last executing test programs: 51.959607114s ago: executing program 2 (id=1219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 43.482066317s ago: executing program 2 (id=1219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 33.731090559s ago: executing program 2 (id=1219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 24.967011279s ago: executing program 2 (id=1219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 19.1907605s ago: executing program 4 (id=2087): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2000400) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 19.168766949s ago: executing program 4 (id=2088): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ppoll(&(0x7f0000000080)=[{r1, 0x409c}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x537}, {}, {}, [@alu={0x4, 0x1, 0x9, 0x6, 0x6, 0xc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x3, 0xb5, &(0x7f0000000340)=""/181, 0x41100, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xc, 0x8, 0x2f8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x0, 0x3, 0xe, 0xb}, {0x2, 0x2, 0xc, 0x5}], 0x10, 0x7fffffff, @void, @value}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000600)={@empty, 0x0}, &(0x7f0000000640)=0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex=r9, r8, 0x9, 0x2000, 0x0, @value, @void, @void, @void, r6}, 0x20) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2901}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x60}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000000)=0xc, 0x4) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r12 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000e40)=""/4096, &(0x7f00000001c0)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$bt_l2cap(r12, &(0x7f0000000180)={0x1f, 0x7, @none, 0x87a6, 0x5}, 0xe) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x99, 0x8, 0x8, 0x4, 0x9, 0x9, 0xcbb, 0x2, 0x80000005, 0x8, 0xfffffff7, 0x6, 0x6, 0xf, 0x0, 0x8, 0x2, 0x4, 0x1b, 0xf, 0xb97, 0x10, 0x7, 0x9, 0xd, 0x6, 0x80000001, 0xe, 0x849, 0x6, 0x0, 0x0, 0x2, 0xfae00000, 0xa, 0x2, 0xfffffffa, 0x1000, 0x1a8a3500, 0xfffffff5, 0xe, 0x4, 0x80000000, 0x4, 0xffffffff, 0x4000001, 0x4d8a, 0x0, 0x7fff, 0x24f3c3a1, 0x1, 0x10001, 0xd00, 0x2, 0x0, 0x80000001, 0x0, 0xe, 0x40, 0x1, 0x0, 0x0, 0x1, 0xfffffffa, 0x6, 0x9, 0x8, 0x9, 0xffff, 0x0, 0x9, 0x5, 0x3, 0x8, 0x3, 0x2, 0xffff8001, 0x7, 0x7, 0x80000000, 0x2, 0x4, 0x100, 0x8e49, 0x2, 0x5, 0x4, 0x780, 0x9, 0x0, 0x5, 0x21c, 0x0, 0x1, 0x0, 0xd, 0x4, 0x9, 0x8, 0x4, 0x8946, 0x0, 0x0, 0xfb0e, 0x401, 0x1, 0x5, 0x0, 0x1af, 0xff, 0xd743, 0x3, 0x2, 0x3, 0xffffffff, 0x8, 0xffffff4c, 0x3, 0x8, 0x9, 0x2, 0x5, 0x81, 0x1, 0xb, 0x7fff, 0xff, 0x1, 0x0, 0x5, 0x7fffffff, 0x7, 0x2, 0x22d, 0x81, 0x4, 0x1, 0x20000000, 0x5, 0x10001, 0x3, 0x5, 0x8, 0x62, 0x1, 0x4, 0x10, 0x0, 0xe6, 0x1, 0x82, 0x8, 0xef4, 0x8, 0x200, 0x6, 0x353f, 0xe55, 0x5, 0x5, 0x29, 0x4003, 0x29, 0xa, 0x2bd, 0x10000, 0x3ff, 0x5, 0x7fffffff, 0xffffffff, 0x5, 0xed3, 0x10000, 0x8, 0x6, 0xaa, 0x81, 0x4, 0x942, 0x3d8, 0x3, 0x88b, 0x9, 0x8, 0x1, 0x9, 0x2, 0xfffffe01, 0x0, 0x1ffe, 0x1000, 0x1, 0x8007, 0xe5a5, 0x3c, 0x8001, 0x6, 0xffff, 0x2, 0xe89, 0xffffff7f, 0xfffffff9, 0x5, 0x1, 0x5, 0x1, 0x9, 0x2, 0x1, 0x1, 0xd, 0x6, 0x7, 0x1ff, 0x0, 0xfffffffc, 0x4, 0xfffffffa, 0x68, 0x5, 0x3, 0x6, 0x9, 0xbda000, 0x3, 0x5, 0x401, 0x8000, 0x3, 0x100, 0xfffc, 0x1, 0x3ff, 0x401, 0xffffff4e, 0xb, 0x0, 0x7, 0x1, 0x1, 0x0, 0x4, 0x75298cf3, 0x9c, 0xdbae, 0x1ff, 0xffff0001, 0x200, 0x7f, 0xc7f, 0x10000, 0x4, 0xa6, 0x5, 0xf73, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x400, 0x3}, {0x6, 0x0, 0x6, 0xfff7, 0x2, 0xc0}, 0x1c, 0x1, 0x176f}}]}}]}, 0x45c}}, 0x0) 18.323134624s ago: executing program 4 (id=2100): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xfc}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0xfffffffffffffffe, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {0x0}], 0x2}, 0x5}], 0x1, 0x10000, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x60) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, &(0x7f0000000000)={0x1}) write$tun(r5, &(0x7f0000001e40)=ANY=[@ANYBLOB="1c00080002000200070001000404459f0fc0006500000c1190780a010102ffffffff4e204e210fac9078040000000600000001000000000000005002ba413428cfd0622da30a5611ec085a11aa7cc3300ff9191fe9b4d713e82240143a07998ce1163cba62fec251629bccf9765a5cf2ea5d4f69ee51217f95d229b36b55f46bf1b368c75e9a8891e4e71925dae83f15732de2e8c2057ddffbc2b89c8186bd0f7dd2ed21184b63dcb752b7f49dc0181788d1f5167538edc6320205183627b3a409961ec56cf9cb8293a27524183052e36a6f6f926e69fe4f251ca94720f61800c668dc91292f0dde3b73a1afc269cb155c0f6c3a3bc5808946c6b00b596a4183b49568964e7ca1517a4a91a548b8f9db749e477b3221205332b8b3a3734e41e0c78d3879f084bdfd045fd2eaf54954bd09ea4a3048c6afb9ac5fd629c9c99fd6dd49ff189cb07a8364a31a3f5646f8ab38f68ebe613f32825b17a1cf8f8de394f3a8a91cfe41eaa4d91f63cba3c1ec7a973a4b07033fe44cfc35d2d8c318361159c314f5255e39e507cb15e916dd514f7444a9f0c4caf7f5aa7512b6e1a8671c3aa99d0638fce2b8df3b529716426fd557cef07e4670e1a2a8bb1b7e923656d4a0a402217fac73c6e7a15798e2285ee8145f2e900f12b07905b730507cf3c8f5255c78fa2be7985deb3d4abb6a87d4bcfde52a676f3661feb5d66694ea1ddc35efcaac9bac4af1664717fa23312d1db1637097816f3dfe44733a7c4944e3ca05bb6d9b2cc9debe572788b428392755464221a81490d21bf5c46c549616fb93554adc6e6c8efe44d439c0ec30adee06ddcb779297b19ff1e62d32b77392bfdf07ce9ecbdf96d32aab84daedf7893732b2d6bcb792b6e3e9b17e607200dd163db27e7b9c8b23092f1abc00ff322fbb6d3e322f4b2ad94324e85ed61475709de907eb802dfaf27f0c2b1d794574e485b2be2d27b1f817e279a5e8ee356cb7fff746e940f1319281777a2f89d25738f4351826033fcf1bf607cfb8d1ffa601d17a7f68a93157447a67a4e4f76b9917db8d51860a43921f05d0d8735e6b2ca32d8d529cf9a8e203f1bc1f0d32a954b603693f11a71d64904a0a097ed0e9f039a7660a7796739c99a664b2e87cd09a0eb0dd95874f101151e20e103a92f724baa7905496683d525cb1c834f58ad53128402aa133864f101b51680fe996d0596ae8b38667113e42a30b0a326ae2c71f09e03b815849e85c85de8b2487f8793473bc58530608746a352a322b9246edaa79ce9afab083da6f76195284d7c5ea4a6377821cf8de8e2153a30cc4bf3c1f138e0c4e648b5023473949c504d65670d43346c4e440893e53c7a7705c3adc97de88b541e2eb3447f47176ce74af016196706e068fdc3af9652d54db0e9bcebb16835320eec41199f6213b6f1119f6ad4c417ff8c8fa24107b8f02beb014c6f5816f1302e5218d78ee52e59464da29b03b8b0cd70ae313c99d110311f1abd568cc1997907a69a62682af491f6a6a19cd4d8dd7a503f100493bf8e93ffa4e854d62ab8f648e39c0cfad88beaf7d0a5c1ec04e04761a6ce021fc5b0cb8af27e4b90286879a17f6fe92ad7fa2507d6de62b0c02d4e5f7eff375b23a4336b3ac3c21b25cc8039b74af1d053c5120f698e7dd04a60d23e4d71fef696ebaed8c44c4f5983869554d948b7640c1458a39f676afb1d26d131c03562fba1a64f44adfc44dfa0b65f99aa1f71cf536b159efbdacdc74f5c668bf5d87c06bfea0908a74af349151dead38be2765d2a8513d3ae5b0442cb46d5a0c6ff10c8b752d668d8b5e6b91d2f43d26efac1c285d08a7a79e4932ac806759ec2513be0a6fca60c3eead80e830c024fe0d23e3e49318d3cac3ab7c6a9e9317f8249bfd6bfc17ee0461d6b2e5291b292c0d35926941c9c2b258b9b2f18f39e20188e1a3d39e45ddbdb0b3b0d5c3b74387c18944b1476516367f11d5f3a9ed9212ad699b2c54e45438fa3e803abcdf6a6d46ff05c79549547145a460dc5aed1c9903b2017ab6058516806d180545d0ae576a262f0abbd6cad622151d6081ecf0bd5fd2ce194ccb78f41cbe95b9920eef6c65ecb3b499a6887c4358f9c0b663b8ffa31561522069dcec35aa57564390c0184238f736845024684f5ff99709d4faa5164d49b975b515fc7704c3d33902d2e55d933946d43b323de4fc339ed796d97daf2e00e3d0ce64e1833528bb62c14a44216d082f813d3e0fc55043f15736500139078810396e276e997fc1ffbdbf82dc0abd911fa66c2907fb0f23f46421e324501eb0216b0079d6794e3b2204921e038e00cff6b832aab8e660ef3be19bc1279b8b2656b55857c10ce8deee8a3a68fbb8d4ec4a75744fbe52c88c0e1262e25b6e903bfeb0d543a2f692060c6cbf7b565ad3608938668290729f2e670abbeb1a378c238a167485f2badc17a4e81b04e7bcf2804ebb9c49e5da47cb978e7705de60db9fedf7cf5934b9640a5589baff2daec11b9ea3415f74d313affd636774983831a265f171dc692d45f732015e228e308c8e0afe00ee0c7227b696414d95e3423f1fe3b581cbbaa3851fd53c8c4d54aac985120131f63e04d1317b74cb2436942abd218e60aa1d81ca81a7cce1d806d012c7b3bff9e195cf046e0f289eda316176a80c1eddac756d18ccf2cd1649074d0cf9b46666a1f5e9a248d3d06d460e2a12a7181fabfabc895e7e43174d0b3fc118f6986567491ffc069acf4b7e6fba6e88221a6c88527c82a2328c97b63fe8616378b19404adb52a3b8ef09101f97cc773889c5ca88396454ec00437fda6ffce162333442374f11e4e43ada47c3e6af02daa050490cfc1927a2eb151571ed4320fd543235b828777f8e54cdd65a234374c409fd919416442a55302e0af3cd1a32857dfe2ec19f4ce12bedfbe673c5d3bbc48ff7e4ba6781ff11b8261ffa6dad577f40acb08e048a430b985c1ef40e6fb3346c86afaf2ada2bcd0d490d51d45a07016f3cce5b6eead42e3c3dfc3185c57f57b1712b990ea69caa9855c715750e677732011e2b0e5783ffd2985075d1e427f4adeb19905798bc31ff802d05117dc8ef42a4d48665d7dd3a29fb11f7d8c7dff28bbe9a858a0554c07d3d6d48fa82896f7bb9a2e88103c057e3c4928d5e5558a6b74c0b7f912d70d5fdf0e4123647d404901ea98cb882963524f0507f45f3178cf0993335e568de075de38cbd2f4c347eeb7ede27f5afbfa75e6863da2944882ce270baf6a94ea5a5453dc186353097bee3631df26ad24befcadd64038743826b8ca7f105323afba2cf56ce2f253d1c1af03dc96ef8e9423d9d874e14d61761e5ccf52969f6fc0aa0e1a6060dc38b65468ff2d754f7b67a1ea7e96ac74c186ffe5ea067be31a5522da1bf581280ace345fa85d0aeb91498c59da11ea7c5650d583e547c879f132971539b5d35b07e7c7914b0fa8d8094abc3e94c42607e54199af828bf866e827fe7b6f8189254d9f45b3e7b4cb3d27a4c45c3072b005f01fd1a3169946a4f52908f84c53923022f24f3fd2da61ace2b41fe02f4c55504d77245869ace55455e6a8a7699d1046b57728113470dd525b5c27afc15da785417ce5625b3f405f02fc2e860d9dc52604f8c133632cb96594cf794ae554d6952bc691184bdfb5766bfbe4c233ab7c3f078b5b59fcedf4027271f367d071ab4ce3807cc6b393ab578208c3d42a2f93b580714c62802ad41e1767a6f7ec8003941484f6f341196eda9221bba4ca2ed27e17e9dedfc7d62070b22c1302998331df64c61633ddf303830a83650ebad9b7c551cd44e04eed27101d22ec1dd629f6ba563a2e90fc4502567ac51a91cf69e26ca756588d7c6842e7142a0bc25b339ae67c431a5dc5a145b5a7f14e49b8a2ca00ec6892f1b5f94a2c1d3526327d53b0b072a23c2df16cdfda38a6d417e3009d6d2cdb6b4fa6b11343d128894858881a9dc4b5a0e3fbddc97ea8a864fb8695ec50aed774a1fd8ac7519b077a6bd03572ab7b8f6435f31a25cc3ca22e585927773b126c109302e3aa3d9fce4e34c73aa0dc71805a65ed304c4a8f53e7d19f9b439f0f2b6e33b3961206537c7eaa5a68d127fe023f746e3095690871bbf9d404e4579e90732c25213f1cfe501d697a0a6747b63da2a95ed72a44206c59086f7b7584b12576190f74e391182d5c3d069b26193c702a1333e58d97d1c830077e36062f70aba22ebd71957dbd1cb099277bdea3f2a73b4293f84c5c3c360426b7dd5ca4b5b0a2c2bad08cd6ff344a295ba31e2050c1ec78387d723c5eb54a60e751afb8983a34883d9a45e824f4e468db090883aec68beeda9f18fb6bd0a4f8c9e2ae673c09688898c61bf0226d04956d369bdd6f807b8b3b432ebd7aa400c6bf6365959ecacf371055c708815c825ea5ae77c4b237c5793fe838ff234776b7d1d881555499928fd6ca82a8a7b702a82f4721851cf58dca73f4f6140282038b47208fd520bf35a2a028962a3881bba14eab9a0f1e30a8bf0cda97ab17e3135115f7496ed211979e9752d99db513d32a7a1ac859042eeb2aadbbcb659adb02876d1651a68a88d2aa3e0703a5fe77c01d8781cb1ab3669fe3482c4b279f79c17ac7faf9f58cd1860318b468fe894f399dafe9bcc06bcbe47fb6be53975a64430402136870ed95a13b66608e905e4bd22189de0b05f3c7ca30ce3ff0c0ae3f86b4d2be75b0da065307561c862c257693ff2c63c92aaa56662e29dd7cc3e271b6bc373737874502713085856f4bf3a1d67e1a6f13d837dbf8c0a3f02f00ae5574655f431ba4a01e866c2b522b0a28ac90cf40ec75450bf47c8d6c9f482b500bb2893e1c98cf5d91978b543b45921c7dedd3c1b9cc0a6484f429bdc6f4d2cc67da15c8c6e6ad7b2ec3aba2b718377a6617db8cb5d3bbef2d7684cee49d69f09de573c6beb9d88473629fc0c0c21fe218855df03e3e4fa9cafc41dbd4710b16ba7195216bd969aa2793c50588484a78bde23c852f42af322e7ae5da43f8896be358a8191f6e6ee6e1e5f4f499506cc4b6a2c6a0292ca4e018a9d420f3f85f598f5350588f0d7cb195f688a263bdaedc5ed9ae2fb06168571649e7ffa379c3622a9c4add88077edb4d1820ffb5b37bf72c9a116056588849317aaaaef7c1ce003e02becfc928ac126c63355ae8d854f593bd506f67c7ca6b2b0c610b434e96dacda559b2ee53b14e737d155388906b9854a11fc0d9f9074fd81cd2cf83f9bf361c44ac36274f6ad534bb057e85cf762f4ec680c3408a98e440a80293dbb73c7ff01de9b30d0b275481bc4c4f518c4421f34515bae743d5ce123ed593b6d4c5a1e5a4cc7d7f145f0ede6d9d6971feaa8dd25cbf40bc7bf79a53e6a0a09c33602d8b0ef733cf9d14c1cacd1237b4e0ae9c3e0dd2c3e178729cd10b93b0bffeea47c63e0fddf1d0b72db3c3e8dc2398f6d619acdad123aac1e251793eb5ee8b5c279ed9a1a829a5ee3add19629c67a103139cc746030049734ac0cdcedf534c0de03a319d25c8c6461deb6ce00b3c871f1ad25f8c9ddbcf1b73dc9c31744ba887947b47900ee517a1d1bf32627e926f730d6dcdd1bd7b19fe08b5a2a6f2cf4b72dc4f11d957f7613f0ac108a1583fcfed600d9a5e1c4aff8745cdf45ff5ae857ecba3b425c4dfe52bb66badd455bfe5e0e80fbf5ed52853161cd10f28ec977ddc50d37c843152b7a066659d9311d848f1428fb8"], 0xfce) write(r1, &(0x7f0000000040)="b1f6929830c3f3ffffd5ff2affffffc36113e81293960000ff001a839d5b36511ef7e133eeef6bf9", 0x28) 18.087083737s ago: executing program 4 (id=2105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x24000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r7 = socket$pppoe(0x18, 0x1, 0x0) listen(r7, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000001280)={0x3514, 0xa7, 0x2, 0x7, 0xa8, 0x14, 0x7, "c9844e58f7b40777525421fd1d3a63ff63340ba6", "5073bfb8233b25947961c9cfc3d13f048f1b6807"}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r8, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@timestamp={0x5, 0xa}]}}, {"3fb43022587c8724bbcf57558f5fd0a1daaa7f32715e4bb77c72dbaa84e5a4e98e8926efec4927a5e3169325"}}}}}, 0x6e) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r10, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f00000000c0)=0xb, 0xffffffffffffffef) getpeername$llc(r3, 0x0, 0x0) 15.677228895s ago: executing program 2 (id=1219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 11.50121117s ago: executing program 4 (id=2105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x24000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r7 = socket$pppoe(0x18, 0x1, 0x0) listen(r7, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000001280)={0x3514, 0xa7, 0x2, 0x7, 0xa8, 0x14, 0x7, "c9844e58f7b40777525421fd1d3a63ff63340ba6", "5073bfb8233b25947961c9cfc3d13f048f1b6807"}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r8, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@timestamp={0x5, 0xa}]}}, {"3fb43022587c8724bbcf57558f5fd0a1daaa7f32715e4bb77c72dbaa84e5a4e98e8926efec4927a5e3169325"}}}}}, 0x6e) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r10, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f00000000c0)=0xb, 0xffffffffffffffef) getpeername$llc(r3, 0x0, 0x0) 2.78312989s ago: executing program 3 (id=2219): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 2.778815604s ago: executing program 3 (id=2221): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r1 = socket(0x10, 0x3, 0x0) getsockopt(r0, 0x7, 0xd, &(0x7f0000000100)=""/205, &(0x7f0000000200)=0xcd) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "440aa37de1dc0a2f87971d1c88e909e7470ebf4354b193ae1ba50000"}}]}, 0x158}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x17f6650f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2000000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000050}, 0x4004000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 2.77723434s ago: executing program 1 (id=2222): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0xd, 0x4, 0x3f0, 0x110, 0x0, 0x1f8, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x11, {@empty, @empty, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x4c}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000640)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x12, 0x4f, 0x1}, 0x14}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100)=0x3, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r5, 0x0, &(0x7f0000005e00)) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x38, 0xb0, 0x200, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427b74b71fbbe29c95b93303cd1be9716d01efc0c9ca574191dd7", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x0, 0x6, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x10001, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r7, 0x4) 2.776342112s ago: executing program 1 (id=2223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000103010800000000000000000000000073b527b1e11bb447d6437bf69392d05b310745394a754ab1810b72e86f6133134409d692b3f6b6fc8b94172a55792f260434f5f7f48affc542db84f7f429b7778a6284ac6778f6f6"], 0x14}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 2.774282763s ago: executing program 2 (id=1219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 2.128869199s ago: executing program 0 (id=2225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) 2.127184228s ago: executing program 1 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x3a, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xa18}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x10000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000025c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002600)={0x28, r3, 0x9, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x7}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK={0x14, 0xfe, "71844626c48541dad417a4e09bbca833"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x880) 2.109547856s ago: executing program 3 (id=2227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="0c0001800800010000000000"], 0x24}}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x44010) r4 = socket(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000002240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0, 0x0}, &(0x7f00000022c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = gettid() sendmsg$unix(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r11}}}], 0x20}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0, 0x0}, &(0x7f0000002340)=0xc) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002380)={0xffffffffffffffff, 0xe, 0x18}, 0xc) sendmsg$netlink(r0, &(0x7f0000002480)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000380)={0x1c, 0x20, 0x400, 0x70bd2b, 0x8000, "", [@typed={0xc, 0x130, 0x0, 0x0, @u64=0x1}]}, 0x1c}, {&(0x7f0000000700)={0x178, 0x1d, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0xc, 0x76, 0x0, 0x0, @u64=0x3ff}, @typed={0x4, 0x10d}, @typed={0x8, 0xd9, 0x0, 0x0, @uid}, @generic="11764a63bf090edd790ba94bebec0f8e960eeebf4c60ca8e26be828e41f66fe7fb322cf33393fb353f30bbb4005de79dab74acb9ca0d6e3627a3937671e19f41b36c8e345ae05bba75d12a522a72e22f4f7da043d5ddc3e7e18a40dccef2c32b37c2dae9ded9b8a37f56ef8e9f60db9807d8d0512179d0d47665b7b4ccd646", @generic="8f2e0ff724b33251279bdaed405163acd892aca9c6847c1587aa62499d47bcd11e9800f4e6fc2592d506dca55130d147d1ef78b6789156e145bee8b1c2b071b6c15c0e9792193277c87a520e5fd0ba1fc8f24574bf91d2068f4b54aeae2dae202681890e8cce84ddd65c649a9de713dd56da2b390837495699847bb6c0b5ce4ee21676f83544a19650943bd9332b8a313c682387dbd9abcd657bacbebb26c3f98e8a61a408037190ee939cd12efdf76b79e3633649f4f6f6c09e6dc679a82a2c499fbc54d3bf71b24795c4a1dc6fc72d"]}, 0x178}, {&(0x7f00000024c0)={0x530, 0x3b, 0x100, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x122, 0x0, 0x0, @uid}, @generic="1ec1", @generic, @typed={0x8, 0x7d, 0x0, 0x0, @pid}, @nested={0x28e, 0xa, 0x0, 0x1, [@nested={0x199, 0x97, 0x0, 0x1, [@typed={0xd2, 0x66, 0x0, 0x0, @binary="1e377c02bffa3cfef7e6044788d7650870f0ef053d5ceb88c1343779b801d2de04f18c6af2fea4d34867c76c1491a8a4ae4d7bc60866d4f8ed051f90c9b51579ca76353b804e3236dc12cc59a171da8a2a727542308a556bdd595d55b42c21fd0e6d2e4c37a600bd38d368965708431fd94a45692d54c256f065fce9f3c0b3c767051c6719fabdc27607de906c95ef97912a0055e1fdc3bbf7069c1f4408c1657582a60c5a7f4e5b3880d0e59b9262e1156d47d2e6e252bab4a72f9a260e030f5ec7491ecb795bf80296a080b8bb"}, @nested={0x4, 0x2a}, @typed={0xa, 0x11, 0x0, 0x0, @str='wlan0\x00'}, @nested={0x4, 0x67}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r2}, @generic="cc61ca11ad07dfc4aaf1aa648bbcbe05d090030309df059f0b0bf2de4d2d38758f3ad9a952a8fb8d0c84192dbee3bae8c6d0e8057a94c6ad604b4e56162dac2798391f0068093a36e7e17618e96058b95ef77f5872c9ca868051393807dc5549bb43f13478afc4bdeede7dd2e59668d6ee60f5654af54e151958219a3afbf2989dd7012a4ef2cb0b4caef7d09f237ec63b5045bba37bb662aa", @nested={0x4, 0x118}, @typed={0x8, 0xe6, 0x0, 0x0, @u32=0x3}]}, @generic="e91d58e834f587669db57a6468f425c4b90f7beda3182be424b009d20a5c81714b7ac7bf", @generic="11fa7447c297b5bbc8969a955e105c7d306d288a9bd441fa8bc541a9ce4ea86755999bc84b398bbee76e6bbfc2736dc3c4c1bf45c8cf47a086614880f4e79ac01688483733d832d074b88ad6537fd1e6478c0d820969c29cfaeca041df89bcb9f96f803c65030df4b84fe7c566679cf5b7719b0227037635dfc77b5f7237bdc2cfe86e5db025b60f418571b1c0de2728bf357e9e6aae69913645443ef928117b9dad702c525c230d065d412b04b00712684e3765ce40fe4129c0c32a4094585065c2bafed4050bcd88dc"]}, @nested={0x18e, 0xee, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@multicast2}, @generic="75686c2c849e57701d5ff3c57cd1a40357c1ce1470a931defd9411f4591b0f416c6867c0889e911adfccf29de90d4153f9484bff6e0eef3a4f12c9f2ceb993c83fdf3cddef3d6080740661ffe9e675887de4", @nested={0x4, 0xc4}, @generic="9aaaffd938a21136775600511c2b1bd29c647d263d510fb4ecc3f0c3c31e4360130481800fbedc9d1ce89a023a5d8e97caab7510c1abe3a6aa1f217ab45c8c36487f7095cd5b", @generic="49caf2004e049ad3cdbf1895bb6fce88383ea8455d18d699208ae53a8ed4df966c9171fae9d9c6de2a92dc570db2febcd7a98e80a3dc18d6b3025183d1fb79bef1b4fa72ab1396243c1fb47600168c9975bbfa34ede5f8054f14e3b800073a586b97036312c4f92984672074514e98755b7c883a7d0b837b9c0de4d9bff3b7bcf614131b55ff2f96a1ef13be74e11ec42f94c08fe5f94bf122de12f9a9cf2f8b8c84ed4f5985cfb3af0e5f199af5a2aa5322acc88904056ab892", @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x30}, @generic="97c70f5c", @typed={0x8, 0xf6, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid}]}, @generic="24e1658adbe78104668b429da575896294556870d123e36e27c6be94b3930122dc6e978230f6ca4c12eeea5ab0648bd12ea0e4ce687f3fdc408e23f0d49f41e8c84bb5268f5ff5090d4f66a8350af54791e4515e57e2c916900fc24c1cdc3eef6c47832aa82b096a7f3b447016d3f60446f82c5c8d5f2d53e4e8d4c9ca77262503050f1c9cec0fa076d0a700b74757b87469e6847d14bced5f3198d88b108560dcb6fc97586061a1ceed3be034acb68ab754966fd0f350cbe1c5d37f293cafe4d024d345670cef3c856fb5400085d96fae7d2453b171", @generic="9620fb72a6b64aaca55bc799be61dcb087dbd6", @nested={0x4, 