{0x2f, 0x4, 0x0, 0x4, 0xbc, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @empty, {[@cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x0, 0x3, '\n'}, {0x0, 0x4, "a501"}, {0x7, 0xb, "c377b0109ac3cfdeaa"}, {0x7, 0xf, "11b61022bda807565178b70749"}, {0x5, 0x7, "c2bef2e6ef"}, {0x2, 0xe, "82ab3021f91b82946a59cb60"}]}, @ssrr={0x89, 0x7, 0xa4, [@loopback]}, @noop, @noop, @generic={0x7, 0x10, "62fe6604f1688f00000000000000"}, @cipso={0x86, 0x16, 0x0, [{0x0, 0xa, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x6, 0x6, "04000000"}]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x3, [{@broadcast, 0x5}, {@empty, 0xffff}]}, @timestamp={0x44, 0x1c, 0xea, 0x0, 0x0, [0x4, 0x1, 0x5, 0x5, 0x7fff, 0xffff]}, @rr={0x7, 0xb, 0x7f, [@remote, @remote]}, @noop]}}}}}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x26e542, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d000bcc000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000a000200aac4aaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f00000022c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004009f0700028177000000070055040000007500060d01010000400006000002000099000201040000000100010a0200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRESDEC=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYRES16=r11, @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000051000003800010024000100616374697665706f7274000000000000000000000000172c5435a7cd9f6ed300000000000000000000050003000300000008000400000000cdb7cb464e1589f6528fc6f74e801242a47b83575a73c6afaf5676a6f15367f743cbf5f43358d961bdac19c01e7f022842fc79dd2cc96ac85d2f9075cb65dc94b378a5b3029167d1f67fde33d39d24083159581ccc1ead7b9425d3e3fef69038cffaa368cae4668a5a2f66f8d3eba579", @ANYRES32=r6, @ANYBLOB="0800016e11b124e5166efc4060ab7c24454400884a7d00abebfc7f2b9e32533d8e856ee5e69565da0e12579ce4ed8f9e9477acc9adabf16740a13c80152674f0b6f96a4732266b65b60dc878ba1531176b9abecddd953f2928e7c94fdecddea1d1c345e6f629de9f798da6bcce517977636bd6ec997f29ae2262528e69b385deb9035da56580a2e2ac08c2bc920949799f018d8b73844c97fb30", @ANYRES32=r8, @ANYRES16=r3, @ANYRES32=r11, @ANYRES8=r7], 0x380}}, 0x90) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f00000000c0)=0x81, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r13, &(0x7f0000000040)="2f019c28", 0x4, 0x800, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r13, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) ioctl$SIOCGSTAMP(r13, 0x8906, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x18}}, 0x20040051) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xfff8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000440)=""/260, 0x104}, {&(0x7f0000000940)=""/4074, 0xfea}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000004}], 0x4, 0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 62.656809ms ago: executing program 32 (id=1432): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000020c0)=""/4029, 0xfbd}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000500)=""/192, 0xc0}], 0x8}, 0x2000) 37.917696ms ago: executing program 33 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7, 0x8, 0xa298ea9ceb191779, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20, 0x7800, 0x7, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001b40)={'ip_vti0\x00', &(0x7f0000001b80)={'erspan0\x00', 0x0, 0x80, 0x40, 0x41, 0x3, {{0x2f, 0x4, 0x0, 0x4, 0xbc, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @empty, {[@cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x0, 0x3, '\n'}, {0x0, 0x4, "a501"}, {0x7, 0xb, "c377b0109ac3cfdeaa"}, {0x7, 0xf, "11b61022bda807565178b70749"}, {0x5, 0x7, "c2bef2e6ef"}, {0x2, 0xe, "82ab3021f91b82946a59cb60"}]}, @ssrr={0x89, 0x7, 0xa4, [@loopback]}, @noop, @noop, @generic={0x7, 0x10, "62fe6604f1688f00000000000000"}, @cipso={0x86, 0x16, 0x0, [{0x0, 0xa, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x6, 0x6, "04000000"}]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x3, [{@broadcast, 0x5}, {@empty, 0xffff}]}, @timestamp={0x44, 0x1c, 0xea, 0x0, 0x0, [0x4, 0x1, 0x5, 0x5, 0x7fff, 0xffff]}, @rr={0x7, 0xb, 0x7f, [@remote, @remote]}, @noop]}}}}}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x26e542, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d000bcc000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000a000200aac4aaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f00000022c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004009f0700028177000000070055040000007500060d01010000400006000002000099000201040000000100010a0200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRESDEC=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYRES16=r11, @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000051000003800010024000100616374697665706f7274000000000000000000000000172c5435a7cd9f6ed300000000000000000000050003000300000008000400000000cdb7cb464e1589f6528fc6f74e801242a47b83575a73c6afaf5676a6f15367f743cbf5f43358d961bdac19c01e7f022842fc79dd2cc96ac85d2f9075cb65dc94b378a5b3029167d1f67fde33d39d24083159581ccc1ead7b9425d3e3fef69038cffaa368cae4668a5a2f66f8d3eba579", @ANYRES32=r6, @ANYBLOB="0800016e11b124e5166efc4060ab7c24454400884a7d00abebfc7f2b9e32533d8e856ee5e69565da0e12579ce4ed8f9e9477acc9adabf16740a13c80152674f0b6f96a4732266b65b60dc878ba1531176b9abecddd953f2928e7c94fdecddea1d1c345e6f629de9f798da6bcce517977636bd6ec997f29ae2262528e69b385deb9035da56580a2e2ac08c2bc920949799f018d8b73844c97fb30", @ANYRES32=r8, @ANYRES16=r3, @ANYRES32=r11, @ANYRES8=r7], 0x380}}, 0x90) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f00000000c0)=0x81, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r13, &(0x7f0000000040)="2f019c28", 0x4, 0x800, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r13, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) ioctl$SIOCGSTAMP(r13, 0x8906, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x18}}, 0x20040051) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xfff8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000440)=""/260, 0x104}, {&(0x7f0000000940)=""/4074, 0xfea}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000004}], 0x4, 0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 34 (id=1429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000015000100"], 0xb8}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): timeout [ 106.078617][ T8244] xt_hashlimit: max too large, truncated to 1048576 [ 106.223366][ T8255] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 106.554544][ T8287] net_ratelimit: 69 callbacks suppressed [ 106.554565][ T8287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.666548][ T8295] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 106.841286][ T8312] netlink: ct family unspecified [ 106.856197][ T8312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.981612][ T8326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.001985][ T8326] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 107.231716][ T8344] __nla_validate_parse: 8 callbacks suppressed [ 107.231731][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 107.330718][ T8349] tipc: Enabled bearer , priority 0 [ 107.349460][ T8351] syzkaller0: entered promiscuous mode [ 107.358316][ T8351] syzkaller0: entered allmulticast mode [ 107.382848][ T8351] tipc: Resetting bearer [ 107.402674][ T8351] tipc: Disabling bearer [ 107.542447][ T8362] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 107.567834][ T8362] batman_adv: batadv0: Adding interface: wlan0 [ 107.591332][ T8362] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.618864][ T8362] batman_adv: batadv0: Interface activated: wlan0 [ 107.818498][ T8386] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.155756][ T8419] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 108.229575][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 108.460663][ T8440] bond0: option updelay: invalid value (18446744073709551615) [ 108.467898][ T8441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 108.469037][ T8440] bond0: option updelay: allowed values 0 - 2147483647 [ 108.482393][ T8441] netlink: 'syz.3.722': attribute type 6 has an invalid length. [ 108.500461][ T8437] bond0: option updelay: invalid value (18446744073709551615) [ 108.508810][ T8437] bond0: option updelay: allowed values 0 - 2147483647 [ 108.679905][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 108.704148][ T8449] xt_CT: No such helper "netbios-ns" [ 108.719926][ T8456] netlink: 72 bytes leftover after parsing attributes in process `syz.2.727'. [ 108.800393][ T8462] syzkaller0: entered promiscuous mode [ 108.813746][ T8462] syzkaller0: entered allmulticast mode [ 108.969498][ T8476] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 109.000397][ T8480] netlink: 71 bytes leftover after parsing attributes in process `syz.3.735'. [ 109.180559][ T8507] vlan2: entered promiscuous mode [ 109.202846][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.0.741'. [ 109.215944][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.0.741'. [ 109.232958][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.736'. [ 109.272341][ T8520] netlink: 84 bytes leftover after parsing attributes in process `syz.3.745'. [ 109.280364][ T8522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.601849][ T8547] vlan2: entered promiscuous mode [ 109.697206][ T8552] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 110.003355][ T8595] vlan2: entered promiscuous mode [ 110.184785][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.209467][ T8616] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 110.220031][ T8615] IPVS: stopping backup sync thread 8616 ... [ 110.371600][ T8625] netlink: 96 bytes leftover after parsing attributes in process `syz.4.783'. [ 110.390674][ T8627] netlink: 'syz.2.784': attribute type 3 has an invalid length. [ 110.470862][ T8636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.480673][ T8636] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.584709][ T8645] vlan3: entered promiscuous mode [ 110.608632][ T8644] IPVS: Error joining to the multicast group [ 110.681058][ T8655] netlink: 'syz.2.794': attribute type 3 has an invalid length. [ 110.738990][ T8662] Bluetooth: MGMT ver 1.23 [ 110.975666][ T8690] vlan3: entered promiscuous mode [ 111.135184][ T8699] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 111.144582][ T8699] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 111.270737][ T8709] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 111.486795][ T8728] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 111.580804][ T8736] wg2: entered promiscuous mode [ 111.587154][ T8736] wg2: entered allmulticast mode [ 111.838610][ T8760] netlink: 'syz.3.830': attribute type 8 has an invalid length. [ 111.881198][ T8760] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 112.149123][ T8788] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 112.617322][ T8832] __nla_validate_parse: 80 callbacks suppressed [ 112.617345][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 112.805339][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.854'. [ 112.876479][ T8844] netlink: 808 bytes leftover after parsing attributes in process `syz.3.853'. [ 113.193139][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.867'. [ 113.216201][ T8880] netem: change failed [ 113.282378][ T8818] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.317034][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 113.329445][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.872'. [ 113.406179][ T8896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.875'. [ 113.422219][ T8896] syz.0.875: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.439637][ T8896] CPU: 1 UID: 0 PID: 8896 Comm: syz.0.875 Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 113.439667][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.439681][ T8896] Call Trace: [ 113.439688][ T8896] [ 113.439696][ T8896] dump_stack_lvl+0x241/0x360 [ 113.439745][ T8896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.439775][ T8896] ? __pfx__printk+0x10/0x10 [ 113.439804][ T8896] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 113.439838][ T8896] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 113.439874][ T8896] warn_alloc+0x278/0x410 [ 113.439898][ T8896] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 113.439922][ T8896] ? __pfx_warn_alloc+0x10/0x10 [ 113.439945][ T8896] ? kasan_save_track+0x3f/0x80 [ 113.439967][ T8896] ? __kasan_kmalloc+0x98/0xb0 [ 113.439991][ T8896] ? xsk_setsockopt+0x4ea/0x950 [ 113.440016][ T8896] ? do_sock_setsockopt+0x3af/0x720 [ 113.440038][ T8896] ? __x64_sys_setsockopt+0x1ee/0x280 [ 113.440058][ T8896] ? do_syscall_64+0xf3/0x230 [ 113.440076][ T8896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.440103][ T8896] __vmalloc_node_range_noprof+0x126/0x1380 [ 113.440142][ T8896] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.440168][ T8896] ? __kasan_kmalloc+0x98/0xb0 [ 113.440196][ T8896] vmalloc_user_noprof+0x74/0x80 [ 113.440219][ T8896] ? xskq_create+0xb6/0x170 [ 113.440244][ T8896] xskq_create+0xb6/0x170 [ 113.440271][ T8896] xsk_init_queue+0xa1/0x100 [ 113.440296][ T8896] xsk_setsockopt+0x4ea/0x950 [ 113.440322][ T8896] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.440345][ T8896] ? rcu_is_watching+0x15/0xb0 [ 113.440375][ T8896] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.440392][ T8896] ? lock_release+0xbf/0xa30 [ 113.440418][ T8896] ? aa_sock_opt_perm+0x79/0x120 [ 113.440441][ T8896] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.440463][ T8896] do_sock_setsockopt+0x3af/0x720 [ 113.440487][ T8896] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 113.440511][ T8896] ? __fget_files+0x395/0x410 [ 113.440544][ T8896] ? __fget_files+0x2a/0x410 [ 113.440576][ T8896] __x64_sys_setsockopt+0x1ee/0x280 [ 113.440603][ T8896] do_syscall_64+0xf3/0x230 [ 113.440631][ T8896] ? clear_bhb_loop+0x35/0x90 [ 113.440656][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.440677][ T8896] RIP: 0033:0x7f1e0a98cda9 [ 113.440702][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.440719][ T8896] RSP: 002b:00007f1e0b7eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.440740][ T8896] RAX: ffffffffffffffda RBX: 00007f1e0aba5fa0 RCX: 00007f1e0a98cda9 [ 113.440755][ T8896] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 113.440767][ T8896] RBP: 00007f1e0aa0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 113.440779][ T8896] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.440792][ T8896] R13: 0000000000000000 R14: 00007f1e0aba5fa0 R15: 00007ffce0a6ed98 [ 113.440814][ T8896] [ 113.441283][ T8896] Mem-Info: [ 113.470913][ T8900] netlink: 260 bytes leftover after parsing attributes in process `syz.1.876'. [ 113.475621][ T8896] active_anon:4230 inactive_anon:0 isolated_anon:0 [ 113.475621][ T8896] active_file:1362 inactive_file:38311 isolated_file:0 [ 113.475621][ T8896] unevictable:768 dirty:94 writeback:0 [ 113.475621][ T8896] slab_reclaimable:10946 slab_unreclaimable:100860 [ 113.475621][ T8896] mapped:28414 shmem:1426 pagetables:692 [ 113.475621][ T8896] sec_pagetables:0 bounce:0 [ 113.475621][ T8896] kernel_misc_reclaimable:0 [ 113.475621][ T8896] free:1338612 free_pcp:2073 free_cma:0 [ 113.640004][ T8896] Node 0 active_anon:16920kB inactive_anon:0kB active_file:5448kB inactive_file:153172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113656kB dirty:372kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:2768kB sec_pagetables:0kB all_unreclaimable? no [ 113.833366][ T8896] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 113.866473][ T8896] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.899360][ T8896] lowmem_reserve[]: 0 2490 2491 0 0 [ 113.907207][ T8896] Node 0 DMA32 free:1429452kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:16884kB inactive_anon:0kB active_file:5448kB inactive_file:152604kB unevictable:1536kB writepending:372kB present:3129332kB managed:2550704kB mlocked:0kB bounce:0kB free_pcp:7764kB local_pcp:32kB free_cma:0kB [ 113.930559][ T8917] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 113.942079][ T8896] lowmem_reserve[]: 0 0 0 0 0 [ 113.951017][ T8896] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 113.973014][ T8917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.997949][ T8917] bond2: (slave bridge1): making interface the new active one [ 114.006604][ T8917] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 114.022141][ T8917] vlan3: entered promiscuous mode [ 114.028881][ T8917] bond2: entered promiscuous mode [ 114.034393][ T8917] bridge1: entered promiscuous mode [ 114.040134][ T8896] lowmem_reserve[]: 0 0 0 0 0 [ 114.047937][ T8896] Node 1 Normal free:3909272kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.090102][ T8896] lowmem_reserve[]: 0 0 0 0 0 [ 114.095151][ T8896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.108296][ T8896] Node 0 DMA32: 473*4kB (UME) 647*8kB (UME) 401*16kB (UME) 242*32kB (UME) 1654*64kB (UME) 308*128kB (UME) 56*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 2*2048kB (UM) 301*4096kB (M) = 1427052kB [ 114.131190][ T8896] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 114.143741][ T8896] Node 1 Normal: 220*4kB (UE) 77*8kB (UME) 26*16kB (UME) 199*32kB (UME) 105*64kB (UME) 30*128kB (UME) 13*256kB (UM) 12*512kB (UME) 2*1024kB (UM) 4*2048kB (UE) 945*4096kB (UM) = 3909272kB [ 114.180807][ T8896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.196642][ T8896] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.206193][ T8896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.220875][ T8896] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.233308][ T8896] 41081 total pagecache pages [ 114.238590][ T8896] 0 pages in swap cache [ 114.242866][ T8896] Free swap = 124996kB [ 114.247766][ T8896] Total swap = 124996kB [ 114.251969][ T8896] 2097051 pages RAM [ 114.256029][ T8896] 0 pages HighMem/MovableOnly [ 114.260803][ T8896] 427589 pages reserved [ 114.265276][ T8896] 0 pages cma reserved [ 114.572233][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.893'. [ 114.580081][ T8955] batman_adv: batadv0: Removing interface: dummy0 [ 114.591817][ T8955] bridge_slave_0: left allmulticast mode [ 114.599923][ T8955] bridge_slave_0: left promiscuous mode [ 114.606486][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.618974][ T8955] bridge_slave_1: left allmulticast mode [ 114.626443][ T8955] bridge_slave_1: left promiscuous mode [ 114.632396][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.645086][ T8955] bond0: (slave bond_slave_0): Releasing backup interface [ 114.657384][ T8955] bond0: (slave bond_slave_1): Releasing backup interface [ 114.669176][ T8955] team0: Port device team_slave_0 removed [ 114.676751][ T8955] team0: Port device team_slave_1 removed [ 114.683762][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.691841][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.712849][ T8965] team0: Mode changed to "loadbalance" [ 114.860768][ T8975] xt_hashlimit: max too large, truncated to 1048576 [ 114.894597][ T5146] Bluetooth: hci0: command 0x080f tx timeout [ 114.968194][ T8986] x_tables: unsorted entry at hook 1 [ 115.001817][ T8989] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 115.012672][ T8989] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 115.306659][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.317511][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.325751][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.337203][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.346172][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.353723][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.410969][ T9009] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.510686][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 115.604799][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.612173][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.620121][ T9004] bridge_slave_0: entered allmulticast mode [ 115.627322][ T9004] bridge_slave_0: entered promiscuous mode [ 115.635929][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.643242][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.651160][ T9004] bridge_slave_1: entered allmulticast mode [ 115.658394][ T9004] bridge_slave_1: entered promiscuous