last executing test programs: 45.602689362s ago: executing program 0 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) 45.418022524s ago: executing program 0 (id=140): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000a00)=0xe8) r8 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) r10 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, &(0x7f0000001c00)=0xc) r12 = socket$caif_stream(0x25, 0x1, 0x3) r13 = socket$nl_rdma(0x10, 0x3, 0x14) r14 = gettid() r15 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e80)=0x0) r17 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001ec0)={0x0}, &(0x7f0000001f00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f40)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000002040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) r21 = gettid() r22 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002100)={0x0, 0x0, 0x0}, &(0x7f0000002140)=0xc) r24 = socket$caif_stream(0x25, 0x1, 0x1) sendmmsg$unix(r0, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)="a778b680dd55297680f98d2fd6ffdc90d643d2d47da25c66773f5c7c66b2eede796eb4bbcee6033266ca4d94fdb0456510d53cb36dc94ae2d850817b7ed9cea2b404288b9c71b5e7b6dac314317b8bb5dc449a4f6900a70181657d9ddddf849653907807a5f90a2e28ff5a9df03409190de9cd2cc1213ef2f6ed45ae2b4f94f88fd2a6ce20cc1f1c644059fe8b9d0c8565de530c48e4cb9b619197af9e30b9954dd8", 0xa2}, {&(0x7f00000001c0)="4034030f190a2722350ba889d9c2a4b1ba7bf7213a4636874fd31571107439a2430b66bba8d96c0bb417a1f9c183e49069c00f35217e8812e08ce5caf707868704b0bd87050c1001133842be7ef1aef4099e964556c54d9383c72a51aaeb0b9d992b493f5b8114d25f4c652c496b541175", 0x71}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="6c5921effde2b6de79b15b99abb9f651038e4977fe", 0x15}, {&(0x7f0000000380)="926d87ca", 0x4}, {&(0x7f00000003c0)="5e16edf452824a5d2561498b2a19c17edd884bce728d58047a040269cb621c355b2c6bdf9a52746e16a9183931c97088d036af1081798eda35c3914acb45a9fa4eb7199b8308cb87cefb5ffa7979861d714b876cb2fda6ba49d03ccaa32de312ceba440f733a92084d2c05a56cc86b5bea0f9115d0a4d422b47ac414f20fa0536c7a1f35b7618eba4fd9fb6341af38b747660fb8cb68ca5d6b74a9f2ae1049232a80380cfb9463498c183971f7eccf2bb806a2ed670701ea8acf2684ce2479dbf441e2c1f8c278cc3add5fe87f3fd65d0736a368a4252323f08b93dd40", 0xdd}, {&(0x7f00000004c0)="e87ea0f23371eef1c29d58ebd1c8eb8bf37c2801fb5b0997cd7f7273df7d3b23b76039afc8ff118f9bea5c648f502acc8d1c9ef30062835e956820c77cd90dca1c74cda194bf20dccba556ac55d7ffb660a56cc660af24d4bb7bd561a485dae581203053110e8ac7166af04ccb29", 0x6e}], 0x7, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r1, r0, 0xffffffffffffffff, r5]}}], 0x68, 0x40000}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="d56c368960da2368f6942190e972f71f2913ed992e5b7540e020f705f31333900f30c6d25927e6ba21e9f279c47ba672d38dbb740ea6077b3d7b0d45c0a76f43cc877dbff86c766643bdbcb10733862a2c6a0e9a60ed769b2f61d5c8a08a3177", 0x60}], 0x1, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r9}}}], 0x40, 0x20000004}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f0000001c40)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x2c, 0x1, 0x1, [r1, r12, r1, r0, r0, r13, r1]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, r15}}}], 0x70}}, {{&(0x7f0000001cc0)=@abs={0xc03ca0d5cdae11a4, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d40)="1975893734a66957aa3465bbd4a2b26a39e6618eb1796a71ba50fe426b0c3c71ba96e6d62fcbe0deb3f4f1d1f30c8a9bc5cd1fda92bd1e897fa9018cc0adec0cf56e779ba19d44dd0b025e1ca62a20e2900d7e62588a", 0x56}, {&(0x7f0000001dc0)="9eca7fba26e29e1e94819ee1fa0a5245ab7e83ba7436b422698a06b5e00acc2c4cb989168a8e3763343059f65f289d1f743ee38959a57561d2035a5bbe21627643f479de188f185a3ea18e8d77ae572d87be866b7580fe3b7d50059262cf4e60b8fc4a9c7cb811d7288c59a3e42dd648f0450492", 0x74}], 0x2, &(0x7f0000002180)=[@cred={{0x1c, 0x1, 0x2, {r16, 0xee00, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x24, 0x1, 0x1, [r24, r1, r1, r1, r1]}}], 0x88}}, {{&(0x7f0000002240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002300)=[{&(0x7f00000022c0)="4fdd5ea8bd7b31b7b92cd8ee84973bf9228310ecc0fd9a25bcdc2b5b07", 0x1d}], 0x1, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002340)="b559b55a52cb018da4a6c89b3ab7359cb9840d5da61da6576f5ee4cd9aabaaf09c588b5160480e16ca18e1bcb405a5e1b4923f7e0f7dab848a", 0x39}, {&(0x7f0000002380)="c7308ace1aee96120dd352c273c7e0b9fa9685418c8a65ae2b00d06c6ea6c2138ba3930f1c14ffb95c22777a6070a7244da1f97cd7c8403b247f1b4c6e92380bb2a80ca3f9853b6b435c5554a4f144db45b5599880ee45ef3f6872b963968d4571135701b7b4653425900b1aea0e677761e936e3d9c8d0571f6e64c647c196f44b72c77461bdb5540cec97a3648a91586edfb97711cd40f1795df6ae3ad5cb2d593c810db1c1033ce90c8788c4c0366ef59b28737dd730f0a3786bdc19f6c3f0c97b0370d01c2dfad8f4fecaa26ff7b02a7efd9ee3b6e575073ed7f7fb1b", 0xde}, {&(0x7f0000002480)="7e95409e18a0b388c6003664eec13d57e0e31e8e66d8457843e62dab4cb7c3b6be57ea8d3316f9f34631ceed1441a0bfd1fcb61ad378ac9d", 0x38}, {&(0x7f00000024c0)="f6a320d6192333a5b5ca6eee07d176313f71011dd2ad050a52108eddd2ec3bd1b801fe359bfbf92603964fabb0a57d57cabe98cb6d82f76c5cf6cfd8e7fc6d2c7d304be8bf728ba289c6f3d8e04060574abbba51a6db05b8dbd90805a9bcbff9c013fab79cb07aa8cd9d8056b7335e81845644fedd5f342cf4dcd578c15efcf57608324fdcc8d0a1b17803e25ebb7bccec092c64560ceefdfa2c72082fb65dfcdc9b11a3ac7bf76248687201613d181966297282bec0", 0xb6}], 0x4, 0x0, 0x0, 0x4000800}}], 0x6, 0x8881) r25 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r25, 0x894b, &(0x7f0000002740)) r26 = bpf$ITER_CREATE(0x21, &(0x7f0000002780), 0x8) sendmsg$BATADV_CMD_SET_HARDIF(r26, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x40004) 45.206705505s ago: executing program 0 (id=143): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000015c0)=""/4108, &(0x7f0000000040)=0x100c) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x751f, [0x3, 0x27c], 0x3}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 37.653675567s ago: executing program 0 (id=143): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000015c0)=""/4108, &(0x7f0000000040)=0x100c) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x751f, [0x3, 0x27c], 0x3}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 36.104278929s ago: executing program 4 (id=270): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r5, 0x0, r6, &(0x7f0000000040), 0x8f5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2d, 'pids'}, {0x2b, 'cpu'}, {0x2d, 'cpuacct'}, {0x2d, 'cpu'}]}, 0x19) unshare(0x2000400) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x1c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b32, &(0x7f0000000040)) shutdown(r7, 0x1) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) 35.938620666s ago: executing program 4 (id=272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt(r1, 0x1, 0xb, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="0000001001000000000000000023000000000000511ee7cfc45655a44adaa566583f3cc874407df3c47bf3b71b5865524fa2122e8d0592cb3181bd0f2232979e18bf83f445f34ad682b974b4402f9d2df887ae9116fc67c48f58c8bdd08b7a7dd1e8efa9d70b500a28", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="02"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="02"], 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 35.318752174s ago: executing program 4 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'pimreg\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'pimreg\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) 35.144601263s ago: executing program 4 (id=280): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = syz_init_net_socket$ax25(0x3, 0xb, 0x1) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000180)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1410, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendto$ax25(r4, &(0x7f0000000300)="76745e6fc5a72cb8b43e9e90ac3b33a267c0c698da17d7df8a05456378c4060a6affb2d8aac1ec1dce2dd73735ee55f57911ab0c51775f7aff2dea59e63e65245a001aeb11202d59090908bf646d41cbfe1460865a98c6468de5e07f9766649f368a00e67dbc6847da68d1643f73fa39b85a6fcb6b4b0766787b3d017bad48337e4b159d1b0759af0428a5caf146fce9492a6c6ae7443d8614109ce8689f96148dc5000080b71bb63e00fb2ac19e77b1a5e4c5b348b0ba01dc633672a3b3b9c0a496f1806d188c00182cc8a6f4f64067e085d1b4", 0xd4, 0x8000, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socketpair(0x18, 0x2, 0x1, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x174, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8000, 0x3, 0x4]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}}]}, @CTA_STATUS_MASK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x42f1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$inet(0x2, 0x6, 0x73) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc387}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4c000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe4b0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'gre0\x00', r3, 0x40, 0x1, 0x2, 0xffd1, {{0xa, 0x4, 0x0, 0x1f, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@generic={0x82, 0x6, "62853604"}, @generic={0x44, 0x7, "92e2831e55"}, @lsrr={0x83, 0x7, 0x19, [@loopback]}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40200004}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@newtclass={0x48, 0x28, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffff, 0x1}, {0xffe0, 0x3}, {0x9, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @tclass_kind_options=@c_mq={0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shutdown(r7, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa53c, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000b80)={0x0, 0x948}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000c00)={r11, 0x8}, &(0x7f0000000c40)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r13, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001540)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000000ec0)={0x610, r14, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x508, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x1, 0xc, 0x6, 0x24, 0x36, 0xc, 0x16, 0x9, 0x73, 0x5, 0x36, 0x3, 0x30, 0x16, 0x18, 0x1, 0x60, 0x60, 0x48, 0x30, 0x4, 0x12, 0x2, 0xb, 0x5, 0x9, 0x0, 0x60, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x16d, 0x3, 0x2b07, 0x3, 0x5, 0x3ff, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62, 0x6, 0x6, 0xff, 0xc, 0x3ff, 0x4, 0x40]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7fff, 0xad, 0x1bc, 0x58, 0x8, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x6}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x6}, {0x1, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x2b, 0x5, 0xf, 0x507, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x7, 0x2, 0x4, 0xffa5, 0x40, 0x92]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xb897, 0xa, 0x3, 0x7, 0xfff3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x9, 0x5, 0x24, 0x6, 0x60, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x4}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x9}, {0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xfffc, 0x0, 0x9, 0x0, 0xffff, 0xd40d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8000, 0x29c5, 0x6, 0xfffb, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x1b, 0x2, 0x18, 0x2, 0x4, 0xc, 0x24, 0x9, 0x36, 0x12, 0xb, 0x12, 0x9, 0x16, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2bc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x1000, 0x8, 0x4, 0x8ce6, 0x6, 0x6, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8000, 0x1, 0xfd6, 0x1, 0x9, 0x5, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x60, 0x3bcafafe98a66c38, 0x2, 0xc, 0x16, 0x5, 0x16, 0x16, 0xc, 0x24, 0x16, 0x18, 0x12]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x6c, 0x24, 0x18, 0x24, 0x9, 0x48, 0x1, 0x18, 0x9, 0xb, 0x20, 0x0, 0x16, 0x16, 0x4, 0x30, 0xc47a17af3b8a4e94, 0x30, 0x4, 0x6c, 0xc113d9687551112, 0x16, 0x6, 0x12, 0xc, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xc, 0x5, 0x101, 0x4, 0x9, 0x8, 0x7]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff7, 0x7e, 0x200, 0x2, 0xda67, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x2}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x5}, {0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1ff, 0xc5a, 0xc18, 0x580, 0x9, 0x8000, 0xa84]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x90, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0x5, 0x58e1, 0x8, 0xfffd, 0x7578, 0x6]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x0, 0xee5d, 0x9, 0x2400, 0xf]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x2, 0x24, 0x2, 0x2, 0x9, 0x3, 0x0, 0x30, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x49fb231e6624512f, 0x1b, 0x5, 0x1, 0x3, 0x36, 0x2, 0x4, 0x4, 0xb, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x12, 0x60, 0x6c, 0x18, 0x18, 0x2, 0x5, 0x60, 0x3, 0x1b, 0x16, 0x3, 0x0]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x2, 0x16, 0x24, 0x9, 0x48, 0x18, 0x1b, 0x12, 0x18, 0x16, 0x3, 0x4b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x2, 0xb, 0x3, 0x3, 0x6, 0x100]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x7f, 0x8, 0x6, 0x7f, 0xc, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a8, 0xc081, 0x99e, 0x80, 0x24ec, 0x1, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xc8d, 0x6, 0x5, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x5, 0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x9}, {0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x1}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x6, 0x6c, 0x24, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x610}, 0x1, 0x0, 0x0, 0x40000}, 0xc0800) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r15, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c4}, 0x4008880) 33.998395147s ago: executing program 2 (id=294): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) (async) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0xfffffffffffffec4, 0x0, 0x0, &(0x7f00000000c0)=""/62, 0x3e}, 0x400000}], 0x1, 0x60010020, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 33.927540554s ago: executing program 2 (id=295): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet(r0, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x12c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@typed={0x104, 0x8, 0x0, 0x0, @binary="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"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) accept$alg(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000206010300000000000000000000000014000780080011400000000005001500120000000500010006000000050005000a00000005000400000000000900020073797a300000000015e10300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) 33.710692315s ago: executing program 2 (id=297): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000), 0x4) 33.605672265s ago: executing program 2 (id=300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) close(r2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r2, 0x4, r4}, 0x10) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r0]}}], 0x28, 0x20008880}}], 0x2, 0x4c054) 33.370357618s ago: executing program 2 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1fffffdb, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32=r2], 0x1c}}, 0x804) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x1411, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010f00000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000004f000000a05a428676e0c0090a0a4ff1e5278790681797b39f6bafae558cf0cfce9b63cd11de05d412b960"], 0x28}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000500)=""/13, 0xd}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x9, 0x200, 0x6) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$tun(r7, &(0x7f0000000940)={@void, @val={0x1, 0x80, 0x4, 0x0, 0x7f, 0x6}, @llc={@llc={0xfc, 0x2, "8c", "d7e18b24431cbb8b8b6666de405dd22c6ba1fadaf6d1323eda4a0db33aa22c9947aea22c26f33f6cac661a44718c65741fbc5542239fc82f12089bd1e94d06b330ffc5d36db33ca3690c36c1d2c4b5b388c7f2b446c1b176719d33eb5c201fc0a48bd0fc4ea261f3d84943f6"}}}, 0x79) 28.351761087s ago: executing program 0 (id=143): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000015c0)=""/4108, &(0x7f0000000040)=0x100c) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x751f, [0x3, 0x27c], 0x3}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 25.605516633s ago: executing program 4 (id=280): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = syz_init_net_socket$ax25(0x3, 0xb, 0x1) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000180)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1410, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendto$ax25(r4, &(0x7f0000000300)="76745e6fc5a72cb8b43e9e90ac3b33a267c0c698da17d7df8a05456378c4060a6affb2d8aac1ec1dce2dd73735ee55f57911ab0c51775f7aff2dea59e63e65245a001aeb11202d59090908bf646d41cbfe1460865a98c6468de5e07f9766649f368a00e67dbc6847da68d1643f73fa39b85a6fcb6b4b0766787b3d017bad48337e4b159d1b0759af0428a5caf146fce9492a6c6ae7443d8614109ce8689f96148dc5000080b71bb63e00fb2ac19e77b1a5e4c5b348b0ba01dc633672a3b3b9c0a496f1806d188c00182cc8a6f4f64067e085d1b4", 0xd4, 0x8000, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socketpair(0x18, 0x2, 0x1, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x174, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8000, 0x3, 0x4]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}}]}, @CTA_STATUS_MASK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x42f1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$inet(0x2, 0x6, 0x73) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc387}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4c000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe4b0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'gre0\x00', r3, 0x40, 0x1, 0x2, 0xffd1, {{0xa, 0x4, 0x0, 0x1f, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@generic={0x82, 0x6, "62853604"}, @generic={0x44, 0x7, "92e2831e55"}, @lsrr={0x83, 0x7, 0x19, [@loopback]}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40200004}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@newtclass={0x48, 0x28, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffff, 0x1}, {0xffe0, 0x3}, {0x9, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @tclass_kind_options=@c_mq={0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shutdown(r7, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa53c, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000b80)={0x0, 0x948}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000c00)={r11, 0x8}, &(0x7f0000000c40)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r13, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001540)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000000ec0)={0x610, r14, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x508, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x1, 0xc, 0x6, 0x24, 0x36, 0xc, 0x16, 0x9, 0x73, 0x5, 0x36, 0x3, 0x30, 0x16, 0x18, 0x1, 0x60, 0x60, 0x48, 0x30, 0x4, 0x12, 0x2, 0xb, 0x5, 0x9, 0x0, 0x60, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x16d, 0x3, 0x2b07, 0x3, 0x5, 0x3ff, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62, 0x6, 0x6, 0xff, 0xc, 0x3ff, 0x4, 0x40]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7fff, 0xad, 0x1bc, 0x58, 0x8, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x6}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x6}, {0x1, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x2b, 0x5, 0xf, 0x507, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x7, 0x2, 0x4, 0xffa5, 0x40, 0x92]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xb897, 0xa, 0x3, 0x7, 0xfff3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x9, 0x5, 0x24, 0x6, 0x60, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x4}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x9}, {0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xfffc, 0x0, 0x9, 0x0, 0xffff, 0xd40d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8000, 0x29c5, 0x6, 0xfffb, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x1b, 0x2, 0x18, 0x2, 0x4, 0xc, 0x24, 0x9, 0x36, 0x12, 0xb, 0x12, 0x9, 0x16, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2bc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x1000, 0x8, 0x4, 0x8ce6, 0x6, 0x6, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8000, 0x1, 0xfd6, 0x1, 0x9, 0x5, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x60, 0x3bcafafe98a66c38, 0x2, 0xc, 0x16, 0x5, 0x16, 0x16, 0xc, 0x24, 0x16, 0x18, 0x12]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x6c, 0x24, 0x18, 0x24, 0x9, 0x48, 0x1, 0x18, 0x9, 0xb, 0x20, 0x0, 0x16, 0x16, 0x4, 0x30, 0xc47a17af3b8a4e94, 0x30, 0x4, 0x6c, 0xc113d9687551112, 0x16, 0x6, 0x12, 0xc, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xc, 0x5, 0x101, 0x4, 0x9, 0x8, 0x7]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff7, 0x7e, 0x200, 0x2, 0xda67, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x2}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x5}, {0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1ff, 0xc5a, 0xc18, 0x580, 0x9, 0x8000, 0xa84]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x90, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0x5, 0x58e1, 0x8, 0xfffd, 0x7578, 0x6]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x0, 0xee5d, 0x9, 0x2400, 0xf]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x2, 0x24, 0x2, 0x2, 0x9, 0x3, 0x0, 0x30, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x49fb231e6624512f, 0x1b, 0x5, 0x1, 0x3, 0x36, 0x2, 0x4, 0x4, 0xb, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x12, 0x60, 0x6c, 0x18, 0x18, 0x2, 0x5, 0x60, 0x3, 0x1b, 0x16, 0x3, 0x0]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x2, 0x16, 0x24, 0x9, 0x48, 0x18, 0x1b, 0x12, 0x18, 0x16, 0x3, 0x4b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x2, 0xb, 0x3, 0x3, 0x6, 0x100]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x7f, 0x8, 0x6, 0x7f, 0xc, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a8, 0xc081, 0x99e, 0x80, 0x24ec, 0x1, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xc8d, 0x6, 0x5, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x5, 0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x9}, {0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x1}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x6, 0x6c, 0x24, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x610}, 0x1, 0x0, 0x0, 0x40000}, 0xc0800) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r15, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c4}, 0x4008880) 24.184033273s ago: executing program 2 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1fffffdb, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32=r2], 0x1c}}, 0x804) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x1411, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010f00000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000004f000000a05a428676e0c0090a0a4ff1e5278790681797b39f6bafae558cf0cfce9b63cd11de05d412b960"], 0x28}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000500)=""/13, 0xd}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x9, 0x200, 0x6) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$tun(r7, &(0x7f0000000940)={@void, @val={0x1, 0x80, 0x4, 0x0, 0x7f, 0x6}, @llc={@llc={0xfc, 0x2, "8c", "d7e18b24431cbb8b8b6666de405dd22c6ba1fadaf6d1323eda4a0db33aa22c9947aea22c26f33f6cac661a44718c65741fbc5542239fc82f12089bd1e94d06b330ffc5d36db33ca3690c36c1d2c4b5b388c7f2b446c1b176719d33eb5c201fc0a48bd0fc4ea261f3d84943f6"}}}, 0x79) 18.05907658s ago: executing program 0 (id=143): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000015c0)=""/4108, &(0x7f0000000040)=0x100c) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x751f, [0x3, 0x27c], 0x3}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17.349234813s ago: executing program 3 (id=414): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000206000000000000000000000000000005000100070000000900020073797a310000000005005d"], 0x30}}, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1bc, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x38, 0x5b, "d7bede12ae2448019c477b88baca020303f02b2ce38db9b60d9af130caa69e5e6541619e77e47ce62ba45aa574627f3010b5a372"}, @NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "d4b76d28e29fb2a2232c4084e94e231d6fb9870afef2f3b2dbc32a6e692d99be1695e9a6b44c8bc75029be7a69369922247dae75be5976cd98a322346730334b3eff053e22b2a4160bf96982b8dbc89d9972e0741d3f05ba0d644d309391de25f648b844d70db39ca4aa3acc0ca8b93abbaf4513cb87e097a9318c860ec2e7f02400ba25ad"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfc22}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xa3, 0x5b, "e4716975c105e14aa60a80de30d9a3330eb4e4d0cb9106c5f9e78ac4bf7d99ec33fd490e2613035119b2b0c9c1c3b3c9035f5bad00e235c6335152b1fa54cf93c8a8d19554611fb12929a0fdc7031070941c4c6cb58cfb3c27a15be4690e1a614dc189dd64ca1660dd28ff1830519c68d90bf4966a1dea51cf7c61cff5106f32fbed34f26eb73852d22355f31223fb5747cabc28699dbe675af0a28280b702"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf8, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff896, 0x17}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "793b41c920"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xc, 0x4, "8ab2e0ba83068c3f"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xb, 0x4, "b26ef4464bdc3c"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x6, 0x4, "37e4"}]}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2d37c5975f31fe3e200d224c8"}, @NL80211_KEY_SEQ={0xe, 0x4, "d1750e3855f1e656cd0c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ccdc1e3be6"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x41}, 0x4040090) (rerun: 32) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xa}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x10, 0x0, 0x5, 0x9, 0x6, 0x1, 0x1, 0x9, 0x2, 0x7, 0x6, 0x6, 0x7, 0x9, 0x5, 0x5], 0x1, [0x9, 0x1, 0xfffd, 0x4, 0x5, 0x3, 0x0, 0x7ff, 0x8, 0x6, 0x8, 0x5, 0x6, 0xfff, 0x8, 0x9], [0x6, 0x1000, 0x7, 0xe, 0x7, 0x101, 0x5, 0x4, 0x100, 0x4, 0x7, 0x7, 0x8000, 0x9, 0x3, 0x5]}}}}]}, 0x88}}, 0x804) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000040)) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x8a, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 17.174549127s ago: executing program 3 (id=416): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) connect$can_bcm(r2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @from_mac=@broadcast, {0x4, 0xff}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, 0x1, 0x49, @val={0x10, 0x1, 0x52}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000940)={{0x3, @null}, [@remote, @remote, @bcast, @null, @bcast, @rose, @netrom, @rose]}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.951036357s ago: executing program 3 (id=417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5500006c62d2cf449496ad0bfbc15f812d914e0010001fff000000000000000000000080", @ANYRES32=0x0, @ANYBLOB="000000000a7c0400240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32=r2, @ANYBLOB="0800040000000000"], 0x4c}}, 0x0) 16.906416022s ago: executing program 4 (id=280): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = syz_init_net_socket$ax25(0x3, 0xb, 0x1) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000180)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1410, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendto$ax25(r4, &(0x7f0000000300)="76745e6fc5a72cb8b43e9e90ac3b33a267c0c698da17d7df8a05456378c4060a6affb2d8aac1ec1dce2dd73735ee55f57911ab0c51775f7aff2dea59e63e65245a001aeb11202d59090908bf646d41cbfe1460865a98c6468de5e07f9766649f368a00e67dbc6847da68d1643f73fa39b85a6fcb6b4b0766787b3d017bad48337e4b159d1b0759af0428a5caf146fce9492a6c6ae7443d8614109ce8689f96148dc5000080b71bb63e00fb2ac19e77b1a5e4c5b348b0ba01dc633672a3b3b9c0a496f1806d188c00182cc8a6f4f64067e085d1b4", 0xd4, 0x8000, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socketpair(0x18, 0x2, 0x1, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x174, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8000, 0x3, 0x4]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}}]}, @CTA_STATUS_MASK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x42f1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$inet(0x2, 0x6, 0x73) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc387}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4c000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe4b0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'gre0\x00', r3, 0x40, 0x1, 0x2, 0xffd1, {{0xa, 0x4, 0x0, 0x1f, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@generic={0x82, 0x6, "62853604"}, @generic={0x44, 0x7, "92e2831e55"}, @lsrr={0x83, 0x7, 0x19, [@loopback]}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40200004}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@newtclass={0x48, 0x28, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffff, 0x1}, {0xffe0, 0x3}, {0x9, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @tclass_kind_options=@c_mq={0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shutdown(r7, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa53c, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000b80)={0x0, 0x948}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000c00)={r11, 0x8}, &(0x7f0000000c40)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r13, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001540)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000000ec0)={0x610, r14, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x508, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x1, 0xc, 0x6, 0x24, 0x36, 0xc, 0x16, 0x9, 0x73, 0x5, 0x36, 0x3, 0x30, 0x16, 0x18, 0x1, 0x60, 0x60, 0x48, 0x30, 0x4, 0x12, 0x2, 0xb, 0x5, 0x9, 0x0, 0x60, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x16d, 0x3, 0x2b07, 0x3, 0x5, 0x3ff, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62, 0x6, 0x6, 0xff, 0xc, 0x3ff, 0x4, 0x40]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7fff, 0xad, 0x1bc, 0x58, 0x8, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x6}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x6}, {0x1, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x2b, 0x5, 0xf, 0x507, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x7, 0x2, 0x4, 0xffa5, 0x40, 0x92]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xb897, 0xa, 0x3, 0x7, 0xfff3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x9, 0x5, 0x24, 0x6, 0x60, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x4}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x9}, {0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xfffc, 0x0, 0x9, 0x0, 0xffff, 0xd40d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8000, 0x29c5, 0x6, 0xfffb, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x1b, 0x2, 0x18, 0x2, 0x4, 0xc, 0x24, 0x9, 0x36, 0x12, 0xb, 0x12, 0x9, 0x16, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2bc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x1000, 0x8, 0x4, 0x8ce6, 0x6, 0x6, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8000, 0x1, 0xfd6, 0x1, 0x9, 0x5, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x60, 0x3bcafafe98a66c38, 0x2, 0xc, 0x16, 0x5, 0x16, 0x16, 0xc, 0x24, 0x16, 0x18, 0x12]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x6c, 0x24, 0x18, 0x24, 0x9, 0x48, 0x1, 0x18, 0x9, 0xb, 0x20, 0x0, 0x16, 0x16, 0x4, 0x30, 0xc47a17af3b8a4e94, 0x30, 0x4, 0x6c, 0xc113d9687551112, 0x16, 0x6, 0x12, 0xc, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xc, 0x5, 0x101, 0x4, 0x9, 0x8, 0x7]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff7, 0x7e, 0x200, 0x2, 0xda67, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x2}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x5}, {0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1ff, 0xc5a, 0xc18, 0x580, 0x9, 0x8000, 0xa84]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x90, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0x5, 0x58e1, 0x8, 0xfffd, 0x7578, 0x6]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x0, 0xee5d, 0x9, 0x2400, 0xf]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x2, 0x24, 0x2, 0x2, 0x9, 0x3, 0x0, 0x30, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x49fb231e6624512f, 0x1b, 0x5, 0x1, 0x3, 0x36, 0x2, 0x4, 0x4, 0xb, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x12, 0x60, 0x6c, 0x18, 0x18, 0x2, 0x5, 0x60, 0x3, 0x1b, 0x16, 0x3, 0x0]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x2, 0x16, 0x24, 0x9, 0x48, 0x18, 0x1b, 0x12, 0x18, 0x16, 0x3, 0x4b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x2, 0xb, 0x3, 0x3, 0x6, 0x100]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x7f, 0x8, 0x6, 0x7f, 0xc, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a8, 0xc081, 0x99e, 0x80, 0x24ec, 0x1, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xc8d, 0x6, 0x5, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x5, 0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x9}, {0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x1}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x6, 0x6c, 0x24, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x610}, 0x1, 0x0, 0x0, 0x40000}, 0xc0800) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r15, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c4}, 0x4008880) 16.867838255s ago: executing program 3 (id=418): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0xffffffffffffff4b, &(0x7f0000000100)=[{&(0x7f0000000740)=""/4096, 0x1018}, {&(0x7f0000000400)=""/104, 0x68}], 0x2}, 0x400005}], 0x1, 0x20, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@delchain={0x50, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xc, 0xfff1}, {0x2, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x7f800000, 0xff000000, 0xff000000, 0xff]}]}}]}, 0x50}}, 0x48800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xb83}, 0x8) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000300000000040000000000000000e00000020000000000000000000000000000000000000000000040e600000000000000007079000003008a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf4, 0x2a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) 16.115265312s ago: executing program 1 (id=420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffb, @mcast2, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_buf(r3, 0x0, 0x20, 0x0, &(0x7f0000000200)) 15.915381218s ago: executing program 3 (id=421): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x30, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xe4, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc1, 0xbe, "9a37c093ae691a9191f698b9085bcd4aed5b5339ada2eb5eca6dd2a29cb54d820045b2e76f3dbe2d38e7fe522f275c91212a7b7664b4ce680ae77bfc645036a259d08ce0d4777e171dc1acca4d20b5fc1f6b692c1077e5c5a4966b7943df9a1ddaaf3463f2612cb873f8314de976978d386ef8add7a9aa4fdf9cd72adc6efbcf9da6858ae4ceb7f5ddfc44dc4dccb34ee6cac723f5c1940232cebbb66b5104b917a9a20d9c6a78f8dc77cfa3bec6ba582290d275c148042042cad4ff67"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x40090) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000200)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f72024fc60", 0x14}], 0x1}, 0x0) 15.814654647s ago: executing program 1 (id=422): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x18d6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r0 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8004) (async) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc41}, 0x80) (async) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) (async) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 15.754339563s ago: executing program 1 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x6c}, 0xa}]}]}, 0xfc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) 15.604065326s ago: executing program 1 (id=424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/73, 0x49, 0x1, &(0x7f0000000100)=""/65, 0x41}, &(0x7f0000000180)=0x40) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt(r0, 0x3, 0x3, &(0x7f0000000380)=""/4096, &(0x7f00000001c0)=0x1000) 15.482730684s ago: executing program 1 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aa"], 0x48}}, 0x0) 15.280626581s ago: executing program 3 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000e1307b9e90151a21a2fd79d9fa6b6811000014001280090001007665f575b734f859e9b2540384efe7fac7fcc11b9df30431e9534062ae", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r8, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="660000007100100028bd7000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100020003000c02018005000300030000000c00018005000300020000000c000180060002000c000000"], 0x48}}, 0x8000) 15.210593896s ago: executing program 1 (id=427): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c"], 0x5c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1c002c80080000"], 0x38}}, 0x0) sendto$inet6(r4, &(0x7f0000000240)="3c97a5940a496cf3777c6435d07c8f7e6bd0ebebaa3ab5c81ca2a33ba3849bf864bc12a4d897246cf7c9d58fe9faf071a05c0784abbbf325da825c977e9396c6a55dda9ba5", 0x45, 0x20000000, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x9}, 0x1c) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 169.532637ms ago: executing program 32 (id=427): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c"], 0x5c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1c002c80080000"], 0x38}}, 0x0) sendto$inet6(r4, &(0x7f0000000240)="3c97a5940a496cf3777c6435d07c8f7e6bd0ebebaa3ab5c81ca2a33ba3849bf864bc12a4d897246cf7c9d58fe9faf071a05c0784abbbf325da825c977e9396c6a55dda9ba5", 0x45, 0x20000000, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x9}, 0x1c) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 0s ago: executing program 33 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000e1307b9e90151a21a2fd79d9fa6b6811000014001280090001007665f575b734f859e9b2540384efe7fac7fcc11b9df30431e9534062ae", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r8, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="660000007100100028bd7000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100020003000c02018005000300030000000c00018005000300020000000c000180060002000c000000"], 0x48}}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 67.220544][ T5817] cgroup: Unknown subsys name 'net' [ 67.346616][ T5817] cgroup: Unknown subsys name 'cpuset' [ 67.354076][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.540572][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.457620][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.468207][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.475626][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.481297][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.490267][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.492347][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.499907][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.511866][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.512247][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.519260][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.529867][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.533703][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.540612][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.548082][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.556213][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.561816][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.568251][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.575458][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.582466][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.596730][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.598251][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.604310][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.612389][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.628193][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.644902][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.653571][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.666635][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.675467][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.683014][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.690392][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.937213][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.962488][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.039354][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.070766][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.096370][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 71.179146][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.186597][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.193832][ T5833] bridge_slave_0: entered allmulticast mode [ 71.201175][ T5833] bridge_slave_0: entered promiscuous mode [ 71.236888][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.244035][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.251776][ T5833] bridge_slave_1: entered allmulticast mode [ 71.258601][ T5833] bridge_slave_1: entered promiscuous mode [ 71.271803][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.278944][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.286174][ T5827] bridge_slave_0: entered allmulticast mode [ 71.292684][ T5827] bridge_slave_0: entered promiscuous mode [ 71.317250][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.324540][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.331689][ T5827] bridge_slave_1: entered allmulticast mode [ 71.338489][ T5827] bridge_slave_1: entered promiscuous mode [ 71.368263][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.397218][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.404633][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.411856][ T5837] bridge_slave_0: entered allmulticast mode [ 71.419144][ T5837] bridge_slave_0: entered promiscuous mode [ 71.432781][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.443514][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.465912][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.473070][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.481945][ T5837] bridge_slave_1: entered allmulticast mode [ 71.488761][ T5837] bridge_slave_1: entered promiscuous mode [ 71.502243][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.509586][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.516868][ T5839] bridge_slave_0: entered allmulticast mode [ 71.523459][ T5839] bridge_slave_0: entered promiscuous mode [ 71.545230][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.560337][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.567543][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.574886][ T5828] bridge_slave_0: entered allmulticast mode [ 71.581358][ T5828] bridge_slave_0: entered promiscuous mode [ 71.597610][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.606998][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.614376][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.621556][ T5839] bridge_slave_1: entered allmulticast mode [ 71.628295][ T5839] bridge_slave_1: entered promiscuous mode [ 71.641958][ T5833] team0: Port device team_slave_0 added [ 71.653907][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.661158][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.668625][ T5828] bridge_slave_1: entered allmulticast mode [ 71.675172][ T5828] bridge_slave_1: entered promiscuous mode [ 71.682854][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.707297][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.707984][ T5833] team0: Port device team_slave_1 added [ 71.713599][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.729353][ T5827] team0: Port device team_slave_0 added [ 71.737150][ T5827] team0: Port device team_slave_1 added [ 71.756863][ T5837] team0: Port device team_slave_0 added [ 71.764883][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.781688][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.788959][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.815444][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.845185][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.856245][ T5837] team0: Port device team_slave_1 added [ 71.863691][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.873375][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.880486][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.906495][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.917965][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.925014][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.950968][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.963140][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.996532][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.003502][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.029526][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.060279][ T5839] team0: Port device team_slave_0 added [ 72.067831][ T5839] team0: Port device team_slave_1 added [ 72.085506][ T5828] team0: Port device team_slave_0 added [ 72.091755][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.098988][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.125250][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.137693][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.144774][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.170833][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.198767][ T5833] hsr_slave_0: entered promiscuous mode [ 72.204977][ T5833] hsr_slave_1: entered promiscuous mode [ 72.218636][ T5828] team0: Port device team_slave_1 added [ 72.230433][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.237693][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.264028][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.276368][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.283359][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.309630][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.376909][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.383917][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.410223][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.423784][ T5827] hsr_slave_0: entered promiscuous mode [ 72.430107][ T5827] hsr_slave_1: entered promiscuous mode [ 72.436221][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.443792][ T5827] Cannot create hsr debugfs directory [ 72.451950][ T5837] hsr_slave_0: entered promiscuous mode [ 72.458406][ T5837] hsr_slave_1: entered promiscuous mode [ 72.464695][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.472274][ T5837] Cannot create hsr debugfs directory [ 72.499709][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.506846][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.532826][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.568884][ T5839] hsr_slave_0: entered promiscuous mode [ 72.575156][ T5839] hsr_slave_1: entered promiscuous mode [ 72.581075][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.589171][ T5839] Cannot create hsr debugfs directory [ 72.652997][ T5828] hsr_slave_0: entered promiscuous mode [ 72.659824][ T5828] hsr_slave_1: entered promiscuous mode [ 72.664614][ T5834] Bluetooth: hci1: command tx timeout [ 72.665474][ T5838] Bluetooth: hci0: command tx timeout [ 72.670772][ T5831] Bluetooth: hci3: command tx timeout [ 72.676160][ T5838] Bluetooth: hci2: command tx timeout [ 72.682306][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.695017][ T5828] Cannot create hsr debugfs directory [ 72.754438][ T5838] Bluetooth: hci4: command tx timeout [ 72.883891][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.895222][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.904062][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.916445][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.939782][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.953399][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.968293][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.980247][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.005984][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.020839][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.043186][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.052220][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.091554][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.100997][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.130571][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.143391][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.181392][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.188277][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.198903][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.212191][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.221306][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.248805][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.269907][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.277085][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.311475][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.321486][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.328672][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.370365][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.390842][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.409221][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.416353][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.439387][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.446590][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.458406][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.523897][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.531089][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.543072][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.550205][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.586468][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.620685][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.650245][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.666285][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.673386][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.695569][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.702680][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.719968][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.740494][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.789855][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.796994][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.839149][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.846321][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.923259][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.936686][ T5833] veth0_vlan: entered promiscuous mode [ 73.966648][ T5833] veth1_vlan: entered promiscuous mode [ 73.979920][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.023544][ T5833] veth0_macvtap: entered promiscuous mode [ 74.048255][ T5833] veth1_macvtap: entered promiscuous mode [ 74.083240][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.102419][ T5837] veth0_vlan: entered promiscuous mode [ 74.114899][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.141473][ T5837] veth1_vlan: entered promiscuous mode [ 74.150878][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.170497][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.197543][ T5827] veth0_vlan: entered promiscuous mode [ 74.208803][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.220736][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.232023][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.241008][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258775][ T5827] veth1_vlan: entered promiscuous mode [ 74.282224][ T5837] veth0_macvtap: entered promiscuous mode [ 74.309531][ T5837] veth1_macvtap: entered promiscuous mode [ 74.362285][ T5839] veth0_vlan: entered promiscuous mode [ 74.374014][ T5827] veth0_macvtap: entered promiscuous mode [ 74.387226][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.399963][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.411167][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.421685][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.432598][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.443412][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.452370][ T5827] veth1_macvtap: entered promiscuous mode [ 74.468660][ T5828] veth0_vlan: entered promiscuous mode [ 74.478422][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487495][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.496412][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.506632][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.532045][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.541020][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.541659][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.554076][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.569596][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.580179][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.591862][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.601059][ T5839] veth1_vlan: entered promiscuous mode [ 74.618592][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.629777][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.640141][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.651118][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.661818][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.689061][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698015][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707475][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716569][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726784][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.727584][ T5828] veth1_vlan: entered promiscuous mode [ 74.740467][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.747991][ T5838] Bluetooth: hci1: command tx timeout [ 74.748023][ T5838] Bluetooth: hci3: command tx timeout [ 74.748045][ T5838] Bluetooth: hci0: command tx timeout [ 74.755365][ T5838] Bluetooth: hci2: command tx timeout [ 74.783886][ T5839] veth0_macvtap: entered promiscuous mode [ 74.793918][ T5839] veth1_macvtap: entered promiscuous mode [ 74.818594][ T5828] veth0_macvtap: entered promiscuous mode [ 74.835319][ T5838] Bluetooth: hci4: command tx timeout [ 74.850216][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.856646][ T5828] veth1_macvtap: entered promiscuous mode [ 74.888300][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.899319][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.916821][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.936950][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.946946][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.957626][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.979725][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.987548][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 74.997138][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.005533][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.030008][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.053425][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.065127][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.076722][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.086898][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.098120][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.109132][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.130393][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.137271][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.140895][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.147236][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.170282][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.180273][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.209678][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.218600][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.246585][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.260206][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.271225][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.281817][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291739][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.302261][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.312534][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.324139][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.335770][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.370149][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.382800][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.419273][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.436689][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.448154][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.459239][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.469474][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.480259][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.492108][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.503099][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.527176][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.569354][ T5924] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10'. [ 75.589186][ T5924] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10'. [ 75.602843][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.622915][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638457][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650944][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.680813][ T5930] Zero length message leads to an empty skb [ 75.698254][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.713599][ T5930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.731926][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.852289][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.863424][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.888427][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.892547][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.953831][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.985074][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.087090][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.151319][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.162292][ T5952] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.194360][ T5946] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 76.198415][ T5954] IPv6: addrconf: prefix option has invalid lifetime [ 76.218911][ T5946] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.415119][ T5965] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 76.433377][ T5965] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 76.457608][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 76.471369][ T5965] netlink: 'syz.1.18': attribute type 39 has an invalid length. [ 76.513384][ T5967] syz.4.19 (5967) used greatest stack depth: 18672 bytes left [ 76.525855][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 76.774780][ T5979] IPVS: set_ctl: invalid protocol: 9 255.255.255.255:0 [ 76.806785][ T5982] syzkaller1: entered promiscuous mode [ 76.824688][ T5838] Bluetooth: hci2: command tx timeout [ 76.829906][ T5834] Bluetooth: hci0: command tx timeout [ 76.830189][ T5838] Bluetooth: hci3: command tx timeout [ 76.835595][ T5834] Bluetooth: hci1: command tx timeout [ 76.853997][ T5983] IPVS: set_ctl: invalid protocol: 9 255.255.255.255:0 [ 76.861628][ T5982] syzkaller1: entered allmulticast mode [ 76.906935][ T5838] Bluetooth: hci4: command tx timeout [ 77.003602][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 77.032621][ T5990] netlink: 'syz.4.23': attribute type 3 has an invalid length. [ 77.138018][ T5992] sctp: failed to load transform for md5: -2 [ 77.301034][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.363074][ T6021] bridge_slave_1: left allmulticast mode [ 77.380241][ T6021] bridge_slave_1: left promiscuous mode [ 77.389668][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.482356][ T6033] netlink: 'syz.1.37': attribute type 2 has an invalid length. [ 77.543619][ T6023] dccp_close: ABORT with 32 bytes unread [ 77.661597][ T6048] xt_NFQUEUE: number of total queues is 0 [ 77.663508][ T6047] netlink: 'syz.2.40': attribute type 2 has an invalid length. [ 77.997775][ T6071] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 78.078586][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.405708][ T6100] delete_channel: no stack [ 78.790152][ T5875] hid-generic 0005:15C2:0600.0001: item fetching failed at offset 0/1 [ 78.831237][ T5875] hid-generic 0005:15C2:0600.0001: probe with driver hid-generic failed with error -22 [ 78.904709][ T5838] Bluetooth: hci1: command tx timeout [ 78.905409][ T5831] Bluetooth: hci0: command tx timeout [ 78.910290][ T5838] Bluetooth: hci3: command tx timeout [ 78.916845][ T5834] Bluetooth: hci2: command tx timeout [ 78.984279][ T5831] Bluetooth: hci4: command tx timeout [ 79.867764][ T6218] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 79.966099][ T6229] vxcan0: tx drop: invalid da for name 0x0000000000000004 [ 79.979746][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.997916][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.005142][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.044503][ T6218] openvswitch: netlink: Key type 34 is out of range max 32 [ 80.272475][ T6247] __nla_validate_parse: 12 callbacks suppressed [ 80.272500][ T6247] netlink: 184 bytes leftover after parsing attributes in process `syz.3.85'. [ 80.359943][ T6250] ipt_REJECT: TCP_RESET invalid for non-tcp [ 80.397990][ T6252] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 80.433097][ T6252] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 80.470295][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.487803][ T6259] x_tables: duplicate underflow at hook 2 [ 80.508240][ T6252] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 80.541417][ T6262] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 80.552442][ T6262] nbd: couldn't find a device at index 20 [ 80.562806][ T6264] tipc: Started in network mode [ 80.568145][ T6264] tipc: Node identity a6381932471e, cluster identity 4711 [ 80.575595][ T6264] tipc: Enabled bearer , priority 0 [ 80.597745][ T6263] tipc: Disabling bearer [ 80.719768][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 80.853445][ T6282] nbd: must specify an index to disconnect [ 81.039991][ T6300] netlink: 'syz.2.103': attribute type 2 has an invalid length. [ 81.052431][ T6300] : entered promiscuous mode [ 81.223880][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 81.272019][ T6314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.383894][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'. [ 81.580116][ T6330] validate_nla: 2 callbacks suppressed [ 81.580135][ T6330] netlink: 'syz.2.115': attribute type 7 has an invalid length. [ 81.713405][ T6346] openvswitch: netlink: IP tunnel dst address not specified [ 81.976780][ T6360] netlink: 'syz.2.125': attribute type 13 has an invalid length. [ 82.012584][ T6360] veth0_macvtap: left promiscuous mode [ 82.071294][ T6360] macvtap0: entered allmulticast mode [ 82.077168][ T6367] Bluetooth: MGMT ver 1.23 [ 82.112912][ T6360] macvtap0: refused to change device tx_queue_len [ 82.184384][ T6377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.128'. [ 82.203729][ T6377] netlink: 43 bytes leftover after parsing attributes in process `syz.0.128'. [ 82.232513][ T6377] netlink: 'syz.0.128': attribute type 6 has an invalid length. [ 82.245620][ T6373] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 82.253574][ T6377] netlink: 'syz.0.128': attribute type 5 has an invalid length. [ 82.263739][ T6377] netlink: 43 bytes leftover after parsing attributes in process `syz.0.128'. [ 82.345724][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 82.363842][ T6373] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.543934][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 82.595126][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 82.904595][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.007293][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.109751][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.223504][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.308341][ T6436] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 83.490547][ T35] bridge_slave_1: left allmulticast mode [ 83.506690][ T35] bridge_slave_1: left promiscuous mode [ 83.554439][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.576171][ T6449] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 83.606123][ T35] bridge_slave_0: left allmulticast mode [ 83.611820][ T35] bridge_slave_0: left promiscuous mode [ 83.652333][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.659731][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.664715][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.687577][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.697040][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.731572][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.739066][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.779510][ T6466] sctp: [Deprecated]: syz.4.151 (pid 6466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.779510][ T6466] Use struct sctp_sack_info instead [ 84.087496][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.104402][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.137503][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 84.185263][ T35] bond0 (unregistering): Released all slaves [ 84.221694][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.228959][ T6461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.259124][ T6471] syzkaller1: entered allmulticast mode [ 84.393805][ T35] tipc: Left network mode [ 84.486917][ T6490] dvmrp8: entered allmulticast mode [ 84.514404][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 84.640861][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 84.667191][ T6484] dvmrp8: left allmulticast mode [ 84.707330][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 84.736473][ T6489] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.813044][ T6489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.859064][ T6454] chnl_net:caif_netlink_parms(): no params data found [ 84.904538][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 84.927297][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 84.987405][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.009932][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.061975][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.068896][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.082791][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.093480][ T6454] bridge_slave_0: entered allmulticast mode [ 85.101298][ T6454] bridge_slave_0: entered promiscuous mode [ 85.108738][ T6489] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.116320][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.123496][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.132559][ T6454] bridge_slave_1: entered allmulticast mode [ 85.139703][ T6454] bridge_slave_1: entered promiscuous mode [ 85.248844][ T35] hsr_slave_0: left promiscuous mode [ 85.270160][ T35] hsr_slave_1: left promiscuous mode [ 85.287706][ T6341] Set syz1 is full, maxelem 65536 reached [ 85.288134][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.310444][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.329372][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.340350][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.356951][ T35] veth1_macvtap: left promiscuous mode [ 85.362654][ T35] veth0_macvtap: left promiscuous mode [ 85.370520][ T35] veth1_vlan: left promiscuous mode [ 85.380132][ T35] veth0_vlan: left promiscuous mode [ 85.492085][ T6454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.505503][ T6548] __nla_validate_parse: 9 callbacks suppressed [ 85.505525][ T6548] netlink: 6 bytes leftover after parsing attributes in process `syz.1.165'. [ 85.546737][ T6548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.578915][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 85.642386][ T35] team0 (unregistering): Port device team_slave_1 removed [ 85.658014][ T35] team0 (unregistering): Port device team_slave_0 removed [ 85.721961][ T6454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.731312][ T6552] netlink: 'syz.2.168': attribute type 2 has an invalid length. [ 85.742362][ T6554] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.785015][ T5834] Bluetooth: hci2: command tx timeout [ 85.800105][ T6454] team0: Port device team_slave_0 added [ 85.833065][ T6454] team0: Port device team_slave_1 added [ 85.940097][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.950450][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.008853][ T6454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.040198][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.048054][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.144487][ T6454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.223342][ T6568] netlink: 'syz.3.171': attribute type 5 has an invalid length. [ 86.380225][ T6454] hsr_slave_0: entered promiscuous mode [ 86.398815][ T6454] hsr_slave_1: entered promiscuous mode [ 86.429530][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 86.649676][ T6598] vxcan0: tx drop: invalid da for name 0x0000000000000004 [ 87.022209][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 87.207224][ T6626] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 87.250255][ T6626] bond1: entered allmulticast mode [ 87.255753][ T6632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.187'. [ 87.265077][ T6632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.187'. [ 87.441828][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 87.465242][ T6454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.493127][ T6652] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.513003][ T6454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.559304][ T6650] v: renamed from veth1_virt_wifi (while UP) [ 87.598130][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 87.603691][ T6454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.634435][ T6656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 87.649517][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 87.660836][ T6454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.865627][ T5834] Bluetooth: hci2: command tx timeout [ 87.880624][ T6670] IPv6: syztnl0: Disabled Multicast RS [ 87.913460][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.930836][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.952532][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.959736][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.020824][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.028009][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.085066][ T6689] xt_limit: Overflow, try lower: 0/0 [ 88.105701][ T6692] xt_limit: Overflow, try lower: 0/0 [ 88.295015][ T6702] warning: `syz.1.