0xf}]}, 0x530}, {&(0x7f0000002a00)={0x132c, 0x1d, 0x2, 0x70bd27, 0x25dfdbfb, "", [@nested={0x10ea, 0x3f, 0x0, 0x1, [@generic="195834944227ce3acb4014c251ddc0f85631846b5358e4dc9a5f6a710f6f77d9bf06491cdbcb12880e9485a2faed7483947f1890aef9a3e11d26c0cbc564151a1d90069c3fe1ed292f4d32576a12cf02b4149ca315e2305d65d64d6de1a90203cfd6ea0d030a6cba9bd71b4e49229ec1f6c4160f9722369a0dc7b42d476e440dde", @typed={0x8, 0x10e, 0x0, 0x0, @uid}, @generic="d4d35ef5bc0db630dce2a9463f698cd5688568ea3af8a0fe2ceb3b26fb29e7935ec78b86792ed933883ffc9984cb823d69a1bde9f1d8a898a3ad0445105de6c2451a466d6fb299e197cd163df41a250a6099937fc6ad93daf9ecc068340444e654c876d7b0b4a19d36fd95b2a26cd43650de4b5a74a7c7a5607fcd1046509f344c4e6055a9bbd5d0f75f2e083aa964ed8fa0fe254609d06124d8a446e636092fc6c2ab91f50ddb2076c896d48630c193a2388d42b019c5251c731b0c38f514eea54ee1732b496a51d0c8922b5a6b33079a48f9ec65696f027019e7a73af09e11fa1c3ed1c1eb2fe360c0e649a87db77d73fbd1dddef48796fa2ed9a67e3b1e1da44f4e73451c2f7686c681b99a4a831fc3674f1acf58d4c997e5c174ad097da3a4358590b87b7c8373e8e7de0a92d02e93cb720922fb30843adb2c696ce0c0078b9006704a28d17490df7931fb36172b2d2212f41cae8e4b35695fd371d1865362c36bef08c560ad67ad8ea277319ce14e57fbf7b709913c9734435cf69aa84299f8e18fe72e71a5a76564a8d82420f3a38f022ba3c60f41e19807715bf23d70f7fb8ed50cbfddb674c3700076996a1c2149d61dfd38eff22aff1c58ea7d29ab8eb2d6a4c3d2b1c96ddbc47a549b21f6fac7514886a2e244306bda3b4928e3d97a0000c2ebb34014e2a9354bf35ff3a1b5e2f99bcf93891a079c8c305fc6f2b5a2e2d5a39892ca9f2a0517d8e348861df0bd69091bc874559e7a2b9907bbfbfd6328a70bd688a72c20d65a7fd432d4bda0ccaee1eb4ceff96636b1b19f6c857d6e8f40fdf670d79a7f49368fd9aad4dde0edc9fd94f618f08d2738c5595bbbebfe8b17ce02d2de6a2edfb09e3dfda6eed8caaea5e8a8c48c98a2d489cb5ec4faa9dade7526913c1a7b93cec72779d811e457e2d36890c61452abaa7405bfe7660de9fd72dd3ca7a70ef7d6fb8b80fc9e098b7b54829f99d6a3342ba405bb80bfe4972186d19fd526f0bfb1bec4beb3798ad90d4b4c8b7811483aec0acbf4cf6d455b1cfa045c73daa45e7415e5ae167279786425cbbc1564ed87ef1c82fd8eb9646173eea8abb300e39e711360205994ed302585bc5db7e612461250cef8372c6bd1309453861a451e30a586053bc395465d140d75468a1745087e94707244cfdade9d70cc1a2f4fb94c7f592f56e9f879406c1ff17e07d2c958efb5caf8c7792d2f600e1ac46c9eb60ee0d20fdd7a7f534ea5e727d79c7550f0535da8baa04b245e5b6620642b37758080df1b9c8d58c61be30170561577f5a8fd3ba8e88064a2eac82cfb3a0457f4cbdca6aa1cea158820de19206b88dd106dcb47cc12d35e61757a841ae24d018431d7a2d5a29dce16e08ed89063db6d5b331ba8596c014d726b69f579bd301f77ace3c52fece772fc4886c0c0139d5472abd0cf07231e0e6e074e70e5a87389275d8766b6ec19b0023a7e7127989dddfffff65b908acbe847c4d5e8576e2725c2d6c166ebefee31f4bc1ab73736ca4ab0f86cefaee8143dd3252000c1b55a6cc07b5372f46314fab1d37a6d03563537ec467dde20210b8cdb4fe305b1bc1e32d7e031d3fe5115b73696387cd78f1a0b19e1a8e88e0adadea7fa597c6fce03bd4caa6f27907c784118d33f47b2105d926d2631204ba11afce70719da7248f195c02c37d6e57dc561516be85d22142a927e2d9136016608e8a0a0eee1ecfed6b7bcc10c08457301ac290f1a632cde6fe5a358bba2019a9c46a8f556b56acc7d570129fa4321317ee5a5543fd28540d283ca2121e9841753f55cf9ba63fc68baac4c49a65c5004c12799ea5cd1107e7f16be53028d2136abfe4724c14f11fdbf8e9cb0beba1a440355c2540f2173cf807060afe18d5bbb5d348c11b71e13ab106ea9250e519dc45a8eb6374aebbdd61947f4b097d56f821d785b25c22319b65618d55d59deff7ab5f9bd00d4a06269a33078e930ffcb357e8089672b8c02f2d4383bbe68ae23529f203cbc08cec2fae548c5cb3fe09ad44b5220b6430c61e26017dfed7f6176349a933c54270b58791abaeeb0e202ceadf6f290b27a02218fb2e1a15e00a0137ce55b36468715b8887427a7101fb4c2e6bf260b85763bc75815e4662437d63f8ef263628cf7c60b804372fffe64a32ba29520d06d813a0d8a97c74ea7c8cb056f2cdb153a13dace8545cb1a1891736f2463229d146e76b45d7f04489501d82fbe04c2dfd6fc51b2ec6b1ac1b85817271b9176c12b4a88dfa4eff71c43751179432e5a7c12d17732b1ff83197af41674bbd3c99604a83094305f41a57c164ec1893220b3da97eabcb7935518cbb8e968ca63fdbd93e92c0e8a8f660739501cefba66723da31e62c2cd3d8531a7ad1696388f73465cbcc9841d67a6c4193d3344aecefd269b24466297194c5d5ccca08282c175e21f59d8c776abf19b1f83e054e3652d88c92e52913b9accc349468eaaee5a8d5690c3f7e4bb46c1d11738af313a28d7f94acc284c25eb830b98448278598ada6a7b66690efd15049f36d54a20f103e78cb9caa34f381c15f4e0dec9320e57cd7c041cffd9a53c028d2620d7e770d08c32b8779b552342235c0338f673cc05adb8358b661d2f436c43bcfc7a49a50136ca01fecfc8b227ba193e2cf928cc388a543775cde0ed5d4cccc0d6451a36e36cb3f2d5b8af13471d95a80938846d887a44742aa8e87b453006d786d22e6c202552ccb45cfc8efaef15e9c6abd74ceef383f5c2320ed23ce7aa3ff94bdbf1c645ab91477aa09e655b575ceeacb661272a22e9be3dfdb9afefa9b73acb1a387b7f76b7bfbc426ba724dbcc1f4e16d264ee94b45531446674d68a2bf76ae04a0f974a5e5f86f1ca040b8c11f8d2847c8d488d3c562e0aad3dca718bf9bab712ecc62f9286bee229b703b58139a3f717e4949907bbec330119bd73f480f24518698e140419d4884ecce413addbe2bda696db11a8f43ff36b08a94794da7785652f6739affc97e761a2436ba75f281cdfc6d2a44b3b0b5a5f797662e10a326955a84ec56712445326b877645e3346697d59808022698a152f1790b38a8038f7882f675141c5dc95539507e85fefadedbfe2e2519c549400eb8517338afa40ef05a76b05546df4e40e5556619f556d06afbb5c4a53c1dbab00df0ad76daab036e981da04b9d47bf5900ec8bb61a1a3967e3538125fe4ce47d1d1af5e2be80e087c45a292b31717fe81eca57e38428ea270bd55f30728e3a35870c825c9453c81527ab4e3b183b9c524f99a273e2b7b3d7988cfe6886a4e358e1a532338618d875c446d5dc7594d28cecedc07ba832be0a0a6c01fd7fbfd90cf0f9efc4b5d0c1de57e8f26ded14064deee13418b1752d010409ae39f180b94fc66417940f180191fc6528b6fef8a4476756e5640aa3c40c1222552e167ebea9028469e85351bb63a0a8b38f8bdbead58527493eb81f304fc36e89cdca8e30cd8bfd8c3e4d93853eff6ade34f6c1d4628a69e556084230d2790fba27b224de1415a221638e46fa4e91b6e4f200b70eff21d75b2e0a62e1ebe64c64e2e61bcf63ac1159f4134cf0fb7a38704c7bce15c41c1e69925d7c05bf770c89754e625ea3b6896e477831e8068b568e63b81c88108b3c7241376fb9da87c9c9ea2ef80727514a352620946b4b8f8ff87a645adb9ddb3f61f42877760ec4bd921b2f99eb49ca55908ff256475ef37f01e7e5dedc894db9cb0f41de189ab2e0ccc7d0cdbeda1a9609e3a46cf65bdd76f2c695efb344cff1cc3b3e4e998feb46059475b238c5d34e863d633f054aa5036296bb5f03ab6743bf37a68f2c14d161b342d37b029b60199096e6207593464709798748f44af1b2a80230df51719c19af91f5bc67cc09e08805f93ed78b5755563b5c076739ab9bf804a7e4dedfd6a9c90b8aa219f0782d10033199db74d25b507130bf60f8b42a9748eef228ef299f424595bbdcde258f5719365c6c50263761d0548ca333f91ca3639e58acd3bc500bba8172cc861138b35cfc4ace51f828155721de511813dcf05f305a0c4eaf00a5e6c748c7f8a8d1121085190f4a58fdd8c38c9f81fa04123914a8dc7d433452bf746620046385d0065f5309e34035f11be4f37d100e73cd09ecab68348ee8dbdf897b8948a4fa0235424406b46dd6b1127b39583f25b3a3ca3e6011490fa6a6f0d256945bf4a557086518685d83fdd3cf9056e9c8f18c9422521c0331799ce4710b0a3098babf1956a72a32615de6b4c0ae9aa9f3df12ff4492a9cd3af9adac736cba0aa069ce05844b5653587f788a3954e765879f17c16bc82261e9aed36c291b0f618cfce64058e4dc74211859f7d449076a2e57381ae55f6b672ee56fe06f140522a0b8e62a7021aa98974e9a91420c718071fe6d6c56bdcfde26b49e6d1afb72e1320d296dd1139c215576771f5d11a4dd1ce40712636f9c8ad88656e2732725db3338837259b15690d308a9b2c67780fe309fa008214dcf0ce46b19ffdb3add0a947148a8e32a8106a3b41ed15643e4471723d45bf66dc9ca15891b68cc32151491f97b4423bc84b7604c8eb89ee6b1231da9ae60565a4321030064ca9ba06e15c3e3878687d6bf026f1ee09fbb16fabd7568bc7b4494f5b3c24ca3ec593650c37fd72da92cb7c1af17effd10433ecbbdb617bd8d4d2aca827829e12bdd0ccfea00e7b8b85841f898052fe5ecd5a063f3bc8ebf9e4289b43df5bd220999da057f363837b010ee8e42f2764ab61bbb2b6c6c4c54de3f281689686de853acccae8b80ea1b7d6f9857ab43091feeee4bbae3d9f627c0a6c005b5007f15c964e2dd71ab42736e3ba9bc08eafebdb8c2c7b3c90f3c4536d5f819f3648f58a57d47ea5d7451c853551d888d5eec932f56fd192e12a84e38f813848d4542c4c4c81d8cac3fc004e67c7b76d9146e76f42c58d1970ea61bb458dc8901fa949f4e2d0506c586a379b4cfa9542661390180af9f1d8e1437b09173233ef39157eac029269033626f6af1cd989baa11990db667828e9fe9238ae7e79cc90abece96edf299d327b25b7ec5e25593281675fda0cc23e688eb8d8beb0a64553a01921466e7dfe0fcbe7b9816457ccc259bec71f2a82474095e59278c52caabc93ca022be22d5c5dbc62a51d929957b6f08d0f821a88432262aa8ab874581fa314a26653909edbd37e0c03670b5834426dd6a76ea126c4d0bd8d36d58bd9710eaee4aef1cdcc7fa5481e566b5687080b141ff20aab1fec85c4bd1be2f0124fbbf41ed49be1ad9ee4b2b4c162f4c9444da03cc6211e66ceaa98046e2785609064f5f6b50ea1b522414cf92187565bf6d6c0aa45755b5bdf3475526abaaf28eb648917b38dcbb7ca9b1ff6ce0a3bbf439d2b7a02931040d7db76736cb515f9752a1333cf1c9f87c9720996467ae947c4439473d7725d4a3ccf0d160bbc510258696287b3099413a49aa7c731403b1c976b448f231cf7de29d66557ae6ecab3b208e723fc8cb28f8f7e3d07c0254342479b3b929b065fcfe837bf373a7af03f427f398ea0cc52e787e431dd35103c93e29ff5130134ae96dd179b6906e890a69c139e3ff6410c417db833410938e374bea036129010ac7f8245690d6c395ed7ef9f92f2a52dd77608a4946575f2db758c03eb861dc2809d5cdc841430cccff525955592995c6f4b3ee85fc03a51e121211f14e0d1413b1cf1b335104c8ee7d8fb2d1fb6359d49da00b67992d7a00b88b1c052534aa9fd9d4aacc6a4da5e8c730818f257c74e14", @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x8001}, @generic="8c08b2d7e4edde67b943adb7953944b157b6e645bf7cf39fbd0386eb86de22d048736e0cd081c23b25af61e25ffd5c06cb47546e542277ff6304db788d1175b53e9e10d2f28724017a30fc01645c762399"]}, @nested={0x230, 0x52, 0x0, 0x1, [@generic="2482faf250cfbd3583c95b855c07c0e3bc2f00e3c5dd4b35c4a59eb8adda59498bc3df031a9bf6bef0a5937e4e8b4cc5e2f9e446bfbe19baace89fabd3ae6c6bbc1eaebee3f477b29fbb4d7a509afd7ae4f9f9cf7728d33cc44f4190779eb7fa73f6b7a89cf37fefc52d843e4ce5cc8bdc0fc564b8557c98472188ea593dd0f8fb8f90a9e3ab122766bc99b8d681c7c2bb2caeaabedf09d97e12a45db4055760d2da3ebecc7dd34962f7", @generic="2a21a2f2dbc5608b3828e80043187042a9f7b1b981b7c3f8bf7e0de773298c34c928c3471eb8381fd60e0a25259420a57a8bf6261dbb1cb5ef0feb91905c93b5da4ca5e3b1b49be852e4df", @generic, @nested={0xb6, 0x56, 0x0, 0x1, [@generic="cd6bde44163a06a733a11c5c40bcc2383d1be5a9806ac6e27971a49b5728a3fb5be9a0720f30eff31f9743b4d55aa1c80c23104dc8a184accd77c99300f6ae0df67e88ece7e0d4947296ac5076fe23a6af7687a5c71b022c79d7300c7be4e5343db41c8f1f9e17dc93120388b05e3910edd56d2924eef0d7ccd2d785f78353240f992ca6473f8625d56fe07e223f65f3cf1713368ab0324f6961cd8353f1e952808a7ac0f9b651fe6cd791c34d7d506a32ce"]}, @generic="1efd73cf2d7c26a91be17cc4d89b31c0b7e32937803e251553314a1ed760d92fc4ee9527cb9ccdb19289f9c81104de70ee55d867b9cbc774b632587850c273afffd9c1dce753290907ee6c3f643c8066b5506cdb0972e0c9d1704ecaf27f1a4afa6abf94658e83952a8b7d34da426be6b5175bd908b92a0c828284972efddb"]}]}, 0x132c}, {&(0x7f0000001f00)={0x15c, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@generic="e7ff88988e3353c31522e12ce7a4fe617fa14bcfd730806b75cd210a7cac2c0c08b60c374b83564b65863c58d369121bc4bd7f8288f1949eebce4e812457f09f85635467665e975ec56ccc0e7b6832749cf8b2d44a9aa2fdc1332cf7ddce49d7034eed2b12dc34514edb830c00adc3b51ef2655119cef211b052d2bf1a5decfd11ac296ce4053f9e41263f9c76e2891b3e1535c76ece6ec7a73dffca48842e5a7d2d9b0fb4a88688", @generic="0c44ef710ce2c116d6d1613e0d7b01ec4f3d80cd793ae9f365e294d37e1e8fff2c483ec5da7a058f7602f13e9857c5dbf42ae988503e3e5e2f2bfcea6ec9b27806129153d5c44c65163bee15e831f4cbf363da977f68552d463cce674461b9b7a3fd810cd980e32ca74fc3d19d9d15d95bbf", @typed={0x8, 0xc1, 0x0, 0x0, @pid}, @typed={0x8, 0xca, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r6}, @nested={0x18, 0x13d, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @pid}, @typed={0x4, 0xa1}, @typed={0x5, 0xc9, 0x0, 0x0, @str='\x00'}]}]}, 0x15c}], 0x5, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r4, r3, r2, 0xffffffffffffffff, r0, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, r12}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0xa8, 0xc040080}, 0x200400c1) write(r4, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000d00000303ff", 0x24) r14 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4174}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe9}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r15, @ANYBLOB="f07f862b115e31041cd3bfb70b26baeafdcdb172b6f1a580de6eff0300000000000054ec89684f19760a20c51dbfc7d1cbce681b631ee2b04d27627f9ba258a738e26a30110e8f378e106f46b77003b6f8c0b690e2b9c51cc08c80d5f3038a196457a4b560dfd8033d464b4a8fe0fa88fe384e1a881d0985dbe0d06db63160fc8f10e2e898700dc02e33f98c7df1274714d7d7dfa595", @ANYRES32=r16], 0x90}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x1) 2.101300435s ago: executing program 4 (id=2105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x24000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r7 = socket$pppoe(0x18, 0x1, 0x0) listen(r7, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000001280)={0x3514, 0xa7, 0x2, 0x7, 0xa8, 0x14, 0x7, "c9844e58f7b40777525421fd1d3a63ff63340ba6", "5073bfb8233b25947961c9cfc3d13f048f1b6807"}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r8, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@timestamp={0x5, 0xa}]}}, {"3fb43022587c8724bbcf57558f5fd0a1daaa7f32715e4bb77c72dbaa84e5a4e98e8926efec4927a5e3169325"}}}}}, 0x6e) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r10, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f00000000c0)=0xb, 0xffffffffffffffef) getpeername$llc(r3, 0x0, 0x0) 1.518280685s ago: executing program 1 (id=2228): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000002180)) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4883, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000700)='hybla\x00', 0x6) sendmmsg$inet(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="a8223402c054c9328cd8d4b2f072a85cc388253a646380a06a081ac26952b85c", 0x20}, {&(0x7f00000002c0)="f8731e9370f7438297b43ca72fd2b0698943e6688f22dad557a473bcf3b75eafcf6cefb8d77e9d4d46e6d5d5b7ffa713a50254f83e4315e0c9564ddbdff1c3052c843b6e8096aa7ce60f354cc71dd8", 0x4f}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000) (async) sendmmsg$inet(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="a8223402c054c9328cd8d4b2f072a85cc388253a646380a06a081ac26952b85c", 0x20}, {&(0x7f00000002c0)="f8731e9370f7438297b43ca72fd2b0698943e6688f22dad557a473bcf3b75eafcf6cefb8d77e9d4d46e6d5d5b7ffa713a50254f83e4315e0c9564ddbdff1c3052c843b6e8096aa7ce60f354cc71dd8", 0x4f}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000) close(r1) 1.401672127s ago: executing program 0 (id=2229): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.state\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r3, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x6, 0x4}, {0x9, 0xe, 0xc3, 0x2}, {0x3de3, 0x30, 0x5, 0x3}, {0x4, 0x8, 0x10, 0x9}, {0x3, 0xc, 0x3, 0x8001}]}, 0x10) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40880}, 0xc041) (rerun: 32) 1.392522348s ago: executing program 3 (id=2230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="97a92d85b7", 0x5}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x2c0, 0xffffff80, 0x178, 0x0, 0x178, 0x2c0, 0x258, 0x230, 0x2c0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x100, 0x160, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x0, 0x0, 0x4000000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x4e24, 0x4e21, 0x4e22, 0x4e23, 0x6, 0x4, 0xe91e, 0x3, 0x9}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) close(r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r3, 0x603}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 1.26968461s ago: executing program 0 (id=2231): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x6b}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.131269607s ago: executing program 3 (id=2232): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x10}}, 0x80) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x1, @multicast}, 0x2b) 1.117346823s ago: executing program 0 (id=2233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1b, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0xd0) 181.24417ms ago: executing program 0 (id=2234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa0, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "330d4aed4b8b77e9e800794677c7d6230982bf7cd3e66e6a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1bd9383b2c640be15329a5c4b86d2534f954808353b96bc3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43fce345455554d7b7ad02645fb13e70ee95ad1ebc6c00c3"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "74b73e42e7463e7faf4712e5b001ba4c3dd3a58a2ed5eaf5"}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000d88a00000000000000000061107f00000000009500000000000000af403adf18e76a1500170db5cc8565"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000ff1200", @ANYRES16=r2, @ANYBLOB="050000000000fedbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c0023800600160013000000"], 0x28}}, 0x0) 119.169387ms ago: executing program 1 (id=2235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001840)=""/4108, 0x100c}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000b40)=""/127, 0x7f}], 0x9}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x5f42, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) shutdown(r3, 0x1) 118.490383ms ago: executing program 3 (id=2236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="38010000180013070000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) getsockopt(r4, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x32018c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) 50.425713ms ago: executing program 0 (id=2237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x4c844) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="180050800400050008000880ffffffff050002"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffff000, 0x64}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008800) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 1 (id=2238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="ab3156f1", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) r7 = gettid() (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a0000001400078008001240000000000500150080"], 0x64}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) kernel console output (not intermixed with test programs): face with an up link [ 216.905632][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.932632][T10827] team0: Port device team_slave_0 added [ 216.942652][T10827] team0: Port device team_slave_1 added [ 216.971660][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.002153][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.009239][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.035632][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.061421][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.078202][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.085197][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.112459][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.144083][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.173770][T10827] hsr_slave_0: entered promiscuous mode [ 217.179987][T10827] hsr_slave_1: entered promiscuous mode [ 217.186078][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.193707][T10827] Cannot create hsr debugfs directory [ 217.283562][ T11] bridge_slave_1: left allmulticast mode [ 217.289237][ T11] bridge_slave_1: left promiscuous mode [ 217.298621][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.307186][ T11] bridge_slave_0: left allmulticast mode [ 217.313329][ T11] bridge_slave_0: left promiscuous mode [ 217.319041][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.458994][ T4533] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.614035][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.624473][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.637449][ T11] bond0 (unregistering): Released all slaves [ 218.037113][ T11] hsr_slave_0: left promiscuous mode [ 218.044755][ T11] hsr_slave_1: left promiscuous mode [ 218.050418][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.057955][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.066211][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.078395][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.100073][ T11] veth1_macvtap: left promiscuous mode [ 218.106414][ T11] veth0_macvtap: left promiscuous mode [ 218.111946][ T11] veth1_vlan: left promiscuous mode [ 218.117556][ T11] veth0_vlan: left promiscuous mode [ 218.452250][ T11] team0 (unregistering): Port device team_slave_1 removed [ 218.488029][ T11] team0 (unregistering): Port device team_slave_0 removed [ 218.652905][ T5840] Bluetooth: hci2: command tx timeout [ 218.849801][T10827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.859211][T10827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.869522][T10827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.879655][T10827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.985692][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.002027][T10827] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.017812][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.024933][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.049554][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.056666][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.201601][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.236880][T10827] veth0_vlan: entered promiscuous mode [ 219.250001][T10827] veth1_vlan: entered promiscuous mode [ 219.270096][T10827] veth0_macvtap: entered promiscuous mode [ 219.279269][T10827] veth1_macvtap: entered promiscuous mode [ 