mode [ 115.708015][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.725546][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.772955][ T9004] team0: Port device team_slave_0 added [ 115.788112][ T9004] team0: Port device team_slave_1 added [ 115.823269][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.836954][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.868986][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.882321][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.908757][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.938584][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.029875][ T9004] hsr_slave_0: entered promiscuous mode [ 116.038970][ T9004] hsr_slave_1: entered promiscuous mode [ 116.047070][ T9004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.055203][ T9004] Cannot create hsr debugfs directory [ 116.127938][ T9054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.924'. [ 116.308320][ T9004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.330485][ T9004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.368965][ T9076] netlink: 'syz.4.930': attribute type 21 has an invalid length. [ 116.446107][ T9004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.459319][ T9004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.519952][ T9004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.538982][ T9004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.578075][ T9090] netlink: 'syz.1.935': attribute type 12 has an invalid length. [ 116.593315][ T9090] netlink: 'syz.1.935': attribute type 12 has an invalid length. [ 116.606818][ T9093] x_tables: unsorted entry at hook 3 [ 116.624545][ T9004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.646821][ T9004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.741671][ T9004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.760928][ T9004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.789096][ T9004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.806570][ T9004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.903352][ T9110] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 116.924950][ T9114] Unsupported ieee802154 address type: 0 [ 116.957040][ T9110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.989886][ T9117] bond2: (slave veth5): Enslaving as an active interface with a down link [ 117.048796][ T9110] syzkaller1: entered promiscuous mode [ 117.064360][ T9110] syzkaller1: entered allmulticast mode [ 117.082153][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.129601][ T9129] tipc: Enabled bearer , priority 0 [ 117.142685][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.172774][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.179956][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.230302][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.237514][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.249696][ T9129] +: renamed from syzkaller0 [ 117.255919][ T9129] tipc: Disabling bearer [ 117.268951][ T9132] netlink: 'syz.1.949': attribute type 12 has an invalid length. [ 117.374092][ T5840] Bluetooth: hci3: command tx timeout [ 117.452936][ T9148] bridge0: port 3(gretap0) entered blocking state [ 117.473687][ T9148] bridge0: port 3(gretap0) entered disabled state [ 117.480355][ T9148] gretap0: entered allmulticast mode [ 117.488115][ T9148] gretap0: entered promiscuous mode [ 117.494468][ T9148] bridge0: port 3(gretap0) entered blocking state [ 117.501049][ T9148] bridge0: port 3(gretap0) entered forwarding state [ 117.544081][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.645210][ T9004] veth0_vlan: entered promiscuous mode [ 117.670462][ T9004] veth1_vlan: entered promiscuous mode [ 117.742823][ T9004] veth0_macvtap: entered promiscuous mode [ 117.762423][ T9004] veth1_macvtap: entered promiscuous mode [ 117.782028][ T9162] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 117.800396][ T9162] __nla_validate_parse: 8 callbacks suppressed [ 117.800418][ T9162] netlink: 17 bytes leftover after parsing attributes in process `syz.2.958'. [ 117.827890][ T9167] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 117.836644][ T9167] netlink: 17 bytes leftover after parsing attributes in process `syz.2.958'. [ 117.875291][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.899119][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.910009][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.929282][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.962839][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.982348][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.990404][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.003016][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.023210][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.036195][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.046793][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.057728][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.078248][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.092116][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.106157][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.119027][ T9184] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 118.130035][ T9004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.139776][ T9004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.149772][ T9004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.158963][ T9004] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.198817][ T9182] syzkaller0: entered promiscuous mode [ 118.205518][ T9182] syzkaller0: entered allmulticast mode [ 118.282797][ T9194] netlink: 'syz.4.966': attribute type 9 has an invalid length. [ 118.345997][ T9004] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 118.359435][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.434007][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.442222][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.465816][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.476198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.541000][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 118.550564][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 118.562718][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 118.574946][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 118.600846][ T9203] netlink: 64 bytes leftover after parsing attributes in process `syz.1.969'. [ 118.619360][ T9203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'. [ 118.929784][ T9222] netlink: 108 bytes leftover after parsing attributes in process `syz.2.975'. [ 118.957241][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 119.313092][ T9255] ipt_REJECT: ECHOREPLY no longer supported. [ 119.344704][ T9255] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 119.822951][ T1335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.025001][ T9302] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.039477][ T9304] pimreg: entered allmulticast mode [ 120.119274][ T9304] pimreg: left allmulticast mode [ 120.380899][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.392433][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.414904][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.442524][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.458093][ T5146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.467539][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.607770][ T9343] netlink: 'syz.4.1005': attribute type 4 has an invalid length. [ 120.714641][ T9351] syzkaller1: entered promiscuous mode [ 120.721206][ T9351] syzkaller1: entered allmulticast mode [ 120.749254][ T9351] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4032 [ 120.792588][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 120.795599][ T9363] netlink: 'syz.4.1009': attribute type 11 has an invalid length. [ 120.859391][ T9364] IPv6: sit1: Disabled Multicast RS [ 120.999340][ T1335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.000742][ T9376] x_tables: ip6_tables: NETMAP target: only valid in nat table, not [ 121.050345][ T9381] vlan2: entered promiscuous mode [ 121.063855][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.072757][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.085593][ T9335] bridge_slave_0: entered allmulticast mode [ 121.093323][ T9335] bridge_slave_0: entered promiscuous mode [ 121.159352][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.180559][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.201204][ T9335] bridge_slave_1: entered allmulticast mode [ 121.231015][ T9335] bridge_slave_1: entered promiscuous mode [ 121.268364][ T1335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.317953][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.332294][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.377967][ T9335] team0: Port device team_slave_0 added [ 121.390519][ T1335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.408849][ T9335] team0: Port device team_slave_1 added [ 121.448927][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.459909][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.493141][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.507309][ T9396] netlink: 'syz.1.1017': attribute type 33 has an invalid length. [ 121.519278][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.529511][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.560866][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.602196][ T9403] tipc: Enabled bearer , priority 0 [ 121.617191][ T9403] syzkaller0: entered promiscuous mode [ 121.626551][ T9403] syzkaller0: entered allmulticast mode [ 121.661550][ T9335] hsr_slave_0: entered promiscuous mode [ 121.668974][ T9335] hsr_slave_1: entered promiscuous mode [ 121.676057][ T9335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.684942][ T9335] Cannot create hsr debugfs directory [ 121.696279][ T9402] tipc: Resetting bearer [ 121.707808][ T9402] tipc: Disabling bearer [ 121.764831][ T1335] bridge_slave_1: left allmulticast mode [ 121.772655][ T1335] bridge_slave_1: left promiscuous mode [ 121.782329][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.804055][ T1335] bridge_slave_0: left allmulticast mode [ 121.840030][ T1335] bridge_slave_0: left promiscuous mode [ 121.849017][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.058949][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.080922][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.119273][ T1335] bond0 (unregistering): Released all slaves [ 122.324678][ T9437] sctp: [Deprecated]: syz.0.1029 (pid 9437) Use of int in max_burst socket option deprecated. [ 122.324678][ T9437] Use struct sctp_assoc_value instead [ 122.494720][ T5146] Bluetooth: hci3: command tx timeout [ 122.533204][ T1335] hsr_slave_0: left promiscuous mode [ 122.562678][ T1335] hsr_slave_1: left promiscuous mode [ 122.573300][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.582125][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.593846][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.602330][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.613668][ T1335] veth1_macvtap: left promiscuous mode [ 122.620112][ T1335] veth0_macvtap: left promiscuous mode [ 122.627212][ T1335] veth1_vlan: left promiscuous mode [ 122.633277][ T1335] veth0_vlan: left promiscuous mode [ 122.713201][ T9455] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 122.793019][ T9462] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 122.940866][ T9473] netlink: 'syz.2.1039': attribute type 8 has an invalid length. [ 122.973348][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 123.001510][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 123.220945][ T9335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.251582][ T9335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.278304][ T9494] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.296455][ T9494] tap0: tun_chr_ioctl cmd 1074025672 [ 123.302776][ T9494] tap0: ignored: set checksum disabled [ 123.311101][ T9335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.329298][ T9497] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 123.330018][ T9496] __nla_validate_parse: 14 callbacks suppressed [ 123.330045][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 123.359415][ T9335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.370577][ T9496] tipc: Can't bind to reserved service type 1 [ 123.477654][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.509063][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.526192][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 123.545984][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.554097][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.574255][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.584053][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.675993][ T9513] xt_hashlimit: overflow, rate too high: 0 [ 123.688996][ T9513] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 123.697267][ T9513] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1053'. [ 123.709366][ T9513] vlan1: entered promiscuous mode [ 123.720512][ T9512] vlan1: left promiscuous mode [ 123.784981][ T9518] tunl0: entered promiscuous mode [ 123.792836][ T9518] netlink: 'syz.1.1054': attribute type 3 has an invalid length. [ 123.811249][ T9518] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1054'. [ 123.831357][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.879842][ T9335] veth0_vlan: entered promiscuous mode [ 123.888301][ T9520] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 123.897836][ T9335] veth1_vlan: entered promiscuous mode [ 123.910742][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1055'. [ 123.922218][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1055'. [ 123.923227][ T9335] veth0_macvtap: entered promiscuous mode [ 123.946837][ T9335] veth1_macvtap: entered promiscuous mode [ 123.969402][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.985346][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.996095][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.008624][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.021819][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.046105][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.058494][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.069327][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.083080][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.100250][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.112106][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.127816][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.141340][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.159547][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.188658][ T9528] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 124.199975][ T9335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.210917][ T9335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.221448][ T9335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.230940][ T9335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.336612][ T9335] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 124.361249][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.392754][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 124.438115][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.446704][ T9544] delete_channel: no stack [ 124.458401][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.469379][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.479708][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.497447][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'. [ 124.526170][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 124.577712][ T5146] Bluetooth: hci3: command tx timeout [ 124.759541][ T9566] vlan2: entered promiscuous mode [ 124.916854][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1076'. [ 124.967955][ T9584] netlink: 'syz.4.1077': attribute type 62 has an invalid length. [ 124.989414][ T9584] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 125.080375][ T9589] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.609872][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.618065][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.626230][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.634294][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.642247][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.650267][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.776493][ T9629] IPVS: length: 150 != 8 [ 125.843057][ T1033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.921177][ T9618] chnl_net:caif_netlink_parms(): no params data found [ 126.082440][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.101230][ T12] wlan1: Trigger new scan to find an IBSS to join [ 126.118890][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.130955][ T29] audit: type=1107 audit(1738140609.239:2): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='´ê©¡â8‚—½,§URÄŽfë¨t{dWeSÉÍËûDªÉS(, 1 [ 126.202681][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.210849][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.211226][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.234250][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.241789][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.251586][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.277307][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.294298][ T9618] bridge_slave_1: entered allmulticast mode [ 126.301513][ T9618] bridge_slave_1: entered promiscuous mode [ 126.386083][ T9661] hsr_slave_1 (unregistering): left promiscuous mode [ 126.414471][ T9618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.425597][ T9664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.435592][ T9664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.447259][ T9664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.456187][ T9664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.468821][ T9618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.496730][ T9664] IPVS: length: 157 != 24 [ 126.524866][ T9670] Bluetooth: MGMT ver 1.23 [ 126.619380][ T9618] team0: Port device team_slave_0 added [ 126.640934][ T9618] team0: Port device team_slave_1 added [ 126.711119][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.726089][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.756783][ T9618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.768437][ T9685] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 126.788857][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.797631][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.827554][ T9618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.846663][ T9688] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 126.875402][ T9695] netlink: 'syz.1.1109': attribute type 4 has an invalid length. [ 126.978064][ T9618] hsr_slave_0: entered promiscuous mode [ 126.985204][ T9618] hsr_slave_1: entered promiscuous mode [ 126.991391][ T9618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.999258][ T9618] Cannot create hsr debugfs directory [ 127.010310][ T9698] vlan2: entered promiscuous mode [ 127.040524][ T9701] gretap0: left allmulticast mode [ 127.047758][ T9701] gretap0: left promiscuous mode [ 127.054135][ T9701] bridge0: port 3(gretap0) entered disabled state [ 127.069782][ T9701] bridge_slave_0: left allmulticast mode [ 127.076258][ T9701] bridge_slave_0: left promiscuous mode [ 127.082149][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.095971][ T9701] bridge_slave_1: left allmulticast mode [ 127.102719][ T9701] bridge_slave_1: left promiscuous mode [ 127.111582][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.126004][ T9701] bond0: (slave bond_slave_0): Releasing backup interface [ 127.144672][ T9701] bond0: (slave bond_slave_1): Releasing backup interface [ 127.173176][ T9701] team0: Port device team_slave_0 removed [ 127.183700][ T9701] team0: Port device team_slave_1 removed [ 