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.571838][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.623119][ T6734] vlan0: entered promiscuous mode [ 88.628560][ T6734] vlan0: entered allmulticast mode [ 88.634931][ T6734] hsr_slave_1: entered allmulticast mode [ 88.699400][ T6454] veth0_vlan: entered promiscuous mode [ 88.729781][ T6454] veth1_vlan: entered promiscuous mode [ 88.735758][ T6741] netlink: 'syz.2.214': attribute type 24 has an invalid length. [ 88.776156][ T6454] veth0_macvtap: entered promiscuous mode [ 88.799331][ T6454] veth1_macvtap: entered promiscuous mode [ 88.838522][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.865786][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.878802][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.901751][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.924196][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.946440][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.958904][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.979593][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.998264][ T6756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 89.002705][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.024809][ T6756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 89.041090][ T6756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 89.057049][ T6756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 89.075224][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.094296][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.123382][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.133965][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.148565][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.159721][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.169748][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.180475][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.190954][ T6702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.207504][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.221477][ T6454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233063][ T6454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.249098][ T6454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.278194][ T6454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.386689][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.411767][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.502713][ T6784] netlink: 'syz.1.221': attribute type 21 has an invalid length. [ 89.512789][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.527067][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.649979][ T6795] netlink: 'syz.4.225': attribute type 10 has an invalid length. [ 89.693264][ T6795] macvlan0: entered promiscuous mode [ 89.704756][ T6795] macvlan0: entered allmulticast mode [ 89.762416][ T6795] veth1_vlan: entered allmulticast mode [ 89.771281][ T6807] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 89.781336][ T6807] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 89.801275][ T6795] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 89.823760][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.935639][ T6816] netlink: 'syz.2.231': attribute type 4 has an invalid length. [ 89.963723][ T6818] netlink: 'syz.2.231': attribute type 4 has an invalid length. [ 90.046028][ T6816] netlink: 'syz.2.231': attribute type 4 has an invalid length. [ 90.078683][ T6827] netlink: 'syz.3.234': attribute type 2 has an invalid length. [ 90.078702][ T29] audit: type=1107 audit(1737915294.000:2): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 90.111885][ T6827] netlink: 'syz.3.234': attribute type 8 has an invalid length. [ 90.165106][ T6833] raw_sendmsg: syz.2.236 forgot to set AF_INET. Fix it! [ 90.344364][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.525832][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.064196][ T6899] pimreg: entered allmulticast mode [ 91.221597][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.251020][ T6915] ip6t_srh: unknown srh match flags 4001 [ 91.345202][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.352504][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.359885][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.368029][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.375860][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.383121][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.488156][ T6920] virt_wifi0 speed is unknown, defaulting to 1000 [ 91.583867][ T6938] batadv_slave_0: entered promiscuous mode [ 91.616703][ T6934] batadv_slave_0: left promiscuous mode [ 91.657994][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.697032][ T6939] __nla_validate_parse: 8 callbacks suppressed [ 91.697052][ T6939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.259'. [ 91.751715][ T6939] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 91.838524][ T6953] trusted_key: syz.3.264 sent an empty control message without MSG_MORE. [ 91.887838][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.908421][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.3.264'. [ 91.925223][ T6953] netlink: 864 bytes leftover after parsing attributes in process `syz.3.264'. [ 91.997699][ T6920] chnl_net:caif_netlink_parms(): no params data found [ 92.072122][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 92.081266][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 92.190275][ T975] cfg80211: failed to load regulatory.db [ 92.263220][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.272696][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.280026][ T6920] bridge_slave_0: entered allmulticast mode [ 92.287527][ T6920] bridge_slave_0: entered promiscuous mode [ 92.306733][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.320077][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.333834][ T6920] bridge_slave_1: entered allmulticast mode [ 92.344956][ T6920] bridge_slave_1: entered promiscuous mode [ 92.357132][ T35] bridge_slave_1: left allmulticast mode [ 92.363557][ T35] bridge_slave_1: left promiscuous mode [ 92.372799][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.389656][ T35] bridge_slave_0: left allmulticast mode [ 92.399584][ T35] bridge_slave_0: left promiscuous mode [ 92.405959][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.503833][ T7001] ip6t_srh: unknown srh invflags A757 [ 92.611399][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.627461][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.733042][ T35] bond0 (unregistering): Released all slaves [ 92.755302][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.790918][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.938289][ T6920] team0: Port device team_slave_0 added [ 93.000510][ T6920] team0: Port device team_slave_1 added [ 93.009809][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 93.151205][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.158717][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.186496][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.200087][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.207473][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.234026][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.326706][ T7030] netlink: 634 bytes leftover after parsing attributes in process `syz.2.282'. [ 93.370635][ T35] hsr_slave_0: left promiscuous mode [ 93.380201][ T7036] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 93.395536][ T35] hsr_slave_1: left promiscuous mode [ 93.405696][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.407400][ T7036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.423246][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.436275][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.448043][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.464222][ T5831] Bluetooth: hci2: command tx timeout [ 93.473082][ T35] veth1_macvtap: left promiscuous mode [ 93.480647][ T35] veth0_macvtap: left promiscuous mode [ 93.488845][ T7040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.285'. [ 93.504231][ T35] veth1_vlan: left promiscuous mode [ 93.511248][ T35] veth0_vlan: left promiscuous mode [ 93.594179][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.601479][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.607775][ T6920] hsr_slave_0: entered promiscuous mode [ 93.614817][ T6920] hsr_slave_1: entered promiscuous mode [ 93.620479][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.636282][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.643805][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.651508][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.831931][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 93.832623][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 93.853879][ T35] team0 (unregistering): Port device team_slave_1 removed [ 93.866845][ T35] team0 (unregistering): Port device team_slave_0 removed [ 94.051856][ T7070] validate_nla: 11 callbacks suppressed [ 94.051875][ T7070] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 94.078066][ T7046] virt_wifi0 speed is unknown, defaulting to 1000 [ 94.291687][ T7088] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 94.370684][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 94.459525][ T7098] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 94.601334][ T7102] dccp_invalid_packet: invalid packet type [ 94.617527][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.709541][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.716989][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.724668][ T7046] bridge_slave_0: entered allmulticast mode [ 94.731314][ T7046] bridge_slave_0: entered promiscuous mode [ 94.742735][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.753009][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.770977][ T7046] bridge_slave_1: entered allmulticast mode [ 94.781594][ T7046] bridge_slave_1: entered promiscuous mode [ 94.790894][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.830970][ T6920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.896105][ T6920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.921940][ T6920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.936026][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.946922][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.961209][ T6920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.979972][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.048554][ T7046] team0: Port device team_slave_0 added [ 95.067054][ T7046] team0: Port device team_slave_1 added [ 95.158705][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.178712][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.208444][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.226592][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.259781][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.280281][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.341499][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.359465][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.366945][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.374362][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.382911][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.391206][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.399588][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.400552][ T7127] batman_adv: batadv0: Adding interface: dummy0 [ 95.413283][ T7127] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.439145][ T7127] batman_adv: batadv0: Interface activated: dummy0 [ 95.458823][ T7131] batadv0: mtu less than device minimum [ 95.467491][ T7131] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.478840][ T7131] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.490174][ T7131] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.501450][ T7131] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.512764][ T7131] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.544456][ T5834] Bluetooth: hci2: command tx timeout [ 95.626237][ T7046] hsr_slave_0: entered promiscuous mode [ 95.651628][ T7046] hsr_slave_1: entered promiscuous mode [ 95.668308][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.679540][ T7046] Cannot create hsr debugfs directory [ 95.705781][ T5834] Bluetooth: hci4: command tx timeout [ 95.717298][ T7128] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.797355][ T35] bridge_slave_1: left allmulticast mode [ 95.803091][ T35] bridge_slave_1: left promiscuous mode [ 95.813928][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.827085][ T35] bridge_slave_0: left allmulticast mode [ 95.832853][ T35] bridge_slave_0: left promiscuous mode [ 95.840348][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.040084][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.053380][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.064353][ T35] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 96.073326][ T35] veth1_vlan: left allmulticast mode [ 96.081445][ T35] bond0 (unregistering): Released all slaves [ 96.143276][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.232254][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.291171][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.298362][ T6467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.311973][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.319155][ T6467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.457733][ T7171] virt_wifi0 speed is unknown, defaulting to 1000 [ 96.639905][ T35] hsr_slave_0: left promiscuous mode [ 96.653688][ T35] hsr_slave_1: left promiscuous mode [ 96.678643][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.689326][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.701344][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.709845][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.727686][ T35] veth1_macvtap: left promiscuous mode [ 96.742771][ T35] veth0_macvtap: left promiscuous mode [ 96.757681][ T35] veth1_vlan: left promiscuous mode [ 96.768665][ T35] veth0_vlan: left promiscuous mode [ 96.913547][ T7200] netlink: 'syz.3.324': attribute type 2 has an invalid length. [ 96.939963][ T35] team0 (unregistering): Port device team_slave_1 removed [ 96.953756][ T35] team0 (unregistering): Port device team_slave_0 removed [ 97.021095][ T7128] chnl_net:caif_netlink_parms(): no params data found [ 97.279115][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.306137][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.320915][ T7128] bridge_slave_0: entered allmulticast mode [ 97.358244][ T7128] bridge_slave_0: entered promiscuous mode [ 97.372004][ T7046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.410505][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.420082][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.435022][ T7128] bridge_slave_1: entered allmulticast mode [ 97.441923][ T7128] bridge_slave_1: entered promiscuous mode [ 97.451651][ T7231] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 97.464281][ T5834] Bluetooth: hci3: command tx timeout [ 97.472667][ T7231] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 97.481013][ T7046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.484946][ T7231] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 97.577225][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.591344][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.621077][ T7046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.628064][ T5834] Bluetooth: hci2: command tx timeout [ 97.639243][ T7244] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 97.647431][ T7242] __nla_validate_parse: 6 callbacks suppressed [ 97.647451][ T7242] netlink: 76 bytes leftover after parsing attributes in process `syz.1.329'. [ 97.669994][ T7046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.689198][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.699486][ T7249] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 97.725109][ T7244] team0: Port device netdevsim0 added [ 97.751099][ T7249] team0: Port device netdevsim0 removed [ 97.763765][ T7249] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.785487][ T5834] Bluetooth: hci4: command tx timeout [ 97.817875][ T7128] team0: Port device team_slave_0 added [ 97.889861][ T7128] team0: Port device team_slave_1 added [ 97.963823][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.972773][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.999971][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.016704][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.023898][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.051937][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.063686][ T7269] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 98.120828][ T6920] veth0_vlan: entered promiscuous mode [ 98.192325][ T7128] hsr_slave_0: entered promiscuous mode [ 98.201511][ T7128] hsr_slave_1: entered promiscuous mode [ 98.215037][ T7128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.223231][ T7128] Cannot create hsr debugfs directory [ 98.239425][ T6920] veth1_vlan: entered promiscuous mode [ 98.417389][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.426189][ T7287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.476950][ T6920] veth0_macvtap: entered promiscuous mode [ 98.530114][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.539413][ T6920] veth1_macvtap: entered promiscuous mode [ 98.570867][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.578037][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.611965][ T7128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.643187][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.650352][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.672657][ T7128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.691023][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.702849][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.716198][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.727416][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.740050][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.751368][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.762449][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.781512][ T7128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.800907][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.811784][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.822464][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.833497][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.844535][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.864399][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.876386][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.894845][ T6920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.903603][ T6920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.913625][ T6920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.923982][ T6920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.942044][ T7128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.960111][ T7309] tipc: Started in network mode [ 98.965248][ T7309] tipc: Node identity 1e109d5b637c, cluster identity 4711 [ 98.972496][ T7309] tipc: Enabled bearer , priority 0 [ 99.016559][ T7310] syzkaller0: entered promiscuous mode [ 99.022058][ T7310] syzkaller0: entered allmulticast mode [ 99.028351][ T7310] tipc: Resetting bearer [ 99.040277][ T7312] netlink: 88 bytes leftover after parsing attributes in process `syz.1.339'. [ 99.051708][ T7308] tipc: Resetting bearer [ 99.119643][ T7308] tipc: Disabling bearer [ 99.142848][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 99.245332][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.253232][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.261329][ T7324] netlink: 9 bytes leftover after parsing attributes in process `syz.1.343'. [ 99.276457][ T7326] net_ratelimit: 16 callbacks suppressed [ 99.276478][ T7326] openvswitch: netlink: Multiple metadata blocks provided [ 99.297966][ T7324] 0·: renamed from hsr0 (while UP) [ 99.306789][ T7324] 0·: entered promiscuous mode [ 99.311974][ T7324] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 99.355334][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.393790][ T7128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.398483][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.423958][ T7128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.463072][ T7128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.489538][ T7326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.342'. [ 99.521535][ T7128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.544251][ T5834] Bluetooth: hci3: command tx timeout [ 99.630155][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.763883][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.865873][ T5834] Bluetooth: hci4: command tx timeout [ 99.947780][ T7373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.011951][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.069403][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.076587][ T7370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.118942][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.126079][ T7372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.209080][ T7046] veth0_vlan: entered promiscuous mode [ 100.243395][ T7373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.298616][ T7046] veth1_vlan: entered promiscuous mode [ 100.392629][ T7046] veth0_macvtap: entered promiscuous mode [ 100.423890][ T7046] veth1_macvtap: entered promiscuous mode [ 100.476183][ T7373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.528702][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.545259][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 100.594125][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.603983][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.613616][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 