219.291511][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.302310][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.314285][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.329284][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.340289][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.351194][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.362316][T10827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.371183][T10827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.380026][T10827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.389215][T10827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.444615][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.452468][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.473313][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.484167][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.013367][ T6743] block nbd2: shutting down sockets [ 220.018607][ T6743] blk_print_req_error: 64 callbacks suppressed [ 220.018615][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.034354][ T6743] buffer_io_error: 64 callbacks suppressed [ 220.034364][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.049875][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.059023][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.066935][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.076132][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.084066][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.093670][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.101520][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.110693][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.119045][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.128174][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.136368][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.145666][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.153727][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.162868][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.170621][ T6743] ldm_validate_partition_table(): Disk read failed. [ 220.177723][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.186850][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.194952][ T6743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.204083][ T6743] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.211957][ T6743] Dev nbd2: unable to read RDB block 0 [ 220.218488][ T6743] nbd2: unable to read partition table [ 220.226757][ T6743] ldm_validate_partition_table(): Disk read failed. [ 220.233941][ T6743] Dev nbd2: unable to read RDB block 0 [ 220.239653][ T6743] nbd2: unable to read partition table [ 220.247580][ T6743] udevd[6743]: failed to send result of seq 13254 to main daemon: Connection refused [ 221.558101][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.682534][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.692060][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.700351][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.708586][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.717101][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.727095][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.753457][T10841] vcan0 speed is unknown, defaulting to 1000 [ 222.815560][T10841] xfrm0 speed is unknown, defaulting to 1000 [ 222.896995][T10841] chnl_net:caif_netlink_parms(): no params data found [ 222.954770][T10841] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.963384][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.970507][T10841] bridge_slave_0: entered allmulticast mode [ 222.977517][T10841] bridge_slave_0: entered promiscuous mode [ 222.986163][T10841] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.993809][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.000941][T10841] bridge_slave_1: entered allmulticast mode [ 223.008708][T10841] bridge_slave_1: entered promiscuous mode [ 223.030361][T10841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.041129][T10841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.070556][T10841] team0: Port device team_slave_0 added [ 223.077901][T10841] team0: Port device team_slave_1 added [ 223.098256][T10841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.105329][T10841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.136402][T10841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.148187][T10841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.155565][T10841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.181729][T10841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.227898][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.258686][T10841] hsr_slave_0: entered promiscuous mode [ 223.264934][T10841] hsr_slave_1: entered promiscuous mode [ 223.270776][T10841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.279001][T10841] Cannot create hsr debugfs directory [ 223.315651][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.369314][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.454618][ T35] bridge_slave_1: left allmulticast mode [ 223.460288][ T35] bridge_slave_1: left promiscuous mode [ 223.467344][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.480036][ T35] bridge_slave_0: left allmulticast mode [ 223.485965][ T35] bridge_slave_0: left promiscuous mode [ 223.492086][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.760265][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.770463][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.780725][ T35] bond0 (unregistering): Released all slaves [ 224.091595][ T35] hsr_slave_0: left promiscuous mode [ 224.104780][ T35] hsr_slave_1: left promiscuous mode [ 224.119053][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.126621][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.134446][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.141835][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.160276][ T35] veth1_macvtap: left promiscuous mode [ 224.166007][ T35] veth0_macvtap: left promiscuous mode [ 224.171619][ T35] veth1_vlan: left promiscuous mode [ 224.177146][ T35] veth0_vlan: left promiscuous mode [ 224.516623][ T35] team0 (unregistering): Port device team_slave_1 removed [ 224.551917][ T35] team0 (unregistering): Port device team_slave_0 removed [ 224.817040][ T5840] Bluetooth: hci2: command tx timeout [ 224.951166][T10841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.966774][T10841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.976782][T10841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.986808][T10841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.081280][T10841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.111149][T10841] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.131015][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.138096][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.160403][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.167485][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.291089][T10841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.336033][T10841] veth0_vlan: entered promiscuous mode [ 225.346010][T10841] veth1_vlan: entered promiscuous mode [ 225.370091][T10841] veth0_macvtap: entered promiscuous mode [ 225.379847][T10841] veth1_macvtap: entered promiscuous mode [ 225.392075][T10841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.405070][T10841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.416987][T10841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.428204][T10841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.439259][T10841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.449921][T10841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.462544][T10841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.471480][T10841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.480331][T10841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.489173][T10841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.540749][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.548741][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.570365][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.578517][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.384712][T10862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1338'. [ 227.402178][T10864] netlink: 'syz.3.1339': attribute type 11 has an invalid length. [ 227.610466][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.871502][T10888] netlink: 'syz.1.1345': attribute type 49 has an invalid length. [ 228.881420][T10884] syzkaller0: entered promiscuous mode [ 228.891739][T10884] syzkaller0: entered allmulticast mode [ 229.049398][T10900] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1348'. [ 229.165442][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.180688][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.194964][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.210643][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.222171][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.237225][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.599930][T10900] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 230.736298][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.814040][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 230.848999][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.861687][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1352'. [ 230.880964][T10924] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 230.898445][T10902] vcan0 speed is unknown, defaulting to 1000 [ 230.904971][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 231.051683][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.104598][T10931] gre1: entered promiscuous mode [ 231.112907][T10931] gre1: entered allmulticast mode [ 231.143190][T10902] xfrm0 speed is unknown, defaulting to 1000 [ 231.292818][ T5840] Bluetooth: hci2: command tx timeout [ 231.324058][ T35] bridge_slave_1: left allmulticast mode [ 231.329738][ T35] bridge_slave_1: left promiscuous mode [ 231.400930][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.473490][ T35] bridge_slave_0: left allmulticast mode [ 231.488424][ T35] bridge_slave_0: left promiscuous mode [ 231.508674][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.786699][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 231.803957][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1369'. [ 232.104447][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.117706][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.127644][ T35] bond0 (unregistering): Released all slaves [ 232.318486][T10997] netlink: 'syz.1.1374': attribute type 10 has an invalid length. [ 232.376712][T11000] netlink: 'syz.1.1374': attribute type 10 has an invalid length. [ 232.422261][T10997] team0: Device hsr_slave_0 failed to register rx_handler [ 232.456102][T11000] team0: Device hsr_slave_0 failed to register rx_handler [ 232.509493][T11005] xt_hashlimit: overflow, rate too high: 0 [ 232.707764][T10902] chnl_net:caif_netlink_parms(): no params data found [ 232.925723][ T35] hsr_slave_0: left promiscuous mode [ 232.931872][ T35] hsr_slave_1: left promiscuous mode [ 232.938466][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.946651][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.956168][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.965168][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.029506][ T35] veth1_macvtap: left promiscuous mode [ 233.040028][ T35] veth0_macvtap: left promiscuous mode [ 233.046997][ T35] veth1_vlan: left promiscuous mode [ 233.052450][ T35] veth0_vlan: left promiscuous mode [ 233.233471][T11042] netlink: 'syz.0.1386': attribute type 16 has an invalid length. [ 233.241351][T11042] netlink: 'syz.0.1386': attribute type 3 has an invalid length. [ 233.261506][T11042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1386'. [ 233.382975][ T5840] Bluetooth: hci2: command tx timeout [ 233.534004][T11048] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 233.590046][ T35] team0 (unregistering): Port device team_slave_1 removed [ 233.630959][ T35] team0 (unregistering): Port device team_slave_0 removed [ 234.091457][T10902] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.101156][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.117113][T10902] bridge_slave_0: entered allmulticast mode [ 234.124482][T10902] bridge_slave_0: entered promiscuous mode [ 234.132629][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.140937][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.148724][T10902] bridge_slave_1: entered allmulticast mode [ 234.156565][T10902] bridge_slave_1: entered promiscuous mode [ 234.523301][T11068] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 234.550127][T11067] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 234.593100][T11067] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 234.608492][T11068] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 234.620931][T10902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.656647][T10902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.735177][T10902] team0: Port device team_slave_0 added [ 234.741407][T11072] tipc: Started in network mode [ 234.751117][T11072] tipc: Node identity ac1414aa, cluster identity 4711 [ 234.761805][T11072] tipc: Enabled bearer , priority 10 [ 234.784884][T10902] team0: Port device team_slave_1 added [ 234.870027][T10902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.886054][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.924085][T10902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.959196][T10902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.966462][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.996369][T10902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.019990][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 235.112506][T10902] hsr_slave_0: entered promiscuous mode [ 235.133588][T10902] hsr_slave_1: entered promiscuous mode [ 235.139759][T10902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.152846][T10902] Cannot create hsr debugfs directory [ 235.310205][T11114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 235.310597][T11113] netlink: 'syz.0.1405': attribute type 1 has an invalid length. [ 235.319606][T11114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 235.366363][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 235.390557][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 235.457785][ T5840] Bluetooth: hci2: command tx timeout [ 235.689126][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1413'. [ 235.701863][T11135] netlink: 'syz.3.1413': attribute type 15 has an invalid length. [ 235.718228][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1413'. [ 235.822805][T11145] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1415'. [ 235.849057][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1411'. [ 235.849905][T11145] ip6t_srh: unknown srh match flags 4001 [ 235.872952][ T5923] tipc: Node number set to 2886997162 [ 235.984217][ T81] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.041277][T10902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.076179][T10902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.130941][T10902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.145713][T10902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.276746][T10902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.299245][T11171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.307603][T10902] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.321390][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.328588][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.350678][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.357777][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.432454][T10902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.465412][T10902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.529715][T11175] vcan0 speed is unknown, defaulting to 1000 [ 236.795652][T10902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.917384][T10902] veth0_vlan: entered promiscuous mode [ 236.957167][T10902] veth1_vlan: entered promiscuous mode [ 237.011203][T11197] erspan0: entered promiscuous mode [ 237.025535][T11197] macvtap1: entered promiscuous mode [ 237.035576][T11197] macvtap1: entered allmulticast mode [ 237.052164][T11197] erspan0: entered allmulticast mode [ 237.095056][T10902] veth0_macvtap: entered promiscuous mode [ 237.102005][T11175] xfrm0 speed is unknown, defaulting to 1000 [ 237.111678][T10902] veth1_macvtap: entered promiscuous mode [ 237.137355][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.165404][ T35] tipc: Subscription rejected, illegal request [ 237.170885][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.213995][T10902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.381240][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.402841][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.421042][T10902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.459333][T10902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.504667][T10902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.523283][T10902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.533449][ T5840] Bluetooth: hci2: command tx timeout [ 237.540321][T11223] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 237.578785][T10902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.963923][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.971805][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.117042][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.143603][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.265859][T11252] geneve2: entered promiscuous mode [ 238.272786][T11252] geneve2: entered allmulticast mode [ 238.281704][T11256] IPVS: set_ctl: invalid protocol: 71 255.255.255.255:20000 [ 238.302393][T11256] __nla_validate_parse: 9 callbacks suppressed [ 238.302408][T11256] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1445'. [ 238.370525][T11261] IPVS: set_ctl: invalid protocol: 71 255.255.255.255:20000 [ 238.491030][T11256] 0·: renamed from hsr0 [ 238.500584][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 238.519208][T11256] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.543136][T11256] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.570001][T11256] 0·: entered promiscuous mode [ 238.590974][T11256] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 238.646807][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 238.663868][T11276] bond0: option mode: unable to set because the bond device has slaves [ 238.941380][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 239.299721][T11310] tipc: Invalid UDP bearer configuration [ 239.299765][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 239.487309][T11332] nbd: must specify at least one socket [ 239.590413][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 239.610890][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 239.700696][T11347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1470'. [ 239.710715][T11347] x_tables: ip_tables: ah match: only valid for protocol 51 [ 239.906417][ T3899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.634047][ T3899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.684821][ T3899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.745896][ T3899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.838703][ T3899] bridge_slave_1: left allmulticast mode [ 240.847865][ T3899] bridge_slave_1: left promiscuous mode [ 240.853617][ T3899] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.863821][ T3899] bridge_slave_0: left allmulticast mode [ 240.869471][ T3899] bridge_slave_0: left promiscuous mode [ 240.875561][ T3899] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.161519][ T3899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.213201][ T3899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.264148][ T3899] bond0 (unregistering): Released all slaves [ 241.527831][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.541112][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.551588][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.570130][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.583974][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.591362][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.743820][T11381] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 241.769992][T11374] vcan0 speed is unknown, defaulting to 1000 [ 241.935362][T11390] tipc: Enabling not permitted [ 241.940967][T11390] tipc: Enabling of bearer rejected, failed to enable media [ 241.953977][T11389] netem: change failed [ 242.052110][T11374] xfrm0 speed is unknown, defaulting to 1000 [ 242.200903][T11395] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 242.247270][T11397] netlink: 'syz.0.1485': attribute type 21 has an invalid length. [ 242.266296][T11397] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1485'. [ 242.313064][T11397] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1485'. [ 242.395004][ T3899] hsr_slave_0: left promiscuous mode [ 242.413999][ T3899] hsr_slave_1: left promiscuous mode [ 242.419833][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.446850][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.458866][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 242.469956][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.481578][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.541318][ T3899] veth1_macvtap: left promiscuous mode [ 242.556983][ T3899] veth0_macvtap: left promiscuous mode [ 242.573161][ T3899] veth1_vlan: left promiscuous mode [ 242.578535][ T3899] veth0_vlan: left promiscuous mode [ 243.053700][ T3899] team0 (unregistering): Port device team_slave_1 removed [ 243.092451][ T3899] team0 (unregistering): Port device team_slave_0 removed [ 243.623844][T11374] chnl_net:caif_netlink_parms(): no params data found [ 243.692898][ T5840] Bluetooth: hci2: command tx timeout [ 243.804660][T11449] __nla_validate_parse: 1 callbacks suppressed [ 243.804678][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1498'. [ 243.958457][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.971191][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.018680][T11374] bridge_slave_0: entered allmulticast mode [ 244.026142][T11374] bridge_slave_0: entered promiscuous mode [ 244.067818][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.086526][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.110849][T11374] bridge_slave_1: entered allmulticast mode [ 244.131580][T11374] bridge_slave_1: entered promiscuous mode [ 244.209070][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.224500][T11475] batadv0: entered promiscuous mode [ 244.230361][T11475] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 1280 [ 244.244976][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.270900][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 244.296598][T11475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.312755][T11475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.347611][T11475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.364708][T11475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.391968][T11475] batadv0 (unregistering): left promiscuous mode [ 244.452609][T11374] team0: Port device team_slave_0 added [ 244.461549][T11374] team0: Port device team_slave_1 added [ 244.518955][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.528846][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.567217][T11497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1512'. [ 244.578166][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.579324][T11499] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 244.601536][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 244.608119][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.620097][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.648855][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.686809][T11503] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 244.739604][T11374] hsr_slave_0: entered promiscuous mode [ 244.746117][T11374] hsr_slave_1: entered promiscuous mode [ 244.752190][T11374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.761084][T11374] Cannot create hsr debugfs directory [ 244.971592][T11517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1517'. [ 245.088009][T11529] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1521'. [ 245.134772][T11529] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 245.427671][T11552] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1525'. [ 245.452049][T11547] 8021q: VLANs not supported on ipvlan1 [ 245.498256][T11374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.518472][T11538] xt_CT: No such helper "pptp" [ 245.546495][T11374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.567065][T11558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.622844][T11374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.633535][T11374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.745460][T11563] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1528'. [ 245.773956][ T5840] Bluetooth: hci2: command tx timeout [ 245.870163][T11568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.926427][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.952604][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.968192][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.975344][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.006013][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.013202][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.053429][T11575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1534'. [ 246.063976][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 246.096550][T11575] ipvlan2: entered allmulticast mode [ 246.101990][T11575] veth0_vlan: entered allmulticast mode [ 246.121429][T11575] ipvlan3: entered allmulticast mode [ 246.418317][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.507337][T11374] veth0_vlan: entered promiscuous mode [ 246.520918][T11374] veth1_vlan: entered promiscuous mode [ 246.588889][T11374] veth0_macvtap: entered promiscuous mode [ 246.619773][T11374] veth1_macvtap: entered promiscuous mode [ 246.662850][T10356] IPVS: starting estimator thread 0... [ 246.678189][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.687434][T11606] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 246.735481][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.769934][T11374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.783644][T11611] IPVS: using max 18 ests per chain, 43200 per kthread [ 246.832785][T11374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.857450][T11374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.927374][T11374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.265097][T11630] : renamed from bond0 (while UP) [ 247.384090][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.413168][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.461319][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.471114][T11635] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 247.488710][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.530412][T11638] openvswitch: netlink: Missing key (keys=40, expected=100) [ 247.573558][T11643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 247.796154][T11653] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 248.235068][T11690] vcan0 speed is unknown, defaulting to 1000 [ 248.559151][T11690] xfrm0 speed is unknown, defaulting to 1000 [ 249.338434][ T4533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.453857][ T2905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.124180][ T4533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.164050][ T4533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.224286][ T4533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.305418][ T4533] bridge_slave_1: left allmulticast mode [ 250.311067][ T4533] bridge_slave_1: left promiscuous mode [ 250.317538][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.326421][ T4533] bridge_slave_0: left allmulticast mode [ 250.332052][ T4533] bridge_slave_0: left promiscuous mode [ 250.338211][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.994173][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.013052][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.035599][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.062280][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.070224][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.078670][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.135291][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.165625][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.175575][ T4533] bond0 (unregistering): Released all slaves [ 251.199515][T11740] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 251.288493][T11771] vcan0 speed is unknown, defaulting to 1000 [ 251.397457][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.420084][T11783] __nla_validate_parse: 42 callbacks suppressed [ 251.420100][T11783] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1586'. [ 251.493960][T11777] syz_tun: entered allmulticast mode [ 251.525732][T11771] xfrm0 speed is unknown, defaulting to 1000 [ 251.648949][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 251.700226][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 252.036239][ T4533] hsr_slave_0: left promiscuous mode [ 252.052004][ T4533] hsr_slave_1: left promiscuous mode [ 252.074087][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.081748][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.107830][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.122340][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.170315][ T4533] veth1_macvtap: left promiscuous mode [ 252.181166][ T4533] veth0_macvtap: left promiscuous mode [ 252.188067][ T4533] veth1_vlan: left promiscuous mode [ 252.197702][ T4533] veth0_vlan: left promiscuous mode [ 252.621599][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 252.658068][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 253.059338][T11771] chnl_net:caif_netlink_parms(): no params data found [ 253.134491][ T5840] Bluetooth: hci2: command tx timeout [ 253.219942][T11847] tipc: Enabled bearer , priority 28 [ 253.228987][T11771] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.250643][T11771] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.260024][T11771] bridge_slave_0: entered allmulticast mode [ 253.268580][T11771] bridge_slave_0: entered promiscuous mode [ 253.318374][T11771] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.325679][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.333615][T11771] bridge_slave_1: entered allmulticast mode [ 253.340696][T11771] bridge_slave_1: entered promiscuous mode [ 253.407852][T11771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.448023][T11771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.549366][T11771] team0: Port device team_slave_0 added [ 253.572317][T11771] team0: Port device team_slave_1 added [ 253.639867][T11771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.658329][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.688987][T11771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.710432][T11771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.728468][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.790950][T11771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.949581][T11771] hsr_slave_0: entered promiscuous mode [ 253.957772][T11771] hsr_slave_1: entered promiscuous mode [ 253.964437][T11771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.972308][T11771] Cannot create hsr debugfs directory [ 254.017622][T11898] ax25_connect(): syz.1.1613 uses autobind, please contact jreuter@yaina.de [ 254.045491][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1614'. [ 254.062769][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1614'. [ 254.208581][T11906] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1616'. [ 254.452441][T11771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.475100][T11771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.485093][T11771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.505188][T11771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.675809][T11771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.699770][T11771] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.726899][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.734075][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.759285][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.766431][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.830112][T11771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.850720][T11934] netlink: 'syz.3.1626': attribute type 15 has an invalid length. [ 254.858809][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 255.131299][T11771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.198525][T11771] veth0_vlan: entered promiscuous mode [ 255.213134][ T5840] Bluetooth: hci2: command tx timeout [ 255.217799][T11771] veth1_vlan: entered promiscuous mode [ 255.310088][T11771] veth0_macvtap: entered promiscuous mode [ 255.319639][T11771] veth1_macvtap: entered promiscuous mode [ 255.348065][T11771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.366929][T11771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.416181][T11771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.435786][T11771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.455540][T11771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.467696][T11771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.588540][T11977] IPv6: addrconf: prefix option has invalid lifetime [ 255.675356][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.712090][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.772477][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.794813][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.806685][T11991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1642'. [ 255.815359][T11992] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1640'. [ 255.829658][T11990] lo: entered promiscuous mode [ 255.836676][T11990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.900853][T11995] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1643'. [ 256.594110][T12021] __nla_validate_parse: 1 callbacks suppressed [ 256.594127][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.610348][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.620204][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.630177][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.639647][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.653134][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.662790][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.682889][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.692173][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.703699][T12021] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.954372][T12047] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 257.237954][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.169286][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.476891][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.538239][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.609142][ T12] bridge_slave_1: left allmulticast mode [ 258.616154][ T12] bridge_slave_1: left promiscuous mode [ 258.621816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.630911][ T12] bridge_slave_0: left allmulticast mode [ 258.636724][ T12] bridge_slave_0: left promiscuous mode [ 258.642440][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.731312][T12073] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 258.968641][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.977463][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.988124][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.000254][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.009303][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.016775][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.131147][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.142121][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.152242][ T12] bond0 (unregistering): Released all slaves [ 259.171629][T12075] vcan0 speed is unknown, defaulting to 1000 [ 259.455580][T12082] tipc: Disabling bearer [ 259.610594][T12092] netlink: 'syz.3.1669': attribute type 11 has an invalid length. [ 259.638786][T12075] xfrm0 speed is unknown, defaulting to 1000 [ 259.757126][T12096] sch_fq: defrate 0 ignored. [ 259.771703][T12095] sch_fq: defrate 0 ignored. [ 260.114885][ T12] hsr_slave_0: left promiscuous mode [ 260.121044][ T12] hsr_slave_1: left promiscuous mode [ 260.128316][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.143144][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.179410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.192784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.228580][ T12] veth1_macvtap: left promiscuous mode [ 260.245324][ T12] veth0_macvtap: left promiscuous mode [ 260.250907][ T12] veth1_vlan: left promiscuous mode [ 260.262931][ T12] veth0_vlan: left promiscuous mode [ 260.496460][T12120] xt_nat: multiple ranges no longer supported [ 260.515447][T12120] netlink: 'syz.3.1677': attribute type 9 has an invalid length. [ 260.608070][T12134] xt_CT: No such helper "pptp" [ 260.614061][T12133] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 260.757783][T12144] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 260.865983][ T12] team0 (unregistering): Port device team_slave_1 removed [ 260.902374][ T12] team0 (unregistering): Port device team_slave_0 removed [ 261.058327][ T5841] Bluetooth: hci2: command tx timeout [ 261.536101][T12144] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 261.670179][T12159] __nla_validate_parse: 30 callbacks suppressed [ 261.670199][T12159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1685'. [ 261.709846][T12075] chnl_net:caif_netlink_parms(): no params data found [ 261.728085][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 261.738958][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 261.769502][T12158] netlink: 'syz.4.1686': attribute type 13 has an invalid length. [ 261.992976][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.009449][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.019365][T12075] bridge_slave_0: entered allmulticast mode [ 262.026622][T12075] bridge_slave_0: entered promiscuous mode [ 262.042087][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.059530][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.079827][T12075] bridge_slave_1: entered allmulticast mode [ 262.095675][T12075] bridge_slave_1: entered promiscuous mode [ 262.116287][T12182] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 262.122819][T12182] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 262.210993][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.244995][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.338710][T12075] team0: Port device team_slave_0 added [ 262.384618][T12075] team0: Port device team_slave_1 added [ 262.467634][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.493587][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.544097][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.576789][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.579205][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.590121][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.630309][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.692487][T12213] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 262.710535][T12213] vcan0 speed is unknown, defaulting to 1000 [ 262.721244][T12212] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 262.740210][T12213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.847217][T12075] hsr_slave_0: entered promiscuous mode [ 262.850306][T12219] netlink: 'syz.4.1703': attribute type 2 has an invalid length. [ 262.873529][T12075] hsr_slave_1: entered promiscuous mode [ 262.879651][T12075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.901685][T12075] Cannot create hsr debugfs directory [ 262.928319][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1705'. [ 262.948760][T12226] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 262.983501][T12228] netlink: ct family unspecified [ 262.988490][T12228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.999089][T12226] ipt_REJECT: TCP_RESET invalid for non-tcp [ 263.054532][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'. [ 263.134461][ T5841] Bluetooth: hci2: command tx timeout [ 263.263318][T12244] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 263.602008][T12075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.625968][T12075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.659414][T12075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.688407][T12075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.884588][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.890611][T12291] netlink: 'syz.1.1724': attribute type 39 has an invalid length. [ 263.998307][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.021180][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1727'. [ 264.033436][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.040177][T12300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1727'. [ 264.040523][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.059984][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.067159][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.275988][T12314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1729'. [ 264.303468][T12312] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1729'. [ 264.340321][T12320] dvmrp1: entered allmulticast mode [ 264.528508][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.553958][T12329] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1735'. [ 264.600232][T12075] veth0_vlan: entered promiscuous mode [ 264.624544][T12075] veth1_vlan: entered promiscuous mode [ 264.657636][T12075] veth0_macvtap: entered promiscuous mode [ 264.675223][T12075] veth1_macvtap: entered promiscuous mode [ 264.692196][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.708745][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.732539][T12075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.742598][T12075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.751498][T12075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.762633][T12075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.775084][T12340] netlink: 'syz.3.1739': attribute type 1 has an invalid length. [ 