127.190634][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.201409][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.217333][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.226581][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.242963][ T9701] team0: Port device netdevsim0 removed [ 127.252782][ T9701] batman_adv: batadv0: Interface deactivated: wlan0 [ 127.261693][ T9701] batman_adv: batadv0: Removing interface: wlan0 [ 127.272978][ T9701] bond1: (slave gretap1): Releasing active interface [ 127.290544][ T9701] bond2: (slave veth5): Releasing active interface [ 127.356449][ T1033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.432324][ T9651] chnl_net:caif_netlink_parms(): no params data found [ 127.452664][ T9716] tipc: Enabling of bearer rejected, failed to enable media [ 127.491404][ T9722] : entered promiscuous mode [ 127.500673][ T1033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.671992][ T1033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.693902][ T5146] Bluetooth: hci3: command tx timeout [ 127.740776][ T9618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.757702][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.766053][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.776318][ T9651] bridge_slave_0: entered allmulticast mode [ 127.787398][ T9651] bridge_slave_0: entered promiscuous mode [ 127.801056][ T9735] policy can only be matched on NF_INET_PRE_ROUTING [ 127.801079][ T9735] unable to load match [ 127.827935][ T9618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.843316][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.861780][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.880779][ T9651] bridge_slave_1: entered allmulticast mode [ 127.889545][ T9651] bridge_slave_1: entered promiscuous mode [ 127.947410][ T9618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.971196][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.999975][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.057519][ T9618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.114887][ T9651] team0: Port device team_slave_0 added [ 128.132467][ T9651] team0: Port device team_slave_1 added [ 128.141504][ T1033] bridge_slave_1: left allmulticast mode [ 128.149703][ T1033] bridge_slave_1: left promiscuous mode [ 128.158255][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.169192][ T1033] bridge_slave_0: left allmulticast mode [ 128.176818][ T1033] bridge_slave_0: left promiscuous mode [ 128.183748][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.248268][ T9759] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 128.339972][ T5146] Bluetooth: hci4: command tx timeout [ 128.364561][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.378976][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.390552][ T1033] bond0 (unregistering): Released all slaves [ 128.422370][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.433410][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.465854][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.489683][ T9771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.507387][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.516101][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.545003][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.563034][ T9771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.598200][ T9618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.622416][ T9618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.642719][ T9618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.657368][ T9651] hsr_slave_0: entered promiscuous mode [ 128.665419][ T9651] hsr_slave_1: entered promiscuous mode [ 128.671698][ T9651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.686035][ T9651] Cannot create hsr debugfs directory [ 128.692141][ T9618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.911209][ T1033] hsr_slave_0: left promiscuous mode [ 128.922939][ T1033] hsr_slave_1: left promiscuous mode [ 128.930650][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.938961][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.947519][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.956950][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.958316][ T9784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.982018][ T1033] veth1_macvtap: left promiscuous mode [ 128.991015][ T1033] veth0_macvtap: left promiscuous mode [ 128.998607][ T1033] veth1_vlan: left promiscuous mode [ 129.004263][ T1033] veth0_vlan: left promiscuous mode [ 129.081870][ T9786] tipc: Enabled bearer , priority 10 [ 129.134094][ T12] wlan1: Trigger new scan to find an IBSS to join [ 129.221187][ T1033] team0 (unregistering): Port device team_slave_1 removed [ 129.237977][ T1033] team0 (unregistering): Port device team_slave_0 removed [ 129.325214][ T9788] __nla_validate_parse: 9 callbacks suppressed [ 129.325237][ T9788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 129.345376][ T9788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 129.475648][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.500967][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.527002][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.534923][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.549683][ T9802] netlink: 'syz.2.1141': attribute type 10 has an invalid length. [ 129.551285][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.565037][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.584144][ T9802] syz_tun: entered promiscuous mode [ 129.598181][ T9802] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 129.630042][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 129.736366][ T9651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.759536][ T9651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.770982][ T9651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.780396][ T5146] Bluetooth: hci3: command tx timeout [ 129.803936][ T9651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.917602][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.932245][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.960942][ T9651] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.999471][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.006860][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.022728][ T9820] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 130.078996][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.086776][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.169258][ T9829] netlink: 'syz.0.1148': attribute type 30 has an invalid length. [ 130.188998][ T9651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.203706][ T5886] tipc: Node number set to 1 [ 130.258312][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 130.367922][ T9618] veth0_vlan: entered promiscuous mode [ 130.398433][ T9618] veth1_vlan: entered promiscuous mode [ 130.413626][ T5146] Bluetooth: hci4: command tx timeout [ 130.478060][ T9618] veth0_macvtap: entered promiscuous mode [ 130.515923][ T9618] veth1_macvtap: entered promiscuous mode [ 130.569691][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.610424][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.627274][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.639907][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.687676][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.702209][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1159'. [ 130.711887][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.722971][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.735023][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.745415][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.756421][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.768068][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.785277][ T9618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.810231][ T9618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.821625][ T9618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.833268][ T9618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.856454][ T9651] veth0_vlan: entered promiscuous mode [ 130.919921][ T9651] veth1_vlan: entered promiscuous mode [ 130.987846][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.000910][ T9651] veth0_macvtap: entered promiscuous mode [ 131.011311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.022201][ T9651] veth1_macvtap: entered promiscuous mode [ 131.071858][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.073721][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.094434][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.096931][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.107205][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.132112][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.149650][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.168685][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.180879][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.195401][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.206613][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.217266][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.229835][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.240715][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.251660][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.264476][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.290791][ T9651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.310678][ T9651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.320110][ T9651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.329857][ T9651] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.427159][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.449996][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.508375][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.525637][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.675478][ T9911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.707446][ T9914] IPv6: sit1: Disabled Multicast RS [ 131.783285][ T9922] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1176'. [ 131.828215][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 131.848283][ T9930] openvswitch: netlink: Invalid VLAN frame [ 131.946946][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.093864][ T12] wlan1: Trigger new scan to find an IBSS to join [ 132.177588][ T9950] IPVS: ip_vs_add_dest(): server weight less than zero [ 132.291047][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.299300][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.307052][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.315201][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.322663][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.331116][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.377871][ T9962] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1190'. [ 132.388490][ T9962] netlink: 'syz.1.1190': attribute type 21 has an invalid length. [ 132.424619][ T9962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.489172][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.535560][ T9972] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.561659][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 132.589372][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 132.600664][ T9980] netlink: 'syz.2.1195': attribute type 7 has an invalid length. [ 132.616088][ T9980] netlink: 'syz.2.1195': attribute type 8 has an invalid length. [ 132.816473][ T9996] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 132.818610][ T9955] chnl_net:caif_netlink_parms(): no params data found [ 132.862051][ T9997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.004709][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.015328][ T1033] wlan1: Creating new IBSS network, BSSID 72:75:2d:8c:bf:3b [ 133.036924][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.044365][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.051914][ T9955] bridge_slave_0: entered allmulticast mode [ 133.059087][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060346][ T9955] bridge_slave_0: entered promiscuous mode [ 133.077740][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.085271][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.092479][ T9955] bridge_slave_1: entered allmulticast mode [ 133.099666][ T9955] bridge_slave_1: entered promiscuous mode [ 133.109016][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.137076][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.149410][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.176377][ T9955] team0: Port device team_slave_0 added [ 133.184891][ T9955] team0: Port device team_slave_1 added [ 133.212761][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.220646][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.251651][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.264866][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.272821][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.302692][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.325616][ T61] bridge_slave_1: left allmulticast mode [ 133.331306][ T61] bridge_slave_1: left promiscuous mode [ 133.337560][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.346439][ T61] bridge_slave_0: left allmulticast mode [ 133.352110][ T61] bridge_slave_0: left promiscuous mode [ 133.357951][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.530240][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.542250][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.554962][ T61] bond0 (unregistering): Released all slaves [ 133.639381][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.646933][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.654344][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.661934][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.664612][ T9955] hsr_slave_0: entered promiscuous mode [ 133.670172][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.692746][ T9955] hsr_slave_1: entered promiscuous mode [ 133.714399][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.722468][ T9955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.738316][ T9955] Cannot create hsr debugfs directory [ 134.002616][T10040] netlink: 'syz.0.1210': attribute type 14 has an invalid length. [ 134.106207][ T61] hsr_slave_0: left promiscuous mode [ 134.116420][ T61] hsr_slave_1: left promiscuous mode [ 134.132758][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.150589][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.166639][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.178909][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.200233][ T61] veth1_macvtap: left promiscuous mode [ 134.209088][ T61] veth0_macvtap: left promiscuous mode [ 134.215378][ T61] veth1_vlan: left promiscuous mode [ 134.220882][ T61] veth0_vlan: left promiscuous mode [ 134.352781][ T61] team0 (unregistering): Port device team_slave_1 removed [ 134.371679][ T61] team0 (unregistering): Port device team_slave_0 removed [ 134.414133][ T5146] Bluetooth: hci3: command tx timeout [ 134.451187][T10051] __nla_validate_parse: 4 callbacks suppressed [ 134.451208][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1212'. [ 134.622411][T10016] chnl_net:caif_netlink_parms(): no params data found [ 134.669923][T10073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.682179][T10073] bond0: (slave bond4): Enslaving as an active interface with an up link [ 134.828245][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.859653][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.878335][T10016] bridge_slave_0: entered allmulticast mode [ 134.897395][T10016] bridge_slave_0: entered promiscuous mode [ 134.908891][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.916537][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.924528][T10016] bridge_slave_1: entered allmulticast mode [ 134.931926][T10016] bridge_slave_1: entered promiscuous mode [ 134.972776][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.034571][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.068454][ T9955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.079048][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 135.085357][T10115] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1228'. [ 135.108834][ T9955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.141438][ T9955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.156023][T10016] team0: Port device team_slave_0 added [ 135.166897][ T9955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.182613][T10016] team0: Port device team_slave_1 added [ 135.254318][T10016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.261327][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.288895][T10016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.304585][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.331694][T10016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.339340][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.366485][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.399899][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 135.429114][T10016] hsr_slave_0: entered promiscuous mode [ 135.437100][T10016] hsr_slave_1: entered promiscuous mode [ 135.443303][T10016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.451272][T10016] Cannot create hsr debugfs directory [ 135.460797][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.503109][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.575569][ T9955] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.587051][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.620698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.627883][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.641319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.648487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.663108][T10147] netlink: 'syz.0.1238': attribute type 7 has an invalid length. [ 135.689169][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.774058][ T5146] Bluetooth: hci4: command tx timeout [ 135.867719][ T61] bridge_slave_1: left allmulticast mode [ 135.883666][ T61] bridge_slave_1: left promiscuous mode [ 135.889426][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.912120][ T61] bridge_slave_0: left allmulticast mode [ 135.928980][ T61] bridge_slave_0: left promiscuous mode [ 135.943729][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.021263][T10167] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1244'. [ 136.034668][T10167] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.051319][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'. [ 136.123176][T10173] vxcan1: tx address claim with dlc 240 [ 136.142840][T10177] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1246'. [ 136.208230][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.220442][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.245528][ T61] bond0 (unregistering): Released all slaves [ 136.306228][ T9955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.494131][ T5146] Bluetooth: hci3: command tx timeout [ 136.553716][ T61] hsr_slave_0: left promiscuous mode [ 136.557065][T10205] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 136.570613][ T61] hsr_slave_1: left promiscuous mode [ 136.579381][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.587120][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.596205][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.605160][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.615324][ T61] veth1_macvtap: left promiscuous mode [ 136.621006][ T61] veth0_macvtap: left promiscuous mode [ 136.627149][ T61] veth1_vlan: left promiscuous mode [ 136.632482][ T61] veth0_vlan: left promiscuous mode [ 136.691995][T10205] hsr0: entered promiscuous mode [ 136.702002][T10205] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 136.716009][T10205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 136.740993][T10205] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 136.812471][T10211] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 136.867281][ T61] team0 (unregistering): Port device team_slave_1 removed [ 136.882842][ T61] team0 (unregistering): Port device