last executing test programs: 1.907803819s ago: executing program 3 (id=827): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, 0x0) 1.888578601s ago: executing program 4 (id=828): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000004) close(r0) 1.774524478s ago: executing program 0 (id=829): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1f, @loopback, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000045, 0x0, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x47, 0x0, 0x0, &(0x7f0000000040)=""/29, 0x1d}, 0x9}], 0x1, 0x2, 0x0) 1.773072105s ago: executing program 3 (id=830): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="7538736d00ff37838b57f777409f47f488a8bb7dcd3a", 0x16, 0x24044885, &(0x7f0000000000)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 1.732682039s ago: executing program 4 (id=831): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x15) 1.631227718s ago: executing program 3 (id=833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.616828034s ago: executing program 2 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.552323457s ago: executing program 2 (id=835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000003a305002c001280110001006272696467655f736c617665000000001400058005000100ff000000060002"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.509040945s ago: executing program 2 (id=836): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d00000000000000", 0xb, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 1.337544416s ago: executing program 1 (id=837): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.328355755s ago: executing program 1 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000f9ffffff3b00000008000300", @ANYRES32=r2, @ANYBLOB="280033003084"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 1.284657809s ago: executing program 1 (id=839): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/21, 0x15, 0xc9100120, 0x0, 0x0) 805.564153ms ago: executing program 0 (id=840): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, 0x0) 801.075735ms ago: executing program 4 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 768.874265ms ago: executing program 0 (id=842): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 699.785082ms ago: executing program 3 (id=843): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="7538736d00ff37838b57f777409f47f488a8bb7dcd3a", 0x16, 0x24044885, &(0x7f0000000000)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 613.624854ms ago: executing program 4 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='D5', 0x2, 0x850, 0x0, 0x0) 610.043547ms ago: executing program 2 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 589.884795ms ago: executing program 0 (id=846): syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 503.243131ms ago: executing program 4 (id=847): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 457.583838ms ago: executing program 3 (id=848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 388.010357ms ago: executing program 1 (id=849): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 387.404585ms ago: executing program 2 (id=850): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000283a02fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 372.39301ms ago: executing program 4 (id=851): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)}}], 0x3, 0x15) 332.440296ms ago: executing program 1 (id=852): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xf}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xfffffffffffffe76}, {0x8}}]}, 0x38}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 205.068566ms ago: executing program 3 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004400)={0xf4, r1, 0x5, 0x0, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @default, 0x8201, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x3, 0x7}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x88, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7e, 0x2, "82d4f05a3d1092fb3d78bef3fafe67543a68834de6a2f6835f604bebc554ce929d9b7f46d7d661bfad082b284a41b0efca40aaa34a13ea8dd710297ecefef08b8a42ab324d0ab355d36ffd3188bf01c564824f2a7651716b1a138e0c6e11d7dedc104698e93573aafec69a2ba170137e1e23c3e6fcdd274cbfde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800007f}]}, 0xf4}}, 0x840) 172.071273ms ago: executing program 0 (id=854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)={r2}) 163.221671ms ago: executing program 2 (id=855): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d00000000000000", 0xb, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 143.986023ms ago: executing program 1 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=857): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 86.801865][ T876] cfg80211: failed to load regulatory.db [ 101.130474][ T5816] cgroup: Unknown subsys name 'net' [ 101.243419][ T5816] cgroup: Unknown subsys name 'cpuset' [ 101.252279][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.690774][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.863340][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.884576][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.893019][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.893146][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.901459][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.909150][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.918471][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.923232][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.936510][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.936551][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.949116][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.960186][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.970701][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.970887][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.978710][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.992815][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.001303][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.001754][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.009798][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.023924][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.035283][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.047531][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.060459][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.075493][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.085295][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.712191][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 