100.628082][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.638354][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.654631][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.670546][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.683890][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.718807][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.720906][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.737278][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.748022][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.760641][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.769576][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.785562][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.812583][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.828882][ T7443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.847911][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.863622][ T7443] netlink: 48 bytes leftover after parsing attributes in process `syz.3.355'. [ 100.873134][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.887505][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.899794][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.912425][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.933470][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.956919][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.976721][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.989889][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.996071][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 101.003748][ T7046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.014858][ T7046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.023578][ T7046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.032947][ T7046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.050271][ T7373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.200666][ T7440] virt_wifi0 speed is unknown, defaulting to 1000 [ 101.273174][ T7128] veth0_vlan: entered promiscuous mode [ 101.296967][ T29] audit: type=1800 audit(1737915305.220:3): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.324057][ T29] audit: type=1800 audit(1737915305.220:4): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.356512][ T29] audit: type=1800 audit(1737915305.220:5): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.377894][ T29] audit: type=1800 audit(1737915305.220:6): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.400078][ T29] audit: type=1800 audit(1737915305.220:7): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.421630][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 101.435566][ T29] audit: type=1800 audit(1737915305.220:8): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.455244][ T7128] veth1_vlan: entered promiscuous mode [ 101.462501][ T29] audit: type=1800 audit(1737915305.220:9): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.474582][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.498572][ T29] audit: type=1800 audit(1737915305.220:10): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.499609][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.521228][ T29] audit: type=1800 audit(1737915305.220:11): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.552047][ T29] audit: type=1800 audit(1737915305.220:12): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="memory.events" dev="tmpfs" ino=537 res=0 errno=0 [ 101.583632][ T7373] bridge_slave_1: left allmulticast mode [ 101.599962][ T7373] bridge_slave_1: left promiscuous mode [ 101.608081][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.616746][ T7373] bridge_slave_0: left allmulticast mode [ 101.622409][ T7373] bridge_slave_0: left promiscuous mode [ 101.630165][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.634317][ T5834] Bluetooth: hci3: command tx timeout [ 101.811087][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.824496][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.837178][ T7373] bond0 (unregistering): Released all slaves [ 101.930060][ T7370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.935036][ T7128] veth0_macvtap: entered promiscuous mode [ 101.946864][ T5834] Bluetooth: hci4: command tx timeout [ 101.954597][ T7370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.968182][ T7128] veth1_macvtap: entered promiscuous mode [ 102.005358][ T7481] pim6reg1: entered promiscuous mode [ 102.012130][ T7481] pim6reg1: entered allmulticast mode [ 102.082552][ T7479] virt_wifi0 speed is unknown, defaulting to 1000 [ 102.210377][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.223632][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.237506][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.251614][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.262205][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.274000][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.284490][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.295239][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.305335][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.316480][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.327607][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.379620][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 102.392586][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.406391][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.417677][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.429234][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.439143][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.449662][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.459550][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.471382][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.481317][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.491766][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.502518][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.535280][ T7373] hsr_slave_0: left promiscuous mode [ 102.541535][ T7373] hsr_slave_1: left promiscuous mode [ 102.547457][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.556772][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.564682][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.572656][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.586330][ T7373] veth1_macvtap: left promiscuous mode [ 102.592310][ T7373] veth0_macvtap: left promiscuous mode [ 102.599475][ T7373] veth1_vlan: left promiscuous mode [ 102.606144][ T7373] veth0_vlan: left promiscuous mode [ 102.706187][ T7128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.715544][ T7128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.724329][ T7128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.733056][ T7128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.824613][ T5834] Bluetooth: hci2: command tx timeout [ 102.831164][ T7373] team0 (unregistering): Port device team_slave_1 removed [ 102.887334][ T7373] team0 (unregistering): Port device team_slave_0 removed [ 102.937003][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.946509][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.957463][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.967827][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.976487][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.983916][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.063082][ T7513] virt_wifi0 speed is unknown, defaulting to 1000 [ 103.171747][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.179943][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.188806][ T7440] bridge_slave_0: entered allmulticast mode [ 103.204428][ T7440] bridge_slave_0: entered promiscuous mode [ 103.220087][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.230578][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.238859][ T7440] bridge_slave_1: entered allmulticast mode [ 103.249083][ T7440] bridge_slave_1: entered promiscuous mode [ 103.283236][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.293829][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024a9d400: rx timeout, send abort [ 103.297716][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.349814][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.373729][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.428270][ T7369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.459163][ T7369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.541024][ T7440] team0: Port device team_slave_0 added [ 103.550988][ T7440] team0: Port device team_slave_1 added [ 103.592532][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.600545][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.626774][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.649614][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.656624][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.682659][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.694739][ T7513] chnl_net:caif_netlink_parms(): no params data found [ 103.757463][ T7440] hsr_slave_0: entered promiscuous mode [ 103.764529][ T7440] hsr_slave_1: entered promiscuous mode [ 103.777859][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.786004][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.793207][ T7513] bridge_slave_0: entered allmulticast mode [ 103.800776][ T7513] bridge_slave_0: entered promiscuous mode [ 103.806852][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024a9d400: abort rx timeout. Force session deactivation [ 103.825320][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.832485][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.839807][ T7513] bridge_slave_1: entered allmulticast mode [ 103.849431][ T7513] bridge_slave_1: entered promiscuous mode [ 103.891807][ T7373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.926835][ T7547] __nla_validate_parse: 2 callbacks suppressed [ 103.926855][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 103.933397][ T7513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.980243][ T7513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.023665][ T7373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.040089][ T7550] netlink: 10 bytes leftover after parsing attributes in process `syz.3.368'. [ 104.057069][ T7513] team0: Port device team_slave_0 added [ 104.083560][ T7513] team0: Port device team_slave_1 added [ 104.177204][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.199405][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.264940][ T7513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.289435][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.312519][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.418297][ T7513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.447678][ T7373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.568727][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.577348][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.589148][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.603243][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.611697][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.620019][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.631241][ T7571] lo speed is unknown, defaulting to 1000 [ 104.645154][ T7513] hsr_slave_0: entered promiscuous mode [ 104.651578][ T7513] hsr_slave_1: entered promiscuous mode [ 104.657704][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 104.658639][ T7513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.674423][ T7513] Cannot create hsr debugfs directory [ 104.690617][ T7571] lo speed is unknown, defaulting to 1000 [ 104.708721][ T7373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.738661][ T7571] lo speed is unknown, defaulting to 1000 [ 104.758628][ T7571] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.801328][ T7571] lo speed is unknown, defaulting to 1000 [ 104.809378][ T7571] lo speed is unknown, defaulting to 1000 [ 104.817159][ T7571] lo speed is unknown, defaulting to 1000 [ 104.821206][ T7572] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.857497][ T7571] lo speed is unknown, defaulting to 1000 [ 104.893942][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 104.906860][ T5834] Bluetooth: hci2: command tx timeout [ 104.912849][ T7571] lo speed is unknown, defaulting to 1000 [ 104.939819][ T7572] lo speed is unknown, defaulting to 1000 [ 104.954024][ T7571] lo speed is unknown, defaulting to 1000 [ 104.963802][ T7571] lo speed is unknown, defaulting to 1000 [ 104.971630][ T7571] lo speed is unknown, defaulting to 1000 [ 104.983742][ T7584] dccp_v6_rcv: dropped packet with invalid checksum [ 105.051764][ T7373] bridge_slave_1: left allmulticast mode [ 105.060514][ T7373] bridge_slave_1: left promiscuous mode [ 105.066225][ T5834] Bluetooth: hci4: command tx timeout [ 105.072887][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.085033][ T7373] bridge_slave_0: left allmulticast mode [ 105.091166][ T7373] bridge_slave_0: left promiscuous mode [ 105.100111][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.150085][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 105.317087][ T7610] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 105.348685][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.359118][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.369547][ T7373] bond0 (unregistering): Released all slaves [ 105.422293][ T7440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.500883][ T7440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.516553][ T7440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.550967][ T7440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.917127][ T7373] hsr_slave_0: left promiscuous mode [ 105.931578][ T7373] hsr_slave_1: left promiscuous mode [ 105.940233][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.949105][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.957810][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.967749][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.977856][ T7373] veth1_macvtap: left promiscuous mode [ 105.983458][ T7373] veth0_macvtap: left promiscuous mode [ 105.990686][ T7648] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 106.000499][ T7373] veth1_vlan: left promiscuous mode [ 106.006013][ T7373] veth0_vlan: left promiscuous mode [ 106.113214][ T7572] chnl_net:caif_netlink_parms(): no params data found [ 106.415733][ T7373] team0 (unregistering): Port device team_slave_1 removed [ 106.436364][ T7373] team0 (unregistering): Port device team_slave_0 removed [ 106.546512][ T7513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.570619][ T7513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.664708][ T5834] Bluetooth: hci3: command tx timeout [ 106.669479][ T7513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.730307][ T7513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.803180][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.813888][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.816492][ T7693] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20000 [ 106.821181][ T7572] bridge_slave_0: entered allmulticast mode [ 106.835113][ T7572] bridge_slave_0: entered promiscuous mode [ 106.856973][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.868285][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.876048][ T7572] bridge_slave_1: entered allmulticast mode [ 106.883857][ T7572] bridge_slave_1: entered promiscuous mode [ 106.915274][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.938409][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.984738][ T5834] Bluetooth: hci2: command tx timeout [ 107.018279][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.055068][ T7700] sch_fq: defrate 0 ignored. [ 107.069222][ T7572] team0: Port device team_slave_0 added [ 107.078994][ T7572] team0: Port device team_slave_1 added [ 107.108895][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.116233][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.142453][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.157788][ T5834] Bluetooth: hci4: command tx timeout [ 107.169093][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.180110][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.187603][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.217390][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.346453][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.353554][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.370432][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.377608][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.413906][ T7572] hsr_slave_0: entered promiscuous mode [ 107.421423][ T7572] hsr_slave_1: entered promiscuous mode [ 107.435052][ T7572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.448088][ T7572] Cannot create hsr debugfs directory [ 107.456398][ T7373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.485591][ T7710] bridge: RTM_NEWNEIGH with invalid ether address [ 107.502083][ T7440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.572675][ T7717] netlink: 71 bytes leftover after parsing attributes in process `syz.3.395'. [ 107.666542][ T7373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.675839][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.397'. [ 107.695126][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 107.840682][ T7373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.860661][ T7513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.909773][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.935108][ T7513] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.980808][ T7373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.013844][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.020992][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.043312][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 108.062362][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.069542][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.270482][ T7756] netem: change failed [ 108.277145][ T7440] veth0_vlan: entered promiscuous mode [ 108.294842][ T7373] bridge_slave_1: left allmulticast mode [ 108.310857][ T7373] bridge_slave_1: left promiscuous mode [ 108.317543][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.341504][ T7373] bridge_slave_0: left allmulticast mode [ 108.346503][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 108.350405][ T7373] bridge_slave_0: left promiscuous mode [ 108.368770][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.637961][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.649514][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.661431][ T7373] bond0 (unregistering): Released all slaves [ 108.679454][ T7777] ip6t_REJECT: ECHOREPLY is not supported [ 108.684007][ T7440] veth1_vlan: entered promiscuous mode [ 108.744425][ T5834] Bluetooth: hci3: command tx timeout [ 108.752482][ T7513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.808320][ T7440] veth0_macvtap: entered promiscuous mode [ 108.845819][ T7440] veth1_macvtap: entered promiscuous mode [ 108.891172][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.923874][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.934933][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.945463][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.955433][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.965932][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.976094][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.986892][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.997721][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.020908][ T7792] __nla_validate_parse: 2 callbacks suppressed [ 109.020973][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'. [ 109.026216][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.051105][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.067654][ T5834] Bluetooth: hci2: command tx timeout [ 109.083391][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.096254][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.106789][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.117944][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.128193][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.139044][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.149988][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.166850][ T7572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.177700][ T7572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.198468][ T7440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.207374][ T7440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.216292][ T7440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.225235][ T5834] Bluetooth: hci4: command tx timeout [ 109.231185][ T7440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.241977][ T7572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.253155][ T7572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.295990][ T7373] hsr_slave_0: left promiscuous mode [ 109.301966][ T7373] hsr_slave_1: left promiscuous mode [ 109.310845][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.319451][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.329050][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.336970][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.347131][ T7373] veth1_macvtap: left promiscuous mode [ 109.352689][ T7373] veth0_macvtap: left promiscuous mode [ 109.358466][ T7373] veth1_vlan: left promiscuous mode [ 109.363747][ T7373] veth0_vlan: left promiscuous mode [ 109.470169][ T7373] team0 (unregistering): Port device team_slave_1 removed [ 109.482988][ T7373] team0 (unregistering): Port device team_slave_0 removed [ 109.600457][ T7513] veth0_vlan: entered promiscuous mode [ 109.618152][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.629253][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.663475][ T7513] veth1_vlan: entered promiscuous mode [ 109.682454][ T7366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.693256][ T7366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.736530][ T7513] veth0_macvtap: entered promiscuous mode [ 109.749606][ T7805] tipc: MTU too low for tipc bearer [ 109.768757][ T7513] veth1_macvtap: entered promiscuous mode [ 109.787584][ T7805] netlink: 'syz.1.409': attribute type 12 has an invalid length. [ 109.797912][ T7805] netlink: 'syz.1.409': attribute type 29 has an invalid length. [ 109.807573][ T7805] netlink: 148 bytes leftover after parsing attributes in process `syz.1.409'. [ 109.817724][ T7805] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 109.825534][ T7805] netlink: 43 bytes leftover after parsing attributes in process `syz.1.409'. [ 109.867763][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.929330][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.950389][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.963480][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.974142][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.983991][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.998889][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.009060][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.022494][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.034046][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.062112][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.077236][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.089299][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.101599][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.136776][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.162705][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.183692][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.197765][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.207945][ T7822] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 110.222621][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.232054][ T7572] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.290932][ T7822] geneve0: entered promiscuous mode [ 110.339625][ T7513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.359524][ T7513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.369160][ T7513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.378324][ T7513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.389716][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.396862][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.406529][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.413666][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.529275][ T7373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.565205][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.578230][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.604825][ T7373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.662281][ T7373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.682707][ T7369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.693415][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.701323][ T7369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.787024][ T7572] veth0_vlan: entered promiscuous mode [ 110.811961][ T7851] x_tables: unsorted underflow at hook 4 [ 110.825204][ T5834] Bluetooth: hci3: command tx timeout [ 110.840067][ T7373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.858709][ T7572] veth1_vlan: entered promiscuous mode [ 110.885439][ T7572] veth0_macvtap: entered promiscuous mode [ 110.898492][ T7572] veth1_macvtap: entered promiscuous mode [ 110.954760][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.993938][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.011313][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.023198][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.036904][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.047965][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.074270][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.094400][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.109739][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.123208][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.142743][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.200715][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.212234][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.224796][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.234308][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.249236][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.257322][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.278261][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.285786][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.320697][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.350932][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.367010][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.379267][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.390691][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.402578][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.413075][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.427107][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.440406][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.758002][ T7872] virt_wifi0 speed is unknown, defaulting to 1000 [ 111.801497][ T7373] bridge_slave_1: left allmulticast mode [ 111.828439][ T7373] bridge_slave_1: left promiscuous mode [ 111.849610][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.944436][ T7373] bridge_slave_0: left allmulticast mode [ 111.956877][ T7373] bridge_slave_0: left promiscuous mode [ 111.968733][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.110928][ T7872] lo speed is unknown, defaulting to 1000 [ 112.118436][ T7572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.135405][ T7572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.148030][ T7572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.157721][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.158781][ T7572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.177960][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.346434][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.376347][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.403697][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.421054][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.471694][ T7902] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 112.491445][ T7902] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 112.641734][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.663491][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.690735][ T7373] bond0 (unregistering): Released all slaves [ 112.838636][ T7888] virt_wifi0 speed is unknown, defaulting to 1000 [ 112.909402][ T5831] Bluetooth: hci3: command tx timeout [ 112.999142][ T7888] lo speed is unknown, defaulting to 1000 [ 113.132590][ T7922] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 113.183898][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 113.394404][ T5831] Bluetooth: hci2: command tx timeout [ 114.587169][ T5831] Bluetooth: hci4: command tx timeout [ 115.464261][ T5831] Bluetooth: hci2: command tx timeout [ 116.664570][ T5831] Bluetooth: hci4: command tx timeout [ 117.544317][ T5831] Bluetooth: hci2: command tx timeout [ 118.747279][ T5831] Bluetooth: hci4: command tx timeout [ 119.629639][ T5831] Bluetooth: hci2: command tx timeout [ 120.826670][ T5831] Bluetooth: hci4: command tx timeout [ 128.881302][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.893415][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.901081][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.912747][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.924661][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.931992][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.946929][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.954341][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.961586][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.970963][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.978523][ T5831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 128.986161][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.924094][ C1] sched: DL replenish lagged too much [ 131.064313][ T5831] Bluetooth: hci6: command tx timeout [ 131.069770][ T5831] Bluetooth: hci5: command tx timeout [ 133.147470][ T5834] Bluetooth: hci6: command tx timeout [ 133.154459][ T5831] Bluetooth: hci5: command tx timeout [ 133.164535][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.224275][ T5834] Bluetooth: hci6: command tx timeout [ 135.231066][ T5831] Bluetooth: hci5: command tx timeout [ 137.316999][ T5831] Bluetooth: hci5: command tx timeout [ 137.322457][ T5831] Bluetooth: hci6: command tx timeout [ 165.983865][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.005655][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.021419][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.057058][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.233586][ T5834] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 166.240937][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.264544][ T5831] Bluetooth: hci7: command tx timeout [ 170.344423][ T5831] Bluetooth: hci7: command tx timeout [ 172.425294][ T5831] Bluetooth: hci7: command tx timeout [ 172.462974][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 172.470627][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 172.481128][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 172.491803][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 172.499886][ T5834] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 172.510131][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 172.886165][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 172.895714][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 172.903021][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 172.913695][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 172.921883][ T5834] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 172.931040][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 174.504441][ T5834] Bluetooth: hci7: command tx timeout [ 174.586592][ T5834] Bluetooth: hci8: command tx timeout [ 174.984295][ T5834] Bluetooth: hci9: command tx timeout [ 176.666100][ T5834] Bluetooth: hci8: command tx timeout [ 177.064209][ T5834] Bluetooth: hci9: command tx timeout [ 178.744224][ T5834] Bluetooth: hci8: command tx timeout [ 179.146635][ T5834] Bluetooth: hci9: command tx timeout [ 180.824402][ T5834] Bluetooth: hci8: command tx timeout [ 181.224359][ T5834] Bluetooth: hci9: command tx timeout [ 189.581375][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 189.596585][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 189.606428][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 189.616713][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 189.626404][ T5831] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 189.635455][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 189.680885][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 189.692749][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 189.700622][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 189.718183][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 189.730414][ T5834] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 189.738003][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 191.704379][ T5831] Bluetooth: hci10: command tx timeout [ 191.784299][ T5831] Bluetooth: hci11: command tx timeout [ 193.784302][ T5831] Bluetooth: hci10: command tx timeout [ 193.864236][ T5831] Bluetooth: hci11: command tx timeout [ 194.604588][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.869603][ T5831] Bluetooth: hci10: command tx timeout [ 195.947163][ T5831] Bluetooth: hci11: command tx timeout [ 196.669646][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.676775][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.958266][ T5834] Bluetooth: hci10: command tx timeout [ 198.024204][ T5834] Bluetooth: hci11: command tx timeout [ 227.027712][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 227.047540][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 227.080000][ T5831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 227.147391][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 227.182326][ T5831] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 227.208012][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 227.385084][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 229.304267][ T5144] Bluetooth: hci12: command tx timeout [ 231.384263][ T5144] Bluetooth: hci12: command tx timeout [ 233.467862][ T5144] Bluetooth: hci12: command tx timeout [ 233.769385][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 233.778501][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 233.785987][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 233.793793][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 233.801435][ T5834] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 233.809167][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 234.301965][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 234.318103][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 234.327906][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 234.336009][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 234.343574][ T5834] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 234.354254][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 235.550525][ T5144] Bluetooth: hci12: command tx timeout [ 235.864158][ T5838] Bluetooth: hci13: command tx timeout [ 236.424283][ T5838] Bluetooth: hci14: command tx timeout [ 237.630248][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 237.636741][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 237.944256][ T5834] Bluetooth: hci13: command tx timeout [ 238.504306][ T5834] Bluetooth: hci14: command tx timeout [ 240.024342][ T5831] Bluetooth: hci13: command tx timeout [ 240.584381][ T5834] Bluetooth: hci14: command tx timeout [ 242.106802][ T5834] Bluetooth: hci13: command tx timeout [ 242.666689][ T5834] Bluetooth: hci14: command tx timeout [ 249.735495][ T5831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 249.742931][ T5831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 249.754412][ T5831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 249.762803][ T5831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 249.772117][ T5831] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 249.779886][ T5831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 250.528894][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 250.539491][ T5834] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 250.547409][ T5834] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 250.555719][ T5834] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 250.563597][ T5834] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 250.571447][ T5834] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 251.864144][ T5144] Bluetooth: hci15: command tx timeout [ 252.584272][ T5144] Bluetooth: hci16: command tx timeout [ 252.990246][ T5144] Bluetooth: hci6: command 0x0406 tx timeout [ 253.000415][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 253.944152][ T5834] Bluetooth: hci15: command tx timeout [ 254.664230][ T5834] Bluetooth: hci16: command tx timeout [ 256.028526][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.033506][ T5834] Bluetooth: hci15: command tx timeout [ 256.754371][ T5834] Bluetooth: hci16: command tx timeout [ 258.104336][ T5834] Bluetooth: hci15: command tx timeout [ 258.824331][ T5834] Bluetooth: hci16: command tx timeout [ 272.037083][ T30] INFO: task dhcpcd:5499 blocked for more than 143 seconds. [ 272.044817][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 272.052136][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.084174][ T30] task:dhcpcd state:D stack:21200 pid:5499 tgid:5499 ppid:5498 flags:0x00000002 [ 272.130223][ T30] Call Trace: [ 272.133571][ T30] [ 272.184289][ T30] __schedule+0x186c/0x4be0 [ 272.188913][ T30] ? schedule+0x90/0x320 [ 272.193215][ T30] ? schedule+0x90/0x320 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 272.231190][ T30] ? __pfx___schedule+0x10/0x10 [ 272.256758][ T30] ? __pfx_lock_release+0x10/0x10 [ 272.261858][ T30] ? rcu_is_watching+0x15/0xb0 [ 272.308939][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.326400][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 272.332809][ T30] ? schedule+0x90/0x320 [ 272.369959][ T30] schedule+0x14b/0x320 [ 272.386458][ T30] schedule_preempt_disabled+0x13/0x30 [ 272.392189][ T30] __mutex_lock+0x817/0x1010 [ 272.438473][ T30] ? __mutex_lock+0x602/0x1010 [ 272.443397][ T30] ? devinet_ioctl+0x31a/0x1ac0 [ 272.474075][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 272.479186][ T30] ? apparmor_capable+0x13b/0x1b0 [ 272.524127][ T30] ? bpf_lsm_capable+0x9/0x10 [ 272.528884][ T30] devinet_ioctl+0x31a/0x1ac0 [ 272.533618][ T30] ? get_user_ifreq+0x1bb/0x200 [ 272.594176][ T30] inet_ioctl+0x3d7/0x4f0 [ 272.598590][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 272.603491][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 272.664372][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 272.670167][ T30] sock_do_ioctl+0x158/0x460 [ 272.709772][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 272.732342][ T30] ? __pfx_lock_release+0x10/0x10 [ 272.759559][ T30] sock_ioctl+0x626/0x8e0 [ 272.763968][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 272.786156][ T30] ? __sys_socket+0x20a/0x3c0 [ 272.790919][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.819306][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.848323][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 272.853260][ T30] __se_sys_ioctl+0xf5/0x170 [ 272.863392][ T30] do_syscall_64+0xf3/0x230 [ 272.873564][ T30] ? clear_bhb_loop+0x35/0x90 [ 272.885299][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.891352][ T30] RIP: 0033:0x7f020aa94d49 [ 272.915259][ T30] RSP: 002b:00007ffe73be4c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.923743][ T30] RAX: ffffffffffffffda RBX: 00007f020a9c66c0 RCX: 00007f020aa94d49 [ 272.948237][ T30] RDX: 00007ffe73bf4e28 RSI: 0000000000008914 RDI: 0000000000000016 [ 272.970728][ T30] RBP: 00007ffe73c04fe8 R08: 00007ffe73bf4de8 R09: 00007ffe73bf4d98 [ 272.988655][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.010594][ T30] R13: 00007ffe73bf4e28 R14: 0000000000000028 R15: 0000000000008914 [ 273.030798][ T30] [ 273.037926][ T30] INFO: task kworker/1:3:5842 blocked for more than 144 seconds. [ 273.054122][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 273.061455][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.107178][ T30] task:kworker/1:3 state:D stack:24240 pid:5842 tgid:5842 ppid:2 flags:0x00004000 [ 273.121622][ T30] Workqueue: events_power_efficient crda_timeout_work [ 273.134153][ T30] Call Trace: [ 273.137484][ T30] [ 273.140443][ T30] __schedule+0x186c/0x4be0 [ 273.154289][ T30] ? schedule+0x90/0x320 [ 273.158688][ T30] ? schedule+0x90/0x320 [ 273.162981][ T30] ? __pfx___schedule+0x10/0x10 [ 273.183578][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 273.193867][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.212261][ T30] ? kick_pool+0x1bd/0x620 [ 273.216888][ T30] ? schedule+0x90/0x320 [ 273.221186][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.234286][ T30] ? schedule+0x90/0x320 [ 273.238705][ T30] schedule+0x14b/0x320 [ 273.242913][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.264112][ T30] __mutex_lock+0x817/0x1010 [ 273.278033][ T30] ? __mutex_lock+0x602/0x1010 [ 273.289345][ T30] ? crda_timeout_work+0x15/0x50 [ 273.301910][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.315733][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 273.321888][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.341620][ T30] ? process_scheduled_works+0x976/0x1840 [ 273.351301][ T30] crda_timeout_work+0x15/0x50 [ 273.363189][ T30] process_scheduled_works+0xa66/0x1840 [ 273.377206][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.383253][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 273.398009][ T30] ? assign_work+0x364/0x3d0 [ 273.402664][ T30] worker_thread+0x870/0xd30 [ 273.407932][ T30] ? __kthread_parkme+0x169/0x1d0 [ 273.413012][ T30] ? __pfx_worker_thread+0x10/0x10 [ 273.422448][ T30] kthread+0x7a9/0x920 [ 273.428179][ T30] ? __pfx_worker_thread+0x10/0x10 [ 273.433340][ T30] ? __pfx_kthread+0x10/0x10 [ 273.442086][ T30] ? __pfx_kthread+0x10/0x10 [ 273.447324][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.452151][ T30] ? __pfx_kthread+0x10/0x10 [ 273.459670][ T30] ? __pfx_kthread+0x10/0x10 [ 273.468242][ T30] ret_from_fork+0x4b/0x80 [ 273.473122][ T30] ? __pfx_kthread+0x10/0x10 [ 273.481923][ T30] ret_from_fork_asm+0x1a/0x30 [ 273.487629][ T30] [ 273.490788][ T30] INFO: task kworker/u8:38:7366 blocked for more than 144 seconds. [ 273.501855][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 273.510041][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.522956][ T30] task:kworker/u8:38 state:D stack:24400 pid:7366 tgid:7366 ppid:2 flags:0x00004000 [ 273.533554][ T30] Workqueue: events_unbound linkwatch_event [ 273.543486][ T30] Call Trace: [ 273.547108][ T30] [ 273.550077][ T30] __schedule+0x186c/0x4be0 [ 273.557451][ T30] ? schedule+0x90/0x320 [ 273.561748][ T30] ? schedule+0x90/0x320 [ 273.567907][ T30] ? __pfx___schedule+0x10/0x10 [ 273.572820][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.581025][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.586162][ T30] ? kthread_data+0x52/0xd0 [ 273.590718][ T30] ? schedule+0x90/0x320 [ 273.598597][ T30] ? wq_worker_sleeping+0x66/0x240 [ 273.603782][ T30] ? schedule+0x90/0x320 [ 273.609652][ T30] schedule+0x14b/0x320 [ 273.613901][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.623500][ T30] __mutex_lock+0x817/0x1010 [ 273.628601][ T30] ? __mutex_lock+0x602/0x1010 [ 273.633436][ T30] ? linkwatch_event+0xe/0x60 [ 273.640911][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.647662][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 273.653707][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.662699][ T30] ? process_scheduled_works+0x976/0x1840 [ 273.668964][ T30] linkwatch_event+0xe/0x60 [ 273.673530][ T30] process_scheduled_works+0xa66/0x1840 [ 273.682243][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.688583][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 273.697072][ T30] ? assign_work+0x364/0x3d0 [ 273.701717][ T30] worker_thread+0x870/0xd30 [ 273.708556][ T30] ? __kthread_parkme+0x169/0x1d0 [ 273.713642][ T30] ? __pfx_worker_thread+0x10/0x10 [ 273.721612][ T30] kthread+0x7a9/0x920 [ 273.726542][ T30] ? __pfx_worker_thread+0x10/0x10 [ 273.731707][ T30] ? __pfx_kthread+0x10/0x10 [ 273.739210][ T30] ? __pfx_kthread+0x10/0x10 [ 273.743861][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.750388][ T30] ? __pfx_kthread+0x10/0x10 [ 273.757758][ T30] ? __pfx_kthread+0x10/0x10 [ 273.762412][ T30] ret_from_fork+0x4b/0x80 [ 273.767309][ T30] ? __pfx_kthread+0x10/0x10 [ 273.771954][ T30] ret_from_fork_asm+0x1a/0x30 [ 273.777339][ T30] [ 273.780838][ T30] INFO: task kworker/u8:41:7371 blocked for more than 145 seconds. [ 273.789310][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 273.798256][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.807602][ T30] task:kworker/u8:41 state:D stack:25520 pid:7371 tgid:7371 ppid:2 flags:0x00004000 [ 273.818706][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 273.826000][ T30] Call Trace: [ 273.829312][ T30] [ 273.832269][ T30] __schedule+0x186c/0x4be0 [ 273.838591][ T30] ? schedule+0x90/0x320 [ 273.844837][ T30] ? schedule+0x90/0x320 [ 273.849134][ T30] ? __pfx___schedule+0x10/0x10 [ 273.854416][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.859491][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.866263][ T30] ? kthread_data+0x52/0xd0 [ 273.870818][ T30] ? schedule+0x90/0x320 [ 273.875525][ T30] ? wq_worker_sleeping+0x66/0x240 [ 273.880762][ T30] ? schedule+0x90/0x320 [ 273.885937][ T30] schedule+0x14b/0x320 [ 273.890147][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.897304][ T30] __mutex_lock+0x817/0x1010 [ 273.902265][ T30] ? __mutex_lock+0x602/0x1010 [ 273.907539][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 273.919885][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.925800][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 