team_slave_0 removed [ 136.967015][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 137.026592][T10016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.040949][T10016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.041950][T10220] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1255'. [ 137.064928][T10016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.080517][T10016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.127847][ T9955] veth0_vlan: entered promiscuous mode [ 137.157724][ T9955] veth1_vlan: entered promiscuous mode [ 137.228101][ T9955] veth0_macvtap: entered promiscuous mode [ 137.256199][ T9955] veth1_macvtap: entered promiscuous mode [ 137.282089][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.329187][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.345766][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.361657][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.398317][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.421131][T10234] netlink: 'syz.2.1258': attribute type 9 has an invalid length. [ 137.429945][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.442698][T10238] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1260'. [ 137.447520][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.500987][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.515187][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.527216][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.540236][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.556770][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.567550][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.574725][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.619400][T10016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.632606][T10016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.655872][ T9955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.686564][ T9955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.706585][ T9955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.717779][ T9955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.733294][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.740484][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.855361][ T5146] Bluetooth: hci4: command tx timeout [ 137.975458][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.997942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.044538][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.071325][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.113207][T10016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.185904][T10016] veth0_vlan: entered promiscuous mode [ 138.246881][T10016] veth1_vlan: entered promiscuous mode [ 138.308161][T10016] veth0_macvtap: entered promiscuous mode [ 138.327567][T10016] veth1_macvtap: entered promiscuous mode [ 138.349405][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.361759][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.372455][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.387703][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.401865][T10016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.439768][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.458186][T10269] xt_hashlimit: overflow, rate too high: 0 [ 138.463706][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.469962][T10272] xt_hashlimit: overflow, rate too high: 0 [ 138.483200][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.495142][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.524120][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.543589][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.555549][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.580079][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.594688][T10016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.610513][T10016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.619507][T10016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.632104][T10016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.641227][T10016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.742501][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.761275][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.781632][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.791311][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.921569][ T1033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.109061][T10303] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 139.188566][ T1033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.221544][T10310] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 139.266266][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.275361][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.282948][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.292223][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.301047][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.309323][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.396915][T10321] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 139.409384][ T1033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.412105][T10280] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 139.539749][T10312] chnl_net:caif_netlink_parms(): no params data found [ 139.609793][ T1033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.622363][T10332] __nla_validate_parse: 2 callbacks suppressed [ 139.622384][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 139.644269][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 139.653300][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1286'. [ 139.715118][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.730808][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.744390][T10312] bridge_slave_0: entered allmulticast mode [ 139.751364][T10312] bridge_slave_0: entered promiscuous mode [ 139.761315][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.768974][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.776743][T10312] bridge_slave_1: entered allmulticast mode [ 139.784054][T10312] bridge_slave_1: entered promiscuous mode [ 139.819304][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.831718][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.863348][T10312] team0: Port device team_slave_0 added [ 139.871341][T10312] team0: Port device team_slave_1 added [ 139.888512][ T1033] bridge_slave_1: left allmulticast mode [ 139.894942][ T1033] bridge_slave_1: left promiscuous mode [ 139.900606][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.909668][ T1033] bridge_slave_0: left allmulticast mode [ 139.916248][ T1033] bridge_slave_0: left promiscuous mode [ 139.922016][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.962212][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.969660][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.996143][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.076469][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.087034][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.098063][ T1033] bond0 (unregistering): Released all slaves [ 140.107345][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.115077][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.141572][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.176220][T10312] hsr_slave_0: entered promiscuous mode [ 140.182372][T10312] hsr_slave_1: entered promiscuous mode [ 140.189094][T10312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.197307][T10312] Cannot create hsr debugfs directory [ 140.363114][T10345] tipc: Enabling of bearer rejected, failed to enable media [ 140.498905][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 140.587387][ T1033] hsr_slave_0: left promiscuous mode [ 140.604308][ T1033] hsr_slave_1: left promiscuous mode [ 140.619296][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.637289][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.637357][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.652643][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.661035][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.661035][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.669282][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.688144][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.696250][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 140.703801][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.714825][ T1033] veth1_macvtap: left promiscuous mode [ 140.724340][ T1033] veth0_macvtap: left promiscuous mode [ 140.730406][ T1033] veth1_vlan: left promiscuous mode [ 140.741108][ T1033] veth0_vlan: left promiscuous mode [ 140.826782][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 140.939101][ T1033] team0 (unregistering): Port device team_slave_1 removed [ 140.954252][ T1033] team0 (unregistering): Port device team_slave_0 removed [ 141.148999][T10312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.181756][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'. [ 141.194955][T10397] netlink: 'syz.1.1304': attribute type 7 has an invalid length. [ 141.214280][T10397] netlink: 'syz.1.1304': attribute type 8 has an invalid length. [ 141.224520][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 141.238752][T10312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.262674][T10312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.307984][T10312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.365083][T10410] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1307'. [ 141.385176][ T5146] Bluetooth: hci3: command tx timeout [ 141.468164][T10416] netlink: 'syz.1.1309': attribute type 1 has an invalid length. [ 141.472114][T10363] chnl_net:caif_netlink_parms(): no params data found [ 141.489571][T10312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.544381][T10312] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.578706][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 141.589225][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.596483][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.605559][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 141.672815][T10433] netlink: 'syz.1.1312': attribute type 2 has an invalid length. [ 141.691412][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.700546][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.708888][T10363] bridge_slave_0: entered allmulticast mode [ 141.716224][T10363] bridge_slave_0: entered promiscuous mode [ 141.728757][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.743357][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.751061][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.760697][T10432] netlink: 'syz.0.1313': attribute type 2 has an invalid length. [ 141.768895][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.779722][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.787384][T10363] bridge_slave_1: entered allmulticast mode [ 141.794706][T10363] bridge_slave_1: entered promiscuous mode [ 141.840316][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.859306][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.884565][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.958083][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.995572][T10363] team0: Port device team_slave_0 added [ 142.022649][T10363] team0: Port device team_slave_1 added [ 142.119799][T10363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.134113][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.180421][T10363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.200965][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.225479][T10363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.233037][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.267594][T10363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.341562][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.380096][T10363] hsr_slave_0: entered promiscuous mode [ 142.389583][T10363] hsr_slave_1: entered promiscuous mode [ 142.408290][T10363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.426344][T10363] Cannot create hsr debugfs directory [ 142.501913][ T1147] bridge_slave_1: left allmulticast mode [ 142.509151][ T1147] bridge_slave_1: left promiscuous mode [ 142.516282][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.531749][ T1147] bridge_slave_0: left allmulticast mode [ 142.541339][ T1147] bridge_slave_0: left promiscuous mode [ 142.547418][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.733884][ T5146] Bluetooth: hci4: command tx timeout [ 142.743234][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.767598][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.792799][ T1147] bond0 (unregistering): Released all slaves [ 142.991494][T10502] xt_connbytes: Forcing CT accounting to be enabled [ 143.064717][T10312] veth0_vlan: entered promiscuous mode [ 143.113400][T10312] veth1_vlan: entered promiscuous mode [ 143.184823][ T1147] hsr_slave_0: left promiscuous mode [ 143.196414][ T1147] hsr_slave_1: left promiscuous mode [ 143.202313][T10518] x_tables: unsorted entry at hook 3 [ 143.209514][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.221064][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.241933][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.253747][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.268005][ T1147] veth1_macvtap: left promiscuous mode [ 143.276222][ T1147] veth0_macvtap: left promiscuous mode [ 143.281915][ T1147] veth1_vlan: left promiscuous mode [ 143.290554][ T1147] veth0_vlan: left promiscuous mode [ 143.357127][T10520] tun0: tun_chr_ioctl cmd 1074025675 [ 143.362566][T10520] tun0: persist disabled [ 143.453825][ T5146] Bluetooth: hci3: command tx timeout [ 143.492010][T10532] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 143.509421][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 143.528312][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 143.609533][T10536] bond5: entered promiscuous mode [ 143.618999][T10536] bond5: entered allmulticast mode [ 143.625757][T10536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.640039][T10312] veth0_macvtap: entered promiscuous mode [ 143.656913][T10539] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 143.657006][T10312] veth1_macvtap: entered promiscuous mode [ 143.722511][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.737877][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.749682][T10312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.777795][T10543] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 143.786377][T10543] netlink: 'syz.0.1341': attribute type 4 has an invalid length. [ 143.789272][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.823226][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.834209][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.848426][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.859208][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.872893][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.892168][T10312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.901456][T10363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.920176][T10312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.949591][T10312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.963961][T10312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.972703][T10312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.994811][T10363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.016854][T10363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.031024][T10363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.129826][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.141364][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.173260][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.184657][T10363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.201976][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.217879][T10363] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.231335][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.238506][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.252304][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.259487][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.352364][T10577] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 144.365082][T10577] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 144.461731][T10363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.508013][T10363] veth0_vlan: entered promiscuous mode [ 144.520398][T10363] veth1_vlan: entered promiscuous mode [ 144.549589][T10363] veth0_macvtap: entered promiscuous mode [ 144.559824][T10363] veth1_macvtap: entered promiscuous mode [ 144.575211][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.590912][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.601502][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.612315][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.624183][T10363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.638186][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.650096][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.662243][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.674657][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.684663][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.695655][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.705909][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.716992][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.727971][T10363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.746587][T10363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.755927][T10363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.765352][T10363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.774632][T10363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.814825][ T5146] Bluetooth: hci4: command tx timeout [ 144.842137][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.896506][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.911422][T10597] __nla_validate_parse: 70 callbacks suppressed [ 144.911442][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'. [ 144.913691][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.951719][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 144.965945][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.978649][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.988689][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.066467][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.117870][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.210636][ T52] bridge_slave_1: left allmulticast mode [ 145.216899][ T52] bridge_slave_1: left promiscuous mode [ 145.222614][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.231324][ T52] bridge_slave_0: left allmulticast mode [ 145.238651][ T52] bridge_slave_0: left promiscuous mode [ 145.244708][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.382303][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.392549][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.402344][ T52] bond0 (unregistering): Released all slaves [ 145.487117][T10606] netlink: 'syz.1.1357': attribute type 19 has an invalid length. [ 145.626808][T10614] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 145.656459][T10614] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.760623][ T52] hsr_slave_0: left promiscuous mode [ 145.770083][ T52] hsr_slave_1: left promiscuous mode [ 145.779781][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.780443][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.795734][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.795751][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.814006][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.822072][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.822067][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.830354][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.838299][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.848202][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.863067][ T52] veth1_macvtap: left promiscuous mode [ 145.869411][ T52] veth0_macvtap: left promiscuous mode [ 145.876373][ T52] veth1_vlan: left promiscuous mode [ 145.882066][ T52] veth0_vlan: left promiscuous mode [ 146.027552][ T52] team0 (unregistering): Port device team_slave_1 removed [ 146.039328][ T52] team0 (unregistering): Port device team_slave_0 removed [ 146.049812][T10633] netlink: 'syz.0.1365': attribute type 8 has an invalid length. [ 146.058805][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1365'. [ 146.254515][T10623] chnl_net:caif_netlink_parms(): no params data found [ 146.303286][T10623] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.311443][T10623] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.319133][T10623] bridge_slave_0: entered allmulticast mode [ 146.327562][T10623] bridge_slave_0: entered promiscuous mode [ 146.336760][T10623] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.344492][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.351906][T10623] bridge_slave_1: entered allmulticast mode [ 146.359059][T10623] bridge_slave_1: entered promiscuous mode [ 146.381495][T10623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.393960][T10623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.419370][T10623] team0: Port device team_slave_0 added [ 146.429635][T10623] team0: Port device team_slave_1 added [ 146.448725][T10623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.456125][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.482857][T10623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.496431][T10623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.503409][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.530747][T10623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.627478][T10623] hsr_slave_0: entered promiscuous mode [ 146.635307][T10623] hsr_slave_1: entered promiscuous mode [ 146.644423][T10623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.652431][T10623] Cannot create hsr debugfs directory [ 146.801707][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.013044][T10623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.024071][T10623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.038760][T10623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.050602][T10623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.124357][T10623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.145174][T10623] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.159654][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.169031][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.183176][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.193176][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.330729][T10623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.431172][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 147.562157][T10674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1372'. [ 147.621196][T10623] veth0_vlan: entered promiscuous mode [ 147.641333][T10623] veth1_vlan: entered promiscuous mode [ 147.681412][T10623] veth0_macvtap: entered promiscuous mode [ 147.697281][T10623] veth1_macvtap: entered promiscuous mode [ 147.718785][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.731148][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.744708][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.758318][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.773050][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.775258][T10623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.784880][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.797245][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.806333][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.814884][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.823124][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.836421][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.849190][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.861483][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.877568][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.889215][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.902618][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.913211][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.925400][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.936975][ T5840] Bluetooth: hci3: command tx timeout [ 147.939336][T10623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.974692][T10623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.993179][T10623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.008117][T10623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.018387][T10623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.210530][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.222315][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.267181][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.277505][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.321339][T10681] chnl_net:caif_netlink_parms(): no params data found [ 148.379144][T10704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1381'. [ 148.396863][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 148.401550][T10704] unsupported nlmsg_type 40 [ 148.679069][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.752048][T10681] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.760325][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.779069][T10681] bridge_slave_0: entered allmulticast mode [ 148.794591][T10681] bridge_slave_0: entered promiscuous mode [ 148.818604][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.843686][T10681] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.861237][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.873310][T10681] bridge_slave_1: entered allmulticast mode [ 148.880549][T10681] bridge_slave_1: entered promiscuous mode [ 148.910905][T10681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.922645][T10681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.957469][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.973971][T10681] team0: Port device team_slave_0 added [ 148.985888][T10681] team0: Port device team_slave_1 added [ 149.010160][T10681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.018067][T10681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.057777][T10681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.076190][T10681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.083346][T10681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.103677][T10731] netlink: 'syz.1.1387': attribute type 1 has an invalid length. [ 149.119001][T10681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.176093][T10681] hsr_slave_0: entered promiscuous mode [ 149.188765][T10681] hsr_slave_1: entered promiscuous mode [ 149.199334][T10681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.221433][T10681] Cannot create hsr debugfs directory [ 149.323315][ T52] bridge_slave_1: left allmulticast mode [ 149.330144][ T52] bridge_slave_1: left promiscuous mode [ 149.338626][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.364786][ T52] bridge_slave_0: left allmulticast mode [ 149.373990][ T52] bridge_slave_0: left promiscuous mode [ 149.383132][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.571352][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 149.574800][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 149.590194][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 149.607455][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.618332][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.628453][ T52] bond0 (unregistering): Released all slaves [ 149.651569][T10762] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 149.697415][ T12] wlan1: Selected IBSS BSSID 72:75:2d:8c:bf:3b based on configured SSID [ 149.698887][T10762] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 149.719175][ T35] bond0: (slave wlan1): link status up, enabling it in 4 ms [ 149.743959][ T11] bond0: (slave wlan1): link status up, enabling it in 4 ms [ 149.763794][ T35] bond0: (slave wlan1): link status up, enabling it in 4 ms [ 149.804206][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.824145][ T11] bond0: (slave wlan1): link status up, enabling it in 4 ms [ 149.856697][ T35] bond0: (slave wlan1): link status up, enabling it in 4 ms [ 149.862104][ T5840] Bluetooth: hci4: command tx timeout [ 149.886398][ T35] bond0: (slave wlan1): invalid new link 3 on slave [ 149.944448][ T1335] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 150.059755][ T52] hsr_slave_0: left promiscuous mode [ 150.067796][ T52] hsr_slave_1: left promiscuous mode [ 150.074203][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.081949][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.091264][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.099287][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.110041][ T52] veth1_macvtap: left promiscuous mode [ 150.116302][ T52] veth0_macvtap: left promiscuous mode [ 150.121948][ T52] veth1_vlan: left promiscuous mode [ 150.127729][ T52] veth0_vlan: left promiscuous mode [ 150.241590][ T52] team0 (unregistering): Port device team_slave_1 removed [ 150.258665][ T52] team0 (unregistering): Port device team_slave_0 removed [ 150.338496][T10681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.363581][T10681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.378060][T10681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.387029][T10681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.442855][T10681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.459700][T10681] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.501495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.508672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.551502][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.558679][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.800632][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.864937][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.872244][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.880548][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.890594][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.908283][ T5146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.915823][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.939212][T10805] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 150.964515][T10805] team0: Device ipvlan0 is already an upper device of the team interface [ 151.007231][T10681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.100763][T10681] veth0_vlan: entered promiscuous mode [ 151.109747][T10815] __nla_validate_parse: 1 callbacks suppressed [ 151.109768][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 151.129105][T10815] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 151.151948][T10681] veth1_vlan: entered promiscuous mode [ 151.172883][T10819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1411'. [ 151.260616][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.295953][T10799] chnl_net:caif_netlink_parms(): no params data found [ 151.346987][T10681] veth0_macvtap: entered promiscuous mode [ 151.386702][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.432710][T10681] veth1_macvtap: entered promiscuous mode [ 151.461847][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.470310][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.478354][T10799] bridge_slave_0: entered allmulticast mode [ 151.486221][T10799] bridge_slave_0: entered promiscuous mode [ 151.496268][T10681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.508228][T10681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.518736][T10681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.529664][T10681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.541189][T10681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.551821][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.559428][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.567360][T10799] bridge_slave_1: entered allmulticast mode [ 151.574992][T10799] bridge_slave_1: entered promiscuous mode [ 151.586345][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.606604][T10681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.621159][T10681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.631345][T10681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.642473][T10681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.652706][T10681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.664045][T10681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.674089][T10681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.685443][T10681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.697200][T10681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.714410][T10799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.733150][T10799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.751723][T10843] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1418'. [ 151.763233][T10843] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.763294][T10681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.776769][T10843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.781691][T10681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.798566][T10681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.807640][T10681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.831347][T10799] team0: Port device team_slave_0 added [ 151.856568][T10799] team0: Port device team_slave_1 added [ 151.895604][ T52] bridge_slave_1: left allmulticast mode [ 151.901375][ T52] bridge_slave_1: left promiscuous mode [ 151.912325][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.929726][ T52] bridge_slave_0: left allmulticast mode [ 151.936239][ T5840] Bluetooth: hci4: command tx timeout [ 151.938265][ T52] bridge_slave_0: left promiscuous mode [ 151.951905][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.986336][T10799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.993576][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.021623][T10799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.034849][T10852] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 152.047976][T10799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.057726][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.088601][T10799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.166390][T10859] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 152.191010][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.201832][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.211735][ T52] bond0 (unregistering): Released all slaves [ 152.221482][T10852] syz_tun: entered promiscuous mode [ 152.231572][T10852] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 152.261367][T10859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.268141][T10865] netlink: 'syz.2.1424': attribute type 24 has an invalid length. [ 152.293276][T10862] bond3: (slave gretap1): making interface the new active one [ 152.306541][T10862] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 152.367658][ T12] bond0: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 152.406102][T10799] hsr_slave_0: entered promiscuous mode [ 152.412467][T10799] hsr_slave_1: entered promiscuous mode [ 152.430567][T10799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.439972][T10799] Cannot create hsr debugfs directory [ 152.521394][T10881] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1429'. [ 152.545265][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.553134][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.983901][ T5840] Bluetooth: hci3: command tx timeout [ 154.013793][ T5840] Bluetooth: hci4: command tx timeout [ 155.053797][ T5840] Bluetooth: hci3: command tx timeout [ 156.093964][ T5840] Bluetooth: hci4: command tx timeout [ 157.144212][ T5840] Bluetooth: hci3: command tx timeout [ 159.213746][ T5840] Bluetooth: hci3: command tx timeout [ 168.140038][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.148550][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.149070][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.163331][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.164247][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.175077][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.177603][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.188667][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.192673][ T5146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.200218][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 168.209676][ T5146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.214110][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.221597][ T5146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.227739][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.234744][ T5146] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 168.249422][ T5146] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.249427][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.263378][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.253795][ T5146] Bluetooth: hci6: command tx timeout [ 170.334416][ T5840] Bluetooth: hci7: command tx timeout [ 170.339771][ T5146] Bluetooth: hci5: command tx timeout [ 172.333782][ T5146] Bluetooth: hci6: command tx timeout [ 172.413673][ T5840] Bluetooth: hci5: command tx timeout [ 172.416652][ T5146] Bluetooth: hci7: command tx timeout [ 174.413807][ T5146] Bluetooth: hci6: command tx timeout [ 174.493667][ T5146] Bluetooth: hci7: command tx timeout [ 174.503625][ T5146] Bluetooth: hci5: command tx timeout [ 176.493688][ T5146] Bluetooth: hci6: command tx timeout [ 176.574284][ T5146] Bluetooth: hci7: command tx timeout [ 176.574883][ T5840] Bluetooth: hci5: command tx timeout [ 179.766467][ T1033] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.496399][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.573700][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 196.573746][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 209.204321][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 209.211723][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 209.221991][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 209.229909][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 209.237641][ T5840] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 209.245032][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 210.691239][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.293715][ T5146] Bluetooth: hci8: command tx timeout [ 211.822144][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 211.829693][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 211.837025][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 211.844852][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 211.852372][ T5840] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 211.860019][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 213.373643][ T5146] Bluetooth: hci8: command tx timeout [ 213.933800][ T5146] Bluetooth: hci9: command tx timeout [ 215.453735][ T5146] Bluetooth: hci8: command tx timeout [ 216.013828][ T5146] Bluetooth: hci9: command tx timeout [ 217.533952][ T5840] Bluetooth: hci8: command tx timeout [ 218.094198][ T5840] Bluetooth: hci9: command tx timeout [ 220.173677][ T5840] Bluetooth: hci9: command tx timeout [ 228.072496][ T5146] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 228.084670][ T5146] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 228.093992][ T5146] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 228.101934][ T5146] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 228.110416][ T5146] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 228.120327][ T5146] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 228.126286][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 228.135700][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 228.143115][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 228.151260][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 228.158967][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 