107.726249][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 107.797622][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 108.012789][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 108.023468][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 108.084735][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.092014][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.099690][ T5837] bridge_slave_0: entered allmulticast mode [ 108.107581][ T5837] bridge_slave_0: entered promiscuous mode [ 108.161140][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.168280][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.175585][ T5838] bridge_slave_0: entered allmulticast mode [ 108.182950][ T5838] bridge_slave_0: entered promiscuous mode [ 108.190321][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.197543][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.204931][ T5840] bridge_slave_0: entered allmulticast mode [ 108.211999][ T5840] bridge_slave_0: entered promiscuous mode [ 108.220655][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.227857][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.235564][ T5837] bridge_slave_1: entered allmulticast mode [ 108.242640][ T5837] bridge_slave_1: entered promiscuous mode [ 108.270222][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.277367][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.285036][ T5838] bridge_slave_1: entered allmulticast mode [ 108.293719][ T5838] bridge_slave_1: entered promiscuous mode [ 108.301130][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.308268][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.315544][ T5840] bridge_slave_1: entered allmulticast mode [ 108.323095][ T5840] bridge_slave_1: entered promiscuous mode [ 108.420867][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.432833][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.455118][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.466650][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.478519][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.525453][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.575414][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.583145][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.591242][ T5850] bridge_slave_0: entered allmulticast mode [ 108.598190][ T5850] bridge_slave_0: entered promiscuous mode [ 108.649090][ T5837] team0: Port device team_slave_0 added [ 108.656911][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.664438][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.671721][ T5850] bridge_slave_1: entered allmulticast mode [ 108.678641][ T5850] bridge_slave_1: entered promiscuous mode [ 108.686355][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.693775][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.701122][ T5839] bridge_slave_0: entered allmulticast mode [ 108.708442][ T5839] bridge_slave_0: entered promiscuous mode [ 108.729706][ T5840] team0: Port device team_slave_0 added [ 108.737358][ T5837] team0: Port device team_slave_1 added [ 108.755060][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.762367][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.769762][ T5839] bridge_slave_1: entered allmulticast mode [ 108.777553][ T5839] bridge_slave_1: entered promiscuous mode [ 108.786961][ T5838] team0: Port device team_slave_0 added [ 108.794998][ T5840] team0: Port device team_slave_1 added [ 108.835613][ T5838] team0: Port device team_slave_1 added [ 108.868140][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.878851][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.886346][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.912717][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.962957][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.988338][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.995738][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.021957][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.035792][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.040818][ T5848] Bluetooth: hci1: command tx timeout [ 109.049456][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.069627][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.076717][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.102780][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.130605][ T5848] Bluetooth: hci4: command tx timeout [ 109.130617][ T5842] Bluetooth: hci2: command tx timeout [ 109.131101][ T5842] Bluetooth: hci0: command tx timeout [ 109.136334][ T5848] Bluetooth: hci3: command tx timeout [ 109.183695][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.190799][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.217021][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.228910][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.236241][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.262198][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.275378][ T5850] team0: Port device team_slave_0 added [ 109.297757][ T5837] hsr_slave_0: entered promiscuous mode [ 109.304272][ T5837] hsr_slave_1: entered promiscuous mode [ 109.312296][ T5839] team0: Port device team_slave_0 added [ 109.320341][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.327304][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.353875][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.373661][ T5850] team0: Port device team_slave_1 added [ 109.383357][ T5839] team0: Port device team_slave_1 added [ 109.509267][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.516664][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.543110][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.555091][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.562488][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.588619][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.623417][ T5840] hsr_slave_0: entered promiscuous mode [ 109.630409][ T5840] hsr_slave_1: entered promiscuous mode [ 109.636478][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 109.642350][ T5840] Cannot create hsr debugfs directory [ 109.648650][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.655811][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.682402][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.694125][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.701241][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.727570][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.749370][ T5838] hsr_slave_0: entered promiscuous mode [ 109.755728][ T5838] hsr_slave_1: entered promiscuous mode [ 109.762150][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 109.767887][ T5838] Cannot create hsr debugfs directory [ 109.978029][ T5850] hsr_slave_0: entered promiscuous mode [ 109.984975][ T5850] hsr_slave_1: entered promiscuous mode [ 109.991238][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 109.997077][ T5850] Cannot create hsr debugfs directory [ 110.027824][ T5839] hsr_slave_0: entered promiscuous mode [ 110.034377][ T5839] hsr_slave_1: entered promiscuous mode [ 110.040655][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 110.046380][ T5839] Cannot create hsr debugfs directory [ 110.389164][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.401610][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.434723][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.451183][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.518784][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.536780][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.552989][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.575641][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.654647][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.669251][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.695583][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.706239][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.797226][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.815450][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.835676][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.852182][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.863790][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.972198][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.979731][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.992715][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.004483][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.024660][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.056915][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.064164][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.096064][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.122186][ T5848] Bluetooth: hci1: command tx timeout [ 111.137739][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.145082][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.177037][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.200270][ T5848] Bluetooth: hci0: command tx timeout [ 111.200307][ T5845] Bluetooth: hci2: command tx timeout [ 111.205784][ T5848] Bluetooth: hci3: command tx timeout [ 111.211577][ T5842] Bluetooth: hci4: command tx timeout [ 111.231528][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.238623][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.255416][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.262607][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.275732][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.332436][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.367406][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.374534][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.414846][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.421974][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.451233][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.616007][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.664035][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.671229][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.705644][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.718622][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.726047][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.808884][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.864414][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.871706][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.902868][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.910045][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.924188][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.977969][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.117697][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.198524][ T5837] veth0_vlan: entered promiscuous mode [ 112.242654][ T5837] veth1_vlan: entered promiscuous mode [ 112.335394][ T5840] veth0_vlan: entered promiscuous mode [ 112.374598][ T5840] veth1_vlan: entered promiscuous mode [ 112.467315][ T5837] veth0_macvtap: entered promiscuous mode [ 112.497269][ T5837] veth1_macvtap: entered promiscuous mode [ 112.536570][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.555796][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.575283][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.588080][ T5840] veth0_macvtap: entered promiscuous mode [ 112.610658][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.626483][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.635899][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.645919][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668598][ T5840] veth1_macvtap: entered promiscuous mode [ 112.676271][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.797507][ T5838] veth0_vlan: entered promiscuous mode [ 112.803770][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.822469][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.824828][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.843174][ T5839] veth0_vlan: entered promiscuous mode [ 