273.932102][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 273.941819][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.949088][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 273.959253][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 273.966479][ T30] ? rcu_is_watching+0x15/0xb0 [ 273.971304][ T30] ? process_scheduled_works+0x976/0x1840 [ 273.982553][ T30] process_scheduled_works+0xa66/0x1840 [ 273.988910][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.997772][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 274.003610][ T30] ? assign_work+0x364/0x3d0 [ 274.008725][ T30] worker_thread+0x870/0xd30 [ 274.013381][ T30] ? __kthread_parkme+0x169/0x1d0 [ 274.022747][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.028483][ T30] kthread+0x7a9/0x920 [ 274.032609][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.041101][ T30] ? __pfx_kthread+0x10/0x10 [ 274.046141][ T30] ? __pfx_kthread+0x10/0x10 [ 274.050790][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.058940][ T30] ? __pfx_kthread+0x10/0x10 [ 274.063596][ T30] ? __pfx_kthread+0x10/0x10 [ 274.069246][ T30] ret_from_fork+0x4b/0x80 [ 274.073720][ T30] ? __pfx_kthread+0x10/0x10 [ 274.081535][ T30] ret_from_fork_asm+0x1a/0x30 [ 274.089604][ T30] [ 274.092742][ T30] INFO: task kworker/u8:42:7372 blocked for more than 145 seconds. [ 274.103589][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 274.112973][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.124466][ T30] task:kworker/u8:42 state:D stack:24592 pid:7372 tgid:7372 ppid:2 flags:0x00004000 [ 274.135171][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 274.141218][ T30] Call Trace: [ 274.145558][ T30] [ 274.148535][ T30] __schedule+0x186c/0x4be0 [ 274.153088][ T30] ? schedule+0x90/0x320 [ 274.157911][ T30] ? schedule+0x90/0x320 [ 274.162215][ T30] ? __pfx___schedule+0x10/0x10 [ 274.169331][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.174710][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.179526][ T30] ? kthread_data+0x52/0xd0 [ 274.184549][ T30] ? schedule+0x90/0x320 [ 274.189269][ T30] ? wq_worker_sleeping+0x66/0x240 [ 274.196287][ T30] ? schedule+0x90/0x320 [ 274.200650][ T30] schedule+0x14b/0x320 [ 274.205288][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.211162][ T30] __mutex_lock+0x817/0x1010 [ 274.217516][ T30] ? __mutex_lock+0x602/0x1010 [ 274.222342][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 274.228050][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.233129][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 274.238752][ T30] addrconf_dad_work+0x10e/0x16a0 [ 274.243826][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.249326][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 274.255723][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.262104][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.268599][ T30] ? process_scheduled_works+0x976/0x1840 [ 274.275265][ T30] process_scheduled_works+0xa66/0x1840 [ 274.280890][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.287362][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 274.293397][ T30] ? assign_work+0x364/0x3d0 [ 274.300807][ T30] worker_thread+0x870/0xd30 [ 274.310475][ T30] ? __kthread_parkme+0x169/0x1d0 [ 274.318237][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.323407][ T30] kthread+0x7a9/0x920 [ 274.328117][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.333291][ T30] ? __pfx_kthread+0x10/0x10 [ 274.340733][ T30] ? __pfx_kthread+0x10/0x10 [ 274.345842][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.350659][ T30] ? __pfx_kthread+0x10/0x10 [ 274.358597][ T30] ? __pfx_kthread+0x10/0x10 [ 274.363243][ T30] ret_from_fork+0x4b/0x80 [ 274.368664][ T30] ? __pfx_kthread+0x10/0x10 [ 274.373330][ T30] ret_from_fork_asm+0x1a/0x30 [ 274.380991][ T30] [ 274.384903][ T30] INFO: task kworker/u8:43:7373 blocked for more than 145 seconds. [ 274.392830][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 274.404589][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.413806][ T30] task:kworker/u8:43 state:D stack:24016 pid:7373 tgid:7373 ppid:2 flags:0x00004000 [ 274.430773][ T30] Workqueue: netns cleanup_net [ 274.437403][ T30] Call Trace: [ 274.440727][ T30] [ 274.443857][ T30] __schedule+0x186c/0x4be0 [ 274.451287][ T30] ? schedule+0x90/0x320 [ 274.455895][ T30] ? schedule+0x90/0x320 [ 274.460198][ T30] ? __pfx___schedule+0x10/0x10 [ 274.467787][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.472864][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.480050][ T30] ? kthread_data+0x52/0xd0 [ 274.488659][ T30] ? schedule+0x90/0x320 [ 274.492963][ T30] ? wq_worker_sleeping+0x66/0x240 [ 274.499426][ T30] ? schedule+0x90/0x320 [ 274.503764][ T30] schedule+0x14b/0x320 [ 274.514880][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.520489][ T30] __mutex_lock+0x817/0x1010 [ 274.526829][ T30] ? __mutex_lock+0x602/0x1010 [ 274.531655][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 274.542547][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.549293][ T30] ? __pfx___might_resched+0x10/0x10 [ 274.556093][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 274.562701][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.569406][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 274.578851][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 274.587757][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.592593][ T30] ? lock_release+0xbf/0xa30 [ 274.599214][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.607791][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 274.616148][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.621323][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.629280][ T30] unregister_netdevice_queue+0x303/0x370 [ 274.636633][ T30] ? __pfx_up_write+0x10/0x10 [ 274.641361][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 274.650689][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 274.658665][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 274.667292][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 274.673155][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 274.681148][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.687488][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 274.692916][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 274.701011][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 274.708747][ T30] hwsim_exit_net+0x5c1/0x670 [ 274.713476][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.722513][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 274.730190][ T30] cleanup_net+0x812/0xd60 [ 274.736166][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 274.741152][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.747722][ T30] ? process_scheduled_works+0x976/0x1840 [ 274.758557][ T30] process_scheduled_works+0xa66/0x1840 [ 274.765778][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.771842][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 274.779133][ T30] ? assign_work+0x364/0x3d0 [ 274.783870][ T30] worker_thread+0x870/0xd30 [ 274.790120][ T30] ? __kthread_parkme+0x169/0x1d0 [ 274.796687][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.801849][ T30] kthread+0x7a9/0x920 [ 274.809829][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.816415][ T30] ? __pfx_kthread+0x10/0x10 [ 274.821058][ T30] ? __pfx_kthread+0x10/0x10 [ 274.826276][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.831097][ T30] ? __pfx_kthread+0x10/0x10 [ 274.836178][ T30] ? __pfx_kthread+0x10/0x10 [ 274.840818][ T30] ret_from_fork+0x4b/0x80 [ 274.846983][ T30] ? __pfx_kthread+0x10/0x10 [ 274.851655][ T30] ret_from_fork_asm+0x1a/0x30 [ 274.861148][ T30] [ 274.865979][ T30] INFO: task syz-executor:7572 blocked for more than 146 seconds. [ 274.873819][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 274.884092][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.892802][ T30] task:syz-executor state:D stack:21360 pid:7572 tgid:7572 ppid:1 flags:0x00004004 [ 274.904978][ T30] Call Trace: [ 274.908557][ T30] [ 274.911519][ T30] __schedule+0x186c/0x4be0 [ 274.916608][ T30] ? schedule+0x90/0x320 [ 274.920933][ T30] ? schedule+0x90/0x320 [ 274.925685][ T30] ? __pfx___schedule+0x10/0x10 [ 274.930588][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.936166][ T30] ? rcu_is_watching+0x15/0xb0 [ 274.940984][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 274.948620][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.955334][ T30] ? schedule+0x90/0x320 [ 274.959634][ T30] schedule+0x14b/0x320 [ 274.965157][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.970670][ T30] __mutex_lock+0x817/0x1010 [ 274.977610][ T30] ? __mutex_lock+0x602/0x1010 [ 274.982438][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 274.989811][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.995268][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.001307][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 275.008059][ T30] wiphy_register+0x1be5/0x27b0 [ 275.012966][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 275.018643][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 275.023818][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 275.030660][ T30] ieee80211_register_hw+0x354e/0x4240 [ 275.037849][ T30] ? ieee80211_register_hw+0x1681/0x4240 [ 275.043558][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 275.049887][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 275.056293][ T30] ? __asan_memset+0x23/0x50 [ 275.060943][ T30] ? __hrtimer_init+0x170/0x250 [ 275.067753][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 275.073554][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 275.080880][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 275.089509][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 275.095714][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 275.101327][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 275.108225][ T30] genl_rcv_msg+0xb14/0xec0 [ 275.113174][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.118719][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 275.123967][ T30] ? kasan_save_track+0x51/0x80 [ 275.129286][ T30] ? __sys_sendto+0x363/0x4c0 [ 275.135380][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 275.140473][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 275.146554][ T30] ? __pfx___might_resched+0x10/0x10 [ 275.151888][ T30] netlink_rcv_skb+0x1e3/0x430 [ 275.157142][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.162225][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.168144][ T30] ? lock_release+0xbf/0xa30 [ 275.172809][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 275.178890][ T30] genl_rcv+0x28/0x40 [ 275.182928][ T30] netlink_unicast+0x7f6/0x990 [ 275.190119][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 275.199089][ T30] ? __virt_addr_valid+0x45f/0x530 [ 275.204782][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 275.209867][ T30] ? __check_object_size+0x47a/0x730 [ 275.216056][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 275.220884][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.226600][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 275.233629][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.239290][ T30] __sock_sendmsg+0x221/0x270 [ 275.244272][ T30] __sys_sendto+0x363/0x4c0 [ 275.248819][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 275.253884][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.260825][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.267532][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.272358][ T30] __x64_sys_sendto+0xde/0x100 [ 275.278794][ T30] do_syscall_64+0xf3/0x230 [ 275.283345][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.288542][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.295405][ T30] RIP: 0033:0x7fa3d3d8ebbc [ 275.299863][ T30] RSP: 002b:00007fff7ca9c800 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 275.310792][ T30] RAX: ffffffffffffffda RBX: 00007fa3d4ad4620 RCX: 00007fa3d3d8ebbc [ 275.319706][ T30] RDX: 0000000000000024 RSI: 00007fa3d4ad4670 RDI: 0000000000000003 [ 275.329267][ T30] RBP: 0000000000000000 R08: 00007fff7ca9c854 R09: 000000000000000c [ 275.337956][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 275.346255][ T30] R13: 0000000000000000 R14: 00007fa3d4ad4670 R15: 0000000000000000 [ 275.354594][ T30] [ 275.360932][ T30] INFO: task syz-executor:7872 blocked for more than 146 seconds. [ 275.372246][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 275.383609][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.392752][ T30] task:syz-executor state:D stack:25712 pid:7872 tgid:7872 ppid:1 flags:0x00000004 [ 275.406361][ T30] Call Trace: [ 275.409692][ T30] [ 275.412655][ T30] __schedule+0x186c/0x4be0 [ 275.422326][ T30] ? schedule+0x90/0x320 [ 275.429011][ T30] ? schedule+0x90/0x320 [ 275.433311][ T30] ? __pfx___schedule+0x10/0x10 [ 275.439430][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.446821][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.451648][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.458435][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.470844][ T30] ? schedule+0x90/0x320 [ 275.475873][ T30] schedule+0x14b/0x320 [ 275.480309][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.488128][ T30] __mutex_lock+0x817/0x1010 [ 275.492791][ T30] ? __mutex_lock+0x602/0x1010 [ 275.498380][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 275.503556][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.512353][ T30] ? __might_fault+0xaa/0x120 [ 275.518483][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 275.523792][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 275.533512][ T30] ? dnotify_flush+0x1ff/0x610 [ 275.540370][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 275.553363][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.560474][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 275.568052][ T30] __se_sys_ioctl+0xf5/0x170 [ 275.572702][ T30] do_syscall_64+0xf3/0x230 [ 275.578052][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.582774][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.591167][ T30] RIP: 0033:0x7f75a118c92b [ 275.597558][ T30] RSP: 002b:00007fff34b3f450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.608320][ T30] RAX: ffffffffffffffda RBX: 00007f75a13a5f40 RCX: 00007f75a118c92b [ 275.617046][ T30] RDX: 00007fff34b3f4d0 RSI: 00000000400454ca RDI: 00000000000000c8 [ 275.628292][ T30] RBP: 00007f75a13a6738 R08: 0000000000000000 R09: 0000000000000000 [ 275.638931][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 275.650926][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 275.659674][ T30] [ 275.662780][ T30] INFO: task syz-executor:7888 blocked for more than 146 seconds. [ 275.673160][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 275.681285][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.693534][ T30] task:syz-executor state:D stack:25712 pid:7888 tgid:7888 ppid:1 flags:0x00004006 [ 275.706531][ T30] Call Trace: [ 275.709851][ T30] [ 275.712808][ T30] __schedule+0x186c/0x4be0 [ 275.717966][ T30] ? schedule+0x90/0x320 [ 275.722528][ T30] ? schedule+0x90/0x320 [ 275.730040][ T30] ? __pfx___schedule+0x10/0x10 [ 275.736433][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.741513][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.752550][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.758952][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.768003][ T30] ? schedule+0x90/0x320 [ 275.772313][ T30] schedule+0x14b/0x320 [ 275.778339][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.783861][ T30] __mutex_lock+0x817/0x1010 [ 275.791663][ T30] ? __mutex_lock+0x602/0x1010 [ 275.796801][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 275.802053][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.809867][ T30] ? read_word_at_a_time+0xe/0x20 [ 275.815218][ T30] ? sized_strscpy+0x9a/0x2b0 [ 275.819946][ T30] ip_tunnel_init_net+0x20e/0x720 [ 275.829152][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 275.835154][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.839983][ T30] ? trace_kmalloc+0x1f/0xd0 [ 275.848081][ T30] ? __kmalloc_noprof+0x2a5/0x4c0 [ 275.853184][ T30] ? ops_init+0x75/0x590 [ 275.859847][ T30] ops_init+0x31e/0x590 [ 275.870600][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 275.876373][ T30] setup_net+0x287/0x9e0 [ 275.880680][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 275.888915][ T30] ? __pfx_setup_net+0x10/0x10 [ 275.893745][ T30] copy_net_ns+0x33f/0x570 [ 275.898644][ T30] create_new_namespaces+0x425/0x7b0 [ 275.903979][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 275.912369][ T30] ksys_unshare+0x57d/0xa70 [ 275.918571][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 275.923660][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.933158][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.939530][ T30] __x64_sys_unshare+0x38/0x40 [ 275.947215][ T30] do_syscall_64+0xf3/0x230 [ 275.951770][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.958155][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.964519][ T30] RIP: 0033:0x7f9fcb18e527 [ 275.968988][ T30] RSP: 002b:00007fff89a51b78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 275.977934][ T30] RAX: ffffffffffffffda RBX: 00007f9fcb3a5f40 RCX: 00007f9fcb18e527 [ 275.986306][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 275.994653][ T30] RBP: 00007f9fcb3a6738 R08: 0000000000000000 R09: 0000000000000000 [ 276.002672][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 276.011671][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 276.024379][ T30] [ 276.027511][ T30] INFO: task syz.1.427:7913 blocked for more than 147 seconds. [ 276.037915][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 276.047383][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.058628][ T30] task:syz.1.427 state:D stack:28176 pid:7913 tgid:7910 ppid:5827 flags:0x00000004 [ 276.069611][ T30] Call Trace: [ 276.072949][ T30] [ 276.078579][ T30] __schedule+0x186c/0x4be0 [ 276.083151][ T30] ? schedule+0x90/0x320 [ 276.088431][ T30] ? schedule+0x90/0x320 [ 276.092733][ T30] ? __pfx___schedule+0x10/0x10 [ 276.101288][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.107269][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.112090][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.120385][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.129477][ T30] ? schedule+0x90/0x320 [ 276.133784][ T30] schedule+0x14b/0x320 [ 276.142225][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.148444][ T30] __mutex_lock+0x817/0x1010 [ 276.153096][ T30] ? __mutex_lock+0x602/0x1010 [ 276.160517][ T30] ? packet_mc_add+0x28/0x950 [ 276.165973][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.171057][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.178260][ T30] ? lock_release+0xbf/0xa30 [ 276.182905][ T30] ? __pfx___might_resched+0x10/0x10 [ 276.191575][ T30] ? aa_label_sk_perm+0x4f3/0x6c0 [ 276.197225][ T30] ? futex_unqueue+0xcb/0xf0 [ 276.201863][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.207205][ T30] packet_mc_add+0x28/0x950 [ 276.211781][ T30] ? __might_fault+0xaa/0x120 [ 276.216970][ T30] ? __might_fault+0xc6/0x120 [ 276.221706][ T30] packet_setsockopt+0x104f/0x1970 [ 276.227297][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.232378][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 276.241945][ T30] ? futex_wait+0x285/0x360 [ 276.246848][ T30] ? aa_sk_perm+0x96d/0xab0 [ 276.251400][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.256943][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.261840][ T30] ? lock_release+0xbf/0xa30 [ 276.267042][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 276.272123][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 276.277537][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 276.283061][ T30] do_sock_setsockopt+0x3af/0x720 [ 276.292516][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 276.298593][ T30] ? __fget_files+0x395/0x410 [ 276.303344][ T30] ? __fget_files+0x2a/0x410 [ 276.310918][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 276.316523][ T30] do_syscall_64+0xf3/0x230 [ 276.321087][ T30] ? clear_bhb_loop+0x35/0x90 [ 276.329228][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.335528][ T30] RIP: 0033:0x7f2804d8cd29 [ 276.340409][ T30] RSP: 002b:00007f2805bc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.354877][ T30] RAX: ffffffffffffffda RBX: 00007f2804fa5fa0 RCX: 00007f2804d8cd29 [ 276.363238][ T30] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 276.375512][ T30] RBP: 00007f2804e0e2a0 R08: 0000000000000010 R09: 0000000000000000 [ 276.383544][ T30] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 276.395230][ T30] R13: 0000000000000000 R14: 00007f2804fa5fa0 R15: 00007ffc8a11c0c8 [ 276.403371][ T30] [ 276.408301][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 276.419968][ T30] INFO: task syz.1.427:7914 blocked for more than 147 seconds. [ 276.432270][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 276.442808][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.453447][ T30] task:syz.1.427 state:D stack:28176 pid:7914 tgid:7910 ppid:5827 flags:0x00000004 [ 276.469179][ T30] Call Trace: [ 276.472517][ T30] [ 276.475876][ T30] __schedule+0x186c/0x4be0 [ 276.480441][ T30] ? schedule+0x90/0x320 [ 276.487513][ T30] ? schedule+0x90/0x320 [ 276.491824][ T30] ? __pfx___schedule+0x10/0x10 [ 276.497120][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.502202][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.514165][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.520124][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.529239][ T30] ? schedule+0x90/0x320 [ 276.533550][ T30] schedule+0x14b/0x320 [ 276.538204][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.546762][ T30] __mutex_lock+0x817/0x1010 [ 276.551425][ T30] ? __mutex_lock+0x602/0x1010 [ 276.557974][ T30] ? packet_mc_drop+0x28/0x5e0 [ 276.562814][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.570969][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.579416][ T30] ? lock_release+0xbf/0xa30 [ 276.590361][ T30] ? __pfx___might_resched+0x10/0x10 [ 276.596010][ T30] ? aa_label_sk_perm+0x4f3/0x6c0 [ 276.601076][ T30] ? futex_unqueue+0xcb/0xf0 [ 276.609651][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.615652][ T30] packet_mc_drop+0x28/0x5e0 [ 276.620308][ T30] ? __might_fault+0xaa/0x120 [ 276.627823][ T30] ? __might_fault+0xc6/0x120 [ 276.632565][ T30] packet_setsockopt+0x1207/0x1970 [ 276.638229][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.643483][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 276.653577][ T30] ? futex_wait+0x285/0x360 [ 276.658427][ T30] ? aa_sk_perm+0x96d/0xab0 [ 276.663261][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.670823][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.676038][ T30] ? lock_release+0xbf/0xa30 [ 276.680688][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 276.690363][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 276.698366][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 276.703881][ T30] do_sock_setsockopt+0x3af/0x720 [ 276.711799][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 