228.167248][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 229.078702][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 229.086262][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 229.094365][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 229.102497][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 229.110494][ T5836] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 229.118020][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 230.174164][ T54] Bluetooth: hci10: command tx timeout [ 230.253767][ T54] Bluetooth: hci11: command tx timeout [ 231.133685][ T54] Bluetooth: hci12: command tx timeout [ 232.254268][ T54] Bluetooth: hci10: command tx timeout [ 232.333628][ T54] Bluetooth: hci11: command tx timeout [ 233.213736][ T54] Bluetooth: hci12: command tx timeout [ 234.333746][ T54] Bluetooth: hci10: command tx timeout [ 234.414184][ T54] Bluetooth: hci11: command tx timeout [ 235.294147][ T54] Bluetooth: hci12: command tx timeout [ 236.413625][ T54] Bluetooth: hci10: command tx timeout [ 236.493698][ T54] Bluetooth: hci11: command tx timeout [ 237.373746][ T54] Bluetooth: hci12: command tx timeout [ 241.615909][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.935999][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.379487][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 270.386973][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 270.395070][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 270.403035][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 270.411894][ T5836] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 270.419423][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 272.493894][ T5840] Bluetooth: hci13: command tx timeout [ 272.540849][ T1033] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.097050][ T5146] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 273.104929][ T5146] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 273.112729][ T5146] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 273.121334][ T5146] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 273.129310][ T5146] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 273.137809][ T5146] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 273.373868][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 273.379323][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 274.583652][ T5836] Bluetooth: hci13: command tx timeout [ 275.213642][ T5836] Bluetooth: hci14: command tx timeout [ 276.654279][ T5836] Bluetooth: hci13: command tx timeout [ 277.293636][ T5836] Bluetooth: hci14: command tx timeout [ 278.733584][ T5836] Bluetooth: hci13: command tx timeout [ 279.373664][ T5836] Bluetooth: hci14: command tx timeout [ 281.453851][ T5836] Bluetooth: hci14: command tx timeout [ 288.198339][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 288.208400][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 288.212892][ T5146] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 288.217629][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 288.223706][ T5146] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 288.231223][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 288.241132][ T5146] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 288.245501][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 288.252104][ T5146] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 288.259011][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 288.266624][ T5146] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 288.280525][ T5146] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 289.163922][ T5146] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 289.171435][ T5146] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 289.179389][ T5146] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 289.187645][ T5146] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 289.196020][ T5146] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 289.204170][ T5146] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 290.334122][ T5146] Bluetooth: hci16: command tx timeout [ 290.334147][ T5840] Bluetooth: hci15: command tx timeout [ 291.213627][ T5146] Bluetooth: hci17: command tx timeout [ 292.414024][ T54] Bluetooth: hci16: command tx timeout [ 292.414031][ T5841] Bluetooth: hci15: command tx timeout [ 293.293621][ T54] Bluetooth: hci17: command tx timeout [ 293.853643][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 293.853657][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 293.853677][ T5843] Bluetooth: hci7: command 0x0406 tx timeout [ 294.493636][ T5840] Bluetooth: hci16: command tx timeout [ 294.494767][ T5146] Bluetooth: hci15: command tx timeout [ 295.373694][ T5146] Bluetooth: hci17: command tx timeout [ 296.573731][ T5146] Bluetooth: hci15: command tx timeout [ 296.573881][ T5840] Bluetooth: hci16: command tx timeout [ 297.453686][ T5840] Bluetooth: hci17: command tx timeout [ 303.465555][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.533832][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 313.541810][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 313.549340][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.558382][ T30] task:kworker/u8:2 state:D stack:21040 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 313.568826][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 313.574951][ T30] Call Trace: [ 313.578380][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.581975][ T30] __schedule+0x186c/0x4be0 [ 313.590041][ T30] ? schedule+0x90/0x320 [ 313.596049][ T30] ? schedule+0x90/0x320 [ 313.600377][ T30] ? __pfx___schedule+0x10/0x10 [ 313.627885][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.633093][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.656876][ T30] ? kthread_data+0x52/0xd0 [ 313.661451][ T30] ? schedule+0x90/0x320 [ 313.666988][ T30] ? wq_worker_sleeping+0x66/0x240 [ 313.672213][ T30] ? schedule+0x90/0x320 [ 313.676628][ T30] schedule+0x14b/0x320 [ 313.680874][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.686506][ T30] __mutex_lock+0x817/0x1010 [ 313.691157][ T30] ? __mutex_lock+0x602/0x1010 [ 313.697250][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 313.702517][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.708264][ T30] addrconf_dad_work+0x10e/0x16a0 [ 313.713671][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.718908][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 313.725321][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.731754][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.736643][ T30] ? process_scheduled_works+0x976/0x1840 [ 313.742399][ T30] process_scheduled_works+0xa66/0x1840 [ 313.748021][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.754729][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 313.760366][ T30] ? assign_work+0x364/0x3d0 [ 313.765366][ T30] worker_thread+0x870/0xd30 [ 313.770005][ T30] ? __kthread_parkme+0x169/0x1d0 [ 313.775263][ T30] ? __pfx_worker_thread+0x10/0x10 [ 313.780526][ T30] kthread+0x7a9/0x920 [ 313.785281][ T30] ? __pfx_kthread+0x10/0x10 [ 313.789910][ T30] ? __pfx_worker_thread+0x10/0x10 [ 313.795178][ T30] ? __pfx_kthread+0x10/0x10 [ 313.799804][ T30] ? __pfx_kthread+0x10/0x10 [ 313.804517][ T30] ? __pfx_kthread+0x10/0x10 [ 313.809194][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.815119][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 313.820426][ T30] ? __pfx_kthread+0x10/0x10 [ 313.825101][ T30] ret_from_fork+0x4b/0x80 [ 313.829660][ T30] ? __pfx_kthread+0x10/0x10 [ 313.835009][ T30] ret_from_fork_asm+0x1a/0x30 [ 313.839921][ T30] [ 313.843036][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 313.851585][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 313.859119][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.867859][ T30] task:kworker/u8:3 state:D stack:20792 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 313.878973][ T30] Workqueue: netns cleanup_net [ 313.883828][ T30] Call Trace: [ 313.887146][ T30] [ 313.890206][ T30] __schedule+0x186c/0x4be0 [ 313.894784][ T30] ? schedule+0x90/0x320 [ 313.899071][ T30] ? schedule+0x90/0x320 [ 313.903495][ T30] ? __pfx___schedule+0x10/0x10 [ 313.908491][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.914119][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.918997][ T30] ? kthread_data+0x52/0xd0 [ 313.923672][ T30] ? schedule+0x90/0x320 [ 313.927992][ T30] ? wq_worker_sleeping+0x66/0x240 [ 313.933145][ T30] ? schedule+0x90/0x320 [ 313.937600][ T30] schedule+0x14b/0x320 [ 313.941995][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.948431][ T30] __mutex_lock+0x817/0x1010 [ 313.953462][ T30] ? __mutex_lock+0x602/0x1010 [ 313.958346][ T30] ? unregister_netdevice_many_notify+0x1c2c/0x2030 [ 313.965184][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.970256][ T30] ? __pfx___might_resched+0x10/0x10 [ 313.976210][ T30] ? __pfx_device_del+0x10/0x10 [ 313.981461][ T30] unregister_netdevice_many_notify+0x1c2c/0x2030 [ 313.988001][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 313.994995][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.999848][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.005682][ T30] unregister_netdevice_queue+0x303/0x370 [ 314.011444][ T30] ? __pfx_up_write+0x10/0x10 [ 314.016428][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 314.022712][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 314.028542][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 314.034871][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 314.040745][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 314.047218][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.052157][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 314.057647][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 314.063258][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 314.069940][ T30] hwsim_exit_net+0x5c1/0x670 [ 314.074694][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 314.079993][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 314.085885][ T30] cleanup_net+0x812/0xd60 [ 314.090339][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 314.096118][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.100932][ T30] ? process_scheduled_works+0x976/0x1840 [ 314.106814][ T30] process_scheduled_works+0xa66/0x1840 [ 314.112413][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.118623][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 314.124678][ T30] ? assign_work+0x364/0x3d0 [ 314.129285][ T30] worker_thread+0x870/0xd30 [ 314.133954][ T30] ? __kthread_parkme+0x169/0x1d0 [ 314.139098][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.144285][ T30] kthread+0x7a9/0x920 [ 314.148385][ T30] ? __pfx_kthread+0x10/0x10 [ 314.153001][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.158829][ T30] ? __pfx_kthread+0x10/0x10 [ 314.163508][ T30] ? __pfx_kthread+0x10/0x10 [ 314.168160][ T30] ? __pfx_kthread+0x10/0x10 [ 314.172780][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.178615][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 314.184458][ T30] ? __pfx_kthread+0x10/0x10 [ 314.189152][ T30] ret_from_fork+0x4b/0x80 [ 314.193627][ T30] ? __pfx_kthread+0x10/0x10 [ 314.198366][ T30] ret_from_fork_asm+0x1a/0x30 [ 314.203152][ T30] [ 314.206308][ T30] INFO: task kworker/u8:7:1335 blocked for more than 144 seconds. [ 314.214769][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 314.222139][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.230913][ T30] task:kworker/u8:7 state:D stack:22160 pid:1335 tgid:1335 ppid:2 flags:0x00004000 [ 314.241193][ T30] Workqueue: events_unbound linkwatch_event [ 314.247636][ T30] Call Trace: [ 314.250926][ T30] [ 314.253928][ T30] __schedule+0x186c/0x4be0 [ 314.258488][ T30] ? schedule+0x90/0x320 [ 314.262740][ T30] ? schedule+0x90/0x320 [ 314.267069][ T30] ? __pfx___schedule+0x10/0x10 [ 314.271957][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.277632][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.282464][ T30] ? kthread_data+0x52/0xd0 [ 314.287051][ T30] ? schedule+0x90/0x320 [ 314.291396][ T30] ? wq_worker_sleeping+0x66/0x240 [ 314.296631][ T30] ? schedule+0x90/0x320 [ 314.300933][ T30] schedule+0x14b/0x320 [ 314.305750][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.311276][ T30] __mutex_lock+0x817/0x1010 [ 314.315957][ T30] ? __mutex_lock+0x602/0x1010 [ 314.320810][ T30] ? linkwatch_event+0xe/0x60 [ 314.325661][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.330713][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 314.337616][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.342527][ T30] ? process_scheduled_works+0x976/0x1840 [ 314.348465][ T30] linkwatch_event+0xe/0x60 [ 314.353001][ T30] process_scheduled_works+0xa66/0x1840 [ 314.358859][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.365397][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 314.370966][ T30] ? assign_work+0x364/0x3d0 [ 314.375636][ T30] worker_thread+0x870/0xd30 [ 314.380259][ T30] ? __kthread_parkme+0x169/0x1d0 [ 314.385543][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.390681][ T30] kthread+0x7a9/0x920 [ 314.395404][ T30] ? __pfx_kthread+0x10/0x10 [ 314.400033][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.405221][ T30] ? __pfx_kthread+0x10/0x10 [ 314.409853][ T30] ? __pfx_kthread+0x10/0x10 [ 314.414577][ T30] ? __pfx_kthread+0x10/0x10 [ 314.419221][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.425174][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 314.430424][ T30] ? __pfx_kthread+0x10/0x10 [ 314.435117][ T30] ret_from_fork+0x4b/0x80 [ 314.439659][ T30] ? __pfx_kthread+0x10/0x10 [ 314.444360][ T30] ret_from_fork_asm+0x1a/0x30 [ 314.449187][ T30] [ 314.452306][ T30] INFO: task kworker/0:8:5907 blocked for more than 144 seconds. [ 314.460675][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 314.468185][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.476949][ T30] task:kworker/0:8 state:D stack:23056 pid:5907 tgid:5907 ppid:2 flags:0x00004000 [ 314.487715][ T30] Workqueue: events_power_efficient crda_timeout_work [ 314.494750][ T30] Call Trace: [ 314.498053][ T30] [ 314.500995][ T30] __schedule+0x186c/0x4be0 [ 314.505587][ T30] ? schedule+0x90/0x320 [ 314.509860][ T30] ? schedule+0x90/0x320 [ 314.514631][ T30] ? __pfx___schedule+0x10/0x10 [ 314.519503][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 314.524734][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.529832][ T30] ? kick_pool+0x1bd/0x620 [ 314.534325][ T30] ? schedule+0x90/0x320 [ 314.538614][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.543976][ T30] ? schedule+0x90/0x320 [ 314.548260][ T30] schedule+0x14b/0x320 [ 314.552429][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.557989][ T30] __mutex_lock+0x817/0x1010 [ 314.562622][ T30] ? __mutex_lock+0x602/0x1010 [ 314.567475][ T30] ? crda_timeout_work+0x15/0x50 [ 314.572493][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.578177][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 314.584279][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.589175][ T30] ? process_scheduled_works+0x976/0x1840 [ 314.595088][ T30] crda_timeout_work+0x15/0x50 [ 314.599937][ T30] process_scheduled_works+0xa66/0x1840 [ 314.606144][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.612171][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 314.617820][ T30] ? assign_work+0x364/0x3d0 [ 314.622446][ T30] worker_thread+0x870/0xd30 [ 314.627194][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 314.633134][ T30] ? __kthread_parkme+0x169/0x1d0 [ 314.638772][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.643974][ T30] kthread+0x7a9/0x920 [ 314.648108][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.653279][ T30] ? __pfx_kthread+0x10/0x10 [ 314.658009][ T30] ? __pfx_kthread+0x10/0x10 [ 314.662658][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.668120][ T30] ? __pfx_kthread+0x10/0x10 [ 314.672778][ T30] ? __pfx_kthread+0x10/0x10 [ 314.677496][ T30] ret_from_fork+0x4b/0x80 [ 314.681941][ T30] ? __pfx_kthread+0x10/0x10 [ 314.686614][ T30] ret_from_fork_asm+0x1a/0x30 [ 314.691420][ T30] [ 314.695006][ T30] INFO: task syz-executor:10681 blocked for more than 144 seconds. [ 314.702920][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 314.710252][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.718983][ T30] task:syz-executor state:D stack:21360 pid:10681 tgid:10681 ppid:1 flags:0x00004006 [ 314.729926][ T30] Call Trace: [ 314.733245][ T30] [ 314.736693][ T30] __schedule+0x186c/0x4be0 [ 314.741272][ T30] ? schedule+0x90/0x320 [ 314.745586][ T30] ? schedule+0x90/0x320 [ 314.749864][ T30] ? __pfx___schedule+0x10/0x10 [ 314.755243][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.760290][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.765222][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 314.771151][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.777681][ T30] ? schedule+0x90/0x320 [ 314.781966][ T30] schedule+0x14b/0x320 [ 314.786790][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.792375][ T30] __mutex_lock+0x817/0x1010 [ 314.797157][ T30] ? __mutex_lock+0x602/0x1010 [ 314.801954][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 314.808315][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.813420][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.819441][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 314.826275][ T30] wiphy_register+0x1be5/0x27b0 [ 314.831209][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 314.836583][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 314.841765][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 314.847933][ T30] ieee80211_register_hw+0x354e/0x4240 [ 314.853964][ T30] ? ieee80211_register_hw+0x15c1/0x4240 [ 314.859614][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 314.865497][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 314.871338][ T30] ? __asan_memset+0x23/0x50 [ 314.876001][ T30] ? __hrtimer_init+0x170/0x250 [ 314.880889][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 314.887179][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 314.893292][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 314.898509][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 314.904331][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 314.909954][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 314.916881][ T30] genl_rcv_msg+0xb14/0xec0 [ 314.921586][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.926672][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 314.931984][ T30] ? kasan_save_track+0x51/0x80 [ 314.937002][ T30] ? __sys_sendto+0x363/0x4c0 [ 314.941772][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 314.947444][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 314.953005][ T30] ? __pfx___might_resched+0x10/0x10 [ 314.958385][ T30] netlink_rcv_skb+0x1e3/0x430 [ 314.963209][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.968298][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.974226][ T30] ? lock_release+0xbf/0xa30 [ 314.978883][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 314.984426][ T30] genl_rcv+0x28/0x40 [ 314.988489][ T30] netlink_unicast+0x7f6/0x990 [ 314.993282][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 314.998671][ T30] ? __virt_addr_valid+0x45f/0x530 [ 315.004473][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 315.009534][ T30] ? __check_object_size+0x47a/0x730 [ 315.014897][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.019720][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.025091][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.030094][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.035945][ T30] __sock_sendmsg+0x221/0x270 [ 315.040737][ T30] __sys_sendto+0x363/0x4c0 [ 315.045325][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 315.050423][ T30] ? __phys_addr+0xba/0x170 [ 315.055122][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.061633][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.068684][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.073546][ T30] __x64_sys_sendto+0xde/0x100 [ 315.078394][ T30] do_syscall_64+0xf3/0x230 [ 