112.861957][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.905702][ T3471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.914949][ T3471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.927558][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.933778][ T5839] veth1_vlan: entered promiscuous mode [ 112.942465][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.944794][ T3471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.958984][ T3471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.969033][ T5838] veth1_vlan: entered promiscuous mode [ 113.006817][ T5850] veth0_vlan: entered promiscuous mode [ 113.066543][ T5850] veth1_vlan: entered promiscuous mode [ 113.071268][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.140772][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.148625][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.201946][ T5842] Bluetooth: hci1: command tx timeout [ 113.215750][ T5838] veth0_macvtap: entered promiscuous mode [ 113.239591][ T5838] veth1_macvtap: entered promiscuous mode [ 113.261662][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.263472][ T5839] veth0_macvtap: entered promiscuous mode [ 113.269798][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.283503][ T5842] Bluetooth: hci3: command tx timeout [ 113.283839][ T5839] veth1_macvtap: entered promiscuous mode [ 113.297386][ T5842] Bluetooth: hci4: command tx timeout [ 113.297441][ T5848] Bluetooth: hci2: command tx timeout [ 113.302839][ T5842] Bluetooth: hci0: command tx timeout [ 113.419430][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 113.437594][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.448759][ T5850] veth0_macvtap: entered promiscuous mode [ 113.465636][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.487463][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.536511][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.562748][ T5850] veth1_macvtap: entered promiscuous mode [ 113.606293][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.617439][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.652354][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.687096][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722164][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.729160][ T5969] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.739916][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.752747][ T5969] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8'. [ 113.784584][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.814362][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.834043][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.855642][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.949567][ T1111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.970760][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.011909][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.020959][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.031417][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.063965][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.116134][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 114.124628][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.145305][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.176225][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.181623][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.301400][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.309301][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.391432][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.431619][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.495694][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.566485][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.591584][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.696243][ T5992] tipc: Started in network mode [ 114.707984][ T5992] tipc: Node identity 8ef6ec0ae0fb, cluster identity 4711 [ 114.730677][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12'. [ 114.738003][ T5992] tipc: Enabled bearer , priority 0 [ 114.746976][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12'. [ 114.780850][ T5995] syzkaller0: entered promiscuous mode [ 114.803003][ T5995] syzkaller0: entered allmulticast mode [ 114.824299][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 114.833769][ T5997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.841205][ T5997] IPv6: NLM_F_CREATE should be set when creating new route [ 114.844311][ T5994] dummy0: entered promiscuous mode [ 114.857212][ T5994] team0: entered promiscuous mode [ 114.863262][ T5994] team_slave_0: entered promiscuous mode [ 114.870949][ T5994] team_slave_1: entered promiscuous mode [ 114.909039][ T5992] tipc: Resetting bearer [ 115.003095][ T5990] tipc: Resetting bearer [ 115.045163][ T5990] tipc: Disabling bearer [ 115.144333][ T6005] Zero length message leads to an empty skb [ 115.285146][ T5842] Bluetooth: hci1: command tx timeout [ 115.335514][ T9] IPVS: starting estimator thread 0... [ 115.360377][ T5842] Bluetooth: hci0: command tx timeout [ 115.362288][ T5848] Bluetooth: hci3: command tx timeout [ 115.365994][ T5842] Bluetooth: hci2: command tx timeout [ 115.371921][ T5856] Bluetooth: hci4: command tx timeout [ 115.442482][ T6016] IPVS: using max 30 ests per chain, 72000 per kthread [ 115.462401][ T6018] netlink: zone id is out of range [ 115.685734][ T6024] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.772856][ T6029] netlink: 'syz.2.25': attribute type 9 has an invalid length. [ 115.797415][ T6029] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.25'. [ 116.972412][ T6075] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 117.013137][ T812] IPVS: starting estimator thread 0... [ 117.073145][ T6084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.38'. [ 117.093589][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 117.110084][ T6082] IPVS: using max 25 ests per chain, 60000 per kthread [ 117.117989][ T6081] netlink: zone id is out of range [ 117.593245][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.820427][ T6116] tipc: Started in network mode [ 117.830535][ T6116] tipc: Node identity 52fba0fde8e2, cluster identity 4711 [ 117.838288][ T6116] tipc: Enabled bearer , priority 0 [ 117.873948][ T6111] syzkaller0: entered promiscuous mode [ 117.883686][ T6117] netlink: 'syz.1.55': attribute type 13 has an invalid length. [ 117.910800][ T6111] syzkaller0: entered allmulticast mode [ 117.982721][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 118.032282][ T6111] tipc: Resetting bearer [ 118.054131][ T6110] tipc: Resetting bearer [ 118.063494][ T6126] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 118.114673][ T6110] tipc: Disabling bearer [ 118.573771][ T6143] __nla_validate_parse: 2 callbacks suppressed [ 118.573789][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 118.797315][ T6151] pimreg: entered allmulticast mode [ 118.830014][ T6151] pimreg: left allmulticast mode [ 118.921272][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 119.071187][ T30] audit: type=1804 audit(1761225807.173:2): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.70" name="/newroot/13/cgroup.controllers" dev="tmpfs" ino=84 res=1 errno=0 [ 119.159948][ T30] audit: type=1800 audit(1761225807.173:3): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.70" name="cgroup.controllers" dev="tmpfs" ino=84 res=0 errno=0 [ 119.389736][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 120.312145][ T6185] netlink: 'syz.0.83': attribute type 23 has an invalid length. [ 120.380008][ T6189] netlink: 56 bytes leftover after parsing attributes in process `syz.4.85'. [ 120.717838][ T6197] tipc: Enabling of bearer rejected, media not registered [ 121.531735][ T6223] netlink: 'syz.4.96': attribute type 12 has an invalid length. [ 122.325825][ T6245] netlink: 304 bytes leftover after parsing attributes in process `syz.1.111'. [ 122.361257][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 122.548290][ T6247] bond1: option resend_igmp: invalid value (262144) [ 122.555148][ T6247] bond1: option resend_igmp: allowed values 0 - 255 [ 122.584248][ T6247] bond1 (unregistering): Released all slaves [ 123.656363][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 123.873405][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 123.965511][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 123.975935][ T6320] bridge_slave_1: left allmulticast mode [ 123.982251][ T6320] bridge_slave_1: left promiscuous mode [ 123.989013][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.046902][ T6320] bridge_slave_0: left allmulticast mode [ 124.100248][ T6320] bridge_slave_0: left promiscuous mode [ 124.134052][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.324496][ T6330] veth0_to_team: entered promiscuous mode [ 125.825366][ T6369] bridge0: port 3(batadv1) entered blocking state [ 125.833354][ T6369] bridge0: port 3(batadv1) entered disabled state [ 125.853453][ T6369] batadv1: entered allmulticast mode [ 125.868448][ T6369] batadv1: entered promiscuous mode [ 125.897156][ T6372] syz_tun: entered allmulticast mode [ 126.300298][ T3549] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 126.310391][ T3549] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 126.631437][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 126.649976][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 127.030701][ T6402] veth0_to_team: entered promiscuous mode [ 127.303011][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 127.371340][ T6408] bridge0: entered promiscuous mode [ 127.384376][ T6408] macvtap1: entered promiscuous mode [ 127.410520][ T6408] macvtap1: entered allmulticast mode [ 127.430125][ T6408] bridge0: entered allmulticast mode [ 127.464204][ T6410] bridge0: left allmulticast mode [ 127.479171][ T6410] bridge0: left promiscuous mode [ 128.016539][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'. [ 128.523521][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 129.317031][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 130.658295][ T6541] veth0_to_team: entered promiscuous mode [ 132.891685][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898041][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.933212][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.290'. [ 132.942328][ T6647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.290'. [ 133.026852][ T6647] bond1: entered promiscuous mode [ 133.067962][ T6647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.764498][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 137.142474][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 139.912002][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 140.268103][ T6955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.713481][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 142.794242][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 144.530736][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 144.586118][ T7142] bond0: entered promiscuous mode [ 144.620784][ T7142] bond_slave_0: entered promiscuous mode [ 144.626724][ T7142] bond_slave_1: entered promiscuous mode [ 144.664673][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 144.696481][ T7142] bond0: left promiscuous mode [ 144.712884][ T7142] bond_slave_0: left promiscuous mode [ 144.750205][ T7142] bond_slave_1: left promiscuous mode [ 144.799194][ T7151] bond0: entered promiscuous mode [ 144.804999][ T7151] bond_slave_0: entered promiscuous mode [ 144.813992][ T7151] bond_slave_1: entered promiscuous mode [ 144.847160][ T7151] bond0: left promiscuous mode [ 144.856078][ T7151] bond_slave_0: left promiscuous mode [ 144.871144][ T7151] bond_slave_1: left promiscuous mode [ 146.331348][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 146.425375][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.596676][ T7238] netlink: 620 bytes leftover after parsing attributes in process `syz.4.554'. [ 146.627650][ T7232] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 147.216053][ T7268] netlink: 620 bytes leftover after parsing attributes in process `syz.2.567'. [ 147.901256][ T7301] netlink: 620 bytes leftover after parsing attributes in process `syz.0.582'. [ 148.572054][ T7332] netlink: 620 bytes leftover after parsing attributes in process `syz.2.597'. [ 149.189430][ T7365] netlink: 620 bytes leftover after parsing attributes in process `syz.1.612'. [ 150.052397][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 