264.879757][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.898062][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.954705][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.964068][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.110316][T12357] No such timeout policy "syz0" [ 265.334233][T12366] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.472782][T12375] netlink: 'syz.3.1753': attribute type 3 has an invalid length. [ 265.493549][T12375] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 265.727746][T12391] Unsupported ieee802154 address type: 0 [ 265.871919][T12403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.019010][T12415] tipc: Started in network mode [ 266.024211][T12415] tipc: Node identity 7af381cc99a5, cluster identity 4711 [ 266.031782][T12415] tipc: Enabled bearer , priority 0 [ 266.049042][T12418] syzkaller0: entered promiscuous mode [ 266.056070][T12418] syzkaller0: entered allmulticast mode [ 266.082268][T12418] tipc: Resetting bearer [ 266.102805][T12418] tipc: Disabling bearer [ 266.399725][T12446] netlink: 'syz.3.1776': attribute type 39 has an invalid length. [ 266.683559][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.011087][ T4533] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.931213][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.942267][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.996074][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.013994][ T81] wlan1: Trigger new scan to find an IBSS to join [ 268.064707][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.156241][ T35] bridge_slave_1: left allmulticast mode [ 268.161894][ T35] bridge_slave_1: left promiscuous mode [ 268.167820][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.176959][ T35] bridge_slave_0: left allmulticast mode [ 268.182609][ T35] bridge_slave_0: left promiscuous mode [ 268.188444][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.597768][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.614865][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.640261][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.674976][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.688770][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.696995][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.710085][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.721616][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.733365][ T35] bond0 (unregistering): Released all slaves [ 268.743334][T12466] netlink: 'syz.4.1785': attribute type 7 has an invalid length. [ 268.751117][T12466] __nla_validate_parse: 14 callbacks suppressed [ 268.751126][T12466] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1785'. [ 268.776705][T12484] netlink: 'syz.3.1786': attribute type 29 has an invalid length. [ 268.883015][T12486] vcan0 speed is unknown, defaulting to 1000 [ 268.918668][T12490] x_tables: duplicate underflow at hook 3 [ 268.981035][T12495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1790'. [ 269.046846][T12486] xfrm0 speed is unknown, defaulting to 1000 [ 269.350652][T12486] chnl_net:caif_netlink_parms(): no params data found [ 269.428805][ T35] hsr_slave_0: left promiscuous mode [ 269.437554][ T35] hsr_slave_1: left promiscuous mode [ 269.443520][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.450970][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.465062][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.476116][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.499847][ T35] veth1_macvtap: left promiscuous mode [ 269.506803][ T35] veth0_macvtap: left promiscuous mode [ 269.512419][ T35] veth1_vlan: left promiscuous mode [ 269.519820][ T35] veth0_vlan: left promiscuous mode [ 269.739216][T12528] sctp: [Deprecated]: syz.0.1797 (pid 12528) Use of int in max_burst socket option deprecated. [ 269.739216][T12528] Use struct sctp_assoc_value instead [ 269.883751][T12530] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 270.002393][ T35] team0 (unregistering): Port device team_slave_1 removed [ 270.051341][ T35] team0 (unregistering): Port device team_slave_0 removed [ 270.484460][T12530] bond7: entered promiscuous mode [ 270.489979][T12530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.519179][T12531] bond8 (unregistering): Released all slaves [ 270.727239][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.736719][ T5841] Bluetooth: hci2: command tx timeout [ 270.750165][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.768869][T12486] bridge_slave_0: entered allmulticast mode [ 270.784597][T12486] bridge_slave_0: entered promiscuous mode [ 270.804613][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1802'. [ 270.851347][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.863667][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.881507][T12486] bridge_slave_1: entered allmulticast mode [ 270.898485][T12486] bridge_slave_1: entered promiscuous mode [ 270.966254][T12558] atomic_op ffff88807af14198 conn xmit_atomic 0000000000000000 [ 270.991488][ T11] wlan1: Trigger new scan to find an IBSS to join [ 271.105875][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.156195][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.262346][T12486] team0: Port device team_slave_0 added [ 271.285833][T12486] team0: Port device team_slave_1 added [ 271.363052][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.382830][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.429107][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 271.479963][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.501685][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.516659][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.559766][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.681448][T12486] hsr_slave_0: entered promiscuous mode [ 271.703778][T12486] hsr_slave_1: entered promiscuous mode [ 271.709861][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.720831][T12486] Cannot create hsr debugfs directory [ 271.732397][T12578] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 271.776220][T12605] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 271.822760][T12605] veth0_macvtap: left promiscuous mode [ 272.005010][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 272.078896][ T5887] IPVS: starting estimator thread 0... [ 272.173143][T12621] IPVS: using max 22 ests per chain, 52800 per kthread [ 272.384172][T12638] xt_time: unknown flags 0x4 [ 272.396973][T12638] Cannot find del_set index 4 as target [ 272.425481][T12638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.435315][T12486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 272.447642][T12486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 272.465787][T12643] C: renamed from team_slave_0 [ 272.473583][T12643] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 272.481447][T12643] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 272.496960][T12486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 272.514902][T12486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.650961][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.689438][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.703507][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.710661][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.748960][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.756121][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.814725][ T5841] Bluetooth: hci2: command tx timeout [ 272.855436][T12664] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1836'. [ 273.072623][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.154937][T12680] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1838'. [ 273.179371][T12486] veth0_vlan: entered promiscuous mode [ 273.203745][T12680] nbd: nbd0 already in use [ 273.279297][T12486] veth1_vlan: entered promiscuous mode [ 273.356678][T12486] veth0_macvtap: entered promiscuous mode [ 273.386995][T12486] veth1_macvtap: entered promiscuous mode [ 273.430020][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.456358][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.494793][T12486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.528777][T12486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.550569][T12486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.572763][T12486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.697277][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 273.707766][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.727500][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.768288][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.798285][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.013253][ T3899] wlan1: Trigger new scan to find an IBSS to join [ 274.116669][T12715] netlink: 'syz.0.1847': attribute type 24 has an invalid length. [ 274.509786][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'. [ 274.585763][T12739] vcan0 speed is unknown, defaulting to 1000 [ 274.808050][T12739] xfrm0 speed is unknown, defaulting to 1000 [ 274.883902][T12750] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 274.956386][ T4533] wlan1: Creating new IBSS network, BSSID fa:b4:3c:bc:1b:1a [ 275.487002][ T2905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.421382][ T2905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.476303][ T2905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.547491][ T2905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.655157][ T2905] bridge_slave_1: left allmulticast mode [ 276.660836][ T2905] bridge_slave_1: left promiscuous mode [ 276.668145][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.676607][ T2905] bridge_slave_0: left allmulticast mode [ 276.682242][ T2905] bridge_slave_0: left promiscuous mode [ 276.688312][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.043384][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.077074][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.117826][ T2905] bond0 (unregistering): Released all slaves [ 277.138713][T12777] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1861'. [ 277.166556][T12770] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 277.410662][T12782] netlink: 'syz.0.1865': attribute type 9 has an invalid length. [ 277.445151][T12782] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1865'. [ 277.582363][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.594153][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.602161][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.610336][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.620706][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.628328][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.747803][T12796] vcan0 speed is unknown, defaulting to 1000 [ 277.788840][ T2905] hsr_slave_0: left promiscuous mode [ 277.812776][ T2905] hsr_slave_1: left promiscuous mode [ 277.818819][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.832812][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.850783][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.865452][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.898431][ T2905] veth1_macvtap: left promiscuous mode [ 277.904166][ T2905] veth0_macvtap: left promiscuous mode [ 277.909773][ T2905] veth1_vlan: left promiscuous mode [ 277.915327][ T2905] veth0_vlan: left promiscuous mode [ 278.327608][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 278.369216][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 278.749488][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 278.789889][T12806] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 278.799801][T12796] xfrm0 speed is unknown, defaulting to 1000 [ 279.120635][T12837] sctp: [Deprecated]: syz.0.1879 (pid 12837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.120635][T12837] Use struct sctp_sack_info instead [ 279.205994][T12842] sctp: [Deprecated]: syz.4.1876 (pid 12842) Use of int in max_burst socket option deprecated. [ 279.205994][T12842] Use struct sctp_assoc_value instead [ 279.275263][T12796] chnl_net:caif_netlink_parms(): no params data found [ 279.283748][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 279.520889][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.537088][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.550487][T12796] bridge_slave_0: entered allmulticast mode [ 279.573835][T12796] bridge_slave_0: entered promiscuous mode [ 279.586373][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.602996][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.613884][T12796] bridge_slave_1: entered allmulticast mode [ 279.620859][T12796] bridge_slave_1: entered promiscuous mode [ 279.648851][T12869] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1885'. [ 279.693055][ T5840] Bluetooth: hci2: command tx timeout [ 279.733376][T12871] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 279.768341][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.780773][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.894903][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 279.910734][T12877] netlink: 'syz.4.1890': attribute type 7 has an invalid length. [ 279.919501][T12879] nbd: nbd0 already in use [ 279.936943][T12796] team0: Port device team_slave_0 added [ 279.964973][T12796] team0: Port device team_slave_1 added [ 280.054089][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'. [ 280.073053][T12887] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1893'. [ 280.119292][T12893] bridge: RTM_NEWNEIGH with invalid ether address [ 280.129925][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.139253][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.197748][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.212284][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.219421][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.272863][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.308405][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 280.467120][T12796] hsr_slave_0: entered promiscuous mode [ 280.488900][T12796] hsr_slave_1: entered promiscuous mode [ 280.499275][T12796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.522825][T12796] Cannot create hsr debugfs directory [ 280.792758][T12930] bridge0: port 4(gretap0) entered blocking state [ 280.799343][T12930] bridge0: port 4(gretap0) entered disabled state [ 280.828258][T12930] gretap0: entered allmulticast mode [ 280.847179][T12930] gretap0: entered promiscuous mode [ 280.868194][T12930] bridge0: port 4(gretap0) entered blocking state [ 280.874789][T12930] bridge0: port 4(gretap0) entered forwarding state [ 281.081739][T12945] sctp: [Deprecated]: syz.4.1910 (pid 12945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.081739][T12945] Use struct sctp_sack_info instead [ 281.189327][T12954] batadv_slave_0: entered promiscuous mode [ 281.214633][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 281.353901][T12958] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 281.382888][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 281.540854][T12796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.556176][T12796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.581787][T12796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.607250][T12796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.613934][T12971] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1918'. [ 281.659683][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 281.714149][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 281.783630][ T5840] Bluetooth: hci2: command tx timeout [ 281.796921][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.845851][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.866652][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.873807][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.944122][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.951258][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.070725][T12984] netlink: 'syz.0.1923': attribute type 21 has an invalid length. [ 282.078787][T12984] netlink: 'syz.0.1923': attribute type 4 has an invalid length. [ 282.086991][T12984] netlink: 'syz.0.1923': attribute type 5 has an invalid length. [ 282.095606][T12984] netlink: 'syz.0.1923': attribute type 21 has an invalid length. [ 282.105360][T12984] netlink: 'syz.0.1923': attribute type 4 has an invalid length. [ 282.122356][T12984] netlink: 'syz.0.1923': attribute type 5 has an invalid length. [ 282.379424][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.421122][T12796] veth0_vlan: entered promiscuous mode [ 282.437058][T12796] veth1_vlan: entered promiscuous mode [ 282.536636][T12796] veth0_macvtap: entered promiscuous mode [ 282.556101][T12796] veth1_macvtap: entered promiscuous mode [ 282.589143][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.610017][T12997] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.988378][T13000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.098075][T12997] bridge_slave_0 (unregistering): left allmulticast mode [ 283.110003][T12997] bridge_slave_0 (unregistering): left promiscuous mode [ 283.135109][T12997] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.275892][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.320526][T12796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.354438][T12796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.383174][T12796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.411180][T12796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.784221][ T3899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.792077][ T3899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.854801][ T5840] Bluetooth: hci2: command tx timeout [ 283.875527][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.912874][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.670296][T13075] syzkaller0: entered promiscuous mode [ 284.680017][T13075] syzkaller0: entered allmulticast mode [ 284.700027][T13075] syzkaller1: entered promiscuous mode [ 284.717235][T13075] syzkaller1: entered allmulticast mode [ 284.760540][T13075] openvswitch: netlink: Missing key (keys=40, expected=100) [ 284.768625][T13075] __nla_validate_parse: 9 callbacks suppressed [ 284.768639][T13075] netlink: 912 bytes leftover after parsing attributes in process `syz.4.1946'. [ 284.958775][ T3899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.271281][T12979] Set syz1 is full, maxelem 65536 reached [ 285.590854][ T3899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.806614][ T3899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.864649][ T3899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.955460][ T3899] bridge_slave_1: left allmulticast mode [ 285.961131][ T3899] bridge_slave_1: left promiscuous mode [ 285.967142][ T3899] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.976306][ T3899] bridge_slave_0: left allmulticast mode [ 285.981963][ T3899] bridge_slave_0: left promiscuous mode [ 285.987890][ T3899] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.255320][ T3899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.267980][ T3899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.278217][ T3899] bond0 (unregistering): Released all slaves [ 286.560052][ T3899] hsr_slave_0: left promiscuous mode [ 286.566285][ T3899] hsr_slave_1: left promiscuous mode [ 286.583186][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.590601][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.602531][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.610206][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.630285][ T3899] veth1_macvtap: left promiscuous mode [ 286.635989][ T3899] veth0_macvtap: left promiscuous mode [ 286.641502][ T3899] veth1_vlan: left promiscuous mode [ 286.646873][ T3899] veth0_vlan: left promiscuous mode [ 286.880437][T13094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1950'. [ 286.898996][T13096] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 286.928567][T13094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1950'. [ 287.106092][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.115947][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.129032][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.148786][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.159039][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.168360][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.327724][ T3899] team0 (unregistering): Port device team_slave_1 removed [ 287.366448][ T3899] team0 (unregistering): Port device team_slave_0 removed [ 287.760007][T13093] bond8: entered promiscuous mode [ 287.791587][T13093] bond8: entered allmulticast mode [ 287.797122][T13093] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.899100][T13093] bond8 (unregistering): Released all slaves [ 287.911121][T13096] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 287.938896][T13102] vcan0 speed is unknown, defaulting to 1000 [ 288.107245][T13118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.164056][T13113] syzkaller0: entered promiscuous mode [ 288.194823][T13119] netlink: 'syz.4.1958': attribute type 4 has an invalid length. [ 288.220852][T13102] xfrm0 speed is unknown, defaulting to 1000 [ 288.286982][T13124] netlink: 'syz.3.1960': attribute type 3 has an invalid length. [ 288.299545][T13124] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1960'. [ 