315.084390][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.089718][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.096600][ T30] RIP: 0033:0x7f8e7b98ec3c [ 315.102166][ T30] RSP: 002b:00007fff42d5f2d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 315.112979][ T30] RAX: ffffffffffffffda RBX: 00007f8e7c6d4620 RCX: 00007f8e7b98ec3c [ 315.121476][ T30] RDX: 0000000000000024 RSI: 00007f8e7c6d4670 RDI: 0000000000000003 [ 315.130219][ T30] RBP: 0000000000000000 R08: 00007fff42d5f324 R09: 000000000000000c [ 315.138754][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 315.146811][ T30] R13: 0000000000000000 R14: 00007f8e7c6d4670 R15: 0000000000000000 [ 315.155397][ T30] [ 315.158456][ T30] INFO: task syz-executor:10799 blocked for more than 144 seconds. [ 315.166610][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 315.173955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.182799][ T30] task:syz-executor state:D stack:22096 pid:10799 tgid:10799 ppid:1 flags:0x00000004 [ 315.193628][ T30] Call Trace: [ 315.197039][ T30] [ 315.200004][ T30] __schedule+0x186c/0x4be0 [ 315.204687][ T30] ? schedule+0x90/0x320 [ 315.208967][ T30] ? schedule+0x90/0x320 [ 315.213223][ T30] ? __pfx___schedule+0x10/0x10 [ 315.218534][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.223905][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.228714][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.234669][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.241199][ T30] ? schedule+0x90/0x320 [ 315.245852][ T30] schedule+0x14b/0x320 [ 315.250049][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.255844][ T30] __mutex_lock+0x817/0x1010 [ 315.260453][ T30] ? __mutex_lock+0x602/0x1010 [ 315.265386][ T30] ? rtnl_newlink+0xce2/0x2210 [ 315.270195][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.275614][ T30] ? ns_capable+0x8a/0xf0 [ 315.280056][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 315.286229][ T30] rtnl_newlink+0xce2/0x2210 [ 315.290844][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.296017][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.300849][ T30] ? lock_release+0xbf/0xa30 [ 315.305816][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.310617][ T30] ? lock_release+0xbf/0xa30 [ 315.315582][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.320655][ T30] ? bpf_lsm_capable+0x9/0x10 [ 315.325387][ T30] ? security_capable+0x7e/0x2d0 [ 315.330353][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.335741][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 315.340814][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 315.346427][ T30] ? lock_release+0xbf/0xa30 [ 315.351027][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.356542][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 315.361589][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.366665][ T30] ? lock_acquire+0xe3/0x550 [ 315.371277][ T30] netlink_rcv_skb+0x1e3/0x430 [ 315.376688][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.382216][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.387596][ T30] ? net_generic+0x1f/0x240 [ 315.392147][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.397737][ T30] netlink_unicast+0x7f6/0x990 [ 315.402585][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.408242][ T30] ? __virt_addr_valid+0x45f/0x530 [ 315.413428][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 315.418519][ T30] ? __check_object_size+0x47a/0x730 [ 315.424269][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.429056][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.434681][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.439650][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.445045][ T30] __sock_sendmsg+0x221/0x270 [ 315.449828][ T30] __sys_sendto+0x363/0x4c0 [ 315.454786][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 315.459871][ T30] ? xfd_validate_state+0x6e/0x150 [ 315.465351][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.471714][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.476552][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.483002][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.488179][ T30] __x64_sys_sendto+0xde/0x100 [ 315.492973][ T30] do_syscall_64+0xf3/0x230 [ 315.497790][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.502509][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.508955][ T30] RIP: 0033:0x7f8debf8ec3c [ 315.513729][ T30] RSP: 002b:00007ffe212ff520 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 315.522196][ T30] RAX: ffffffffffffffda RBX: 00007f8deccd4620 RCX: 00007f8debf8ec3c [ 315.530542][ T30] RDX: 0000000000000064 RSI: 00007f8deccd4670 RDI: 0000000000000003 [ 315.538673][ T30] RBP: 0000000000000000 R08: 00007ffe212ff574 R09: 000000000000000c [ 315.547161][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 315.555607][ T30] R13: 0000000000000000 R14: 00007f8deccd4670 R15: 0000000000000000 [ 315.563709][ T30] [ 315.566776][ T30] INFO: task syz.2.1429:10881 blocked for more than 145 seconds. [ 315.574935][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 315.582441][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.591474][ T30] task:syz.2.1429 state:D stack:25808 pid:10881 tgid:10880 ppid:5832 flags:0x00000004 [ 315.601859][ T30] Call Trace: [ 315.605424][ T30] [ 315.608367][ T30] __schedule+0x186c/0x4be0 [ 315.612886][ T30] ? schedule+0x90/0x320 [ 315.617497][ T30] ? schedule+0x90/0x320 [ 315.621963][ T30] ? __pfx___schedule+0x10/0x10 [ 315.626964][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.632078][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.637317][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.643274][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.649998][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.654942][ T30] ? schedule+0x90/0x320 [ 315.659224][ T30] schedule+0x14b/0x320 [ 315.663725][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.669240][ T30] __mutex_lock+0x817/0x1010 [ 315.674315][ T30] ? __mutex_lock+0x602/0x1010 [ 315.679116][ T30] ? genl_rcv_msg+0x121/0xec0 [ 315.683874][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.689018][ T30] ? 0xffffffffa000094c [ 315.693179][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.699711][ T30] ? kernel_text_address+0xa7/0xe0 [ 315.705118][ T30] ? __kernel_text_address+0xd/0x40 [ 315.710334][ T30] ? radix_tree_lookup+0x238/0x290 [ 315.715513][ T30] genl_rcv_msg+0x121/0xec0 [ 315.720078][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.725563][ T30] ? stack_trace_save+0x118/0x1d0 [ 315.731068][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 315.736854][ T30] ? stack_depot_save_flags+0x37/0x940 [ 315.742400][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.747284][ T30] ? lock_acquire+0xe3/0x550 [ 315.751965][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 315.757593][ T30] ? __pfx___might_resched+0x10/0x10 [ 315.763047][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.768326][ T30] ? lock_acquire+0xe3/0x550 [ 315.772953][ T30] netlink_rcv_skb+0x1e3/0x430 [ 315.778010][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.783245][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.788930][ T30] ? lock_release+0xbf/0xa30 [ 315.793937][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 315.799437][ T30] ? net_generic+0x1f/0x240 [ 315.804048][ T30] genl_rcv+0x28/0x40 [ 315.808060][ T30] netlink_unicast+0x7f6/0x990 [ 315.812832][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.818490][ T30] ? __virt_addr_valid+0x45f/0x530 [ 315.823975][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 315.829047][ T30] ? __check_object_size+0x47a/0x730 [ 315.834444][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.839264][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.844867][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.849857][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.855712][ T30] __sock_sendmsg+0x221/0x270 [ 315.860476][ T30] __sys_sendto+0x363/0x4c0 [ 315.865052][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 315.870110][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 315.875527][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.881898][ T30] ? __pfx___up_read+0x10/0x10 [ 315.887016][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.893428][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.898223][ T30] __x64_sys_sendto+0xde/0x100 [ 315.903023][ T30] do_syscall_64+0xf3/0x230 [ 315.907856][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.912562][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.918851][ T30] RIP: 0033:0x7f3bca78ec3c [ 315.923315][ T30] RSP: 002b:00007f3bcb5e8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 315.931906][ T30] RAX: ffffffffffffffda RBX: 00007f3bcb5e8fc0 RCX: 00007f3bca78ec3c [ 315.940342][ T30] RDX: 0000000000000020 RSI: 00007f3bcb5e9010 RDI: 0000000000000004 [ 315.948665][ T30] RBP: 0000000000000000 R08: 00007f3bcb5e8f14 R09: 000000000000000c [ 315.956731][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 315.965110][ T30] R13: 00007f3bcb5e8f68 R14: 00007f3bcb5e9010 R15: 0000000000000000 [ 315.974452][ T30] [ 315.977603][ T30] INFO: task syz.0.1432:10890 blocked for more than 145 seconds. [ 315.985444][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 315.992747][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.001843][ T30] task:syz.0.1432 state:D stack:26104 pid:10890 tgid:10889 ppid:5829 flags:0x00000004 [ 316.012500][ T30] Call Trace: [ 316.015943][ T30] [ 316.018909][ T30] __schedule+0x186c/0x4be0 [ 316.023762][ T30] ? schedule+0x90/0x320 [ 316.028050][ T30] ? schedule+0x90/0x320 [ 316.032301][ T30] ? __pfx___schedule+0x10/0x10 [ 316.037488][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.042552][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.047978][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.054311][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.060775][ T30] ? schedule+0x90/0x320 [ 316.065392][ T30] schedule+0x14b/0x320 [ 316.069615][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.075170][ T30] __mutex_lock+0x817/0x1010 [ 316.079814][ T30] ? __mutex_lock+0x602/0x1010 [ 316.084942][ T30] ? rtnl_dumpit+0x99/0x200 [ 316.089492][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.094979][ T30] ? __build_skb_around+0x245/0x3d0 [ 316.100220][ T30] ? __alloc_skb+0x28f/0x440 [ 316.104891][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 316.109859][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 316.115595][ T30] rtnl_dumpit+0x99/0x200 [ 316.120014][ T30] netlink_dump+0x64d/0xe10 [ 316.125068][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 316.130279][ T30] ? __netlink_lookup+0x780/0x890 [ 316.135599][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 316.140669][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 316.146214][ T30] ? kasan_save_track+0x51/0x80 [ 316.151378][ T30] __netlink_dump_start+0x5a2/0x790 [ 316.156951][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 316.162378][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 316.167564][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.173249][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 316.178833][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 316.184598][ T30] ? ref_tracker_free+0x643/0x7e0 [ 316.189677][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.194541][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.200048][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.205797][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.211039][ T30] netlink_unicast+0x7f6/0x990 [ 316.216160][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.221479][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.226704][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.231856][ T30] ? __check_object_size+0x47a/0x730 [ 316.237634][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.242457][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.248206][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.253214][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.259018][ T30] __sock_sendmsg+0x221/0x270 [ 316.264225][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 316.269143][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.274754][ T30] ? __fget_files+0x2a/0x410 [ 316.279572][ T30] ? __fget_files+0x2a/0x410 [ 316.284268][ T30] __sys_sendmsg+0x269/0x350 [ 316.288987][ T30] ? __pfx_futex_wake+0x10/0x10 [ 316.294375][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.299615][ T30] ? lock_release+0xbf/0xa30 [ 316.304587][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.310985][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.315839][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.320650][ T30] do_syscall_64+0xf3/0x230 [ 316.325557][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.330278][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.336556][ T30] RIP: 0033:0x7f1e0a98cda9 [ 316.341160][ T30] RSP: 002b:00007f1e0b7eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.349839][ T30] RAX: ffffffffffffffda RBX: 00007f1e0aba5fa0 RCX: 00007f1e0a98cda9 [ 316.358129][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 316.366448][ T30] RBP: 00007f1e0aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.374572][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.382747][ T30] R13: 0000000000000000 R14: 00007f1e0aba5fa0 R15: 00007ffce0a6ed98 [ 316.391117][ T30] [ 316.394415][ T30] INFO: task syz.1.1433:10892 blocked for more than 146 seconds. [ 316.402152][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 316.409481][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.418647][ T30] task:syz.1.1433 state:D stack:27760 pid:10892 tgid:10891 ppid:5835 flags:0x00000004 [ 316.429198][ T30] Call Trace: [ 316.432501][ T30] [ 316.435478][ T30] __schedule+0x186c/0x4be0 [ 316.440479][ T30] ? schedule+0x90/0x320 [ 316.445094][ T30] ? schedule+0x90/0x320 [ 316.449373][ T30] ? __pfx___schedule+0x10/0x10 [ 316.454560][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.459604][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.464449][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.470461][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.477168][ T30] ? schedule+0x90/0x320 [ 316.481449][ T30] schedule+0x14b/0x320 [ 316.485962][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.491476][ T30] __mutex_lock+0x817/0x1010 [ 316.496224][ T30] ? __mutex_lock+0x602/0x1010 [ 316.501028][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 316.506496][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.511554][ T30] ? bpf_lsm_capable+0x9/0x10 [ 316.516562][ T30] ? security_capable+0x7e/0x2d0 [ 316.521545][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 316.526565][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 316.531972][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.537776][ T30] ? ref_tracker_free+0x643/0x7e0 [ 316.542815][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.547899][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.553447][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.558762][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.564319][ T30] netlink_unicast+0x7f6/0x990 [ 316.569131][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.574929][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.580083][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.585242][ T30] ? __check_object_size+0x47a/0x730 [ 316.590563][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.595671][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.601010][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.606341][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.611680][ T30] __sock_sendmsg+0x221/0x270 [ 316.616457][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 316.621278][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.626922][ T30] ? __fget_files+0x2a/0x410 [ 316.631559][ T30] ? __fget_files+0x2a/0x410 [ 316.636557][ T30] __sys_sendmsg+0x269/0x350 [ 316.641196][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.646397][ T30] ? lock_release+0xbf/0xa30 [ 316.651133][ T30] ? __se_sys_futex+0x3f9/0x480 [ 316.656337][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.662779][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.667918][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.672745][ T30] do_syscall_64+0xf3/0x230 [ 316.677407][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.682335][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.688550][ T30] RIP: 0033:0x7f41cff8cda9 [ 316.692996][ T30] RSP: 002b:00007f41d0d1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.701807][ T30] RAX: ffffffffffffffda RBX: 00007f41d01a5fa0 RCX: 00007f41cff8cda9 [ 316.709860][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 316.718188][ T30] RBP: 00007f41d000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.726596][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.734675][ T30] R13: 0000000000000000 R14: 00007f41d01a5fa0 R15: 00007fff52d8b9c8 [ 316.742705][ T30] [ 316.746085][ T30] INFO: task syz.1.1433:10895 blocked for more than 146 seconds. [ 316.754298][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 316.761590][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.770322][ T30] task:syz.1.1433 state:D stack:26160 pid:10895 tgid:10891 ppid:5835 flags:0x00000004 [ 316.780875][ T30] Call Trace: [ 316.784544][ T30] [ 316.787510][ T30] __schedule+0x186c/0x4be0 [ 316.792096][ T30] ? schedule+0x90/0x320 [ 316.796418][ T30] ? schedule+0x90/0x320 [ 316.800690][ T30] ? __pfx___schedule+0x10/0x10 [ 316.805880][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.810951][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.816390][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.822366][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.828759][ T30] ? schedule+0x90/0x320 [ 316.833026][ T30] schedule+0x14b/0x320 [ 316.837954][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.843770][ T30] __mutex_lock+0x817/0x1010 [ 316.848391][ T30] ? __mutex_lock+0x602/0x1010 [ 316.853180][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 316.858388][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.863748][ T30] ? bpf_lsm_capable+0x9/0x10 [ 316.868445][ T30] ? security_capable+0x7e/0x2d0 [ 316.873702][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 316.878670][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 316.883915][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.889411][ T30] ? ref_tracker_free+0x643/0x7e0 [ 316.894838][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.899630][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.905453][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.910950][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.916221][ T30] netlink_unicast+0x7f6/0x990 [ 316.921017][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.926613][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.931738][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.937520][ T30] ? __check_object_size+0x47a/0x730 [ 316.942848][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.947674][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.952988][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.958239][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.963866][ T30] __sock_sendmsg+0x221/0x270 [ 316.968850][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 316.973778][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.979105][ T30] ? __fget_files+0x2a/0x410 [ 316.984122][ T30] ? __fget_files+0x2a/0x410 [ 316.988764][ T30] __sys_sendmsg+0x269/0x350 [ 316.993750][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.998920][ T30] ? __se_sys_futex+0x3f9/0x480 [ 317.003850][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.010819][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.015954][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.020765][ T30] do_syscall_64+0xf3/0x230 [ 317.025599][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.030760][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.036737][ T30] RIP: 0033:0x7f41cff8cda9 [ 317.041192][ T30] RSP: 002b:00007f41cddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.050002][ T30] RAX: ffffffffffffffda RBX: 00007f41d01a6080 RCX: 00007f41cff8cda9 [ 317.058383][ T30] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 317.066424][ T30] RBP: 00007f41d000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 317.074862][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.082861][ T30] R13: 0000000000000000 R14: 00007f41d01a6080 R15: 00007fff52d8b9c8 [ 317.091282][ T30] [ 317.094406][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 317.103801][ T30] INFO: task syz-executor:10904 blocked for more than 146 seconds. [ 317.111725][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 317.119387][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.128135][ T30] task:syz-executor state:D stack:26768 pid:10904 tgid:10904 ppid:1 flags:0x00000004 [ 317.138646][ T30] Call Trace: [ 317.141939][ T30] [ 317.145238][ T30] __schedule+0x186c/0x4be0 [ 317.149785][ T30] ? schedule+0x90/0x320 [ 317.154080][ T30] ? schedule+0x90/0x320 [ 317.158464][ T30] ? __pfx___schedule+0x10/0x10 [ 317.163324][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.168423][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.173217][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.179730][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.186148][ T30] ? schedule+0x90/0x320 [ 317.191029][ T30] schedule+0x14b/0x320 [ 317.195273][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.200854][ T30] __mutex_lock+0x817/0x1010 [ 317.206068][ T30] ? __mutex_lock+0x602/0x1010 [ 317.210864][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 317.216071][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.221138][ T30] ? __nla_parse+0x40/0x60 [ 317.225638][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 317.230617][ T30] ? lock_release+0xbf/0xa30 [ 317.235752][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.240896][ T30] ? stack_trace_save+0x118/0x1d0 [ 317.245989][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 317.251386][ T30] ? bpf_lsm_capable+0x9/0x10 [ 317.256135][ T30] ? security_capable+0x7e/0x2d0 [ 317.261100][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 317.267112][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 317.272097][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 317.277315][ T30] ? lock_release+0xbf/0xa30 [ 317.281937][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.288510][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.294232][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.299031][ T30] ? lock_acquire+0xe3/0x550 [ 317.303673][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.308462][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.313989][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.319305][ T30] ? net_generic+0x1f/0x240 [ 317.324475][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.329700][ T30] netlink_unicast+0x7f6/0x990 [ 317.334530][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.339845][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.345060][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.350145][ T30] ? __check_object_size+0x47a/0x730 [ 317.356552][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.361351][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.366727][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.371693][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.378718][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.386577][ T30] __sock_sendmsg+0x221/0x270 [ 317.391305][ T30] __sys_sendto+0x363/0x4c0 [ 317.395978][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 317.401062][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.406180][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.412555][ T30] ? __pfx___up_read+0x10/0x10 [ 317.417929][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.424369][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.429184][ T30] __x64_sys_sendto+0xde/0x100 [ 317.434041][ T30] do_syscall_64+0xf3/0x230 [ 317.438592][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.443294][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.449861][ T30] RIP: 0033:0x7f5cae98ec3c [ 317.454712][ T30] RSP: 002b:00007ffdab268260 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.464103][ T30] RAX: ffffffffffffffda RBX: 00007f5caf6d4620 RCX: 00007f5cae98ec3c [ 317.472294][ T30] RDX: 0000000000000028 RSI: 00007f5caf6d4670 RDI: 0000000000000003 [ 317.480848][ T30] RBP: 0000000000000000 R08: 00007ffdab2682b4 R09: 000000000000000c [ 317.488901][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 317.497216][ T30] R13: 0000000000000000 R14: 00007f5caf6d4670 R15: 0000000000000000 [ 317.505863][ T30] [ 317.508998][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 317.518259][ T30] INFO: task syz-executor:10906 blocked for more than 147 seconds. [ 317.526244][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 317.534124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.542936][ T30] task:syz-executor state:D stack:26768 pid:10906 tgid:10906 ppid:1 flags:0x00000004 [ 317.553223][ T30] Call Trace: [ 317.556570][ T30] [ 317.559508][ T30] __schedule+0x186c/0x4be0 [ 317.564677][ T30] ? schedule+0x90/0x320 [ 317.568962][ T30] ? schedule+0x90/0x320 [ 317.573229][ T30] ? __pfx___schedule+0x10/0x10 [ 317.578193][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.583393][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.588640][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.595287][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.601713][ T30] ? schedule+0x90/0x320 [ 317.606037][ T30] schedule+0x14b/0x320 [ 317.610340][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.616063][ T30] __mutex_lock+0x817/0x1010 [ 317.620696][ T30] ? __mutex_lock+0x602/0x1010 [ 317.626107][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 317.631331][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.636481][ T30] ? __nla_parse+0x40/0x60 [ 317.641063][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 317.646104][ T30] ? lock_release+0xbf/0xa30 [ 317.650748][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.656316][ T30] ? stack_trace_save+0x118/0x1d0 [ 317.661354][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 317.666818][ T30] ? bpf_lsm_capable+0x9/0x10 [ 317.671521][ T30] ? security_capable+0x7e/0x2d0 [ 317.676538][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 317.681946][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 317.687587][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 317.692748][ T30] ? lock_release+0xbf/0xa30 [ 317.697445][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.703183][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.708334][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.714534][ T30] ? lock_acquire+0xe3/0x550 [ 317.719151][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.723988][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.729478][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.734835][ T30] ? net_generic+0x1f/0x240 [ 317.739372][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.745240][ T30] netlink_unicast+0x7f6/0x990 [ 317.750050][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.755472][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.760710][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.765825][ T30] ? __check_object_size+0x47a/0x730 [ 317.771156][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.776512][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.781822][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.786846][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.792257][ T30] __sock_sendmsg+0x221/0x270 [ 317.797050][ T30] __sys_sendto+0x363/0x4c0 [ 317.801671][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 317.807381][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.812459][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.818882][ T30] ? __pfx___up_read+0x10/0x10 [ 317.823707][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.830080][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.835417][ T30] __x64_sys_sendto+0xde/0x100 [ 317.840204][ T30] do_syscall_64+0xf3/0x230 [ 317.844798][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.849597][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.855963][ T30] RIP: 0033:0x7f500bb8ec3c [ 317.860410][ T30] RSP: 002b:00007ffcbae87cf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.869362][ T30] RAX: ffffffffffffffda RBX: 00007f500c8d4620 RCX: 00007f500bb8ec3c [ 317.877388][ T30] RDX: 0000000000000028 RSI: 00007f500c8d4670 RDI: 0000000000000003 [ 317.885522][ T30] RBP: 0000000000000000 R08: 00007ffcbae87d44 R09: 000000000000000c [ 317.894101][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 317.902086][ T30] R13: 0000000000000000 R14: 00007f500c8d4670 R15: 0000000000000000 [ 317.910192][ T30] [ 317.913232][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 317.922325][ T30] INFO: task syz-executor:10908 blocked for more than 147 seconds. [ 317.930889][ T30] Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 317.938328][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.947051][ T30] task:syz-executor state:D stack:25328 pid:10908 tgid:10908 ppid:1 flags:0x00000004 [ 317.957772][ T30] Call Trace: [ 317.961060][ T30] [ 317.964059][ T30] __schedule+0x186c/0x4be0 [ 317.968797][ T30] ? schedule+0x90/0x320 [ 317.973996][ T30] ? schedule+0x90/0x320 [ 317.978700][ T30] ? __pfx___schedule+0x10/0x10 [ 317.984407][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.989783][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.994727][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.000671][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.007280][ T30] ? schedule+0x90/0x320 [ 318.011676][ T30] schedule+0x14b/0x320 [ 318.016813][ T30] schedule_preempt_disabled+0x13/0x30 [ 318.022675][ T30] __mutex_lock+0x817/0x1010 [ 318.027924][ T30] ? __mutex_lock+0x602/0x1010 [ 318.033149][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 318.038672][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 318.045298][ T30] ? __nla_parse+0x40/0x60 [ 318.051433][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 318.056753][ T30] ? lock_release+0xbf/0xa30 [ 318.062072][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 318.067439][ T30] ? stack_trace_save+0x118/0x1d0 [ 318.072885][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 318.079041][ T30] ? bpf_lsm_capable+0x9/0x10 [ 318.084183][ T30] ? security_capable+0x7e/0x2d0 [ 318.090459][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 318.096912][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 318.102056][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 318.108676][ T30] ? lock_release+0xbf/0xa30 [ 318.113500][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.118999][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 318.124235][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.129231][ T30] ? lock_acquire+0xe3/0x550 [ 318.134561][ T30] netlink_rcv_skb+0x1e3/0x430 [ 318.139336][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.144873][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.150192][ T30] ? net_generic+0x1f/0x240 [ 318.154757][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.159992][ T30] netlink_unicast+0x7f6/0x990 [ 318.165424][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 318.170744][ T30] ? __virt_addr_valid+0x45f/0x530 [ 318.175995][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 318.181048][ T30] ? __check_object_size+0x47a/0x730 [ 318.186425][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 318.191217][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.197021][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 318.201979][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.207318][ T30] __sock_sendmsg+0x221/0x270 [ 318.212083][ T30] __sys_sendto+0x363/0x4c0 [ 318.216665][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 318.221735][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 318.227353][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.233851][ T30] ? __pfx___up_read+0x10/0x10 [ 318.238642][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.245065][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.249872][ T30] __x64_sys_sendto+0xde/0x100 [ 318.255249][ T30] do_syscall_64+0xf3/0x230 [ 318.259760][ T30] ? clear_bhb_loop+0x35/0x90 [ 318.264507][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.270421][ T30] RIP: 0033:0x7f4e1e78ec3c [ 318.274915][ T30] RSP: 002b:00007ffdd2b80c80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 318.283407][ T30] RAX: ffffffffffffffda RBX: 00007f4e1f4d4620 RCX: 00007f4e1e78ec3c [ 318.291420][ T30] RDX: 0000000000000028 RSI: 00007f4e1f4d4670 RDI: 0000000000000003 [ 318.300178][ T30] RBP: 0000000000000000 R08: 00007ffdd2b80cd4 R09: 000000000000000c [ 318.308282][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 318.316764][ T30] R13: 0000000000000000 R14: 00007f4e1f4d4670 R15: 0000000000000000 [ 318.325209][ T30] [ 318.328260][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 318.337919][ T30] INFO: lockdep is turned off. [ 318.342747][ T30] NMI backtrace for cpu 1 [ 318.342759][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 318.342776][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.342785][ T30] Call Trace: [ 318.342791][ T30] [ 318.342798][ T30] dump_stack_lvl+0x241/0x360 [ 318.342826][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.342847][ T30] ? __pfx__printk+0x10/0x10 [ 318.342868][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 318.342893][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 318.342916][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.342934][ T30] ? _printk+0xd5/0x120 [ 318.342952][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 318.342973][ T30] ? __pfx__printk+0x10/0x10 [ 318.342994][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 318.343010][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 318.343031][ T30] watchdog+0xff6/0x1040 [ 318.343051][ T30] ? watchdog+0x1ea/0x1040 [ 318.343070][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.343089][ T30] kthread+0x7a9/0x920 [ 318.343107][ T30] ? __pfx_kthread+0x10/0x10 [ 318.343127][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.343158][ T30] ? __pfx_kthread+0x10/0x10 [ 318.343176][ T30] ? __pfx_kthread+0x10/0x10 [ 318.343196][ T30] ? __pfx_kthread+0x10/0x10 [ 318.343214][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.343234][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 318.343256][ T30] ? __pfx_kthread+0x10/0x10 [ 318.343276][ T30] ret_from_fork+0x4b/0x80 [ 318.343292][ T30] ? __pfx_kthread+0x10/0x10 [ 318.343311][ T30] ret_from_fork_asm+0x1a/0x30 [ 318.343331][ T30] [ 318.343337][ T30] Sending NMI from CPU 1 to CPUs 0: [ 318.511857][ C0] NMI backtrace for cpu 0 [ 318.511875][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 318.511895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.511906][ C0] Workqueue: bat_events batadv_tt_purge [ 318.511938][ C0] RIP: 0010:kasan_check_range+0x1ba/0x290 [ 318.511965][ C0] Code: fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c <41> 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 00 75 [ 318.511981][ C0] RSP: 0018:ffffc900001179a0 EFLAGS: 00000056 [ 318.511995][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81a7326c [ 318.512006][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901ba630 [ 318.512017][ C0] RBP: 0000000000000000 R08: ffffffff901ba637 R09: 1ffffffff20374c6 [ 318.512029][ C0] R10: dffffc0000000000 R11: fffffbfff20374c7 R12: dffffc0000000000 [ 318.512042][ C0] R13: 1ffff92000022f44 R14: dffffc0000000001 R15: fffffbfff20374c7 [ 318.512055][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 318.512069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.512081][ C0] CR2: 00005605a145cf50 CR3: 000000000e738000 CR4: 00000000003526f0 [ 318.512096][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.512106][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.512117][ C0] Call Trace: [ 318.512123][ C0] [ 318.512132][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 318.512156][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.512180][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.512211][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 318.512228][ C0] ? nmi_handle+0x14f/0x5a0 [ 318.512249][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.512271][ C0] ? kasan_check_range+0x1ba/0x290 [ 318.512294][ C0] ? default_do_nmi+0x63/0x160 [ 318.512323][ C0] ? exc_nmi+0x123/0x1f0 [ 318.512343][ C0] ? end_repeat_nmi+0xf/0x53 [ 318.512366][ C0] ? trace_irq_enable+0x2c/0x120 [ 318.512385][ C0] ? kasan_check_range+0x1ba/0x290 [ 318.512409][ C0] ? kasan_check_range+0x1ba/0x290 [ 318.512433][ C0] ? kasan_check_range+0x1ba/0x290 [ 318.512456][ C0] [ 318.512462][ C0] [ 318.512469][ C0] trace_irq_enable+0x2c/0x120 [ 318.512487][ C0] trace_hardirqs_on+0x18/0x40 [ 318.512505][ C0] __local_bh_enable_ip+0x168/0x200 [ 318.512522][ C0] ? batadv_tt_purge+0x4dd/0xa40 [ 318.512545][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.512561][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.512583][ C0] batadv_tt_purge+0x4dd/0xa40 [ 318.512611][ C0] ? process_scheduled_works+0x976/0x1840 [ 318.512630][ C0] process_scheduled_works+0xa66/0x1840 [ 318.512661][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.512682][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 318.512707][ C0] ? assign_work+0x364/0x3d0 [ 318.512727][ C0] worker_thread+0x870/0xd30 [ 318.512752][ C0] ? __kthread_parkme+0x169/0x1d0 [ 318.512774][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.512793][ C0] kthread+0x7a9/0x920 [ 318.512814][ C0] ? __pfx_kthread+0x10/0x10 [ 318.512837][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.512856][ C0] ? __pfx_kthread+0x10/0x10 [ 318.512877][ C0] ? __pfx_kthread+0x10/0x10 [ 318.512899][ C0] ? __pfx_kthread+0x10/0x10 [ 318.512920][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.512942][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 318.512967][ C0] ? __pfx_kthread+0x10/0x10 [ 318.512989][ C0] ret_from_fork+0x4b/0x80 [ 318.513006][ C0] ? __pfx_kthread+0x10/0x10 [ 318.513028][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.513052][ C0] [ 318.521967][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 318.521989][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 [ 318.522016][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.522030][ T30] Call Trace: [ 318.522040][ T30] [ 318.522049][ T30] dump_stack_lvl+0x241/0x360 [ 318.522100][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.522132][ T30] ? __pfx__printk+0x10/0x10 [ 318.522165][ T30] ? vscnprintf+0x5d/0x90 [ 318.522194][ T30] panic+0x349/0x880 [ 318.522224][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 318.522256][ T30] ? __pfx_panic+0x10/0x10 [ 318.522282][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 318.522317][ T30] ? __irq_work_queue_local+0x137/0x410 [ 318.522346][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 318.522373][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 318.522401][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 318.522433][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 318.522465][ T30] watchdog+0x1035/0x1040 [ 318.522494][ T30] ? watchdog+0x1ea/0x1040 [ 318.522523][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.522549][ T30] kthread+0x7a9/0x920 [ 318.522577][ T30] ? __pfx_kthread+0x10/0x10 [ 318.522607][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.522632][ T30] ? __pfx_kthread+0x10/0x10 [ 318.522660][ T30] ? __pfx_kthread+0x10/0x10 [ 318.522690][ T30] ? __pfx_kthread+0x10/0x10 [ 318.522718][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.522747][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 318.522780][ T30] ? __pfx_kthread+0x10/0x10 [ 318.522809][ T30] ret_from_fork+0x4b/0x80 [ 318.522833][ T30] ? __pfx_kthread+0x10/0x10 [ 318.522861][ T30] ret_from_fork_asm+0x1a/0x30 [ 318.522892][ T30] [ 319.047053][ T30] Kernel Offset: disabled [ 319.051489][ T30] Rebooting in 86400 seconds..