150.108585][ T7411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.368302][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.405029][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.432239][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.488869][ T7425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.532402][ T7425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.702892][ T7442] netlink: 52 bytes leftover after parsing attributes in process `syz.1.647'. [ 150.724382][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.735824][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.760012][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.778629][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.797220][ T7425] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.983199][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 151.236271][ T7469] netlink: 52 bytes leftover after parsing attributes in process `syz.3.660'. [ 151.432569][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'. [ 151.442490][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 151.875334][ T7500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.675'. [ 153.398405][ T7581] __nla_validate_parse: 3 callbacks suppressed [ 153.398423][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.704'. [ 153.434267][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 153.510118][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 153.842126][ T7601] tipc: Enabling of bearer rejected, failed to enable media [ 153.852957][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 153.900311][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 154.250566][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'. [ 154.322033][ T7623] tipc: Started in network mode [ 154.326938][ T7623] tipc: Node identity e0000001, cluster identity 4711 [ 154.359040][ T7623] tipc: Enabling of bearer rejected, failed to enable media [ 154.765786][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 154.815723][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 154.825050][ T5848] Bluetooth: hci4: link tx timeout [ 154.831215][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.080188][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.734'. [ 155.123721][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 156.883618][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 157.083541][ T7750] netlink: 'syz.3.781': attribute type 5 has an invalid length. [ 158.670205][ T7823] __nla_validate_parse: 10 callbacks suppressed [ 158.670221][ T7823] netlink: 620 bytes leftover after parsing attributes in process `syz.3.815'. [ 159.300213][ T7848] netlink: 620 bytes leftover after parsing attributes in process `syz.2.826'. [ 160.653104][ T7892] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 160.707799][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.785642][ T7892] bond0: (slave team0): Enslaving as an active interface with an up link [ 161.047123][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 161.090725][ C1] ------------[ cut here ]------------ [ 161.096504][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 161.107451][ C1] WARNING: CPU: 1 PID: 23 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 161.117338][ C1] Modules linked in: [ 161.121659][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 161.130931][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.141127][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 161.147548][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 75 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 0f ae c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 161.167500][ C1] RSP: 0018:ffffc900001d7238 EFLAGS: 00010246 [ 161.173623][ C1] RAX: 0366aa4b1cf35700 RBX: 000000000000000c RCX: ffff88801ceedac0 [ 161.181703][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 161.189687][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 161.197720][ C1] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff8880778b0de8 [ 161.205750][ C1] R13: 0000000000000000 R14: ffff888074358e80 R15: ffff88807435b138 [ 161.213788][ C1] FS: 0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000 [ 161.222826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.229531][ C1] CR2: 000055556142f808 CR3: 0000000030986000 CR4: 00000000003526f0 [ 161.237565][ C1] Call Trace: [ 161.240889][ C1] [ 161.243851][ C1] rate_control_send_low+0x1a7/0x7b0 [ 161.249172][ C1] rate_control_get_rate+0x20b/0x5d0 [ 161.254622][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 161.260507][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 161.266860][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 161.272297][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 161.278058][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 161.283845][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 161.290082][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.295670][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.301283][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.306869][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 161.312483][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.318070][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 161.323602][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 161.329730][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 161.335365][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 161.342657][ C1] __iterate_interfaces+0x2ab/0x590 [ 161.347961][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 161.354255][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 161.361680][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 161.367852][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 161.374954][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 161.380278][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 161.386094][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 161.391384][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 161.397422][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 161.403181][ C1] ? read_tsc+0x9/0x20 [ 161.407294][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 