276.717721][ T30] ? __fget_files+0x395/0x410 [ 276.722459][ T30] ? __fget_files+0x2a/0x410 [ 276.730536][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 276.736640][ T30] do_syscall_64+0xf3/0x230 [ 276.741215][ T30] ? clear_bhb_loop+0x35/0x90 [ 276.749413][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.755679][ T30] RIP: 0033:0x7f2804d8cd29 [ 276.760136][ T30] RSP: 002b:00007f2805ba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.771772][ T30] RAX: ffffffffffffffda RBX: 00007f2804fa6080 RCX: 00007f2804d8cd29 [ 276.780174][ T30] RDX: 0000000000000002 RSI: 0000000000000107 RDI: 0000000000000003 [ 276.792285][ T30] RBP: 00007f2804e0e2a0 R08: 0000000000000010 R09: 0000000000000000 [ 276.802477][ T30] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 276.813250][ T30] R13: 0000000000000000 R14: 00007f2804fa6080 R15: 00007ffc8a11c0c8 [ 276.821627][ T30] [ 276.828591][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 276.838703][ T30] INFO: task syz.3.426:7922 blocked for more than 148 seconds. [ 276.848912][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 276.856995][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.868727][ T30] task:syz.3.426 state:D stack:25264 pid:7922 tgid:7911 ppid:5828 flags:0x00004006 [ 276.880827][ T30] Call Trace: [ 276.886928][ T30] [ 276.889917][ T30] __schedule+0x186c/0x4be0 [ 276.895319][ T30] ? schedule+0x90/0x320 [ 276.899629][ T30] ? schedule+0x90/0x320 [ 276.903945][ T30] ? __pfx___schedule+0x10/0x10 [ 276.916225][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.921322][ T30] ? rcu_is_watching+0x15/0xb0 [ 276.926718][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.932673][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.939474][ T30] ? schedule+0x90/0x320 [ 276.943782][ T30] schedule+0x14b/0x320 [ 276.948937][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.955137][ T30] __mutex_lock+0x817/0x1010 [ 276.959794][ T30] ? __mutex_lock+0x602/0x1010 [ 276.966226][ T30] ? rtnl_newlink+0xce2/0x2210 [ 276.971712][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.977111][ T30] ? ns_capable+0x8a/0xf0 [ 276.981483][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 276.987809][ T30] rtnl_newlink+0xce2/0x2210 [ 276.992461][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.997997][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 277.003516][ T30] ? netlink_deliver_tap+0x19d/0x1b0 [ 277.010591][ T30] ? netlink_unicast+0x7c4/0x990 [ 277.020057][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 277.025425][ T30] ? __sock_sendmsg+0x221/0x270 [ 277.030342][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 277.038081][ T30] ? __sys_sendmsg+0x269/0x350 [ 277.042906][ T30] ? do_syscall_64+0xf3/0x230 [ 277.048017][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.058206][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.064930][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.069844][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.079360][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.086067][ T30] ? lock_release+0xbf/0xa30 [ 277.090712][ T30] ? nlmon_xmit+0xaf/0x100 [ 277.097873][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.102710][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.109243][ T30] ? lock_release+0xbf/0xa30 [ 277.113888][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 277.122363][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.129706][ T30] ? bpf_lsm_capable+0x9/0x10 [ 277.137049][ T30] ? security_capable+0x7e/0x2d0 [ 277.142049][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.149434][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 277.156989][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 277.162595][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.169140][ T30] ? ref_tracker_free+0x643/0x7e0 [ 277.177115][ T30] netlink_rcv_skb+0x1e3/0x430 [ 277.181955][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.189215][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.197198][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.202449][ T30] netlink_unicast+0x7f6/0x990 [ 277.207716][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 277.213047][ T30] ? __virt_addr_valid+0x45f/0x530 [ 277.221009][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 277.226507][ T30] ? __check_object_size+0x47a/0x730 [ 277.231851][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 277.242915][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.249776][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 277.257434][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.263166][ T30] __sock_sendmsg+0x221/0x270 [ 277.268318][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 277.273201][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.283471][ T30] ? __fget_files+0x2a/0x410 [ 277.288442][ T30] ? __fget_files+0x2a/0x410 [ 277.293097][ T30] __sys_sendmsg+0x269/0x350 [ 277.300643][ T30] ? __pfx_futex_wake+0x10/0x10 [ 277.305851][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.311037][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.320850][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.325965][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.330788][ T30] do_syscall_64+0xf3/0x230 [ 277.338190][ T30] ? clear_bhb_loop+0x35/0x90 [ 277.342923][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.351223][ T30] RIP: 0033:0x7f5a5078cd29 [ 277.358404][ T30] RSP: 002b:00007f5a51513038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.368843][ T30] RAX: ffffffffffffffda RBX: 00007f5a509a6080 RCX: 00007f5a5078cd29 [ 277.379871][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 277.388931][ T30] RBP: 00007f5a5080e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 277.399682][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.409827][ T30] R13: 0000000000000000 R14: 00007f5a509a6080 R15: 00007fff3d91aef8 [ 277.420566][ T30] [ 277.423643][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 277.433107][ T30] INFO: task syz.3.426:7925 blocked for more than 148 seconds. [ 277.443467][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 277.452497][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.470340][ T30] task:syz.3.426 state:D stack:25264 pid:7925 tgid:7911 ppid:5828 flags:0x00004006 [ 277.482571][ T30] Call Trace: [ 277.488428][ T30] [ 277.491409][ T30] __schedule+0x186c/0x4be0 [ 277.498717][ T30] ? schedule+0x90/0x320 [ 277.503021][ T30] ? schedule+0x90/0x320 [ 277.507873][ T30] ? __pfx___schedule+0x10/0x10 [ 277.512779][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.518376][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.523204][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 277.529571][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.536269][ T30] ? schedule+0x90/0x320 [ 277.540569][ T30] schedule+0x14b/0x320 [ 277.546691][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.552208][ T30] __mutex_lock+0x817/0x1010 [ 277.557289][ T30] ? __mutex_lock+0x602/0x1010 [ 277.562116][ T30] ? rtnl_newlink+0xce2/0x2210 [ 277.569693][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.575069][ T30] ? ns_capable+0x8a/0xf0 [ 277.579449][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 277.585764][ T30] rtnl_newlink+0xce2/0x2210 [ 277.590452][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.596854][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 277.602367][ T30] ? netlink_deliver_tap+0x19d/0x1b0 [ 277.609749][ T30] ? netlink_unicast+0x7c4/0x990 [ 277.615182][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 277.620172][ T30] ? __sock_sendmsg+0x221/0x270 [ 277.628640][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 277.633723][ T30] ? __sys_sendmsg+0x269/0x350 [ 277.640213][ T30] ? do_syscall_64+0xf3/0x230 [ 277.651200][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.657650][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.664396][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.669221][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.679127][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.687076][ T30] ? lock_release+0xbf/0xa30 [ 277.692028][ T30] ? nlmon_xmit+0xaf/0x100 [ 277.699245][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.705461][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.710296][ T30] ? lock_release+0xbf/0xa30 [ 277.718316][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 277.724326][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.729408][ T30] ? apparmor_capable+0x13b/0x1b0 [ 277.738757][ T30] ? bpf_lsm_capable+0x9/0x10 [ 277.743504][ T30] ? security_capable+0x7e/0x2d0 [ 277.748953][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.756724][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 277.761735][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 277.767325][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.773245][ T30] ? ref_tracker_free+0x643/0x7e0 [ 277.782387][ T30] netlink_rcv_skb+0x1e3/0x430 [ 277.790279][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.799398][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.805059][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.810311][ T30] netlink_unicast+0x7f6/0x990 [ 277.818006][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 277.823427][ T30] ? __virt_addr_valid+0x45f/0x530 [ 277.830881][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 277.838647][ T30] ? __check_object_size+0x47a/0x730 [ 277.844401][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 277.849315][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.857522][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 277.862527][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.869582][ T30] __sock_sendmsg+0x221/0x270 [ 277.877449][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 277.882292][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.888114][ T30] ? __fget_files+0x2a/0x410 [ 277.892767][ T30] ? __fget_files+0x2a/0x410 [ 277.902562][ T30] __sys_sendmsg+0x269/0x350 [ 277.907495][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.912676][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.923340][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.928531][ T30] ? rcu_is_watching+0x15/0xb0 [ 277.933349][ T30] do_syscall_64+0xf3/0x230 [ 277.941246][ T30] ? clear_bhb_loop+0x35/0x90 [ 277.947568][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.953521][ T30] RIP: 0033:0x7f5a5078cd29 [ 277.962179][ T30] RSP: 002b:00007f5a4e5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.971029][ T30] RAX: ffffffffffffffda RBX: 00007f5a509a6160 RCX: 00007f5a5078cd29 [ 277.983376][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 277.991722][ T30] RBP: 00007f5a5080e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 278.003919][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.016701][ T30] R13: 0000000000000001 R14: 00007f5a509a6160 R15: 00007fff3d91aef8 [ 278.025058][ T30] [ 278.028113][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 278.037830][ T30] INFO: lockdep is turned off. [ 278.042642][ T30] NMI backtrace for cpu 0 [ 278.042661][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 278.042685][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.042698][ T30] Call Trace: [ 278.042706][ T30] [ 278.042715][ T30] dump_stack_lvl+0x241/0x360 [ 278.042751][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.042781][ T30] ? __pfx__printk+0x10/0x10 [ 278.042810][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 278.042843][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 278.042874][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 278.042898][ T30] ? _printk+0xd5/0x120 [ 278.042924][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 278.042953][ T30] ? __pfx__printk+0x10/0x10 [ 278.042982][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.043005][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 278.043035][ T30] watchdog+0xff6/0x1040 [ 278.043061][ T30] ? watchdog+0x1ea/0x1040 [ 278.043089][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.043114][ T30] kthread+0x7a9/0x920 [ 278.043140][ T30] ? __pfx_kthread+0x10/0x10 [ 278.043167][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.043192][ T30] ? __pfx_kthread+0x10/0x10 [ 278.043217][ T30] ? __pfx_kthread+0x10/0x10 [ 278.043244][ T30] ? __pfx_kthread+0x10/0x10 [ 278.043270][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.043298][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 278.043328][ T30] ? __pfx_kthread+0x10/0x10 [ 278.043355][ T30] ret_from_fork+0x4b/0x80 [ 278.043377][ T30] ? __pfx_kthread+0x10/0x10 [ 278.043404][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.043432][ T30] [ 278.043440][ T30] Sending NMI from CPU 0 to CPUs 1: [ 278.212078][ C1] NMI backtrace for cpu 1 [ 278.212095][ C1] CPU: 1 UID: 0 PID: 7370 Comm: kworker/u8:40 Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 278.212115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.212127][ C1] Workqueue: bat_events batadv_nc_worker [ 278.212154][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 278.212181][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 278.212196][ C1] RSP: 0018:ffffc90000a177f0 EFLAGS: 00000246 [ 278.212210][ C1] RAX: 0000000000000000 RBX: ffff88805489cc80 RCX: 0000000000000000 [ 278.212234][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff88805489cc88 [ 278.212244][ C1] RBP: ffff88805489ccfe R08: ffff88805489cc8f R09: 0000000000000000 [ 278.212256][ C1] R10: ffff88805489cc80 R11: ffffed100a913992 R12: ffff88805489cb40 [ 278.212268][ C1] R13: 0000000000000820 R14: ffff88805489cc80 R15: dffffc0000000000 [ 278.212280][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 278.212293][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.212304][ C1] CR2: 00007ffeff3e2dfc CR3: 000000000e738000 CR4: 00000000003526f0 [ 278.212319][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.212328][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.212338][ C1] Call Trace: [ 278.212344][ C1] [ 278.212352][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 278.212374][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 278.212397][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 278.212425][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 278.212443][ C1] ? nmi_handle+0x14f/0x5a0 [ 278.212464][ C1] ? nmi_handle+0x2a/0x5a0 [ 278.212486][ C1] ? memset_orig+0x75/0xb0 [ 278.212501][ C1] ? default_do_nmi+0x63/0x160 [ 278.212520][ C1] ? exc_nmi+0x123/0x1f0 [ 278.212539][ C1] ? end_repeat_nmi+0xf/0x53 [ 278.212562][ C1] ? memset_orig+0x75/0xb0 [ 278.212578][ C1] ? memset_orig+0x75/0xb0 [ 278.212595][ C1] ? memset_orig+0x75/0xb0 [ 278.212610][ C1] [ 278.212616][ C1] [ 278.212621][ C1] __skb_clone+0x51/0x6c0 [ 278.212640][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 278.212664][ C1] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 278.212690][ C1] skb_clone+0x240/0x390 [ 278.212708][ C1] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 278.212725][ C1] dev_queue_xmit_nit+0x249/0xca0 [ 278.212760][ C1] ? dev_queue_xmit_nit+0x2b/0xca0 [ 278.212779][ C1] dev_hard_start_xmit+0x15f/0x7d0 [ 278.212804][ C1] sch_direct_xmit+0x29c/0x5d0 [ 278.212824][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 278.212840][ C1] ? decrement_one_qlen+0x34c/0x550 [ 278.212862][ C1] ? sfb_dequeue+0x247/0x370 [ 278.212882][ C1] __qdisc_run+0xc0e/0x2180 [ 278.212907][ C1] __dev_queue_xmit+0x10dd/0x3f50 [ 278.212933][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 278.212955][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.212976][ C1] ? __asan_memset+0x23/0x50 [ 278.212996][ C1] ? synproxy_send_client_synack+0x8a4/0xe20 [ 278.213014][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.213039][ C1] ? synproxy_send_client_synack+0x8a4/0xe20 [ 278.213057][ C1] ? lock_release+0xbf/0xa30 [ 278.213079][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 278.213121][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.213142][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.213162][ C1] ? ip_neigh_gw4+0x310/0x3e0 [ 278.213192][ C1] ? ip_finish_output2+0xaff/0x12b0 [ 278.213215][ C1] ? ip_finish_output2+0x44c/0x12b0 [ 278.213236][ C1] ip_finish_output2+0xd76/0x12b0 [ 278.213258][ C1] ? ip_finish_output2+0x44c/0x12b0 [ 278.213282][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 278.213305][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 278.213326][ C1] ? __ip_finish_output+0x349/0x400 [ 278.213349][ C1] synproxy_send_client_synack+0x8a4/0xe20 [ 278.213373][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 278.213393][ C1] ? synproxy_pernet+0x45/0x270 [ 278.213415][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 278.213439][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 278.213466][ C1] ? nft_synproxy_do_eval+0x746/0xa60 [ 278.213487][ C1] ? nf_ip_checksum+0x13a/0x500 [ 278.213509][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 278.213532][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 278.213555][ C1] ? deref_stack_reg+0x17c/0x210 [ 278.213577][ C1] ? __asan_memset+0x23/0x50 [ 278.213597][ C1] nft_do_chain+0x4ad/0x1da0 [ 278.213619][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 278.213643][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 278.213662][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 278.213695][ C1] nft_do_chain_inet+0x418/0x6b0 [ 278.213716][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 278.213735][ C1] ? ipt_do_table+0x312/0x1860 [ 278.213771][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 278.213790][ C1] nf_hook_slow+0xc3/0x220 [ 278.213806][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 278.213832][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 278.213858][ C1] NF_HOOK+0x29e/0x450 [ 278.213884][ C1] ? NF_HOOK+0x9a/0x450 [ 278.213908][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 278.213933][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 278.213962][ C1] ? ip_rcv_finish+0x406/0x560 [ 278.213988][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 278.214019][ C1] NF_HOOK+0x3a4/0x450 [ 278.214044][ C1] ? skb_orphan+0xae/0xd0 [ 278.214071][ C1] ? NF_HOOK+0x9a/0x450 [ 278.214095][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 278.214119][ C1] ? ip_rcv_core+0x801/0xd10 [ 278.214144][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 278.214172][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 278.214205][ C1] __netif_receive_skb+0x2bf/0x650 [ 278.214229][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 278.214250][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 278.214273][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.214295][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.214316][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 278.214340][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.214365][ C1] ? process_backlog+0x33b/0x15b0 [ 278.214391][ C1] process_backlog+0x662/0x15b0 [ 278.214417][ C1] ? process_backlog+0x33b/0x15b0 [ 278.214446][ C1] ? __pfx_process_backlog+0x10/0x10 [ 278.214470][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.214495][ C1] ? lock_release+0xbf/0xa30 [ 278.214516][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.214539][ C1] __napi_poll+0xcb/0x490 [ 278.214563][ C1] net_rx_action+0x89b/0x1240 [ 278.214596][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 278.214623][ C1] ? sched_clock+0x4a/0x70 [ 278.214643][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 278.214660][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.214686][ C1] handle_softirqs+0x2d4/0x9b0 [ 278.214706][ C1] ? do_softirq+0x11b/0x1e0 [ 278.214722][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 278.214743][ C1] do_softirq+0x11b/0x1e0 [ 278.214757][ C1] [ 278.214763][ C1] [ 278.214769][ C1] ? __pfx_do_softirq+0x10/0x10 [ 278.214784][ C1] ? lock_release+0xbf/0xa30 [ 278.214805][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 278.214826][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 278.214847][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.214874][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 278.214891][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 278.214911][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 278.214929][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 278.214950][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 278.214974][ C1] batadv_nc_purge_paths+0x312/0x3b0 [ 278.215000][ C1] batadv_nc_worker+0x328/0x610 [ 278.215019][ C1] ? batadv_nc_worker+0xcb/0x610 [ 278.215038][ C1] ? process_scheduled_works+0x976/0x1840 [ 278.215057][ C1] process_scheduled_works+0xa66/0x1840 [ 278.215087][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.215108][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 278.215132][ C1] ? assign_work+0x364/0x3d0 [ 278.215151][ C1] worker_thread+0x870/0xd30 [ 278.215181][ C1] ? __kthread_parkme+0x169/0x1d0 [ 278.215203][ C1] ? __pfx_worker_thread+0x10/0x10 [ 278.215222][ C1] kthread+0x7a9/0x920 [ 278.215245][ C1] ? __pfx_worker_thread+0x10/0x10 [ 278.215264][ C1] ? __pfx_kthread+0x10/0x10 [ 278.215285][ C1] ? __pfx_kthread+0x10/0x10 [ 278.215308][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.215332][ C1] ? __pfx_kthread+0x10/0x10 [ 278.215354][ C1] ? __pfx_kthread+0x10/0x10 [ 278.215376][ C1] ret_from_fork+0x4b/0x80 [ 278.215393][ C1] ? __pfx_kthread+0x10/0x10 [ 278.215415][ C1] ret_from_fork_asm+0x1a/0x30 [ 278.215440][ C1] [ 279.069094][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 279.076024][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 279.086219][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 279.096310][ T30] Call Trace: [ 279.099613][ T30] [ 279.102569][ T30] dump_stack_lvl+0x241/0x360 [ 279.107291][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.112620][ T30] ? __pfx__printk+0x10/0x10 [ 279.117257][ T30] ? vscnprintf+0x5d/0x90 [ 279.121627][ T30] panic+0x349/0x880 [ 279.125559][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 279.131756][ T30] ? __pfx_panic+0x10/0x10 [ 279.136214][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 279.141647][ T30] ? __irq_work_queue_local+0x137/0x410 [ 279.147246][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 279.152677][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 279.158878][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 279.165079][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 279.171275][ T30] watchdog+0x1035/0x1040 [ 279.175837][ T30] ? watchdog+0x1ea/0x1040 [ 279.180292][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.185003][ T30] kthread+0x7a9/0x920 [ 279.189138][ T30] ? __pfx_kthread+0x10/0x10 [ 279.193776][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.198495][ T30] ? __pfx_kthread+0x10/0x10 [ 279.203119][ T30] ? __pfx_kthread+0x10/0x10 [ 279.207754][ T30] ? __pfx_kthread+0x10/0x10 [ 279.212377][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.217629][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 279.222868][ T30] ? __pfx_kthread+0x10/0x10 [ 279.227500][ T30] ret_from_fork+0x4b/0x80 [ 279.231953][ T30] ? __pfx_kthread+0x10/0x10 [ 279.236584][ T30] ret_from_fork_asm+0x1a/0x30 [ 279.241384][ T30] [ 279.244739][ T30] Kernel Offset: disabled [ 279.249077][ T30] Rebooting in 86400 seconds..