288.595176][T13102] chnl_net:caif_netlink_parms(): no params data found [ 288.701428][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 288.786749][ T11] smc: removing ib device syz0 [ 288.814779][ T5886] vcan0 speed is unknown, defaulting to 1000 [ 288.815254][T13102] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.866034][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.888274][T13102] bridge_slave_0: entered allmulticast mode [ 288.915377][T13102] bridge_slave_0: entered promiscuous mode [ 288.948894][T13102] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.972519][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.988729][T13102] bridge_slave_1: entered allmulticast mode [ 288.996875][T13169] ipt_REJECT: ECHOREPLY no longer supported. [ 289.002794][T13102] bridge_slave_1: entered promiscuous mode [ 289.140652][T13102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.172997][T13102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.213069][ T5841] Bluetooth: hci2: command tx timeout [ 289.363371][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 289.393185][T13175] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1975'. [ 289.464500][T13102] team0: Port device team_slave_0 added [ 289.474538][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1975'. [ 289.487100][T13102] team0: Port device team_slave_1 added [ 289.562454][T13102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.586010][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.645188][T13102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.720698][T13102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.736378][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.793857][T13102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.875845][T13196] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 289.985857][T13102] hsr_slave_0: entered promiscuous mode [ 289.992204][T13102] hsr_slave_1: entered promiscuous mode [ 290.001442][T13102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.010292][T13102] Cannot create hsr debugfs directory [ 290.084173][T13202] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1981'. [ 290.158744][T13206] set match dimension is over the limit! [ 290.238122][T13212] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1982'. [ 290.286271][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 290.417341][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'. [ 290.448100][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 290.469605][T13217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'. [ 290.522950][T13228] netlink: 'syz.3.1987': attribute type 4 has an invalid length. [ 290.536439][T13228] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1987'. [ 290.603082][T13235] netlink: 'syz.1.1988': attribute type 15 has an invalid length. [ 290.688280][T13102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.736704][T13102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.758533][T13102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.805085][T13102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.857330][T13251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1994'. [ 290.890317][T13251] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1994'. [ 290.926188][T13251] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1994'. [ 291.049277][T13102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.100065][T13102] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.143740][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.150871][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.185142][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.192292][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.299266][ T5841] Bluetooth: hci2: command tx timeout [ 291.534453][T13102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.576331][T13296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.598604][T13102] veth0_vlan: entered promiscuous mode [ 291.608888][T13295] geneve3: entered promiscuous mode [ 291.614385][T13295] geneve3: entered allmulticast mode [ 291.652576][T13102] veth1_vlan: entered promiscuous mode [ 291.678499][T13102] veth0_macvtap: entered promiscuous mode [ 291.687296][T13102] veth1_macvtap: entered promiscuous mode [ 291.712411][T13102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.730326][T13102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.749744][T13102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.759335][T13102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.770634][T13102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.790050][T13102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.850672][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.860490][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.887504][ T3899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.895732][ T3899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.210808][T13314] netlink: 'syz.0.2015': attribute type 4 has an invalid length. [ 292.228207][T13316] netlink: 'syz.4.2016': attribute type 21 has an invalid length. [ 292.516909][T13340] xfrm0 speed is unknown, defaulting to 1000 [ 292.587539][T13342] netlink: 'syz.4.2021': attribute type 6 has an invalid length. [ 292.909137][T13370] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.960275][T13372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.004060][T13372] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 293.054672][T13372] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 293.326997][T13387] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 293.348145][T13396] IPVS: set_ctl: invalid protocol: 60 172.20.20.36:20001 [ 293.409138][T10365] IPVS: starting estimator thread 0... [ 293.512792][T13400] IPVS: using max 21 ests per chain, 50400 per kthread [ 293.660977][T13414] netlink: 'syz.0.2041': attribute type 1 has an invalid length. [ 293.774311][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 293.927228][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.366953][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.438808][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.499006][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.591893][T13424] __nla_validate_parse: 15 callbacks suppressed [ 295.591912][T13424] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2043'. [ 295.612586][T13425] xt_hashlimit: size too large, truncated to 1048576 [ 295.772026][ T81] bridge_slave_1: left allmulticast mode [ 295.772993][T13430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2047'. [ 295.786675][ T81] bridge_slave_1: left promiscuous mode [ 295.786883][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.812299][T13428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.898828][ T81] bridge_slave_0: left allmulticast mode [ 295.929059][ T81] bridge_slave_0: left promiscuous mode [ 295.946180][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.040330][T13425] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2046'. [ 296.052775][T13425] openvswitch: netlink: Message has 44053 unknown bytes. [ 296.130798][T13447] netlink: 'syz.0.2052': attribute type 9 has an invalid length. [ 296.171315][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.187285][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.197654][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.210547][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.219750][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.228336][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.341616][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 296.667515][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.678732][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.691576][ T81] bond0 (unregistering): Released all slaves [ 296.708569][T13425] bridge7: entered promiscuous mode [ 296.714284][T13425] bridge7: entered allmulticast mode [ 296.799312][T13449] xfrm0 speed is unknown, defaulting to 1000 [ 297.289337][ T81] hsr_slave_0: left promiscuous mode [ 297.331122][ T81] hsr_slave_1: left promiscuous mode [ 297.344257][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.355907][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.364777][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.372208][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.400452][ T81] veth1_macvtap: left promiscuous mode [ 297.407723][ T81] veth0_macvtap: left promiscuous mode [ 297.413739][ T81] veth1_vlan: left promiscuous mode [ 297.422303][ T81] veth0_vlan: left promiscuous mode [ 297.814899][ T81] team0 (unregistering): Port device team_slave_1 removed [ 297.856792][ T81] team0 (unregistering): Port device team_slave_0 removed [ 297.936027][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.245135][T13449] chnl_net:caif_netlink_parms(): no params data found [ 298.262792][ T5840] Bluetooth: hci2: command tx timeout [ 298.302583][T13500] xfrm0 speed is unknown, defaulting to 1000 [ 298.404980][T13518] tipc: New replicast peer: 255.255.255.255 [ 298.411184][T13518] tipc: Enabled bearer , priority 10 [ 298.525473][T13449] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.563690][T13449] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.571312][T13449] bridge_slave_0: entered allmulticast mode [ 298.616352][T13449] bridge_slave_0: entered promiscuous mode [ 298.644585][T13449] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.651705][T13449] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.669487][T13449] bridge_slave_1: entered allmulticast mode [ 298.692393][T13449] bridge_slave_1: entered promiscuous mode [ 298.835495][T13449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.864513][T13449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.935266][T13449] team0: Port device team_slave_0 added [ 298.944077][T13553] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 298.972514][T13449] team0: Port device team_slave_1 added [ 299.032738][T13449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.040029][T13449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.067328][T13449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.079979][T13449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.096052][T13449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.175118][T13449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.352036][T13449] hsr_slave_0: entered promiscuous mode [ 299.367037][T13449] hsr_slave_1: entered promiscuous mode [ 299.379569][T13449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.389875][T13449] Cannot create hsr debugfs directory [ 299.846881][T13449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.865504][T13449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.883202][T13597] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 299.891406][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 299.903244][T13449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.913518][T13449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 300.030794][T13449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.076745][T13449] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.107446][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.114629][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.165810][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.172967][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.333164][ T5840] Bluetooth: hci2: command tx timeout [ 300.561870][T13624] xt_l2tp: unknown flags: 18 [ 300.666008][T13449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.733146][T13449] veth0_vlan: entered promiscuous mode [ 300.756747][T13449] veth1_vlan: entered promiscuous mode [ 300.788890][T13449] veth0_macvtap: entered promiscuous mode [ 300.799009][T13449] veth1_macvtap: entered promiscuous mode [ 300.831673][T13449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.874398][T13449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.909007][T13449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.945241][T13449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.980748][T13449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.018902][T13449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.203871][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.211747][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.296530][ T3899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.301804][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 301.315836][ T3899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.326396][T13648] netlink: 'syz.0.2113': attribute type 8 has an invalid length. [ 301.376455][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.385833][T13649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2112'. [ 301.386808][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.404938][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.413736][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.421886][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 301.429654][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.507824][T13650] xfrm0 speed is unknown, defaulting to 1000 [ 301.527628][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 301.622116][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2116'. [ 301.659804][T13661] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 301.945509][T13650] chnl_net:caif_netlink_parms(): no params data found [ 301.979808][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 302.030069][T13683] netlink: 'syz.1.2122': attribute type 18 has an invalid length. [ 302.157046][T13680] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 302.209327][T13650] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.233931][T13650] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.241555][T13650] bridge_slave_0: entered allmulticast mode [ 302.249021][T13650] bridge_slave_0: entered promiscuous mode [ 302.257288][T13650] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.267481][T13650] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.274995][T13650] bridge_slave_1: entered allmulticast mode [ 302.282013][T13650] bridge_slave_1: entered promiscuous mode [ 302.327070][T13650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.348712][T13650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.420880][T13650] team0: Port device team_slave_0 added [ 302.439789][T13650] team0: Port device team_slave_1 added [ 302.508952][T13650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.523841][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.560086][T13650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.580444][T13650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.589293][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.621334][T13650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.702298][T13650] hsr_slave_0: entered promiscuous mode [ 302.715614][T13650] hsr_slave_1: entered promiscuous mode [ 302.734217][T13650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.741814][T13650] Cannot create hsr debugfs directory [ 302.891249][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.146519][T13650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.157402][T13650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.259759][T13650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.270800][T13650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.361956][T13650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.380830][T13650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.461163][T13650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.472012][T13650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.533026][ T5841] Bluetooth: hci3: command tx timeout [ 303.624502][T13650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.640075][T13650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.661729][T13650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.672224][T13650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.764461][T13650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.791684][T13650] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.810472][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.817627][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.857643][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.864791][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.887968][T13650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.902921][T13650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.012212][T13650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.149071][T13650] veth0_vlan: entered promiscuous mode [ 304.160237][T13650] veth1_vlan: entered promiscuous mode [ 304.206573][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.221401][T13650] veth0_macvtap: entered promiscuous mode [ 304.231020][T13650] veth1_macvtap: entered promiscuous mode [ 304.244856][T13650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.258055][T13650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.271094][T13650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.298351][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.317809][T13650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.328520][T13650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.343826][T13650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.370366][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.387984][T13650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.397030][T13650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.409488][T13650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.418637][T13650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.481211][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.498227][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.541500][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.549790][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.551000][ T12] bridge_slave_1: left allmulticast mode [ 304.566006][ T12] bridge_slave_1: left promiscuous mode [ 304.571652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.581038][ T12] bridge_slave_0: left allmulticast mode [ 304.587230][ T12] bridge_slave_0: left promiscuous mode [ 304.593568][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.891237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.901849][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.912120][ T12] bond0 (unregistering): Released all slaves [ 305.435999][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.446224][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.455214][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.476142][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.485967][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 305.493351][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.613312][ T12] hsr_slave_0: left promiscuous mode [ 305.640624][ T12] hsr_slave_1: left promiscuous mode [ 305.647861][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.658056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.667481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.675202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.696025][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 305.703176][ T12] veth1_macvtap: left promiscuous mode [ 305.710511][ T12] veth0_macvtap: left promiscuous mode [ 305.712386][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 305.732416][ T12] veth1_vlan: left promiscuous mode [ 305.738057][ T12] veth0_vlan: left promiscuous mode [ 306.205563][ T12] team0 (unregistering): Port device team_slave_1 removed [ 306.249071][ T12] team0 (unregistering): Port device team_slave_0 removed [ 306.668432][T13754] xfrm0 speed is unknown, defaulting to 1000 [ 306.971115][T13754] chnl_net:caif_netlink_parms(): no params data found [ 307.243186][T13754] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.250305][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.258613][T13754] bridge_slave_0: entered allmulticast mode [ 307.266515][T13754] bridge_slave_0: entered promiscuous mode [ 307.274814][T13754] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.281965][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.289544][T13754] bridge_slave_1: entered allmulticast mode [ 307.297346][T13754] bridge_slave_1: entered promiscuous mode [ 307.346446][T13754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.359486][T13754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.475763][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.532944][ T5841] Bluetooth: hci2: command tx timeout [ 307.624324][T13754] team0: Port device team_slave_0 added [ 307.680837][T13754] team0: Port device team_slave_1 added [ 307.868644][T13754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.879271][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.907985][T13754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.953016][T13754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.967825][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.024047][T13754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.053914][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.064450][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.074325][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.086772][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.095027][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.104451][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.167481][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.200798][T13754] hsr_slave_0: entered promiscuous mode [ 308.218479][T13754] hsr_slave_1: entered promiscuous mode [ 308.227362][T13754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.235763][T13754] Cannot create hsr debugfs directory [ 308.302601][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.369906][T13860] Set syz1 is full, maxelem 65536 reached [ 308.381684][T13842] xfrm0 speed is unknown, defaulting to 1000 [ 308.449051][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.603393][T13868] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2163'. [ 309.019263][T13842] chnl_net:caif_netlink_parms(): no params data found [ 309.046180][ T12] bridge_slave_1: left allmulticast mode [ 309.051848][ T12] bridge_slave_1: left promiscuous mode [ 309.075313][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.117423][ T12] bridge_slave_0: left allmulticast mode [ 309.126820][T13895] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 309.127801][ T12] bridge_slave_0: left promiscuous mode [ 309.149378][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.233213][T13900] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 309.590936][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.603179][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.613479][ T5840] Bluetooth: hci2: command tx timeout [ 309.620040][ T12] bond0 (unregistering): Released all slaves [ 309.633650][T13909] sctp: [Deprecated]: syz.1.2176 (pid 13909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.633650][T13909] Use struct sctp_sack_info instead [ 309.956140][T13842] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.983048][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.012944][T13842] bridge_slave_0: entered allmulticast mode [ 310.020159][T13842] bridge_slave_0: entered promiscuous mode [ 310.055403][T13842] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.062513][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.075038][T13842] bridge_slave_1: entered allmulticast mode [ 310.082000][T13842] bridge_slave_1: entered promiscuous mode [ 310.134796][T13842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.154200][T13842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.182809][ T5840] Bluetooth: hci3: command tx timeout [ 310.249001][T13939] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2181'. [ 310.296584][T13943] netlink: 'syz.3.2183': attribute type 9 has an invalid length. [ 310.313906][T13943] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2183'. [ 310.331536][ T12] hsr_slave_0: left promiscuous mode [ 310.338338][ T12] hsr_slave_1: left promiscuous mode [ 310.351288][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.358937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.374575][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.389315][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.491924][ T12] veth1_macvtap: left promiscuous mode [ 310.505855][ T12] veth0_macvtap: left promiscuous mode [ 310.511484][ T12] veth1_vlan: left promiscuous mode [ 310.522158][ T12] veth0_vlan: left promiscuous mode [ 310.553556][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 311.018818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.055389][ T12] team0 (unregistering): Port device team_slave_0 removed [ 311.443521][T13842] team0: Port device team_slave_0 added [ 311.506867][T13842] team0: Port device team_slave_1 added [ 311.654558][T13754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.674760][T13842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.681737][T13842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.708687][T13842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.720489][T13754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.863944][ T5840] Bluetooth: hci2: command tx timeout [ 311.868115][T13754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.910492][T13842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.917651][T13842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.945170][T13842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.993271][T13842] hsr_slave_0: entered promiscuous mode [ 311.999722][T13842] hsr_slave_1: entered promiscuous mode [ 312.006560][T13842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.018414][T13842] Cannot create hsr debugfs directory [ 312.052971][T13754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.201623][T13994] xfrm0 speed is unknown, defaulting to 1000 [ 312.226034][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 312.252864][ T5840] Bluetooth: hci3: command tx timeout [ 312.427148][T13754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.458466][T13754] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.499701][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2198'. [ 312.521141][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.528299][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.565390][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.572557][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.667063][T13754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.812317][T14020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2201'. [ 312.886060][T13842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.912403][T13842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.951385][T13842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.970339][T13754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.983980][T13842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.105966][T13754] veth0_vlan: entered promiscuous mode [ 313.164556][T13754] veth1_vlan: entered promiscuous mode [ 313.192351][T13842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.245591][T13754] veth0_macvtap: entered promiscuous mode [ 313.270959][T13754] veth1_macvtap: entered promiscuous mode [ 313.309027][T13842] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.361946][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.369131][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.416879][T13754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.450199][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.457377][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.468708][T13754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.508682][T13754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.529546][T13754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.540275][T13754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.553969][T13754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.601685][T13842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.851570][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.891294][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.933909][ T5840] Bluetooth: hci2: command tx timeout [ 313.939403][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 313.987939][T11768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.002557][T11768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.020020][T13842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.334348][ T5840] Bluetooth: hci3: command tx timeout [ 314.357534][T14085] xt_ecn: cannot match TCP bits for non-tcp packets [ 314.419484][T14088] xt_TCPMSS: Only works on TCP SYN packets [ 314.423542][T14087] xt_ecn: cannot match TCP bits for non-tcp packets [ 314.498877][T13842] veth0_vlan: entered promiscuous mode [ 314.541519][T13842] veth1_vlan: entered promiscuous mode [ 314.590843][T13842] veth0_macvtap: entered promiscuous mode [ 314.615412][T13842] veth1_macvtap: entered promiscuous mode [ 314.674679][T14099] netlink: 'syz.0.2220': attribute type 9 has an invalid length. [ 314.678275][T13842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.682424][T14099] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2220'. [ 314.701592][T13842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.719016][T13842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.753796][T14104] x_tables: unsorted underflow at hook 3 [ 314.759625][T13842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.772784][T13842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.785041][T13842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.813836][T13842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.822565][T13842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.834276][T13842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.849028][T13842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.122563][ T4533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.209936][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.229947][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.271421][ T3899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.280073][ T3899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.757134][ T4533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.987977][ T4533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.030558][ T4533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.127429][ T4533] bridge_slave_1: left allmulticast mode [ 316.133424][ T4533] bridge_slave_1: left promiscuous mode [ 316.139110][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.148251][ T4533] bridge_slave_0: left allmulticast mode [ 316.154130][ T4533] bridge_slave_0: left promiscuous mode [ 316.159789][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.496278][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 316.635306][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 316.648885][T14129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2227'. [ 316.811038][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.835433][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.846236][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.855447][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.865506][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.880434][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.888082][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.897380][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.909561][ T4533] bond0 (unregistering): Released all slaves [ 316.936346][T14122] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2226'. [ 316.964836][T14127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.973979][T14127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.982999][T14127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.991684][T14127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.004475][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.023971][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.032373][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.041438][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.058664][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.072960][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.209232][T14131] xfrm0 speed is unknown, defaulting to 1000 [ 317.237731][T14133] xfrm0 speed is unknown, defaulting to 1000 [ 317.373290][ T4533] hsr_slave_0: left promiscuous mode [ 317.381866][ T4533] hsr_slave_1: left promiscuous mode [ 317.388028][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.397341][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.414070][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.425989][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.467797][ T4533] veth1_macvtap: left promiscuous mode [ 317.473579][ T4533] veth0_macvtap: left promiscuous mode [ 317.479206][ T4533] veth1_vlan: left promiscuous mode [ 317.502112][ T4533] veth0_vlan: left promiscuous mode [ 317.907922][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 317.948361][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 318.321256][T14151] veth0: entered promiscuous mode [ 318.330177][T14158] veth0: left promiscuous mode [ 318.490345][T14165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2236'. [ 318.561774][T14165] sch_fq: defrate 0 ignored. [ 318.574266][ T30] INFO: task udevd:6723 blocked for more than 143 seconds. [ 318.583816][ T30] Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 318.591472][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 318.600857][ T30] task:udevd state:D stack:22416 pid:6723 tgid:6723 ppid:1 task_flags:0x400140 flags:0x00004002 [ 318.622766][ T30] Call Trace: [ 318.626110][ T30] [ 318.629062][ T30] __schedule+0x190e/0x4c90 [ 318.641098][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 318.653970][ T30] ? __pfx___schedule+0x10/0x10 [ 318.658863][ T30] ? __blk_flush_plug+0x449/0x500 [ 318.722890][ T30] ? __pfx_lock_release+0x10/0x10 [ 318.727989][ T30] ? __pfx___mod_timer+0x10/0x10 [ 318.773835][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.780225][ T30] ? schedule+0x90/0x320 [ 318.792746][ T30] schedule+0x14b/0x320 [ 318.796942][ T30] schedule_timeout+0x15a/0x290 [ 318.801813][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 318.813114][ T30] ? __pfx_process_timeout+0x10/0x10 [ 318.818439][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 318.830132][ T30] nbd_queue_rq+0x6dd/0xef0 [ 318.834727][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 318.839758][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 318.845941][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 318.851503][ T30] ? sbitmap_get+0x289/0x3f0 [ 318.856122][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 318.862088][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 318.867960][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 318.874361][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 318.881130][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 318.886232][ T30] ? __pfx___might_resched+0x10/0x10 [ 318.891519][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 318.897022][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 318.902792][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 318.908793][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 318.914152][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 318.919280][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 318.924871][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 318.931103][ T30] ? blk_mq_submit_bio+0xfb9/0x25a0 [ 318.936367][ T30] ? blk_mq_submit_bio+0x494/0x25a0 [ 318.941558][ T30] __blk_flush_plug+0x420/0x500 [ 318.946502][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.952489][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 318.957885][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.964252][ T30] __submit_bio+0x54a/0x6a0 [ 318.968767][ T30] ? __pfx___submit_bio+0x10/0x10 [ 318.974019][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 318.979662][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 318.983260][ T5841] Bluetooth: hci2: command tx timeout [ 318.985717][ T30] ? __pfx___might_resched+0x10/0x10 [ 318.996824][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 319.003097][ T30] block_read_full_folio+0x9b3/0xae0 [ 319.008398][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 319.013831][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 319.019660][ T30] filemap_read_folio+0x148/0x3b0 [ 319.024707][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 319.030506][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 319.036115][ T30] ? __filemap_get_folio+0x9a8/0xae0 [ 319.041412][ T30] do_read_cache_folio+0x373/0x5b0 [ 319.046597][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 319.052082][ T30] read_part_sector+0xb3/0x260 [ 319.056980][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 319.061948][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 319.067968][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 319.073550][ T30] ? snprintf+0xda/0x120 [ 319.077784][ T30] ? vsnprintf+0x1148/0x1220 [ 319.082351][ T30] ? vsnprintf+0x18e/0x1220 [ 319.086979][ T30] ? __pfx_snprintf+0x10/0x10 [ 319.091666][ T30] ? set_page_refcounted+0xa1/0x1e0 [ 319.096905][ T30] bdev_disk_changed+0x72c/0x13f0 [ 319.101926][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 319.107392][ T30] ? wait_on_inode+0xc1/0x230 [ 319.112058][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 319.117222][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 319.122426][ T30] blkdev_get_whole+0x2d2/0x450 [ 319.127343][ T30] bdev_open+0x2d4/0xc50 [ 319.131619][ T30] blkdev_open+0x38e/0x4e0 [ 319.136929][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 319.141899][ T30] do_dentry_open+0xdec/0x1960 [ 319.146869][ T5841] Bluetooth: hci3: command tx timeout [ 319.152890][ T30] ? vfs_open+0x31/0x370 [ 319.157152][ T30] vfs_open+0x3b/0x370 [ 319.161206][ T30] path_openat+0x2c81/0x3590 [ 319.167033][ T30] ? __pfx_path_openat+0x10/0x10 [ 319.172012][ T30] do_filp_open+0x27f/0x4e0 [ 319.176584][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 319.181618][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 319.186765][ T30] do_sys_openat2+0x13e/0x1d0 [ 319.191451][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.196733][ T30] __x64_sys_openat+0x247/0x2a0 [ 319.201580][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 319.206977][ T30] ? do_syscall_64+0x100/0x230 [ 319.211736][ T30] ? do_syscall_64+0xb6/0x230 [ 319.216510][ T30] do_syscall_64+0xf3/0x230 [ 319.221027][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.225732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.231621][ T30] RIP: 0033:0x7f27ea3169a4 [ 319.236427][ T30] RSP: 002b:00007fff3ca80df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.244963][ T30] RAX: ffffffffffffffda RBX: 000055b9dd10fb40 RCX: 00007f27ea3169a4 [ 319.253006][ T30] RDX: 00000000000a0800 RSI: 000055b9dd0ed5f0 RDI: 00000000ffffff9c [ 319.260980][ T30] RBP: 000055b9dd0ed5f0 R08: 0000000000000001 R09: 7fffffffffffffff [ 319.268961][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 319.277069][ T30] R13: 000055b9dd0fd9e0 R14: 0000000000000001 R15: 000055b9dd0ec910 [ 319.285097][ T30] [ 319.288168][ T30] INFO: task udevd:6800 blocked for more than 144 seconds. [ 319.295527][ T30] Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 319.302986][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.311669][ T30] task:udevd state:D stack:22416 pid:6800 tgid:6800 ppid:1 task_flags:0x400140 flags:0x00004002 [ 319.323680][ T30] Call Trace: [ 319.326973][ T30] [ 319.329917][ T30] __schedule+0x190e/0x4c90 [ 319.334503][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 319.341055][ T30] ? __pfx___schedule+0x10/0x10 [ 319.347887][ T30] ? __blk_flush_plug+0x449/0x500 [ 319.362710][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.367782][ T30] ? __pfx___mod_timer+0x10/0x10 [ 319.382733][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.389195][ T30] ? schedule+0x90/0x320 [ 319.395388][ T30] schedule+0x14b/0x320 [ 319.399582][ T30] schedule_timeout+0x15a/0x290 [ 319.404557][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 319.409948][ T30] ? __pfx_process_timeout+0x10/0x10 [ 319.415319][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 319.420806][ T30] nbd_queue_rq+0x6dd/0xef0 [ 319.425393][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 319.430444][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 319.436534][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 319.442358][ T30] ? sbitmap_get+0x289/0x3f0 [ 319.447000][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 319.453351][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 319.459177][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 319.466160][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 319.473022][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 319.478060][ T30] ? __pfx___might_resched+0x10/0x10 [ 319.483417][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 319.488800][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 319.494627][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 319.500620][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 319.505991][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 319.511114][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 319.516719][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 319.522604][ T30] ? blk_mq_submit_bio+0xfb9/0x25a0 [ 319.527878][ T30] ? blk_mq_submit_bio+0x494/0x25a0 [ 319.533149][ T30] __blk_flush_plug+0x420/0x500 [ 319.538025][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.544610][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 319.550000][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.556380][ T30] __submit_bio+0x54a/0x6a0 [ 319.560875][ T30] ? __pfx___submit_bio+0x10/0x10 [ 319.565935][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 319.571558][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 319.577588][ T30] ? __pfx___might_resched+0x10/0x10 [ 319.582940][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 319.589118][ T30] block_read_full_folio+0x9b3/0xae0 [ 319.594467][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 319.599850][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 319.605713][ T30] filemap_read_folio+0x148/0x3b0 [ 319.610726][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 319.616421][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 319.621997][ T30] ? __filemap_get_folio+0x9a8/0xae0 [ 319.627350][ T30] do_read_cache_folio+0x373/0x5b0 [ 319.632473][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 319.638009][ T30] read_part_sector+0xb3/0x260 [ 319.642810][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 319.648116][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 319.652942][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 319.658499][ T30] ? snprintf+0xda/0x120 [ 319.662826][ T30] ? vsnprintf+0x1148/0x1220 [ 319.667427][ T30] ? vsnprintf+0x18e/0x1220 [ 319.671965][ T30] ? __pfx_snprintf+0x10/0x10 [ 319.676669][ T30] ? set_page_refcounted+0xa1/0x1e0 [ 319.681868][ T30] bdev_disk_changed+0x72c/0x13f0 [ 319.686963][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 319.692411][ T30] ? wait_on_inode+0xc1/0x230 [ 319.697313][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 319.702431][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 319.707679][ T30] blkdev_get_whole+0x2d2/0x450 [ 319.712568][ T30] bdev_open+0x2d4/0xc50 [ 319.716888][ T30] blkdev_open+0x38e/0x4e0 [ 319.721321][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 319.726282][ T30] do_dentry_open+0xdec/0x1960 [ 319.731036][ T30] ? vfs_open+0x31/0x370 [ 319.735418][ T30] vfs_open+0x3b/0x370 [ 319.739509][ T30] path_openat+0x2c81/0x3590 [ 319.744256][ T30] ? __pfx_path_openat+0x10/0x10 [ 319.749715][ T30] do_filp_open+0x27f/0x4e0 [ 319.754285][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 319.759327][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 319.764448][ T30] do_sys_openat2+0x13e/0x1d0 [ 319.769141][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.774495][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.779267][ T30] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 319.785396][ T30] __x64_sys_openat+0x247/0x2a0 [ 319.790238][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 319.795680][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.802036][ T30] ? do_syscall_64+0xb6/0x230 [ 319.806742][ T30] do_syscall_64+0xf3/0x230 [ 319.811241][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.815943][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.821824][ T30] RIP: 0033:0x7f27ea3169a4 [ 319.826260][ T30] RSP: 002b:00007fff3ca80df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.834727][ T30] RAX: ffffffffffffffda RBX: 000055b9dd0f6860 RCX: 00007f27ea3169a4 [ 319.842792][ T30] RDX: 00000000000a0800 RSI: 000055b9dd0ed5f0 RDI: 00000000ffffff9c [ 319.851047][ T30] RBP: 000055b9dd0ed5f0 R08: 0000000000000001 R09: 7fffffffffffffff [ 319.859716][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 319.867880][ T30] R13: 000055b9dd109cc0 R14: 0000000000000001 R15: 000055b9dd0ec910 [ 319.875958][ T30] [ 319.879026][ T30] INFO: task udevd:7177 blocked for more than 144 seconds. [ 319.886290][ T30] Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 319.893631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.902307][ T30] task:udevd state:D stack:22416 pid:7177 tgid:7177 ppid:1 task_flags:0x400140 flags:0x00004002 [ 319.914314][ T30] Call Trace: [ 319.917603][ T30] [ 319.920556][ T30] __schedule+0x190e/0x4c90 [ 319.932767][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 319.938724][ T30] ? __pfx___schedule+0x10/0x10 [ 319.952753][ T30] ? __blk_flush_plug+0x449/0x500 [ 319.957821][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.972775][ T30] ? __pfx___mod_timer+0x10/0x10 [ 319.977753][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.002714][ T30] ? schedule+0x90/0x320 [ 320.007004][ T30] schedule+0x14b/0x320 [ 320.011174][ T30] schedule_timeout+0x15a/0x290 [ 320.032759][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 320.038173][ T30] ? __pfx_process_timeout+0x10/0x10 [ 320.069233][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 320.080524][ T30] nbd_queue_rq+0x6dd/0xef0 [ 320.085315][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 320.090363][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.103466][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 320.109066][ T30] ? sbitmap_get+0x289/0x3f0 [ 320.119334][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 320.126665][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 320.132520][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 320.144373][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 320.151179][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 320.160383][ T30] ? __pfx___might_resched+0x10/0x10 [ 320.169917][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 320.176362][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 320.182098][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 320.188645][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 320.194048][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 320.199174][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 320.205051][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 320.210957][ T30] ? blk_mq_submit_bio+0xfb9/0x25a0 [ 320.216173][ T30] ? blk_mq_submit_bio+0x494/0x25a0 [ 320.221362][ T30] __blk_flush_plug+0x420/0x500 [ 320.226481][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.233021][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 320.238404][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.245018][ T30] __submit_bio+0x54a/0x6a0 [ 320.249538][ T30] ? __pfx___submit_bio+0x10/0x10 [ 320.254914][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 320.260840][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 320.266922][ T30] ? __pfx___might_resched+0x10/0x10 [ 320.272202][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 320.278544][ T30] block_read_full_folio+0x9b3/0xae0 [ 320.284086][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 320.289475][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 320.295301][ T30] filemap_read_folio+0x148/0x3b0 [ 320.300315][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 320.305912][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 320.311464][ T30] ? __filemap_get_folio+0x9a8/0xae0 [ 320.316864][ T30] do_read_cache_folio+0x373/0x5b0 [ 320.321994][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 320.327704][ T30] read_part_sector+0xb3/0x260 [ 320.332490][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 320.337859][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 320.342844][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 320.348405][ T30] ? snprintf+0xda/0x120 [ 320.352686][ T30] ? vsnprintf+0x1148/0x1220 [ 320.357293][ T30] ? vsnprintf+0x18e/0x1220 [ 320.362056][ T30] ? __pfx_snprintf+0x10/0x10 [ 320.366973][ T30] ? set_page_refcounted+0xa1/0x1e0 [ 320.372200][ T30] bdev_disk_changed+0x72c/0x13f0 [ 320.377338][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 320.383059][ T30] ? wait_on_inode+0xc1/0x230 [ 320.387764][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 320.392960][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 320.398165][ T30] blkdev_get_whole+0x2d2/0x450 [ 320.403233][ T30] bdev_open+0x2d4/0xc50 [ 320.407524][ T30] blkdev_open+0x38e/0x4e0 [ 320.411934][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 320.416969][ T30] do_dentry_open+0xdec/0x1960 [ 320.421746][ T30] ? vfs_open+0x31/0x370 [ 320.426923][ T30] vfs_open+0x3b/0x370 [ 320.431021][ T30] path_openat+0x2c81/0x3590 [ 320.435966][ T30] ? __pfx_path_openat+0x10/0x10 [ 320.440925][ T30] do_filp_open+0x27f/0x4e0 [ 320.445632][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 320.450694][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 320.455802][ T30] do_sys_openat2+0x13e/0x1d0 [ 320.460493][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.466370][ T30] __x64_sys_openat+0x247/0x2a0 [ 320.471238][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 320.476632][ T30] ? do_syscall_64+0x100/0x230 [ 320.481401][ T30] ? do_syscall_64+0xb6/0x230 [ 320.486140][ T30] do_syscall_64+0xf3/0x230 [ 320.490651][ T30] ? clear_bhb_loop+0x35/0x90 [ 320.495529][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.501436][ T30] RIP: 0033:0x7f27ea3169a4 [ 320.505911][ T30] RSP: 002b:00007fff3ca80df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.514482][ T30] RAX: ffffffffffffffda RBX: 000055b9dd100ec0 RCX: 00007f27ea3169a4 [ 320.522461][ T30] RDX: 00000000000a0800 RSI: 000055b9dd0f9e00 RDI: 00000000ffffff9c [ 320.530480][ T30] RBP: 000055b9dd0f9e00 R08: 0000000000000001 R09: 7fffffffffffffff [ 320.538511][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 320.546629][ T30] R13: 000055b9dd103890 R14: 0000000000000001 R15: 000055b9dd0ec910 [ 320.555075][ T30] [ 320.598259][ T30] [ 320.598259][ T30] Showing all locks held in the system: [ 320.644000][ T30] 1 lock held by pool_workqueue_/3: [ 320.649260][ T30] 3 locks held by kworker/u8:1/12: [ 320.682710][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 320.712754][ T30] #1: ffffc90000117c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 320.742689][ T30] #2: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 320.751729][ T30] 1 lock held by khungtaskd/30: [ 320.782775][ T30] #0: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 320.813083][ T30] 4 locks held by kworker/u8:8/4533: [ 320.818396][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 320.852754][ T30] #1: ffffc9000f4a7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 320.872753][ T30] #2: ffffffff8fcb2b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 320.882606][ T30] #3: ffffffff8e93db00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 320.912744][ T30] 2 locks held by getty/5593: [ 320.917448][ T30] #0: ffff888034ac20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 320.928847][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 320.939117][ T30] 1 lock held by syz-executor/5830: [ 320.944391][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 320.953584][ T30] 1 lock held by kworker/0:5/5884: [ 320.958695][ T30] #0: ffff8880b863e918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 320.968833][ T30] 3 locks held by udevd/6723: [ 320.974091][ T30] #0: ffff88805b4b44c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 320.983774][ T30] #1: ffff8880217fb990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 320.994826][ T30] #2: ffff888055f60178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 321.003868][ T30] 3 locks held by udevd/6800: [ 321.008569][ T30] #0: ffff888057e464c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 321.018031][ T30] #1: ffff8880338fa590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 321.027594][ T30] #2: ffff8880288551f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 321.036660][ T30] 3 locks held by udevd/7177: [ 321.041345][ T30] #0: ffff88801ea9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 321.050665][ T30] #1: ffff88802fabb890 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 321.060766][ T30] #2: ffff888062837178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 321.063124][ T3899] wlan0: Trigger new scan to find an IBSS to join [ 321.069837][ T5841] Bluetooth: hci2: command tx timeout [ 321.082163][ T30] 2 locks held by syz-executor/14131: [ 321.087612][ T30] #0: ffff888064b7cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 321.097635][ T30] #1: ffff888064b7c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 321.107416][ T30] 2 locks held by syz-executor/14133: [ 321.112903][ T30] #0: ffff88805c924d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 321.122896][ T30] #1: ffff88805c924078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 321.132548][ T30] 3 locks held by syz.3.2236/14165: [ 321.137939][ T30] #0: ffff888079b58d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 321.147958][ T30] #1: ffff888079b58078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 321.157729][ T30] #2: ffffffff8e93dc38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 321.168651][ T30] 2 locks held by syz.0.2237/14180: [ 321.173969][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 321.183401][ T30] #1: ffffffff8e93dc38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 321.201113][ T30] [ 321.205917][ T30] ============================================= [ 321.205917][ T30] [ 321.216668][ T5841] Bluetooth: hci3: command tx timeout [ 321.217859][ T30] NMI backtrace for cpu 0 [ 321.217879][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 321.217897][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.217906][ T30] Call Trace: [ 321.217912][ T30] [ 321.217920][ T30] dump_stack_lvl+0x241/0x360 [ 321.217943][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.217960][ T30] ? __pfx__printk+0x10/0x10 [ 321.217994][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 321.218017][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 321.218031][ T30] ? _printk+0xd5/0x120 [ 321.218051][ T30] ? __pfx__printk+0x10/0x10 [ 321.218071][ T30] ? __wake_up_klogd+0xcc/0x110 [ 321.218090][ T30] ? __pfx__printk+0x10/0x10 [ 321.218113][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 321.218133][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 321.218152][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 321.218172][ T30] watchdog+0x1058/0x10a0 [ 321.218193][ T30] ? watchdog+0x1ea/0x10a0 [ 321.218217][ T30] ? __pfx_watchdog+0x10/0x10 [ 321.218236][ T30] kthread+0x7a9/0x920 [ 321.218254][ T30] ? __pfx_kthread+0x10/0x10 [ 321.218275][ T30] ? __pfx_watchdog+0x10/0x10 [ 321.218294][ T30] ? __pfx_kthread+0x10/0x10 [ 321.218312][ T30] ? __pfx_kthread+0x10/0x10 [ 321.218335][ T30] ? __pfx_kthread+0x10/0x10 [ 321.218352][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.218370][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 321.218387][ T30] ? __pfx_kthread+0x10/0x10 [ 321.218408][ T30] ret_from_fork+0x4b/0x80 [ 321.218424][ T30] ? __pfx_kthread+0x10/0x10 [ 321.218444][ T30] ret_from_fork_asm+0x1a/0x30 [ 321.218474][ T30] [ 321.218480][ T30] Sending NMI from CPU 0 to CPUs 1: [ 321.394087][ C1] NMI backtrace for cpu 1 [ 321.394101][ C1] CPU: 1 UID: 0 PID: 3899 Comm: kworker/u8:7 Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 321.394118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.394128][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 321.394149][ C1] RIP: 0010:__lock_acquire+0xd25/0x2100 [ 321.394171][ C1] Code: 0f 85 e9 0e 00 00 83 3d e8 f1 a4 18 00 41 bf 01 00 00 00 75 0a 49 83 fe ff 0f 85 54 09 00 00 48 89 e8 48 c1 e8 03 80 3c 38 00 <74> 12 48 89 ef e8 c1 1a 8b 00 48 bf 00 00 00 00 00 fc ff df 4c 89 [ 321.394182][ C1] RSP: 0018:ffffc9000df36a30 EFLAGS: 00000046 [ 321.394194][ C1] RAX: 1ffff1100647d532 RBX: ffff8880323ea8e0 RCX: ffffffff819ae724 [ 321.394205][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 321.394214][ C1] RBP: ffff8880323ea990 R08: ffffffff942f6877 R09: 1ffffffff285ed0e [ 321.394225][ C1] R10: dffffc0000000000 R11: fffffbfff285ed0f R12: ffff8880323ea8d4 [ 321.394235][ C1] R13: ffff8880323e9e00 R14: d2d3236a4314ff19 R15: 0000000000000000 [ 321.394245][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 321.394257][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.394267][ C1] CR2: 00007fe781b70580 CR3: 000000000e738000 CR4: 00000000003526f0 [ 321.394280][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.394289][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.394298][ C1] Call Trace: [ 321.394303][ C1] [ 321.394310][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 321.394326][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 321.394344][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 321.394365][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 321.394381][ C1] ? nmi_handle+0x14f/0x5a0 [ 321.394398][ C1] ? nmi_handle+0x2a/0x5a0 [ 321.394416][ C1] ? __lock_acquire+0xd25/0x2100 [ 321.394433][ C1] ? default_do_nmi+0x63/0x160 [ 321.394446][ C1] ? exc_nmi+0x123/0x1f0 [ 321.394459][ C1] ? end_repeat_nmi+0xf/0x53 [ 321.394480][ C1] ? __lock_acquire+0xc94/0x2100 [ 321.394497][ C1] ? __lock_acquire+0xd25/0x2100 [ 321.394513][ C1] ? __lock_acquire+0xd25/0x2100 [ 321.394531][ C1] ? __lock_acquire+0xd25/0x2100 [ 321.394547][ C1] [ 321.394552][ C1] [ 321.394565][ C1] lock_acquire+0x1ed/0x550 [ 321.394580][ C1] ? kvfree_call_rcu+0xfb/0x3e0 [ 321.394602][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 321.394635][ C1] _raw_spin_lock+0x2e/0x40 [ 321.394649][ C1] ? kvfree_call_rcu+0xfb/0x3e0 [ 321.394665][ C1] kvfree_call_rcu+0xfb/0x3e0 [ 321.394685][ C1] cfg80211_update_known_bss+0xb45/0x1590 [ 321.394707][ C1] ? cmp_bss+0x8c7/0xea0 [ 321.394724][ C1] __cfg80211_bss_update+0x153/0x2030 [ 321.394742][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 321.394757][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 321.394773][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 321.394787][ C1] ? rcu_is_watching+0x15/0xb0 [ 321.394801][ C1] ? trace_kmalloc+0x1f/0xd0 [ 321.394814][ C1] ? cfg80211_inform_single_bss_data+0xd6e/0x2070 [ 321.394834][ C1] cfg80211_inform_single_bss_data+0xd82/0x2070 [ 321.394856][ C1] ? validate_chain+0x11e/0x5920 [ 321.394868][ C1] ? deref_stack_reg+0x17c/0x210 [ 321.394885][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 321.394913][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 321.394930][ C1] ? cfg80211_inform_bss_data+0x3b0/0x5d60 [ 321.394950][ C1] cfg80211_inform_bss_data+0x3c8/0x5d60 [ 321.394980][ C1] ? __pfx_validate_chain+0x10/0x10 [ 321.395002][ C1] ? __pfx_validate_chain+0x10/0x10 [ 321.395016][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 321.395037][ C1] ? mark_lock+0x9a/0x360 [ 321.395057][ C1] ? __lock_acquire+0x1397/0x2100 [ 321.395085][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 321.395101][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 321.395122][ C1] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 321.395144][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 321.395161][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 321.395180][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 321.395198][ C1] ? __pfx_lock_release+0x10/0x10 [ 321.395221][ C1] ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 321.395245][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 321.395262][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 321.395284][ C1] ? mark_lock+0x9a/0x360 [ 321.395303][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.395322][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.395341][ C1] ? kcov_remote_start+0x19a/0x7d0 [ 321.395361][ C1] ieee80211_iface_work+0x8dc/0xf90 [ 321.395384][ C1] cfg80211_wiphy_work+0x2f0/0x490 [ 321.395399][ C1] ? process_scheduled_works+0x976/0x1840 [ 321.395415][ C1] process_scheduled_works+0xa66/0x1840 [ 321.395442][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 321.395461][ C1] ? assign_work+0x364/0x3d0 [ 321.395479][ C1] worker_thread+0x870/0xd30 [ 321.395497][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 321.395514][ C1] ? __kthread_parkme+0x169/0x1d0 [ 321.395531][ C1] ? __pfx_worker_thread+0x10/0x10 [ 321.395546][ C1] kthread+0x7a9/0x920 [ 321.395562][ C1] ? __pfx_kthread+0x10/0x10 [ 321.395579][ C1] ? __pfx_worker_thread+0x10/0x10 [ 321.395594][ C1] ? __pfx_kthread+0x10/0x10 [ 321.395609][ C1] ? __pfx_kthread+0x10/0x10 [ 321.395631][ C1] ? __pfx_kthread+0x10/0x10 [ 321.395647][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.395661][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 321.395676][ C1] ? __pfx_kthread+0x10/0x10 [ 321.395692][ C1] ret_from_fork+0x4b/0x80 [ 321.395708][ C1] ? __pfx_kthread+0x10/0x10 [ 321.395724][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.395745][ C1] [ 321.396299][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 321.955916][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 321.966056][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.976098][ T30] Call Trace: [ 321.979368][ T30] [ 321.982289][ T30] dump_stack_lvl+0x241/0x360 [ 321.986966][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.992156][ T30] ? __pfx__printk+0x10/0x10 [ 321.996737][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 322.002722][ T30] ? vscnprintf+0x5d/0x90 [ 322.007051][ T30] panic+0x349/0x880 [ 322.010941][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 322.017084][ T30] ? __pfx_panic+0x10/0x10 [ 322.021492][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 322.026853][ T30] ? __irq_work_queue_local+0x137/0x410 [ 322.032389][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 322.037753][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 322.043895][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 322.050037][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 322.056181][ T30] watchdog+0x1097/0x10a0 [ 322.060503][ T30] ? watchdog+0x1ea/0x10a0 [ 322.064914][ T30] ? __pfx_watchdog+0x10/0x10 [ 322.069582][ T30] kthread+0x7a9/0x920 [ 322.073643][ T30] ? __pfx_kthread+0x10/0x10 [ 322.078226][ T30] ? __pfx_watchdog+0x10/0x10 [ 322.082895][ T30] ? __pfx_kthread+0x10/0x10 [ 322.087475][ T30] ? __pfx_kthread+0x10/0x10 [ 322.092057][ T30] ? __pfx_kthread+0x10/0x10 [ 322.096639][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.101828][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 322.107021][ T30] ? __pfx_kthread+0x10/0x10 [ 322.111606][ T30] ret_from_fork+0x4b/0x80 [ 322.116013][ T30] ? __pfx_kthread+0x10/0x10 [ 322.120593][ T30] ret_from_fork_asm+0x1a/0x30 [ 322.125357][ T30] [ 322.128615][ T30] Kernel Offset: disabled [ 322.132927][ T30] Rebooting in 86400 seconds..