161.413180][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 161.418319][ C1] handle_softirqs+0x286/0x870 [ 161.423150][ C1] ? run_ksoftirqd+0x9b/0x100 [ 161.427860][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 161.433201][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 161.438242][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 161.443331][ C1] run_ksoftirqd+0x9b/0x100 [ 161.447859][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 161.453012][ C1] smpboot_thread_fn+0x542/0xa60 [ 161.457963][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 161.463031][ C1] kthread+0x711/0x8a0 [ 161.467126][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 161.472723][ C1] ? __pfx_kthread+0x10/0x10 [ 161.477309][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.482552][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.487777][ C1] ? __pfx_kthread+0x10/0x10 [ 161.492390][ C1] ret_from_fork+0x4bc/0x870 [ 161.497002][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 161.502332][ C1] ? __switch_to_asm+0x39/0x70 [ 161.507105][ C1] ? __switch_to_asm+0x33/0x70 [ 161.511922][ C1] ? __pfx_kthread+0x10/0x10 [ 161.516628][ C1] ret_from_fork_asm+0x1a/0x30 [ 161.521476][ C1] [ 161.524507][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.531779][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 161.541160][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.551230][ C1] Call Trace: [ 161.554512][ C1] [ 161.557444][ C1] dump_stack_lvl+0x99/0x250 [ 161.562213][ C1] ? __asan_memcpy+0x40/0x70 [ 161.566793][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.572000][ C1] ? __pfx__printk+0x10/0x10 [ 161.576678][ C1] vpanic+0x237/0x6d0 [ 161.580655][ C1] ? __pfx_vpanic+0x10/0x10 [ 161.585157][ C1] panic+0xb9/0xc0 [ 161.588876][ C1] ? __pfx_panic+0x10/0x10 [ 161.593297][ C1] __warn+0x31b/0x4b0 [ 161.597277][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 161.602907][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 161.608536][ C1] report_bug+0x2be/0x4f0 [ 161.612865][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 161.618598][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 161.624228][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 161.629940][ C1] handle_bug+0x84/0x160 [ 161.634174][ C1] exc_invalid_op+0x1a/0x50 [ 161.638711][ C1] asm_exc_invalid_op+0x1a/0x20 [ 161.643557][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 161.649787][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 75 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 0f ae c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 161.669380][ C1] RSP: 0018:ffffc900001d7238 EFLAGS: 00010246 [ 161.675442][ C1] RAX: 0366aa4b1cf35700 RBX: 000000000000000c RCX: ffff88801ceedac0 [ 161.683415][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 161.691392][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 161.699442][ C1] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff8880778b0de8 [ 161.707480][ C1] R13: 0000000000000000 R14: ffff888074358e80 R15: ffff88807435b138 [ 161.715504][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 161.721198][ C1] rate_control_send_low+0x1a7/0x7b0 [ 161.726529][ C1] rate_control_get_rate+0x20b/0x5d0 [ 161.731927][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 161.737735][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 161.744079][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 161.749475][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 161.755208][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 161.760853][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 161.766849][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.772567][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.778116][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.783661][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 161.789578][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 161.795230][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 161.800692][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 161.806853][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 161.812399][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 161.819691][ C1] __iterate_interfaces+0x2ab/0x590 [ 161.825000][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 161.831145][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 161.838337][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 161.844397][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 161.851449][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 161.856636][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 161.862449][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 161.867636][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 161.873714][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 161.879506][ C1] ? read_tsc+0x9/0x20 [ 161.883575][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 161.889461][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 161.894567][ C1] handle_softirqs+0x286/0x870 [ 161.899320][ C1] ? run_ksoftirqd+0x9b/0x100 [ 161.903993][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 161.909270][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 161.914488][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 161.919504][ C1] run_ksoftirqd+0x9b/0x100 [ 161.924003][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 161.929112][ C1] smpboot_thread_fn+0x542/0xa60 [ 161.934127][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 161.939238][ C1] kthread+0x711/0x8a0 [ 161.943301][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 161.948749][ C1] ? __pfx_kthread+0x10/0x10 [ 161.953355][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.958555][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.963740][ C1] ? __pfx_kthread+0x10/0x10 [ 161.968418][ C1] ret_from_fork+0x4bc/0x870 [ 161.973007][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 161.978109][ C1] ? __switch_to_asm+0x39/0x70 [ 161.982884][ C1] ? __switch_to_asm+0x33/0x70 [ 161.987663][ C1] ? __pfx_kthread+0x10/0x10 [ 161.992384][ C1] ret_from_fork_asm+0x1a/0x30 [ 161.997266][ C1] [ 162.000667][ C1] Kernel Offset: disabled [ 162.005004][ C1] Rebooting in 86400 seconds..